Analysis
- max time kernel
147s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
02/06/2024, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
8fabcfa61bca970075b35e9a27385df8_JaffaCakes118.html
Resource
win7-20240419-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8fabcfa61bca970075b35e9a27385df8_JaffaCakes118.html
Resource
win10v2004-20240426-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target 8fabcfa61bca970075b35e9a27385df8_JaffaCakes118.html
- Size 489KB
- Sample240602-2hd2zshe3z
- SHA256 d21011e601b660bd2f51c8eff7b4b80eefa6523b1f2ddcdc71e466f2fd2163e9
- MD5 8fabcfa61bca970075b35e9a27385df8
- SHA1 4cfb310f12138cf59520461ab7bc014f58ebb82a
- SHA512 64da2e0d05a0d9221db7856bd81ebf28a6a67d0be6e3a7cd105e11915c53a9703954bec9554c8fa0ade9bd699ccf7482767e0c7b53da1cb7629ad3f17dbee12a
- SSDEEP 6144:Px7yeTfFyLVxSFL7nxklzMkMvKTJOgjoL:PxOeTfFyLVxSN7neMkMvKTJOgjoL
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 1508 msedge.exe 1508 msedge.exe 3720 msedge.exe 3720 msedge.exe 4228 msedge.exe 4228 msedge.exe 4228 msedge.exe 4228 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe 3720 msedge.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3720 wrote to memory of 4608 3720 msedge.exe 81 PID 3720 wrote to memory of 4608 3720 msedge.exe 81 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 4376 3720 msedge.exe 84 PID 3720 wrote to memory of 1508 3720 msedge.exe 85 PID 3720 wrote to memory of 1508 3720 msedge.exe 85 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86 PID 3720 wrote to memory of 4188 3720 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8fabcfa61bca970075b35e9a27385df8_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3720 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff427246f8,0x7fff42724708,0x7fff427247182⤵PID:4608
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 /prefetch:22⤵PID:4376
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:1508
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3044 /prefetch:82⤵PID:4188
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:12⤵PID:4588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:12⤵PID:4820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1336 /prefetch:12⤵PID:5456
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:12⤵PID:1828
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:12⤵PID:5628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3012 /prefetch:12⤵PID:4028
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2252,3352513109392406076,12984370464494805045,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3332 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4228
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5160
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4140
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
- MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
- SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
- SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
- MD5 f53207a5ca2ef5c7e976cbb3cb26d870
- SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
- SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3510c934-cc64-416c-8c3e-de5dd68de4f2.tmp
- Size 371B
- SHA256 543bf33198281db746ebddec39a40c4b71ee44768d8d5163c36186bb9536f070
- MD5 8b46851e99ff298bbe909143e29dd5c2
- SHA1 c9eb81a8fcb6b8d27ef5e61907c421d537f98444
- SHA512 356c1d0a8cfe05c46c31ac9ad0bcfb976c31379aa26b94af7d8fb336e41833ad0dde07b47ce539943dc6149002b8fc4b7af06f8e9cd5de93904ecf23e5f5e864
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
