d483cfba4336d6db082d66abb48b389eff4b360b019739063534941183d9a37d

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 09:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8037b2d798d5d3dd3b373f0183237d4e_JaffaCakes118.html
Size 20KB
Sample240529-k5tyaaad95
SHA256 d483cfba4336d6db082d66abb48b389eff4b360b019739063534941183d9a37d
MD5 8037b2d798d5d3dd3b373f0183237d4e
SHA1 066e504b398c835495a6b2996b81dd6cab2c52ea
SHA512 fc9cc3a390a1d145ee2c5c5fe212c052628bc1d07e8a85b127be19958ce606aa1d7c7664b4a89f68683438a0c0a1df5f08aa6e7eac9f24c53d7f007814c49dd4
SSDEEP 384:4wK6BKBTqSpOwVhX2POXZ+x/u9KC9c4Ef17k6ys1:ZEESpvXGgVso6ys1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe
4016	msedge.exe
4016	msedge.exe
452	identity_helper.exe
452	identity_helper.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4016 wrote to memory of 4476	4016	msedge.exe	82
PID 4016 wrote to memory of 4476	4016	msedge.exe	82
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 1320	4016	msedge.exe	83
PID 4016 wrote to memory of 4312	4016	msedge.exe	84
PID 4016 wrote to memory of 4312	4016	msedge.exe	84
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85
PID 4016 wrote to memory of 4584	4016	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8037b2d798d5d3dd3b373f0183237d4e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffda88e46f8,0x7ffda88e4708,0x7ffda88e4718
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,17628069945740691696,13779584979113100544,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 248B
SHA256 dcbf1fab00a877b6f227ecec15de932dac555be1c234bef89707a6f650a9ba3a
MD5 1f33efe9e4829449be546f22ebd96077
SHA1 9f576ca11581cc99ac3d2062d75a50f56d057836
SHA512 9d8dde7fa74ecfdd263fd35bbf15f7b694292a96ba5f0f273eda0d364f6559ff1312191ef91815b235cb367d0848f722c7ed1939872667a45f6d7bbcc11b8721
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f3a4ffbfed0a50662721e678250c29259c3125b30393953c377ed90c889cd214
MD5 2648a87615b38438572cf9fb85b304e0
SHA1 8e3dc56412ffeb306549ce5c4a3464bf9df1f455
SHA512 8c938ed2e95df28668ce135d97daaebe5397f511e20320ecc1e2d36834e9cda6e1711f9ef505be6051e107c19189a715cd360f9ef9e053412042312bcff1ff35
SSDEEP 96:nEk5d18sPe8wpvWMoiVmdeHpw8EQAA2UWQyV+VDCziEwb:nEknqsPe8GWMXpwXA2ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 61063824adb1d9dd2cf568d893177630d5cf737efaef0ee3ba3c7b65467a73e9
MD5 c6a859cad788a633e1ee5d95830d65ae
SHA1 0f594f5c80630755e3319e9123e43206ff37312b
SHA512 82e14d49576514f6cad23bea645f944ecfbca7adb38bee1d805b5427a5822a9ccf66dee30a7828e6992d8a952d675e2176b6457d04b4b8502e16ee6e92b44475
SSDEEP 96:nEkEd18s5e8wpvWMoiVmdeLs9P2pw8EQAA2UWQyV+VDCAiEwb:nEkQqs5e8GWMw9P2pwXA2rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7cfaf86575771d1a3295471a5ae070a29c751bafe280f31ff8318ea8165f7a9c
MD5 6c04710cb2dda50760c983a980be41b4
SHA1 7293049537884ca01d155205bb7bd71b73af1467
SHA512 70218a629bd9070f7121bbb88c45cba72c8e20e105f52705aa6307479f3fe6daeaf652279829466a1cf8e894395c0ec1c0752c075e1be65d85a767978e34256b
SSDEEP 96:nEkcd18s5e8wpvWMoiVmdeLs9P2pw8EQAA2UWQyV+VD7AiEwb:nEkIqs5e8GWMw9P2pwXA2rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 372B
SHA256 fe1d806e30db473432b93736e6a8d9a004203edbb89e4da1fde2244bd0be72b7
MD5 70af2cfab1d040ac3f118b702b373d4c
SHA1 c8068ddfb474607d18977be3d2a1abcc8a59fc95
SHA512 423a07346c654e617e67fced533ed4249f462db7d092d846ab159cf313b98711c7b815020d0de6fd3f04c29a8e0daf5173212fa09040683cbe5e9ff93f327084
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57ae80.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ae80.TMP
Size 372B
SHA256 8179319f7710ca36a86035d22fef8588109c27a6700430d5c772a5bbcca13ee0
MD5 51ae522db99254dd0ab196c2b1ca7b35
SHA1 4188cec28bf2a23e3038fe6186892870221b204c
SHA512 78b85544a16a1f43c1770361c507dc0247440f144e1da1263b54af8bf68aa69d5bd9708accb506d2133c7946d7025574ef6250f345f728a5b74dd54e91793712
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 d353ef65204c762173b6029caa9039ad958faa6a51b86d7fbfbdab95b4b29441
MD5 b86f58bd074ee539735f31eb1e861717
SHA1 bfc778cc81261841495c4d2e88174551180e57d2
SHA512 96f782ecdabf6cb80de6b2c0539e68d80ebc405c32d60ca6a6aca18d250de8bc80fecd0dcd857f26199f387075b5c7f3134b15a6f2681b3579e847218d4e5585
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupAM7e2RU6J+k+3z2OMDCRHs:A9iIxuERzA83h09RZxYrV+aOMWRHqlWu
MD5 SHA1 SHA512 SSDEEP

Submit Download