8e28272777c299c27e9d2b561e62c9e064af47b35ab2bc88f0ad80d34990db46

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0606620d4e47fd411fd22bcc1d2959e6_JaffaCakes118.html
Size 24KB
Sample240620-pryfrsxeja
SHA256 8e28272777c299c27e9d2b561e62c9e064af47b35ab2bc88f0ad80d34990db46
MD5 0606620d4e47fd411fd22bcc1d2959e6
SHA1 912251409f0fa06f96b097367a5bd07f77db9d03
SHA512 6f1da5b0ddd84db9e7f067f9381ede99d06ad5c190b95b05ce0fc48b01c2f3578e17e7ebaad73586a991d62319bfad6fab4c5547f13c8ce0329b24bdfeefce9a
SSDEEP 384:hUBSnlc3mUA6WK9GbJaPiCdKlmJ+QFBFtFmR4gvNlOtz:2BSnlc35BWK9wXIomJ+FDNuz
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

motw phishing

Malware Config

Signatures

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc
17	http://internet.e-mail

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2692	msedge.exe
2692	msedge.exe
3188	msedge.exe
3188	msedge.exe
4344	identity_helper.exe
4344	identity_helper.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3188 wrote to memory of 4756	3188	msedge.exe	82
PID 3188 wrote to memory of 4756	3188	msedge.exe	82
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 3700	3188	msedge.exe	83
PID 3188 wrote to memory of 2692	3188	msedge.exe	84
PID 3188 wrote to memory of 2692	3188	msedge.exe	84
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85
PID 3188 wrote to memory of 1284	3188	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0606620d4e47fd411fd22bcc1d2959e6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4fd346f8,0x7ffe4fd34708,0x7ffe4fd34718
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,1310935635380892689,10134610759208605959,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1760 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2880

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4188

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2272

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 3661436d780a8f23d1ada6b609c9b8c3cb58c3d258f9f4278aee0ee92045cf5d
MD5 bbaf1c95d368c4b12df7bd60da832234
SHA1 777e7f48862ece1a510e4e6c8fdf0cbd86baa1ec
SHA512 a593c08ca66a310a535ccf0461c4063616cb95fcb10e0afbe097ff8d0306b06705dcbb8987dd7e21ceb6884ec4baaa85c5878774d92be1b66db1784d932ed824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 ef8543ff7d2203964198b949af7e9fd4f4e715a9ea6b3e4810988ea76b7291cc
MD5 aa4813b7cbeb24725e4c7a6a94fbc5b8
SHA1 fa45482032e1395acafb6f1384a095d06ec59f58
SHA512 6014714564d83d8188eaf8e3aab5849244f6b61ecd97ddf61d49fa5b1a234cb2ca379b507874502f3ef6b1978c1126e6740f5f71d8bb47ca75bc8fd2180ac65d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d4b9a075ea57826d1d7f4ab86d9d2f5f7aeba1564ed75def2ac34a6f1bf73bc2
MD5 e64a68a43101476635dd53bd5bbd1039
SHA1 27612a78f2e9f6836869bf08705b697430f1a25c
SHA512 7aa90835bdd897da5c99db28116773db5a313acd26cc62372bf979df0d0eaee99064444f9cc4034483c7570ba72087fbba751874db42aaafcc298cbac830e3d6
SSDEEP 96:nrk/O2Z1jHK/wpvWMoiVmdeHgiBXUWQyV+VDCziEwb:nrkJZ5EGWMXBXro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 048141b2706fba6ba1814129f8cecba5b14fc2be8dad55bcc9aa5e63b3a64d8e
MD5 196f8d7378fe4b7ed28b21d0c06f0c68
SHA1 cf6e23eca7bf6d7285fd64b8b65027686c933269
SHA512 ea52a60e2fbac2bb2f34afbb96e1986ece8d90c9cdbaf237f040c045aa44da9d8daa4aadf95a1b20444e09e9658088f72566176140b6294bfffb156b5ce18893
SSDEEP 96:nrk/F2Z1jHN/wpvWMoiVmdeaqeePNfApXFf0niqgiBXUWQyV+VDCAiEwb:nrksZ5JGWMcePNfAlFf0iqBXrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9c844479c0cb00537df6db91b354e96a785a82503ea2897ca14b4dabb77afb0d
MD5 378cb35136ad36a4bd8c11576129c93b
SHA1 7cec39e6cc1b38c619b6304934258f4cbb4f34f9
SHA512 dfff956f9e97420b4eed86676c8c99b7d6c526c54abb9ad8d0b6d32659b58e2e4482c70a283b46fc6c583527a17a0fa0e0da60418ae979313dec4f5f158e3591
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupq9e2RUs2kv3z2OMDCRHqlR:A9iIxuERzA83h09RZxYqZJvaOMWRHqlR
MD5 SHA1 SHA512 SSDEEP

Submit Download