df9726cc773182736a13f0d57ef8082fc74f9726b5cdd51fec41a08a7ea529aa

Analysis

max time kernel
145s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 22:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
198152ee77fcbe7b1116c22b2e7e4bc0_JaffaCakes118.html
Size 9KB
Sample240505-2hznpaba88
SHA256 df9726cc773182736a13f0d57ef8082fc74f9726b5cdd51fec41a08a7ea529aa
MD5 198152ee77fcbe7b1116c22b2e7e4bc0
SHA1 f02492b13c4285595217e124892ab7c1b2ebdb63
SHA512 88bf2130ace6516122a9faf9b2a750c350ee478124142c2ea0b8802630c34007d9673354788f7284072500d9800a4bcdf62ba3de7f4a8fad64e8f90b987f71fb
SSDEEP 192:eFPNoFe4/fYVZOR4edYQAl7clUbT1lOCRT7aH0peTL8TBIhPq:KtGf7R4mtA5ceb2sl82ug
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe
4344	msedge.exe
4344	msedge.exe
380	identity_helper.exe
380	identity_helper.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4344 wrote to memory of 1616	4344	msedge.exe	83
PID 4344 wrote to memory of 1616	4344	msedge.exe	83
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4112	4344	msedge.exe	84
PID 4344 wrote to memory of 4432	4344	msedge.exe	85
PID 4344 wrote to memory of 4432	4344	msedge.exe	85
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86
PID 4344 wrote to memory of 3924	4344	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\198152ee77fcbe7b1116c22b2e7e4bc0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc325346f8,0x7ffc32534708,0x7ffc32534718
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4072 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,14334304110345187805,8519848701057213738,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f9ff4871fc5317299de907489d466e630be63d698c8f7cb77cc81faddbecc6d2
MD5 8b2290ca03b4ca5fe52d82550c7e7d69
SHA1 20583a7851a906444204ce8ba4fa51153e6cd494
SHA512 704ec8122cc1c263dff67ddbb5c20ee0db8a438674d716bc3be5b266ee5629a219b0049d721f9eb2dd8f2d8fda0163659eaa4d3e1f0a6e9072a8ffb92bb2b25d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 17cd6de97a0c020cb4935739cfef4ec4e074e8d127ac4c531b6dc496580c8141
MD5 919c29d42fb6034fee2f5de14d573c63
SHA1 24a2e1042347b3853344157239bde3ed699047a8
SHA512 bb7eadd087bbcec8b1b8a49b102b454333f2f9708d36b6ffc3c82fdc52e46873398d967238c3bfe9ac6caef45b017a5fe3938ebf5f3053e4ef9be7b2752b563d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 189B
SHA256 045646bc1a87f1ce57c87ba8a6ed5332e36f71e667ac712be1df2fef80385f8f
MD5 efd079652ad21c50d69ad30ccf61a40d
SHA1 000bc74057bb6ab42d2a160349e1597edb211bc2
SHA512 35f643af8bb12bb445e3e6ce7577376dc69010ddf8d7e76752d703cb50f091bdeb9947b9718baa6e9e286d69df19a794522e446f29d58dc26dfea571045f51ab
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 13ac01db7eefe4af4d48550138cafdb18bf80dc58780e090acb2023636d8070c
MD5 52e6a3abc0005d5cd38e60c31bbb1e6f
SHA1 fc946c2d36f3696ad7970bb01bbac4cb428e7272
SHA512 b58f23f9d25ad8100252c5e55becbd8453452293fda5e48335a0f118d5978a16f27d0852a7c6ceb15562cf5cb10a97fc08e4c6d25650837ef94a2d19d817f276
SSDEEP 96:ntkb4o1BX12wpvWMoiVmdeHuwuaNUWQyV+VDCziEwb:ntkEo/oGWMXFLNro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 954f02f800c9b7169a1a39e4ba5ad734474ac0620e2b6af6303827f7f8fca980
MD5 495c05951615dd8df839cd56fa9c6bb0
SHA1 d3dba09545bcdc435b5f8c7d450d23bc1ac99a7a
SHA512 ff9b3de275fa30268a588ba865efd7cc21ab3225409bc34386d77fdbf098d084296971099243ea3e223f344e2528734a436623505d7f042b8d3a83349f9c56ad
SSDEEP 96:ntkp4o1B/12wpvWMoiVmdeHuwuaNUWQyV+VD7AiEwb:ntkeo/gGWMXFLNrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b3066f4f60386e13bed8329a9d559b873c315a22f9109cb817495f92e3f66923
MD5 f177360e24298cba0376b1ded185f0c6
SHA1 c47b324d38c85458798573ebc92a38c6c5d50b86
SHA512 1f04b2ccdb4bb35fe755df20c69086bbbf1dedff3a00d1b82cd3ff4c24c9a02601d1961c8c0e76642b816da3d7d34abe7fe05993469f337e6cc6b9e3a5c4a09b
SSDEEP 96:ntkS4o1BX12wpvWMoiVmdeHuwuaNUWQyV+VDCAiEwb:ntkjo/oGWMXFLNrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 056b1f075f844e400074890563bb1bf3b36c568ddac66907031e59728fb96e88
MD5 120a7b9c2a50233b2424b780ef3a5049
SHA1 a5957f20739542d39debc87e3006107e8ab5eb57
SHA512 7562f9403d863e6af262e700f693e043021a2e5d8b048a1167d1348d9a237fb501f58f9748af921ddfdab6fc7f306573b89dacc9957332d7098ed9db4d90f0dc
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57b7f6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b7f6.TMP
Size 203B
SHA256 bb30c7bc8bb69bf0946ad45ecdf467dbcf27e66150d9386da152c539ebd01e0b
MD5 1c59b83177e136bc9e56e549a83d426a
SHA1 cdf471f1ed7477607bf8bf8081d7942779ad702f
SHA512 d7ff7d6a8cd303ec166e9459b116f4124d4d862b7ecd1b585ac03b0033a421b8d5b226dbdf19f6f26818017315c539eb12e252f616423bd936573e5593e8a912
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 870ae45595c15addbc7fc94b62c7b121b6a5fcce2cf98a94a139a24ead352b76
MD5 da2011f3e85acd061f88074f0daebf2a
SHA1 637588a0310742c2ab34fbf5c44633ba6a863dc5
SHA512 c922311fbb6c93a15f4bdd1a2e9d9ba9b2ead87d55b8f3bd54c2d6065fe31d95cfab358b5cd891464f6061e07069f08bd371b1c56a9f9c7801c7dba2bcb05f8d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupc7Ve2RU/Izi+OblfBhDaaO:A9iIxuERzA83h09RZxYc7RHi/XDafEBO
MD5 SHA1 SHA512 SSDEEP

Submit Download