257e61d0f80a89e82f4dc843b48a3c2070b367e611f36db20e15608c52c22d3b

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28/09/2024, 08:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fbe1abaab88d3acd0eff1ca9d48f16c8_JaffaCakes118.html
Size 226KB
Sample240928-j83txsybla
SHA256 257e61d0f80a89e82f4dc843b48a3c2070b367e611f36db20e15608c52c22d3b
MD5 fbe1abaab88d3acd0eff1ca9d48f16c8
SHA1 4ae21a9e49c5ab2495a0fe07c663a0a04f306c3c
SHA512 19326f9e5cc804df6a6d6fc09e28d5bd7ac50cf785e3f5c992a4b3b702dc7acddb92ce8f86f0ae0066ae12af565ae2919dcde2b951ca1bb614cf35b7ea56499e
SSDEEP 3072:xrGymOAcBWyeAcBNpBeNpbOnS4A6qZGF/MA2tLN+MlRNy3OJ/O7QK:xrGyJAcAyeAcTpBeNgnDVC+MjpK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1648	msedge.exe
1648	msedge.exe
4404	msedge.exe
4404	msedge.exe
4632	identity_helper.exe
4632	identity_helper.exe
924	msedge.exe
924	msedge.exe
924	msedge.exe
924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 3452	4404	msedge.exe	81
PID 4404 wrote to memory of 3452	4404	msedge.exe	81
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 812	4404	msedge.exe	82
PID 4404 wrote to memory of 1648	4404	msedge.exe	83
PID 4404 wrote to memory of 1648	4404	msedge.exe	83
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84
PID 4404 wrote to memory of 2476	4404	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fbe1abaab88d3acd0eff1ca9d48f16c8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb579346f8,0x7ffb57934708,0x7ffb57934718
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,17359689553370840060,1912441695176850485,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5472 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3192

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 997B
SHA256 1e4ad5e12db5939278867ed165b5d1f8b786981fa0c566ee183f305ff24d76cc
MD5 10da04771d8a2cd71489e2077769225d
SHA1 f4bc9fd7749ef739d4460c1f2d20b3470da635fd
SHA512 5a0caafbbd7b846984a3d670815b329d0bb28a71012558cdb9f96e9512d13815d48d2414c4f9e0763dfce41dd3021982e1a0661bcf4c989e3f1e18b8cecd5f5f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 43ca091f44fd723b8dee32f7d8097dab687520e5d79330bfbbbaf77562cf3642
MD5 023ac545dbde40bf368d427291ea5617
SHA1 9c3f1d1b1c6f52e49079fc39bbfdae4e750456d6
SHA512 cea7a9d3c015f08c1e496078d0be48de7d9a0aeccdf291ff80ccb32220f0fc20e2b852330085f54ce03d7474278193d1c631e816101cc206505783b787e5da2b
SSDEEP 96:nzkzAC10tOrwpvWMoiVmde3+/9foKfc4O24s5tUWQyV+VD7AiEwb:nzkz7CcGWMn+/51fc4O2trg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1bd740cdbbc668b422aee887d5f5e1133e4fa38e968b3c3a3f6665741585ef85
MD5 f7d1d1c090dd99bc597d8f53b6538e15
SHA1 1c6151019efba4ccdc8dc3260e86c1cd6fc3242e
SHA512 5fd06b32a667c3c8de12e893ccc477e8a77a46e71d56faddd783507f12e8fdfbce48a5cfd796ccfcad022cf96ab616737d5a3f8e7d01ec975131354c142f8b35
SSDEEP 96:nzkz2C10TOrwpvWMoiVmdeH4s5tUWQyV+VDCziEwb:nzkzZCOGWMXtro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4adbf7f32d99272b1c6ff478b46708046f9a733af26eab3afbe178a350ac0c4c
MD5 0494a616c689c711e08d1bed3feeccaa
SHA1 5547fbfb3f47fc9c94a2090179837cb2e4b90d7d
SHA512 c4aa3ed909ab32232451091fa0c6400e4b44aee06176f5e3459ab785413757b6932423e3fd18e9d13573b20a1901c4cf7ef44f9c0c6b1b5628349d252c54a6f5
SSDEEP 96:nzkzoC10tOrwpvWMoiVmde3+/9foKfc4O24s5tUWQyV+VDCAiEwb:nzkzTCcGWMn+/51fc4O2trV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 ab75f0eb11c5990754a3810548a5638290e6430e1218bffea3c2ed92e4e599aa
MD5 2bb2bbe9b2a842fc2c16ceb9a6d8d040
SHA1 aa0a54274c3384f78104ee6ddc925d6ecea0f20d
SHA512 61770eb8de54fd2f5dc1a976a75ccae503b6e3671cbbe673a380dd602ace0f084a09398f43a6f44004965ca90dcbf57e3214f5ebcf347d0351b8fbc6d61e971c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupO/Ge2RUUi60MIcM/bo5ZxP:A9iIxuERzA83h09RZxYO/IT0lqZxP
MD5 SHA1 SHA512 SSDEEP

Submit Download