06c6fa71334fe0f200534a6509b8cd7a41a55d1a058e34dc28869de3453baefd

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 10:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
24811605b791afef96168c4a78518a1f_JaffaCakes118.html
Size 73KB
Sample240508-mw6xlabc53
SHA256 06c6fa71334fe0f200534a6509b8cd7a41a55d1a058e34dc28869de3453baefd
MD5 24811605b791afef96168c4a78518a1f
SHA1 3f7b7449f7fc595c6f17718129fbfcfa0c00b13f
SHA512 b53b188f15ac3f3b6f9474ad26db7d8352752613c363f1f5673b0c429250b6aae3e261dfdf1121e46fa8de095bc4e38531279845e294d23dbeab8d49d41e0785
SSDEEP 1536:lV6gV6BoHHY1DtE9Q1hCOqwtEzCXCVG1GK:NH4S2FqwtEzCXCVA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
4404	msedge.exe
4404	msedge.exe
4480	identity_helper.exe
4480	identity_helper.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 1548	4404	msedge.exe	85
PID 4404 wrote to memory of 1548	4404	msedge.exe	85
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 2304	4404	msedge.exe	86
PID 4404 wrote to memory of 3660	4404	msedge.exe	87
PID 4404 wrote to memory of 3660	4404	msedge.exe	87
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88
PID 4404 wrote to memory of 3976	4404	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\24811605b791afef96168c4a78518a1f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbe6c446f8,0x7ffbe6c44708,0x7ffbe6c44718
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,13103057504780344112,16079468767245185733,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4144 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1740

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4
MD5 1ac52e2503cc26baee4322f02f5b8d9c
SHA1 38e0cee911f5f2a24888a64780ffdf6fa72207c8
SHA512 7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6
MD5 b2a1398f937474c51a48b347387ee36a
SHA1 922a8567f09e68a04233e84e5919043034635949
SHA512 4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 bbe047bfa83531d9f56d2db826841a35efd15348dadc13b5ea96b210c94de092
MD5 b25b54b1dc2500ba4a4e0b009462f196
SHA1 512d82e39827bba56c6473c68ad19bab01666d5a
SHA512 e58939feefaf4000064c947c7e51770322690b8a627dfdb85696635c357f6ad5ada25c35a979dd9d0645fedd8a9dfc2f6b2ff1eac31728320b7761d51e23f075
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 449a086240ece499f7c99a2a693bcd8cb18ee03f86c2ca6b6be313a42b04c20b
MD5 7f447a5b18df87e7cef83cf03bb59011
SHA1 c1000b5c1880c387d19e772fa251f7cfab73b7e2
SHA512 38de32c9b14af0c902bd95ee48bcc64e88350b05d4d0eb4bd10ada23ba6cf438ef0fe26531e02a9860a2bc28ad41c63d0aa2610e5bccd282b1f6f7a6b237a55a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 9f0a5c74433b9b9bf68ed547416e244d55f714f9257045cbe05392c3edbaed8d
MD5 79948fa282869ce5ffa6c15ed0f4ab39
SHA1 d0d0439b82c7fb81e6d842a089cd9f99ec6ada05
SHA512 e108e79f1679902d8c70fe879efd6437516a38c65bd79c86c577c4e38c60559a9a582fbe99091f314c0d3bf47c672fbb02e82b6a9652bf1a7779b13adcd20c33
SSDEEP 96:n5kexm/eQYmqs1Bv6ga9IQwpvWMoiVmdeHpCrvbm+UWQyV+VD7ziEwb:n5kzH//paCQGWMXpkbm+rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 90fab31d7db9c6af88f561630ed208905320f4ca6cadfe22432424983c4d1cec
MD5 0481043d9f770bcfcbf49187cec88bcc
SHA1 d101c3c22ca5d8231f025ff91953c70cfc9a0022
SHA512 8b21a16fb9a829f0a80aa87bb3337828f525873d98775ea8eefece07b59078aa6688759c8e53e77f57d8f792023b4eb3899b017ef79100489d3ff68b4696fee5
SSDEEP 96:n5kexm/enmqs1Bvyga9IQwpvWMoiVmdeB/fwpvObdMc2pCSvbm+UWQyV+VD7AiEc:n5kzB//haCQGWMR/fwFObdMc2pdbm+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 8af704671ed3b11d6ac814f0e55b81030052bf494f559006a878ba5c4dbb1734
MD5 4c04b71c4363152b9493f2a6b41c9191
SHA1 5174f6a8113311342a283d205489ac705530ba7c
SHA512 522d1745ec6e817879de151f67124352353bdaff9a545e63dee258f762913a0fc0ab256a69fd8dfc75db650ea8e307fdb5fff29fea77f5678f5fd6ef4b5364f7
SSDEEP 96:n5kexm/enmqs1Bvyga9IQwpvWMoiVmdeB/fwpvObdMc2pCrvbm+UWQyV+VD7AiEc:n5kzZ//haCQGWMR/fwFObdMc2pkbm+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 33ebf1071845de64fdf2e68f69fe8a0d9e5c684a2dbc99d55a09d811b7505a29
MD5 5a08d03291f5afa452bee56c4d4faa7c
SHA1 6fc866d28aa636d26db695cd59476e66ad628af4
SHA512 24030cc733104e0a41270987f1d6aa8152fb1484c2f4a479b723b84db7a50af7b22bdcf3d9ec229dda92391cb4fd7710529b0b4fe814862828e34f7a5a87d03c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupXkOe2RUbjf7ZQ+OblfBhDv:A9iIxuERzA83h09RZxYXkQmzZQ/XDaf6
MD5 SHA1 SHA512 SSDEEP

Submit Download