acad67470d31e6d6bf2cb535dd463e127fb3671422d06b166754bdab3d01ab1b

Analysis

max time kernel
145s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 14:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92254a6db96f1615117017ad04839155_JaffaCakes118.html
Size 42KB
Sample240603-r2rr3sba93
SHA256 acad67470d31e6d6bf2cb535dd463e127fb3671422d06b166754bdab3d01ab1b
MD5 92254a6db96f1615117017ad04839155
SHA1 0e129091bae0c1f559fca1f446da8cd02ec0be01
SHA512 4f136a57668e2344c7f34bb4018667d910b329fcfebbf2c9e975e7e129d431a2301d94eb486dff74761635d70ad0edeb179c32b2d1556c6476f80a3b79dab171
SSDEEP 768:SSpwV9+9+i0d3lbGNwBiEl3EiGS2ggDf/5xG1aZA573I2bITrgMS1eWKrqCg:SSpwV91hFWwBiEl3EiGS2ggDffG1aZAl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4944	msedge.exe
4944	msedge.exe
1056	identity_helper.exe
1056	identity_helper.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4944 wrote to memory of 4264	4944	msedge.exe	82
PID 4944 wrote to memory of 4264	4944	msedge.exe	82
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 876	4944	msedge.exe	83
PID 4944 wrote to memory of 4656	4944	msedge.exe	84
PID 4944 wrote to memory of 4656	4944	msedge.exe	84
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85
PID 4944 wrote to memory of 3028	4944	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\92254a6db96f1615117017ad04839155_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa31f646f8,0x7ffa31f64708,0x7ffa31f64718
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,15280108520897505833,1752750229161510357,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1832

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3268

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 261B
SHA256 469e7f3d9d061c7e55710ce83faa8057cbf6c918b2a131865198645ca4981a22
MD5 ea57c6792703b5f542f0ea0a741cc425
SHA1 3ca7af8a028966f859838d6807daa0ce821f7dcb
SHA512 43434c90ff163c2c0f51372cadee91ce469c3d8f3bff0dd25231e4974665cf4c67fe78ac5301252b203f459d9dfffcd24f6b2e90c72023fd9cce89bd8d58adfb
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 488814b66f77412c1f14ca760d0382338cc1ce310b20d9329d695a13575239d1
MD5 504771cc8fc7171f8073b05e552b49fc
SHA1 e515f766eb9f6e78c63911cec84632aaaa25b556
SHA512 2b7769d34feb0b798030660d71f00eac83188afc42070bdd6d9d88e9941ec03df9036314108ca9b7625cc1af8c09da3d4c8d651345caa546cb8c2c754663af89
SSDEEP 96:n4kM81wPe8wpvWMoiVmdeHpw8ExAzUWQyV+VDCziEwb:n4khmPe8GWMXpwAzro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8a3c5ac538ba4db031f7bbcb2516a75106041c934c5c58089769c1aa5c5acb5e
MD5 466ac11745ee4948e695b868433b1440
SHA1 da560e662f345b69061dd07c2537a4e2a7e29f56
SHA512 4e2287649610944a1254831356e2f22882637823dc06d6f3b4761da3cd322a50ca804dc3b1c551873d98dce0c26392dd0c2ed447003f208c21a4d605a59685af
SSDEEP 96:n4k381w/e8wpvWMoiVmdeRpQV/Tqpw8ExAzUWQyV+VD7AiEwb:n4kMm/e8GWMBOVrqpwAzrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 261e4983716def90b541417db0e8156c47339af102a855adb8f10fc67242c0ab
MD5 ef33ea20657a7a98a17744f15e58a563
SHA1 12d0a127d083a47457d3aabda4d17376b2c163c5
SHA512 314673fd55a7afa13c662fad480dc22e35060c16e681cabf19808d248fe2747ab79b1f74d716317b1d420265dc7b3c7b347cbb37a7bbc1791e03c4a72b0b5815
SSDEEP 96:n4k381wPe8wpvWMoiVmdeQ2pw8ExAzUWQyV+VDCAiEwb:n4kMmPe8GWMg2pwAzrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 9047a7a2cb88c46b6c67e29013820d8dfc70f73b91cb6f53eb45d68b9bbb35ac
MD5 cfe248609457e37b14fdcf30f1e4279d
SHA1 41cac00a0d165761919418eef2c7ef754a307109
SHA512 296d5e1e7ce08755f8f8f01cf5c55515a800784bb750dec2ee2c5c334e16b46de5da33e222d0b72c75e5170ef2559833ef06cd504b2bb7502a1ca34d5a1e68bc
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57ba76.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ba76.TMP
Size 203B
SHA256 d31b65dbbc2cdfeaff9f2e439a7033ef7e4b9460f71e237cc618b8f75c147178
MD5 d8d82b96cc915cffac86a98c5cfadfff
SHA1 ae19d6d1ba0575f00c83dc5366c59029c88fbb3d
SHA512 0ab7b34596653240f8b83f6ec67e3d267e11d790c8c14ee95c19e03112f172b17c8b5e0dc8db4523966edb62b4dc3f6eed508a7281653e6571848f7a4b08d21b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e5fb501ff4684ce4701927c56c86f3312319e62e5521fb9e084bfc1b27df6bba
MD5 0eb6dfce41492d8b77223322cf03a2c0
SHA1 201e68e2799beedce10653cec97cfadddbd3cc5e
SHA512 9fc528bdb3a3ced5e7b8f4cb197ddc5789692250b488ac1816101110f0262aa5d9bd7307e2f0bf9f9da85985f35ff39ba00fbe0afb7c238b6cd6780299fad70f
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupiKMYe2RU0TJ+kq3z2OMDCf:A9iIxuERzA83h09RZxYrfqaOMWRHqlW7
MD5 SHA1 SHA512 SSDEEP

Submit Download