befc53c552ede9e7520861f7aca15368caedbfcd4c2a391e28e9706f850418bf

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 14:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d489b21ef15c3c5f4ddb738d9130bc7d_JaffaCakes118.html
Size 219KB
Sample240908-rfgd8asdrh
SHA256 befc53c552ede9e7520861f7aca15368caedbfcd4c2a391e28e9706f850418bf
MD5 d489b21ef15c3c5f4ddb738d9130bc7d
SHA1 5d9f938df2ca23b57ca19da7b4e73c25cdd48c5f
SHA512 56d5b75c2881d6706be733c67c932153a6cea1a4a4383aaa2181694d038d941100e5bd60929eb02851c6ed90387c220d5412558f0b256bc9e364d521ee611f2a
SSDEEP 6144:hyoOx+cPGeWzJqWkZF6pa98HrHJCnLPO/c8s1:JOxzGeWpm5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe
2696	msedge.exe
2696	msedge.exe
1356	msedge.exe
1356	msedge.exe
1356	msedge.exe
1356	msedge.exe
516	identity_helper.exe
516	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2696 wrote to memory of 4756	2696	msedge.exe	83
PID 2696 wrote to memory of 4756	2696	msedge.exe	83
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 800	2696	msedge.exe	84
PID 2696 wrote to memory of 1556	2696	msedge.exe	85
PID 2696 wrote to memory of 1556	2696	msedge.exe	85
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86
PID 2696 wrote to memory of 1592	2696	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d489b21ef15c3c5f4ddb738d9130bc7d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9c6946f8,0x7ffc9c694708,0x7ffc9c694718
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5064 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15769813076789604709,767740577025570108,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4852

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1692

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3208

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124
MD5 e4f80e7950cbd3bb11257d2000cb885e
SHA1 10ac643904d539042d8f7aa4a312b13ec2106035
SHA512 2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa
MD5 2dc1a9f2f3f8c3cfe51bb29b078166c5
SHA1 eaf3c3dad3c8dc6f18dc3e055b415da78b704402
SHA512 682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 507B
SHA256 db885bdb7d3d59b43b2730ece7d1dbb12640cbc491f8d81c0bfb36c7422efb24
MD5 77a7133e55cddfb4ec03a2d060079f4a
SHA1 c463909db864750442ac954314ad232cab26bc37
SHA512 182a604bec76f73af88bf217eb1bf7eade07a0061490c4ac5346b40eeee1ad26234aed97167d9f84f6c01195ece09e3b7e457a73dc2173ee46d6607c93eda520
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 384ba72c6da6c0012c7f1c93be7a365e16189fe2871d568008055c9bd70dfca4
MD5 3a5ed1a595012a11bd97c10e00b2af9a
SHA1 9ff6034b6eea612fc1a6c71cd7eac4bb46a90da2
SHA512 01034d8ac989aae0a6c45de2f6db9ae195ac13accced9065b99840b32706ab553dbb9466bad3b98a1d1103bb71deaeacc0189ac5135bce5471fb82eed4c44113
SSDEEP 96:n4k/O+1bKcTtwpvWMoiVmdeHTbZX+UWQyV+VDCAiEwb:n4k/ZASGWMX/QrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 53bebfe2da7c232235f83bc22f1da6eebd80ba8997ab4eba5d890b6090851644
MD5 323ae2162ba2bbc0422d71b5be51c09b
SHA1 4fad3c3f50ee52d9a5d8ecb0ded730b7d6e90bc8
SHA512 a533ba81b4d0d95a1bffa718fa4f29395d85088151c14d4433b34f6c709ada86e2377f28be1522d82f6e2909f35db98067d85baee88e98a7ed99f79e3fae81c9
SSDEEP 96:n4k/O+1bauTtwpvWMoiVmdeLbKVi2Tb+X+UWQyV+VD7AiEwb:n4k/Z0IGWM/KVi2/Zrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 006d281329f98d519d137be384329ef48593d051be99c20977339d2382e5a488
MD5 9e4146865236827a1943a4239bc3a7b3
SHA1 f7503e6dd9177fe546e10f8258b61a90087634df
SHA512 530a89a12efe408fbe57f20204ae6c1b3899e9c196c9dff9113e1afdc5ee08eebd8e58c9ba6dea6f4d7d2d34b68b94d8c022b3fd170aebd75a3c56b86fa42282
SSDEEP 96:n4k/X+1bKcTtwpvWMoiVmdeHTbZX+UWQyV+VDCziEwb:n4k/OASGWMX/Qro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 07a0eb56766741ea76e7771ea828b8c037d51f443e77746d96ee5f1b057a0084
MD5 1e7873098d053f12918c1102f440e01e
SHA1 43d790526aa52742b9da9371ce282e84ba4a3c5b
SHA512 3d8d579d1a62e0ee0be02a1234faa63f38784a73d2800927a1b580c0c56d5874540f8f68300f24fa34f2d9634714654b3b79059e0e92c1344d52892242368dd0
SSDEEP 96:n4k/O+1bKuTtwpvWMoiVmdeHTbZX+UWQyV+VDCAiEwb:n4k/ZAIGWMX/QrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 c85815a7cfe0a66bc0c171e5f256ea9ac5bd38359008ab5ede2554cc6a00311d
MD5 23ecfb32c3ad30938578a110644b5f9a
SHA1 fe6ad0fcd5da3846f88fab48e4c2589462c03c9b
SHA512 f7059cc14c567521df4ed641b3fe647f515a97b53f8e6e5aeacb09391cc76e7de4e7f090eec4fd12898ee16811a9cd2811fd46982fdc0e2d8ba03956a35e222a
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupG63De2RUqkj+4pBiZJn:A9iIxuERzA83h09RZxYG63TC+4pU
MD5 SHA1 SHA512 SSDEEP

Submit Download