81fe92d9afb6c296bfd29da3905bdc36f89367d5b0e5c5b3b561e4c66d28c698

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 14:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
920c607d0f45a8cb5a15eda8574880f3_JaffaCakes118.html
Size 15KB
Sample240603-rcbpkagh4s
SHA256 81fe92d9afb6c296bfd29da3905bdc36f89367d5b0e5c5b3b561e4c66d28c698
MD5 920c607d0f45a8cb5a15eda8574880f3
SHA1 a172c4e9150fe2f8e8ad00344abd63a8b163323b
SHA512 01930d3f5c20ec012dc959e89696cda6c020aa908878a4d3feeccde8243fcc6cfa6db890cf155f2558992223bfb66c064c7dcd5442a3d6570d748d9086f9e3fa
SSDEEP 192:Z0l7vFZ7vP4N8wfWccGcN9ccIRXooKDUaVcMO4exlsih4cMV4Gsu4cMU4WK4cMLL:ZKf3RTpo4TexlafUqMMUu+NA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4408	msedge.exe
4408	msedge.exe
4636	identity_helper.exe
4636	identity_helper.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4408 wrote to memory of 548	4408	msedge.exe	82
PID 4408 wrote to memory of 548	4408	msedge.exe	82
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 2896	4408	msedge.exe	83
PID 4408 wrote to memory of 4068	4408	msedge.exe	84
PID 4408 wrote to memory of 4068	4408	msedge.exe	84
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85
PID 4408 wrote to memory of 100	4408	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\920c607d0f45a8cb5a15eda8574880f3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8930846f8,0x7ff893084708,0x7ff893084718
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,8164468961762588578,12939347510539528902,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4508

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4
MD5 1ac52e2503cc26baee4322f02f5b8d9c
SHA1 38e0cee911f5f2a24888a64780ffdf6fa72207c8
SHA512 7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6
MD5 b2a1398f937474c51a48b347387ee36a
SHA1 922a8567f09e68a04233e84e5919043034635949
SHA512 4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 8893e61d8138f8a633d1beb6706cc71b89076cccabeef6ca8acd8de6664a1251
MD5 c87923c3370d83bc56dd3c118ea1eb08
SHA1 82141b019f24d0c7e6f4dcb1794a1e5be3de4276
SHA512 04a440d888c0cbbc20eb61ba9e45c861ed1c8ecb9404e9de39aa357f7490185216cac9932cd75e8a035349b66cc84c74cae2fe9e22b351b60d951b07e81d1a3e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 995B
SHA256 024d2b279d94c6bdcb04facfcdf4a187bbd6d107104b747524884707cad3e6c6
MD5 59d94f081233ccc6073e30e5ddb38751
SHA1 41eb46a3860ac4a7ab98a81d4d9fe99702fd027d
SHA512 a095f674afc5e63f88ac00ef788674de86f64a4b515c4bddc74e6ef2643ae55c50d55baab33e8da61457f26ce3c331b1433360c79c4b31b02840ffa115fbb1e2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 386d5cc7a39dc5180bec81a57127540340ba583737e9b1887ec207b130ea1f0b
MD5 3587a4c5c63e4402a0d49f8b9a9861f7
SHA1 f5e9cee16f6be8e1136e23f50a629b25a1fa305c
SHA512 de1d429909102d71a3090e1303e23a9ea12bb90c31f8bb872c3768476bf12993bfb23b4b8fbeacd1b573c5afd28bb15f2b14499049d225b7fb2468b401dfb3c9
SSDEEP 96:nikMb1F2Uega9IQwpvWMoiVmdeHpCrIb2RUWQyV+VDCziEwb:nikGb2UNaCQGWMXpnb0ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dfbf737d946fd137b3a6120939faaf808a4361eaa97609fae905c96bd71ff5f0
MD5 11c0df61fb86177fa98aa08d25ec01eb
SHA1 85211e4589e4f217acba2e4282b08be833d097cb
SHA512 db1950500257e0e6019a314ae57fc8b3fc374b191da2761f971df68a7d8dce011153f3f55851dd522ac508d563493742aaf646804665fbf676570ac745228450
SSDEEP 96:nik3b1F2UUga9IQwpvWMoiVmdeaOq2pCrIb2RUWQyV+VD7AiEwb:nikrb2U3aCQGWMqOq2pnb0rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bc2d0477fcf2ba8f7c7f8d236ce3698e4277b53e60ba3daa9fc0764240d4da3e
MD5 f0f03612ddb64839cc3445e1b0363803
SHA1 59026c45f50e877bd930c6ac83f0883860f136d6
SHA512 a12e92f2da80fb7cf97b6a2d5c065886fe8d2b724f942e8541d8b06caf39a9984f1944704283be6e6851416825d96828f24f104a33ee83506fae6ade42520436
SSDEEP 96:nik3b1F2Uega9IQwpvWMoiVmdeHpCrIb2RUWQyV+VDCAiEwb:nikrb2UNaCQGWMXpnb0rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 4d0886cdbc947bf11ce045e71af35faca7a2111633cb4488df0c172edc092446
MD5 abd4f8f37c4706e8932adfa442550a98
SHA1 c6e1a6bcd947da3cf2f2b81c1a53d3b1d80a1df9
SHA512 d4095a86547cd08ac78fc89c6f1c7963055f230f5fdcad30d85c8d2067f3c7cb56fcda68c7831e8f7c9e541cdfc2d360fe61abf06315d77fe8ac97a09b1497ac
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupJkJe2RUqjf7ZL3z2OMDCRS:A9iIxuERzA83h09RZxYJkd7zZLaOMWRS
MD5 SHA1 SHA512 SSDEEP

Submit Download