3e044d6d2baaa925463255bd579dda47ac33344325c703585c73e7950ce19264

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 14:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a5ec3250b9128a135fcec9e0adccaec7_JaffaCakes118.html
Size 55KB
Sample240613-rcmrtssakd
SHA256 3e044d6d2baaa925463255bd579dda47ac33344325c703585c73e7950ce19264
MD5 a5ec3250b9128a135fcec9e0adccaec7
SHA1 6abafd46e357c24d22c0a3ce0d5dfa3f8f764cbf
SHA512 6640abb1c235c5dbd179ec1d36e66f2fa25349cddb7739ffcc4559ffd69db8d816f1743a7aec92b756d4d720fbbd48303a6026d85da90b32c404b6b30b4e13ed
SSDEEP 768:9rapHvvCIoodW0z5jX5EBf1WGYDXSlN+q7/6bx4ngVv:9GHv7oiW0FjX5EBf1WG2Clp6bxz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2956	msedge.exe
2956	msedge.exe
2952	msedge.exe
2952	msedge.exe
1580	identity_helper.exe
1580	identity_helper.exe
2700	msedge.exe
2700	msedge.exe
2700	msedge.exe
2700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe
2952	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 3508	2952	msedge.exe	81
PID 2952 wrote to memory of 3508	2952	msedge.exe	81
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 1432	2952	msedge.exe	83
PID 2952 wrote to memory of 2956	2952	msedge.exe	84
PID 2952 wrote to memory of 2956	2952	msedge.exe	84
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85
PID 2952 wrote to memory of 976	2952	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a5ec3250b9128a135fcec9e0adccaec7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcfb3746f8,0x7ffcfb374708,0x7ffcfb374718
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16103917700503044254,4632914946028608231,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5276 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3696

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 dfbe79dc317a4068419f0072956b77925897c32f0a3d13e01e021b3ee64b092c
MD5 725a5814838345fc8432c40e894f85ce
SHA1 f0d54af7d8f9b2f9ca885dd988786d1fb4ad180c
SHA512 bc601dfb387e41050022d0f4865b2d8c8e32e96eaee046c4852172a710040651dea760b2162a99463c49feaea677e0712769d7c92e6dbffe1c96b5e6dd6e3379
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 43ddd8edd7f5e939882c6b794c4afb98a4801b9305a4dc4cf4b696b5889d522a
MD5 660a89215efaae00845774b52a63101c
SHA1 351920d2cc9baea98fa374a59633a13b01b50952
SHA512 eaca92b85100ac5f654493858d4055d85734401889bf099a82491e17f1565dd4f609ae6ad2dcd20bc52ebc280df743c2d2de2bd89453fe008b644be90d651d5c
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5fd78e0077ef78106d2bc5f899592c1856589531320909c82b38a7289b66f7ea
MD5 4bbce535a50d90a788f92a44cdc58576
SHA1 a5007e2173c61fe20871c64844d36b9d48668cd3
SHA512 740561de4a69bbd6ea7858e3cce8d43efc9d014ba9d4edb761e346336816a540fecdb8675b9d195aad4754ccda1d45fe05d7d8f5956bbc8e0c63ed8cb7dfe7c5
SSDEEP 96:njkxoxm/Dnmqws1Hc/wpvWMoiVmdeN9LTDeQ2giDalUWQyV+VDCAiEwb:njk76zslKGWMdRTDeQ2DalrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 96118caf0f7386be3ede507f9e6dfee0eed68ba7cca83aeb572dba29be5f41b9
MD5 fa24421628dad6282a26a10a898a42f5
SHA1 70e17dbfb2713ce292a5e42d830260c870f0e60b
SHA512 277bbbe10be710ddae10f71fca3ad4c9dff855bf1fee0c1f0fb3ff5cde728e3d5ba7bc034edaf2c487d29d9c91c71bf247cc42869f2367b6fd5eb431d371dedc
SSDEEP 96:njkxoxm/Dnmqws1Hc/wpvWMoiVmdeN9LTDeQ2ggDalUWQyV+VD7AiEwb:njk7CzslKGWMdRTDeQ2dalrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

dc036d43-8aa2-41c7-b330-933765684f64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc036d43-8aa2-41c7-b330-933765684f64.tmp
Size 6KB
SHA256 c86174b102b9be4d6a8a25e8e2756adb1382cfabee06adc7cab7309a4e5bbfea
MD5 8f3b224992e590bb22727429fecfc93a
SHA1 cee176e86903b2e6d144b6b7a98e3bf1ec85ae81
SHA512 d2808e4bbaf5539ce9f9b60aaa8df51af19c8b6262e9d100ef7ad4d815d415afdce74e9d0242dd1872f7b26a2382752ee9e590561af550d953a0e61eecd0603a
SSDEEP 96:njkxoxm/DQYmqws1H6/wpvWMoiVmdeHgiDalUWQyV+VDCziEwb:njk7Izsl0GWMXDalro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 64d49f834b20ae04fa4feb27797d007989674f630fe8ea35ea3368010d488d51
MD5 12c3dc3a4e1a40baf8fee3efd69ef2b5
SHA1 e982526bb8cc00d1ed5735dbf3c6e187dd61e3c5
SHA512 8aa85426cd6a5b7802927378f93372eab18866df3b5b11579fbb06e34593bb3c5951e6c0eca2879f1f6b4b67e814356e23e46ee298a633dc4a9170b6624fa427
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupBbe2RU4R2kc3z2OMDCRHqK:A9iIxuERzA83h09RZxYBLlcaOMWRHqlQ
MD5 SHA1 SHA512 SSDEEP

Submit Download