76995688f53acbf621170cc6e8cc688417ea52c5980daed7ac97a76aa82d2b23

Analysis

max time kernel
145s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3b1d3667709a134cbd1a01bbebc6ed41_JaffaCakes118.html
Size 9KB
Sample240512-vbprkseh6w
SHA256 76995688f53acbf621170cc6e8cc688417ea52c5980daed7ac97a76aa82d2b23
MD5 3b1d3667709a134cbd1a01bbebc6ed41
SHA1 ade781f0536a6438bf21d7dc02b8c02cc777b6e9
SHA512 272456981126b5786a7d178fd052238732cb7cffb421509b993d5a3cac23862499ee9395c8fdd1a32e5b123a3ecda0ce9492335f1b74dc5445a4c7f91b3966cc
SSDEEP 192:eFPNoFe4/fYVZOR4evYQAl7clUbT1lOCPT7aH0peTL8TBIhPq:KtGf7R4ItA5ceb2Ol82ug
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
364	msedge.exe
364	msedge.exe
372	msedge.exe
372	msedge.exe
2000	identity_helper.exe
2000	identity_helper.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe
372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 372 wrote to memory of 2664	372	msedge.exe	82
PID 372 wrote to memory of 2664	372	msedge.exe	82
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 4940	372	msedge.exe	84
PID 372 wrote to memory of 364	372	msedge.exe	85
PID 372 wrote to memory of 364	372	msedge.exe	85
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86
PID 372 wrote to memory of 4168	372	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3b1d3667709a134cbd1a01bbebc6ed41_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff850fe46f8,0x7ff850fe4708,0x7ff850fe4718
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2196 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3836 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,5357575036528538977,6987837891293786892,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4812 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4504

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 189B
SHA256 045646bc1a87f1ce57c87ba8a6ed5332e36f71e667ac712be1df2fef80385f8f
MD5 efd079652ad21c50d69ad30ccf61a40d
SHA1 000bc74057bb6ab42d2a160349e1597edb211bc2
SHA512 35f643af8bb12bb445e3e6ce7577376dc69010ddf8d7e76752d703cb50f091bdeb9947b9718baa6e9e286d69df19a794522e446f29d58dc26dfea571045f51ab
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f8cc7620fb58dcfad78fb1771ef29e74651ee073ee40954d8e74b7ab2114e696
MD5 81f9bd2cab285e2c704e078f04ddebc1
SHA1 f475a5749eef8ce7f217dfce9468f7dd2fa274f1
SHA512 279e0f560901697948b5873ffb245c1d7eff4580d6521dc1435fba05c1e6cf80e395503462e91749a0f59fdc7b49835f797fd2d0d9d4f33562a0b75eb88a6529
SSDEEP 96:nDk3xm/pnmqJ1XgjuwpvWMoiVmdeHvSSWbAUWQyV+VDCAiEwb:nDkcwalgjuGWMXgcrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a17b4f237b46422afb2616a1c87d8409c02438e68721c96e4b78532c72c56fe6
MD5 9598e202af0d364b81cf4590290bdb12
SHA1 ef3120a4f9340d4e24ca15e3bb6922016b9421ed
SHA512 63a215bffbe06f26b88d9ba507784828df230086a9f3f946878095a927a76bddb7bee4a07b7caa53c8bd582a139551e259fd632dbcb4a75178986184847c16a0
SSDEEP 96:nDk3xm/pQYmqJ1XgjuwpvWMoiVmdeHvSSWbAUWQyV+VDCziEwb:nDkcCalgjuGWMXgcro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 387c535ee956ff4ec8e7eb8febe0b6416b6ea846c14f5215eb4b4e411249a68c
MD5 fe345e3261af7d69fe7d98b723ded679
SHA1 4612eba02f432274355da996d57412448c432c9b
SHA512 452812ef28d23b60ab26dec148ec2e2b9254108e3533b5bfcd8b44c0e4786646c130a00868c271265069f73ae54af55a59642002f045a4c45980aad88fe04245
SSDEEP 96:nDk3xm/psmqJ1XwjuwpvWMoiVmdeHvSSWbAUWQyV+VD7AiEwb:nDkcxalwjuGWMXgcrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 3965455c20c5bb8aa17b1a54dca570bb2692b63d05914eb9206638c381b118b1
MD5 b32c28909f1524f1ee425ddebb372ad7
SHA1 ef647f670261904f17be7d2674815b4ad2c7131a
SHA512 b9428add6b525df29832f4c3983c545d1f0859d0fbd6e9e1c5039f012a6ecf49864b819b9efbc843fe4a0552a874f0c55aeb3d545f9b3b00883f9c17a3958846
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57c841.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c841.TMP
Size 203B
SHA256 ea743c1bcdf6cf0d5f729b6afd145a50f1ab5103172cf5c4c34212a8d064362f
MD5 b942f3fee46ca7acd44595bce8ddc422
SHA1 9cfd817c833e0211a2c3190168a862df607fc723
SHA512 a7963f24a1a7273857dd90ea417c64405b2f7afc9a065242212e3a941fd89df2097583fd8f8862cc93bfd79b83ad2b1fbca1b49253c4b0926b320118b6fc881a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d624977cb0bc637446525c9929a1002b1743da1397565d31ed2d605b43f91f00
MD5 5936be32b40139815a77d524687f9a44
SHA1 1d5f52dfefc80c1c5c29930b8484af8f6592a36b
SHA512 8466bcfc3390c1fc12a08a3f14e0b07adbf9e446818c26e507958756c288fac8179749b871a4f198543b596cb070c80a3610f5beea10f868042944ae3febef77
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupQBye2RUykRumk+OblfBhDX:A9iIxuERzA83h09RZxY8Mf7mk/XDafEH
MD5 SHA1 SHA512 SSDEEP

Submit Download