acc46fbe48bdf2e6d6a22583796cc6363b3d478e472555082e742a9b30ccbaa8

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91b317a83edecc0daae904ca665624ef_JaffaCakes118.html
Size 62KB
Sample240603-n4bl4adf41
SHA256 acc46fbe48bdf2e6d6a22583796cc6363b3d478e472555082e742a9b30ccbaa8
MD5 91b317a83edecc0daae904ca665624ef
SHA1 5d8c4704ad2f917d60350360134bf630a757c588
SHA512 548be6d0d3c0c4d356ee8173af12250e043cb5e700da418eb49d00f92fedfefda2ec807c59b34b22b9bd6d940b1512bb7deabc1b8310ffcc4781f1103a90b0ed
SSDEEP 384:3gs/TWhzcLB63idlOZsrER+ozZ1QR1ZS1Axzk1rzF1ytH+5tH+gQ2dnhwyghDVUb:RyhzcL1+GYwxRFOlGLWxpyibqyN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3512	msedge.exe
3512	msedge.exe
3076	msedge.exe
3076	msedge.exe
4796	identity_helper.exe
4796	identity_helper.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3076 wrote to memory of 4612	3076	msedge.exe	81
PID 3076 wrote to memory of 4612	3076	msedge.exe	81
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3416	3076	msedge.exe	82
PID 3076 wrote to memory of 3512	3076	msedge.exe	83
PID 3076 wrote to memory of 3512	3076	msedge.exe	83
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84
PID 3076 wrote to memory of 3620	3076	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91b317a83edecc0daae904ca665624ef_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffae23946f8,0x7ffae2394708,0x7ffae2394718
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,3495306731753019740,12809385108703789983,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4872 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30
MD5 2daa93382bba07cbc40af372d30ec576
SHA1 c5e709dc3e2e4df2ff841fbde3e30170e7428a94
SHA512 65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7
MD5 ecdc2754d7d2ae862272153aa9b9ca6e
SHA1 c19bed1c6e1c998b9fa93298639ad7961339147d
SHA512 cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 752B
SHA256 f96566589c6d931545b79b940faaf128c0b9747ff77958024c1e5e2b1efe1f46
MD5 b5c309bb4413ae0c04df8fd5f5266ca5
SHA1 d8e3e02fd6feba6bb1330ac0e0df01d8778615ac
SHA512 5d112cecb703b3246d74cbaee753c5239112f98aa86c98125c784d3e175671ea658939284264cf08b1648924ae8df75b4165fa4c29ad1c2b144a865f0596c8ed
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 a056278f045f14fb681945260c19062850d67bcd5da5654faca98be7013fb949
MD5 d6b680eeb4755eb86a057d2c4e7e1d8e
SHA1 66733fd5244c6272218f1db9cbdcd2a615085451
SHA512 af62398f8c5c9e812a210f04f2603476dc96f9a4ace9b2bab899a9719fe668022994ddfa924b429882e65e32855a8cc19284fbce7a68f6d8f7fce1c46c20296f
SSDEEP 96:nbkO2B1eWXv3wpvWMoiVmdeHplwtjacWaUWQyV+VDCziEwb:nbklBcWXvGWMXp+XWaro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3ee4c8841d796ffaa02cb7a4bd415d0b49900159db7f2d9deecf13b5a6ae33da
MD5 b67b5e3b6904d612704b4be72061e451
SHA1 dfaa65bc9cec0d2e8515fff5efe10565b807735c
SHA512 da25f874b7c7cf86073970da60fec9bb310cabb8545e58589bad1402ffdd32d700441af31ddbd423d11eb78b0507b4cbb675ac71dbaf27dcd04609bed46f0600
SSDEEP 96:nbkF2B1eWXv3wpvWMoiVmdeHplwtjacWaUWQyV+VDCAiEwb:nbkUBcWXvGWMXp+XWarV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0c607ca8cda7483b56831cdd800b090c344a70e7968751aec838b76f96ce6b40
MD5 48a45ca0ee42b254d18086ec46f82efd
SHA1 06e73dd5284f1734b60b088d90ea89297d140d30
SHA512 99c0ad565d997e6c35bda8543af813ac8fe761c75247b26cc34b977bb7b77b4efc26cacc932bde9a4294f9c8b7ce707304038fb3bb80f8517385482c40478c52
SSDEEP 96:nbkF2B1eWX33wpvWMoiVmdeHplwtjacWaUWQyV+VD7AiEwb:nbkUBcWXHGWMXp+XWarg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 538B
SHA256 1b86fa5393914c7f2873f203a6c6cfc6cbf5887dc1b327495c6e29f0c168ef4f
MD5 3defe316719f5c4a0463b0e0a3c59e58
SHA1 171a2fc2ef419d6ef8779301e18c90f0479fa339
SHA512 ffea678d83e8d78862fd50271a3481177eac75e8d79c52e231fe81bc9dccd5b2b90fc102cdeb4ed81b098f437785e081b52dbf7101ee51069c3f6cf72a1b79a4
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57bb03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bb03.TMP
Size 204B
SHA256 67068cd14d1a8cd43d01c0817de6bfd02c207bdc14ed69a5834f0cf05bab92b0
MD5 e59a0c1c89a29c66a8ed719b716c53c9
SHA1 ef57843701dc46fc0faa2735076d711ad16a8ade
SHA512 0c5ad59b6d30497ce011d2e66430c79cb13397cbf9332a3bf077c1f468a6d250236f1c266f3284a870bf54161ca694eb5f630cbf0e295da94618d0109518d41a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 dd778fc9e24003e0877d3c32d03227a9b1027556341dac8d16e2b6eda9125242
MD5 47d40de88ccaea6063647ab0df086b2c
SHA1 8a6c8e4e2be8f3fc1c2436fe5a01fd152d54b975
SHA512 1cfe73cdbe73184dfc1111e4a9b39b1df8ce1eecd8847d57c9a44fe8baf7fa610885f978715ac3740ce828063fff8609dc9327669610c25ce9f04f93e54c2181
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupXBe2RUEB2ZF3z2OMDCRHq7:A9iIxuERzA83h09RZxYl/oFaOMWRHqlV
MD5 SHA1 SHA512 SSDEEP

Submit Download