41aa3e72bd03f5d29c655fd340a69f04cfb2be4148ba452238bde18f8e9ca563

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 21:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
320a3d28a5414cdb96adc8bdf84999d0_JaffaCakes118.html
Size 11KB
Sample240709-1a6llayclg
SHA256 41aa3e72bd03f5d29c655fd340a69f04cfb2be4148ba452238bde18f8e9ca563
MD5 320a3d28a5414cdb96adc8bdf84999d0
SHA1 9075970cbe4089f4cff69e8843f7dee4e388efff
SHA512 1bcff66389c3f4e39edc84e115666195935249513801e120becc49e5faa610e10a1093bc714fdcc26b46a2147e36d67236e7a75fca0c79bc3bac578105436600
SSDEEP 192:2Vn1lIsr0Fprqdh8k/w1wvq0E318AuBuLbdU8d:sn1lIcKprq/geg8AguLZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
1108	msedge.exe
1108	msedge.exe
2368	identity_helper.exe
2368	identity_helper.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1108 wrote to memory of 4200	1108	msedge.exe	82
PID 1108 wrote to memory of 4200	1108	msedge.exe	82
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 1664	1108	msedge.exe	84
PID 1108 wrote to memory of 756	1108	msedge.exe	85
PID 1108 wrote to memory of 756	1108	msedge.exe	85
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86
PID 1108 wrote to memory of 4196	1108	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\320a3d28a5414cdb96adc8bdf84999d0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb24046f8,0x7ffdb2404708,0x7ffdb2404718
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,13748349743691843249,5635112525058465136,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1191573f2a7c12f0b9b8460e06dc36ca5386305eb8c883ebbbc8eb15f4d8e23e
MD5 2f842025e22e522658c640cfc7edc529
SHA1 4c2b24b02709acdd159f1b9bbeb396e52af27033
SHA512 6e4393fd43984722229020ef662fc5981f253de31f13f30fadd6660bbc9ededcbfd163f132f6adaf42d435873322a5d0d3eea60060cf0e7f2e256262632c5d05
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1971045943002ef01930add9ba1a96a92ddc10d6c581ce29e33c38c2120b130e
MD5 54aadd2d8ec66e446f1edb466b99ba8d
SHA1 a94f02b035dc918d8d9a46e6886413f15be5bff0
SHA512 7e077f903463da60b5587aed4f5352060df400ebda713b602b88c15cb2f91076531ea07546a9352df772656065e0bf27bd285905a60f036a5c5951076d35e994
MD5 SHA1 SHA512

Submit Download

57ccc06d-7955-42c1-912a-9c3bf6223fda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57ccc06d-7955-42c1-912a-9c3bf6223fda.tmp
Size 6KB
SHA256 cca5333f2220f4e934b8b25209f35e442738d1b84b86244e5b50cc068057c17d
MD5 87ad4d7101f04c1e31ba769ca5a4dc87
SHA1 c50753c03cd6001a16711b71579edbbcc42dc9c4
SHA512 0eb18c0311fb7d62395c2f01ab044b58e2f58eb41e1adf9694afaf7419f54e5022c9d59be6878a4064fbecbf51564c8db9e5ad9371d41cac2e40b4a84d9edee7
SSDEEP 96:nTkwq1yuZkQqRwpvWMoiVmdeHciQfwUWQyV+VDCziEwb:nTkDouGQqRGWMXwfwro
MD5 SHA1 SHA512 SSDEEP

Submit Download

64dc0884-8026-4869-ab7c-7e843b9a01f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\64dc0884-8026-4869-ab7c-7e843b9a01f4.tmp
Size 6KB
SHA256 eb48c6ebb710fe3943fa61d2991116ad64070cd2b09b4eac39b50b7cfe3e7b2d
MD5 30c2ac28098ac46bf034dea6acf88445
SHA1 e4647ff4c366cd6ddaaa22534a91866ad258f6b2
SHA512 126dace814ba82ccf03695fe6e449496b3d662600485002cd923dc836a12068a795e3dac829975471e521e4e8ef1e40da3f2fa3971ab426b7a39de62adb45e40
SSDEEP 96:nTkMq1yaZkQqRwpvWMoiVmdeHciQfwUWQyV+VDCAiEwb:nTkHoaGQqRGWMXwfwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 6d4a17577fefb85c37c45bb14c1067d76ee682bf1c1531f4420ad48ad8d7f83e
MD5 189004c8a4ffa93d1bea667a7337cae9
SHA1 b7bb4d3d100502ac4ab2a6d531a9d1c6049ff925
SHA512 4c63b8f726fd218c1025ef269f8cb57116d43d4bc1eaa6b24cec9d3f4ba083a26a8c7a78e5a2a798a1d88ec077d914427ce5a3d4cf06a3cb9d7523b0e0b7b2dc
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ccf5e74c2590e64bbd2af0a34c6ed61026e3d0a08270b0ed55a563984f620e32
MD5 5648554b74fba9260e109d471969582c
SHA1 ea61d4c453474d3d98779eeef413649f724026f8
SHA512 a16381fff12aab0ca1684e4e9e52f8f5330bd5fb542d09bce9267a42f1a90d9b6e9f579415d653f973ff87bceb963a4c09090cb964862ed9f08f3aa51183c818
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupBje2RUOK0ALgcTzwxAULAi:A9iIxuERzA83h09RZxYBzpAEhAxs
MD5 SHA1 SHA512 SSDEEP

Submit Download