70cdc01b31db9de7c638b9b3e98825a3797d77ba8619bde73224b71f92583d82

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 01:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9030ff34f1afacec59e93cfb592f9214_JaffaCakes118.html
Size 432KB
Sample240603-cdkljafc4x
SHA256 70cdc01b31db9de7c638b9b3e98825a3797d77ba8619bde73224b71f92583d82
MD5 9030ff34f1afacec59e93cfb592f9214
SHA1 752df16709e88d9a293150cb6bb8fe6d79873d09
SHA512 dde97a15099ac7b2db8130ac2cc321d80c2a39c6b54871787a094ae719f1001663a0876847ff3751bbd70d7625ec53112d0cb20dd812f216baedb380dd2c2d6d
SSDEEP 12288:KqTFFd1PRXTql10121OlmPI89+8QwM+zIolljsa:i3+8QwMu9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

phishing

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
141	drive.google.com
143	drive.google.com

Detected phishing page
phishing

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
508	msedge.exe
508	msedge.exe
3848	msedge.exe
3848	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3848 wrote to memory of 548	3848	msedge.exe	83
PID 3848 wrote to memory of 548	3848	msedge.exe	83
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 4324	3848	msedge.exe	84
PID 3848 wrote to memory of 508	3848	msedge.exe	85
PID 3848 wrote to memory of 508	3848	msedge.exe	85
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86
PID 3848 wrote to memory of 1096	3848	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9030ff34f1afacec59e93cfb592f9214_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcca3d46f8,0x7ffcca3d4708,0x7ffcca3d4718
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2616 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2296 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,5565783985071770388,18163192156947917498,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5740 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3692

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:764

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c
MD5 4b4f91fa1b362ba5341ecb2836438dea
SHA1 9561f5aabed742404d455da735259a2c6781fa07
SHA512 fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b
MD5 eaa3db555ab5bc0cb364826204aad3f0
SHA1 a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca
SHA512 e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4
MD5 SHA1 SHA512

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 29b0d5e129af31615a689b256cb87d91c167b2a9c111e36c42475947dbb31a5d
MD5 748252991ff83e6fd29ce96fb47fbd7e
SHA1 a0bb742fdce5c977dc1ac1201453e71082a81e2a
SHA512 f82cc5c1683f791913505747ff6b54df4905f94be06a7c6bfb3f081de53ddae384684172f90bba5f261a793981038814d8d37e444213762a6d08f53e6bdd736f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 a99e7edf396c79e3bb37e838cf3ff02162ae02b6c17deb3ffefc9ec849e05d82
MD5 8cc5e1e9c153e65091cde11b3bb3cbba
SHA1 17fe2c34434777bd33f22fd43272fb4904a5621e
SHA512 599c43fde8c8037b3c1b07ba76740a3e104d82488a43af5d1fd8220d9f35ecd5746d16178de7825e1304f549653713c6549ff9cb8c36753d52a988b2f47bb30d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 a5b6c9c1dcb074a06522bad6cb9eb0654828e7a4c0249cfcb5c3e7e47fd4038f
MD5 17f3d4e2622e9acb11c4c05c8c852cb8
SHA1 8261d926acb96c6103589d7da88466162a145e1b
SHA512 e85afbe5b4308e2bb8553e3bf79b5f69f5f19c4f82626408a37574ed06857c32074ff82d96e2a1ad9ea7526ddbcd3d4333b25d948b8e56a5b177bf4e0bd99f96
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 083f4c2a8517f7069cbdfc798c0376426c8a089a9f69d8b47e922dd1e3c9325f
MD5 e309bef88b1588e0fab5bdb3f18f1aee
SHA1 16422ec00215b6c84878b144b099189c64bb2310
SHA512 824aaa8b24e697f8b56e3260c34a566f5b5bea15fa96268211a1becac5ca41d002bc65f049f12623900af6ebee7926eed085ff2cbec78e3670a2728ce0fa80ae
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b78e822733f0608a20db5c7d5ad625e25195867ed9dfa3d54bb0d3e01aa62ecf
MD5 b1ee469469f75ec62fc45ef9dd9e483b
SHA1 15ba696a781e3727036d050cb1c0cab94ea83a46
SHA512 8c58006d3c1757ee4ee53a3c7943b704c81299bf10da4035572437f15d94a51099145faad464b51b8eaf12a4187f0fee299bb761645e198873cd9e80b8050341
SSDEEP 96:nTk851eEj0wpvWMoiVmdeHQN2mQIQ+UWQyV+VDCAiEwb:nTkoUEj0GWMXQN2T+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 703f08f04cf5de6fb5ec1b30b6d206bd861f92fb10969b9c567fad8174db5d4f
MD5 481e9d94bde926d5f84fdb0bf282dd1b
SHA1 73efd9742b54ddc91f7d4861f7e2f966286eefcc
SHA512 162ba09e9160b7cd920851978206bc4448116823f4114a4399cb4156923abbdcb92b90d49b1c9fed74215782fc7a47e06ddb579396a2dd3e06a8a76e680274cb
SSDEEP 96:nTkR51eEj0wpvWMoiVmdeHmQIQ+UWQyV+VDCziEwb:nTkbUEj0GWMXT+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 92cd735db541a1c0da8cbfd194d579734c58a9bfd5d2fffb86a4c53f6dbc0630
MD5 70346ec9488d6c919aea034d1403ccbf
SHA1 1ec9756b76d1cbc0c361a94cd90dd441290198d8
SHA512 b056467ac1c0b2253068e5da1036e2629c2e05892c40e19f69fbcdd4589c431935d5e18d3d4d8eef47360ac8a76c3ae87c9d84cede0957aa8f630b4bd8824420
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 538B
SHA256 69cdc1c10f153c415d5256129baf7895e867fae5a08c517819a318af4f00432f
MD5 f4f34b0ade826cf854e78fa44d1e4316
SHA1 8944352e57cb1ddafd4c95b544aa533ca9b95668
SHA512 725282821da6b2fcd78e1ae50eb9fb035c10ec0ffad13385a2aa0118e0d2545864b1de003893dd71fc463bdabfed5907ea2ed17925f6d7de0440a06032bc502d
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe587ae8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587ae8.TMP
Size 204B
SHA256 857d1820192d50d2bdbd911ee9976680109f2e4471064cd2c999df81cfc0d970
MD5 6d05eaa4adcc2830689bb92e68855732
SHA1 70877cf1314f8b4f54fee5818402cd728629cba5
SHA512 3fb3224aef605dd92114185d5a562cd2f27bc1012633b7bb1849fdabc142ec012b9048550b3b59100f0ee48dccb8ba69d8049c3f440b1db73e7c73b1bef2f4a4
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7a0fcc26a130a4d24c7dcf1f493844a93e9500579369cdc990095e388cc315ac
MD5 548aeb5ca5c8f8a4cb44287a61f4053c
SHA1 3d5f273f5b5358981adab12a3c4ba857edb06483
SHA512 04ec5e082fa2f57e4adf6facfa9a32d655eb5e0d62049bb74949bd3e5ddcbe085af6039f99079deb19afa47eb47c7ede660a0ece4c41709ce9bbfd7299417829
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup5f4de2RUwwITbzfYOxhZHV:A9iIxuERzA83h09RZxY945nTxTHqTMTp
MD5 SHA1 SHA512 SSDEEP

Submit Download