1bfaf9d04cef71df0d6a9af144f85e7e063e08235077807f57f82a5099629f84

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
920a51a3bbcf4b9bba96b380545f828a_JaffaCakes118.html
Size 906KB
Sample240603-radfdagg61
SHA256 1bfaf9d04cef71df0d6a9af144f85e7e063e08235077807f57f82a5099629f84
MD5 920a51a3bbcf4b9bba96b380545f828a
SHA1 19ddaf3dd9208e026387710ac20e16eb9265c3f1
SHA512 1907e88ac94a70bbd87ecc780735e5c0d9d0728a1d5a069a5fd513ba1a5864aa0d3840d12c5081128f2e9d4706cbb2779863480b03d8a18ad39641f60843a6c2
SSDEEP 3072:npyf2szA0N/Gd7ZXtjg/JtdYyVeef0xOMQfw/df2szA0N/Gd7ZXtjg/JtdYyVeeg:bsMutdYyYQM0sMutdYyYQMpl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3584	msedge.exe
3584	msedge.exe
3844	msedge.exe
3844	msedge.exe
4692	identity_helper.exe
4692	identity_helper.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3844 wrote to memory of 3572	3844	msedge.exe	82
PID 3844 wrote to memory of 3572	3844	msedge.exe	82
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 2324	3844	msedge.exe	83
PID 3844 wrote to memory of 3584	3844	msedge.exe	84
PID 3844 wrote to memory of 3584	3844	msedge.exe	84
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85
PID 3844 wrote to memory of 4968	3844	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\920a51a3bbcf4b9bba96b380545f828a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffda88e46f8,0x7ffda88e4708,0x7ffda88e4718
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,13799672573717002461,4282221621115894415,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3512 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4808

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

30c503f8-696f-4530-b5f7-7dfbe09881cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30c503f8-696f-4530-b5f7-7dfbe09881cf.tmp
Size 512B
SHA256 464a93a33e2165bca504150a0e5281ede0fb21378d9ff8105dab4ed74420beb6
MD5 adaba21e00ede8cc9daec892e373491b
SHA1 5607e5957fdccba883afee63043c90e26b415051
SHA512 28d8c86c59cca7ce9e9f65e15902d9af5b2953d3772b863774042d2dbda94f822e15fc0066336bc01153658db89c5267e1f68818e86e91cd78ec930e438b48aa
MD5 SHA1 SHA512

Submit Download

7662c02d-f3ae-41b7-88d7-9cf9a346ecac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7662c02d-f3ae-41b7-88d7-9cf9a346ecac.tmp
Size 371B
SHA256 c413436c85b078097e2babadead718977198d6aa05ab92563a6b5e8c72ad359d
MD5 f25e0e1f88184cb036b3009b907a127e
SHA1 82f88d9b282927481a2416be8f149b905e1c7fca
SHA512 bf5fdc12fe0df396180b978b0c2f2e8c3653082f0ee132b5797f7c7a87b13309f20cec705802bce7569d4e426c961134659245c655e2a1542824ff0deb11cf49
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 ef8b3c2cfc92d509e33b182cc4db5848f51e5970c07de5024aea0ec6b0efddd4
MD5 6b36f4c43506cee881edd0108aee442d
SHA1 fa521811bf7587820de0c40b9e579cac3e578018
SHA512 b6ab4deb657390cab1f2ccdf14ca72289ca2ec4a4f3149c5652579706a6ba6f3730ab827e952d974daea6e2ceda5e49144e0fb3cdbebf841e84663c03eda1068
SSDEEP 96:njkMS1ZPe8wpvWMoiVmdeHpw8ETAAAUWQyV+VDCziEwb:njk3vPe8GWMXpw+AAro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 410db7013b62e874f53d9e141185b95cd6032814ac249e7cccd8c4467ca46ed2
MD5 080f835a82681d9f9883453dda9f0b90
SHA1 f3c28b230f004cf2db3b44d3f30f65661294c537
SHA512 6115457de50ef8c0fb50a52a89deea414be130b061c066804f9b17015b25da7af07fb46674d8891b5d6c1ac7c258eed7dbc74e9c61fb291680122d287846b94b
SSDEEP 96:njk3S1ZPe8wpvWMoiVmdeHpw8ETAAAUWQyV+VDCAiEwb:njkivPe8GWMXpw+AArV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4c5f6534de5c2cd3b86a3d9f74aea852fe9d7934f477953f552f155332fa49af
MD5 188096d4f5bb2069615695e5bec9ea3a
SHA1 20f37d70e477a2096dfd06dfe5279b9de97f65d9
SHA512 8e0c0fa93c71e40dd4d773915aa11c48971c775075a9a6d9193c448371e0de24c28f8fdea5c69e0ee2daa21f18a36ba968544bb9e258d2f1da46a74a01a8be7e
SSDEEP 96:njk3S1Z/e8wpvWMoiVmdeHpw8ETAAAUWQyV+VD7AiEwb:njkiv/e8GWMXpw+AArg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity~RFe57c4e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c4e6.TMP
Size 204B
SHA256 2ca0cdd8e1585d9d19cd5a0c93c8f405b3563d4c19932e2738ccf5ba80b4585e
MD5 b3191623dd772689c5b82722a5b711ef
SHA1 7b9e3b0b8c4f7321e893563f9a03eb35f43e7f2d
SHA512 3db372d39414e6cc0f234833c70a4ad8ee6bb955a7cb3f02053d772e391e0bcc4f194b8c69875ee4c810ea507f47ec00b3318a469a898427e906f62dc1abc1ba
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 dcf75335c97778c7a4f4b83b792407fad31a1c977e830ce80c1ab2f8079e50fe
MD5 7d1fe03607e628f9949040fcf2124f65
SHA1 5848e91fbe7808cdde0e4f9349dd03beb1210046
SHA512 5856f7b7d5c11f66d77d5a3053407bdeb177ea8a80b0da6f1cfe350a8f24638cf61a4d0fa04439f7be2311ddb83501e268eda7d6b1831d2f83cd84c73f4e4aa7
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup7Mfe2RU6d/J+kA3z2OMDC0:A9iIxuERzA83h09RZxYSBdxAaOMWRHqn
MD5 SHA1 SHA512 SSDEEP

Submit Download