1397fca2f0fd076aef738e4782f306060669a2632b2d3394aa01ce2760004a27

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
31/08/2024, 06:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cc61525dda08f1e32cfaaf34fcdb6514_JaffaCakes118.html
Size 48KB
Sample240831-hke8aa1bpc
SHA256 1397fca2f0fd076aef738e4782f306060669a2632b2d3394aa01ce2760004a27
MD5 cc61525dda08f1e32cfaaf34fcdb6514
SHA1 1f93ad02e7d9ee5f8e2938b35ac313ea13dd7785
SHA512 2a767840bee1e524600b2e053af70a6c75d5d5ff6a4ba74d325bf5d7bbaf9ca11ff86601c5ffefa04f79ddb036694654725ee064f4c8ba687b6f2372aeedd913
SSDEEP 384:qjxh3U2YYMP916dNV5ItUThV6vF2S56K+gM7OM/DYSBRY5qTxsa/MsOqWACW2QZL:wW1GVqUrzFzTE3TpXN6I1/tPvtiVX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
2180	msedge.exe
2180	msedge.exe
5036	identity_helper.exe
5036	identity_helper.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 1124	2180	msedge.exe	84
PID 2180 wrote to memory of 1124	2180	msedge.exe	84
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 4316	2180	msedge.exe	85
PID 2180 wrote to memory of 3260	2180	msedge.exe	86
PID 2180 wrote to memory of 3260	2180	msedge.exe	86
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87
PID 2180 wrote to memory of 4984	2180	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cc61525dda08f1e32cfaaf34fcdb6514_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff83db846f8,0x7ff83db84708,0x7ff83db84718
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,11563453450836992612,10206937145470869680,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5676 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2400

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 917B
SHA256 b92cce75a6a3c08f4d47feb004b72ff9740c140b7bf02352fd71d346488ec0a7
MD5 83261d9fcac455ce98c7aa480963ddcc
SHA1 fbe318d85d4433092a4e43621b17e2edc4e7292c
SHA512 16609473b60af3b0862d24bb5c3f4009a8e5a7e4c976ee165aa7f3867b9751549af377d217557f35f73e06009f207c68dc53c736e84f6c0e4b062f044613fd92
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d4a2d7f94c0fa1a90366641a86de12a9852c0134192eb60b051bfa9b43eb3144
MD5 7af2a80b88d56cbca7f572986ca24b4b
SHA1 b170c845623575e1fc3cb1467c47de4249c77711
SHA512 4e6c534790ef547b70388e20e1d7b51f1ef3496c72debdac301d8e6dc0a0e882cf59f6d031498ff20c66d034f5994b6813126ee507d1ae7ea867994d4fb5ede3
SSDEEP 96:nNkRam1vfOrwpvWMoiVmdeH4s5B1XUWQyV+VDCziEwb:nNkRpZKGWMXB1Xro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5e9388a1bd6929523bd1e5050a685f7fc2ed95601eba76e37e878610c2965251
MD5 3ca10358232a967cf6571772e41505ad
SHA1 d0daa6a051f919fd0ddc14787e8197431c7b77bd
SHA512 2936b17cf841eebd7fc6bb712207d85c970fa8b4e8fa8e1484b828b29bc3d00df33312c7dfbbc6a94cfc14eba65b04cd2cd5d6dac1dc821e23297dfbb273735b
SSDEEP 96:nNkREm1vfOrwpvWMoiVmdeyoeXkeK624s5B1XUWQyV+VDCAiEwb:nNkR/ZKGWMneUeK62B1XrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 32a8810783fc886817e3c9d73f2cdc567405513e47820a707d9d635a67e4f8e6
MD5 a31975256dbd1f871d0552fa10f2de50
SHA1 4c4e745e0bb86933b3f8ee1069844516cc4badb6
SHA512 5e42c2c5be0641c83a1b5cb796b530128c78ba833be5fa55c0c7423a5c4913adbdff2418f011d6cc992d5674f273592b06d753bb4dcea6f569a4487f330a0631
SSDEEP 96:nNkREm1veOrwpvWMoiVmdeyoeXkeK6G524s5B1XUWQyV+VDCAiEwb:nNkR/ZPGWMneUeK6G52B1XrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 ee8d97c1b578b52c92db84e605bc5d20b9f404f3492fc051e2da1105220c1114
MD5 6895fa2f316657cfee9282b541cce7dd
SHA1 76253f2e66facc52d7a12ec441cbc440a8616f9e
SHA512 001b675edc83cea0cb493b0719f3437f2495589a6597c8839cd5472e3da972bb8b308b888fe40e9fc2edfc576e3142ea553d09623ea6c85bd5ed02cb9c6a739b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupve2RUD/i6TRw5Ytj9Zklql:A9iIxuERzA83h09RZxYX650kLs6yC
MD5 SHA1 SHA512 SSDEEP

Submit Download