- Size 23KB
- SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
- MD5 e1c71f7c04be834f5587230db2ad24b3
- SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
- SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
- SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 120B
- SHA256 d211c8fe9e82cf856dc4a24a7d0e5227824557a8310b950746cb7f4e917824d8
- MD5 1fd4e69e3afff4662161da91a236e44c
- SHA1 9b4be71ad37b5c0ecc17e90924548a8b242111b6
- SHA512 ef92a85a1a877de5f1eb8ddfe2c063c12e13de6fba3a761b403cc8d723fab1f868caa6bdad96b9d0a678f079c30d3b393df2ce756ccf315e46c055664c28effd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
- Size 1KB
- SHA256 d1a75c356772ac256a673e6c99897b970e84a822f2d75f89982c3c946d4b03a8
- MD5 6662bdce883f3c75a38d9e7ca71dc677
- SHA1 3588afe43f614d570dd49981048521e10868233e
- SHA512 817135da8a3f34fc731b7585e994427d203669db6b479fa48a180389642e9c8e25c0764859381a4448226db2e47961d50d1ea8e271813907fa40cc911da406f1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
- Size 2KB
- SHA256 56a6e63c77b58324bc6a2c463c5f0020af074d110bf4568c00d5e762638273d6
- MD5 f63db385ec71edfcfcf263561fa94db1
- SHA1 a2ff046543ad49b8896881638522c5245cb516b4
- SHA512 8fb3cc666f56554d2d30f3bf03a6866587467b28e15c38582d0af4c1c40b6ad8a0554ff242d51f95c78ebede1242b10683404c26f804a68ca2dc5c900ce268a0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 7KB
- SHA256 0458838212122428a898c989b0040ddc93ccb6938c4fef5a61c7ba4c159aaf20
- MD5 4d273beb8af62df9b6dbff7c1418c0b3
- SHA1 3ae2593447b18eb4bb65c4221d32de7781a0f5b4
- SHA512 ceb850857fd177258bfbb46f452a58f3487aa0fdd82d1805a452d0458d5a6dba6b440a26fb51d4e375b0a9d1ecaf6846d28bab36336f943800e64d33a19838fa
- SSDEEP 96:n7kX+Y10pe8wpvWMoiVmdexf34NJQTh1KwWw2pw8cDAaUWQyV+VDCAiEwb:n7k5Kpe8GWMBfoNJQNUwWw2pw+arV
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 6KB
- SHA256 5cf9296329c44e84edea41075466009325dd032db809da35835b216a768406a4
- MD5 2db7ec05dfe77cf439b705b0e76ad857
- SHA1 6697936e13f8672a439666d9158deda4b0b7ce49
- SHA512 44c0a2f66517dd4c786af7de5fefec6d63306534389f3f730231de4a6a80ab925d5caf8fe0ce92cad3b44dc1c6d0b172aa76b09872b0ff392205fd3224ed87ff
- SSDEEP 96:n7kX+Y10fe8wpvWMoiVmdeSh1Kww2pw8EDAaUWQyV+VDCAiEwb:n7k5Kfe8GWMiUww2pw6arV
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58ac0a.TMP
- Size 204B
- SHA256 2bdf0ce4cc1ebd1e0d80b250d8735919cd8fc11e7acc239acba3b6c77ce0ba66
- MD5 4117ac862c734d32570f1e6e5243487b
- SHA1 208e5401054f0c7cd085a68c3b97ed3fc70e23f9
- SHA512 9425a3222b708b3abc41d7ba915e111afc354d098a137c02be49b351d622a60a53e1aee1cecbdb0db4575abd7478d73fe4ca5d30d418f8557a3f2a8503bdb6cd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb35af31-18d0-4b86-ad96-595dc23dad57.tmp
- Size 5KB
- SHA256 e5fa3ab93fcb49b028eb13d984d55104daab190cc8bf021aa160ece8dea24f5f
- MD5 d9a0bb1a9cb7cb873903ab746fb288b2
- SHA1 2abaa026a07e9e323efd28d04a47a36b51972d6e
- SHA512 ce6f5e046c9b6bc557302c4ff8055b2a95eb486977b5961d90e4cf459bc10cbcf7c2cf7c280491f8ad475ba0a04c28d99562b15affe36643a1aa1a1204330e44
- SSDEEP 96:n7ks+Y10fe8wpvWMoiVmdeHpw8EDAaUWQyV+VDCziEwb:n7k4Kfe8GWMXpw6aro
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 10KB
- SHA256 ecc21515eb5aab7ca23b3bb449c561ed18d56ccecec6d00070869ac62b1fa875
- MD5 e55c5b5aefd4436d3c073f763ddece8f
- SHA1 7386cbfbc66bd0bd2fa15737de0908f4f3e76032
- SHA512 d0ce128ce6fa7260ff70bbe6b12a79fde54689a464b85d1f666c401170edaaa7571820e1d272035ad2e2085dd24d91606e55388819675e22cf3508e044597535
- SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupgM2e2RUYJ+k3M3z2OMDCRM:A9iIxuERzA83h09RZxY4X3MaOMWRHqlD
- MD5 SHA1 SHA512 SSDEEP