db383a148d8ce78a241e50b5b5541eb6926814f813df55748e17895ca564fda9

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 14:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c62037cc00c217ac309383530bb193c2.html
Size 28KB
Sample240313-ry4mgafc8z
SHA256 db383a148d8ce78a241e50b5b5541eb6926814f813df55748e17895ca564fda9
MD5 c62037cc00c217ac309383530bb193c2
SHA1 20862dac5b074197a093c342e60818ae22c6fe6c
SHA512 8edbb553a86e1740752630c73d6292b0185c4bd52996f8a7ad797779359f8814f921d1bc4289d4fa26890791f5a5225b1439f1bbeab51b530329d7f523e0a849
SSDEEP 768:PtZRsV2+63kPENbfJZYDN4n+Gy1JlwswWuR:1ZRsV2+63k8FfJyN4nB
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3632	msedge.exe
3632	msedge.exe
1536	msedge.exe
1536	msedge.exe
4044	identity_helper.exe
4044	identity_helper.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1536 wrote to memory of 4628	1536	msedge.exe	87
PID 1536 wrote to memory of 4628	1536	msedge.exe	87
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 4892	1536	msedge.exe	88
PID 1536 wrote to memory of 3632	1536	msedge.exe	89
PID 1536 wrote to memory of 3632	1536	msedge.exe	89
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90
PID 1536 wrote to memory of 2180	1536	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c62037cc00c217ac309383530bb193c2.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xe0,0xe4,0xd8,0xdc,0x108,0x7ff8fc0346f8,0x7ff8fc034708,0x7ff8fc034718
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,16847603190385155715,15541563729794405132,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4820 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4612

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2036

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e
MD5 cbec32729772aa6c576e97df4fef48f5
SHA1 6ec173d5313f27ba1e46ad66c7bbe7c0a9767dba
SHA512 425b3638fed70da3bc16bba8b9878de528aca98669203f39473b931f487a614d3f66073b8c3d9bc2211e152b4bbdeceb2777001467954eec491f862912f3c7a0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932
MD5 279e783b0129b64a8529800a88fbf1ee
SHA1 204c62ec8cef8467e5729cad52adae293178744f
SHA512 32730d9124dd28c196bd4abcfd6a283a04553f3f6b050c057264bc883783d30d6602781137762e66e1f90847724d0e994bddf6e729de11a809f263f139023d3b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 865B
SHA256 5894658b8882a151e85fe20fb2d426c6bdd8205331dad9e57c5bb732972a14a3
MD5 9d36d1467d28ed6b5843c5bdd1335e30
SHA1 add011656f961749cb17c2c2407151d5dc435de5
SHA512 8734e6487cdda6cd7448d3f7fe2ce9d38c469d81d5ab3a2461f54c069345fa8af71af47a54e69f5de2bcac86f96a64b1afc552688141fbc91cd53a1ae8d5a49a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 896B
SHA256 672ff485188b54f273814425c3cec6db1e5296bcd58021f777dbaaa6cb0f50b3
MD5 61dcce76b4e844218e3ed0da7ab9973f
SHA1 6b192c7f59bd301e025435616ad89149b1374800
SHA512 3c38b8f30a728fbb810219c7486d0bde7fd821143b78e17395d3a3952514302f8cfb4501b356b766455ecd62c94341eb0d44d595ae31f7b36257f56790da7b5f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 9a25fae8f503105fa0ce4446aaa52be07f237e1f2e268be49fa66b39eebfe3e8
MD5 6d439d3e4b1bffffd619b0850645ddde
SHA1 46d71f2b42cf76c798b3c195760c063ed0480e5b
SHA512 4ad78186b3ed7d679b986ae227fc7e5b6587371ea54a2f89354c36a4346c466a148c2f75733907f86665a7e4d326bd22decd3bc687f17fccc6b12e0c25ff2f90
SSDEEP 96:nTk901OmwpvWMoiVmdeHcmaUWQyV+VD7ziEwb:nTkuImGWMXart
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b875f851483f4789404d4503128e107910e34fd20a8217999c530afd803f45c4
MD5 d6aedc3324a2ab7321a31a6a531c8ee5
SHA1 e3270c15d8e2f4f01aed6e2d52308481372833d6
SHA512 1ce29556449a9a1738cee94228120499539b0f8fe1177ae15b5735e3b2b6bed95248d4f90139433030eb13a1e106fe88eab8ef3f02f6e93393d3a8247dac3385
SSDEEP 96:nTkY01OmwpvWMoiVmdeE6K6xt2cmaUWQyV+VD7AiEwb:nTk5ImGWMBK6xt2arg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d4b8f16f6be79d8503e52f957aee8d75b7fcfccc3b3c9a071e5383049abedb37
MD5 d8355622197c6380dcb51c7008fe184c
SHA1 f44d4913d6c637741f1534b41bbb352a400a52db
SHA512 05bcb8abdaf7f61e6f910902948a839e346f2ac820d037e953acbac689c297efc0d641ebc0933251ba0b812b85802205962e8c8d6586d63e431bad57592d5b5d
SSDEEP 96:nTkX01OWwpvWMoiVmdeE6K6IB+8xt2cmaUWQyV+VD7AiEwb:nTkkIWGWMBK6Z8xt2arg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 306c9733bed077a0e3a306ec95ad564f6a9fc0fb15f1398614d1b214f901f7bc
MD5 38525bf40a782e3b49522f9b7fadeb1c
SHA1 91d6225e6d4eaec13f15e601466b72c20ac5fa13
SHA512 ccac2cbc8e3fcc9668d4fa9340c68a3c41edd0bd062982efaec541fc3abb8e4c4c315d1043a917d24e7487ef580cd3a31b1f48d8cbde794a80f8858979902578
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe5827e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5827e6.TMP
Size 203B
SHA256 3a4e9a244fee1a39c873f6c0ef021323db0d3d819475ad7e9fec57e7d9ebb118
MD5 5a6556bdc8f2b3f504a24ea062244ebe
SHA1 f825230168ab06fb3b37f5af27583add574015e1
SHA512 9adf3eb4f13e918156c8f221af7673b8fc5d5c40b5fff4a72f23b294e78f68216df2aa5a971b746265ad7b6e3a8cb54c811d952689dde9b6bf844ddeffd73261
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 701ff543dd06c23f23135636404f36de638e05c0d2b7a63c8fe2e755ad1b3ef1
MD5 85656736c62509bde331ad293b383b66
SHA1 47cdafac78944a9787bcb2d34b9b7437aa2b94be
SHA512 fc21cc8c52d21ba22a0d11b53e3fa4309f5879d5e11cec6ea65c48d22803780a7d51045a752264a64823aa82773a20cca3bc205982b4485bff18f0de828b30e3
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupoe2RUd+b9XS9xUX1MPeuuZ:A9iIxuERzA83h09RZxYGnXS9E1MeuBOn
MD5 SHA1 SHA512 SSDEEP

Submit Download