084dec5fdeb05ea33850ebd4b631f52246620a8ef562c6facdefd110ccf15c7b

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9153977901a040ceb779cf95ae7b8ff4_JaffaCakes118.html
Size 23KB
Sample240603-lrv4vsbg34
SHA256 084dec5fdeb05ea33850ebd4b631f52246620a8ef562c6facdefd110ccf15c7b
MD5 9153977901a040ceb779cf95ae7b8ff4
SHA1 561215e1ba91e7fbb2134f395cb46902d9741110
SHA512 7317dfa9bd29e6d593dc942275cdedbd4a3b1467c334c011218ba28dfae4e525da9f659475fe9a8fbbd898bfc7ce7aa120e8925e56f6aa332cc4e593215b8372
SSDEEP 384:TpUBB7dE8ccFMERCeCjpuPUi5Cp/YCSa5rh6obHcwtUmI:TpUb7O8ccFMEXMVpB9rh63ww
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3172	msedge.exe
3172	msedge.exe
2284	msedge.exe
2284	msedge.exe
4896	identity_helper.exe
4896	identity_helper.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 2940	2284	msedge.exe	82
PID 2284 wrote to memory of 2940	2284	msedge.exe	82
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 1032	2284	msedge.exe	83
PID 2284 wrote to memory of 3172	2284	msedge.exe	84
PID 2284 wrote to memory of 3172	2284	msedge.exe	84
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85
PID 2284 wrote to memory of 3452	2284	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9153977901a040ceb779cf95ae7b8ff4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe344246f8,0x7ffe34424708,0x7ffe34424718
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2980 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,9328244371434259911,16931233414885710981,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 2a198c706f05e9a74f1d5f05dd0bc02be598797cb7a248f075eb8af0df27c431
MD5 27d330eaf8dd651f1bc29701f962240a
SHA1 39da0ba3ae983cbeacd514263bbcc6aa1d306696
SHA512 77f3ed91fb5b9cbbc4c352c6395e9e466fc8b740929508b41f766b7a18ce98f1e2fb30c4781067c3d5df6f72e9c8869eb445d034dd44de084213616723c89238
SSDEEP 96:njk3ow1mD9wpvWMoiVmdeHpRQ4HlUWQyV+VD7AiEwb:njkz8D9GWMXpNHlrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 66331ac1705b8362a291c432ac83025513c3bc96f0c33d948c0c632341e7f808
MD5 67043882a10fe801204b87bf7858469a
SHA1 16194e32f60f1a7467142f5b6af8f03c1436f3ec
SHA512 4c55c818cb7b62931d907952ef57d290a68f13bfd0be916a2183852a53a0eae18c06926b2d3486154e277e3160aa2024b33cff8539d578cb964e21187fb4e6b2
SSDEEP 96:njkMow1eD9wpvWMoiVmdeHpRQ4HlUWQyV+VDCziEwb:njkaYD9GWMXpNHlro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 b75b53c5e2cb4dd1618ecdce767845d046085ac11465549da71f59c7edd4655e
MD5 6129519addb22e051ce448dbccc9de71
SHA1 4159a54a6b0c605913fc74cf6d5cedd0dddda85f
SHA512 5bb39b37cd87f9ac2d3eae16a9906474ea7622acbc550daf7b45ed0a989d487777261506364fe6a2fd52184bb9ab4ce10b5bce754c2ce544b6595fe5ce291055
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupOKe2RU0qTCh3z2OMDCRHqz:A9iIxuERzA83h09RZxYOEumaOMWRHqlN
MD5 SHA1 SHA512 SSDEEP

Submit Download