21cad729436fff92be5e2028908b448201e46346544e7f6390878a8d16766987

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
46c78928f4d470c5f2b8ef5039b7f9a7_JaffaCakes118.html
Size 216KB
Sample240515-srn4waff85
SHA256 21cad729436fff92be5e2028908b448201e46346544e7f6390878a8d16766987
MD5 46c78928f4d470c5f2b8ef5039b7f9a7
SHA1 7d76048c4621c2ff22102e70f2ee01661891e059
SHA512 6b80005017aaab2e3674b4d1d352493b1480535f60e9f52ae9c2806d534e963c0cd7044ef8c0982ebecfa362973a4108256ef05067d22336d742e6f6d9bedef5
SSDEEP 3072:spICF3+AwlxVg7L5HdFnQ3Fnkz7QFzQ/FXjA:s1F3+AwlxVg7L59FnQ3FnkzUFzQ/FM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
448	msedge.exe
448	msedge.exe
2256	msedge.exe
2256	msedge.exe
2540	identity_helper.exe
2540	identity_helper.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 1112	2256	msedge.exe	82
PID 2256 wrote to memory of 1112	2256	msedge.exe	82
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 1868	2256	msedge.exe	83
PID 2256 wrote to memory of 448	2256	msedge.exe	84
PID 2256 wrote to memory of 448	2256	msedge.exe	84
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85
PID 2256 wrote to memory of 4196	2256	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\46c78928f4d470c5f2b8ef5039b7f9a7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffea6ed46f8,0x7ffea6ed4708,0x7ffea6ed4718
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5060 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2658825751047746193,1673192780491452876,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:4844

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 880B
SHA256 ffce1c2eee5bf93e51f385940dadba023ca9614218fdc202214c9bf61910da40
MD5 a2501911bdffc38325980160328cc3ba
SHA1 d25e6de7d7815a81e23a7912b9049c5ae06dce2e
SHA512 05317d38c4766cddf4af174a5c01043cd30715dbafa62c2b6d3cd86724dbab9ebd9fc40d31873988a522437bc934fee3a408194c14dcd076a4aa569cd240dd2f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 807B
SHA256 f2e822caa7d1941330ed2c4661bc4c0b817cc4031b2deb29a31c262661dee400
MD5 6096d4c91631c9beb3f1e7702651431b
SHA1 ca1c149fa0d016c402bdf6da3ca88caef62ccaa0
SHA512 dbffd6bff3e65264036821211b8e3af57ab116630133ef58ee63403102c41df44b48ce47d0fa9e2141ee04d00790c6380c39e0129f747d44f3170aee49a5473f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6fe511e6f4626ab83f5dc072355a716903a3d9778febab6bafe82e1649af070f
MD5 1a298b3bc0d2cb033103565cc4ea0473
SHA1 4634e3c23338f2e1183871f5f32bc7f1a61b1967
SHA512 f5cc25a8b4bf44506c6b18167db2e0d4cbcf78b89740312b58956de5900c7ea0eed8b4b3a897aad9cbdfe8d5a18d184344df0c95592fcc762c3627e9ed024363
SSDEEP 96:nkgAkNxm/pQYmqva1kBwpvWMoiVmdeHBrzHnPUWQyV+VDCziEwb:nkgAkOCia+BGWMX1nPro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1db47bcbc97952e63e96a0e205eaf6b13bba6d2ca0e9cc445113ddd0a40144f4
MD5 756fd3d9ecfc23f4cb9e85fa042ea1ee
SHA1 0c468bc6575602ff046b3fd15625278bee2d03a3
SHA512 3ec4b39071e4be7c53f03c62e20b99f73e467a61b7019054447431685b1a7f6da0b224c434fdfdd382e6ab9aa36fa7e93a1df33d030305d72a857196c884975f
SSDEEP 96:nkgAkNxm/pnmqva1kBwpvWMoiVmdel46D32BrzHnPUWQyV+VDCAiEwb:nkgAkOwia+BGWM1/L21nPrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f586575a27cd47ba048dfd7c5643523f8a60d6f4fa7eb62cc6d623f42b540bbc
MD5 05d1063bce0e240b1f1f2fda57aa5c5f
SHA1 0195de777890a9df1fdd092efc72d04aa5ba66ac
SHA512 bbd341a4ddb6bdbb1e79eb32fd3cd59b6ee1a76f0517ac748a3f216ee77ac5d7d783c37bbe79ffa7ef52e2193bf5e74f8463ffcbea728c695afbf51c47f9a940
SSDEEP 96:nkgAkNxm/pnmqva1kZwpvWMoiVmdefl646nmln32BrYHnPUWQyV+VDCAiEwb:nkgAkOwia+ZGWM96/q32ynPrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 99a6799d010637ac02fece7e1c41425bf96274f07201dc07f029192c9cbbdb85
MD5 c6d5eb8e99def8bd2c715d5c4e459499
SHA1 5e5f5efdf257837b99d7b51e75414d63d8f751f1
SHA512 9b37a0ae92a29a91b7772130611c0ae67cb73ac29b8ddd496c19725934a4e537961a2bd6dddf64bf0ce15427f9c010cd61f22856227822b766230a0390bfcbcf
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupYHAe2RUDYMj2q+OblfBhDA:A9iIxuERzA83h09RZxYYHeqyq/XDafEw
MD5 SHA1 SHA512 SSDEEP

Submit Download