9d7195c0715dc290ca911869365ba878b20ee873e90ebb47d720f6ff46024332

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/09/2024, 17:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f2c233b648dfba8d2f9045c7e9139f77_JaffaCakes118.html
Size 9KB
Sample240923-vxd7zavanp
SHA256 9d7195c0715dc290ca911869365ba878b20ee873e90ebb47d720f6ff46024332
MD5 f2c233b648dfba8d2f9045c7e9139f77
SHA1 8971ccc3bc343600dde804ff4c279b9aec64589d
SHA512 cb6f909d868a557389e503b943e4ea543bc20c6cc6e7c95c8b5cad5a5a01f6004568b22bd5bf7cf8d0647f6669463af5d952b71dce67ac93e1913307b408cb32
SSDEEP 192:eFPNoFe4/fYVZOR4e2YQAl7clUbT1lOCqT7aH0peTL8TBIhPq:KtGf7R4htA5ceb23l82ug
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
1480	msedge.exe
1480	msedge.exe
404	identity_helper.exe
404	identity_helper.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1480 wrote to memory of 3448	1480	msedge.exe	82
PID 1480 wrote to memory of 3448	1480	msedge.exe	82
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 3544	1480	msedge.exe	83
PID 1480 wrote to memory of 4528	1480	msedge.exe	84
PID 1480 wrote to memory of 4528	1480	msedge.exe	84
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85
PID 1480 wrote to memory of 4012	1480	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f2c233b648dfba8d2f9045c7e9139f77_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbd21b46f8,0x7ffbd21b4708,0x7ffbd21b4718
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,11738787520109377328,3841433684313603402,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124
MD5 e4f80e7950cbd3bb11257d2000cb885e
SHA1 10ac643904d539042d8f7aa4a312b13ec2106035
SHA512 2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa
MD5 2dc1a9f2f3f8c3cfe51bb29b078166c5
SHA1 eaf3c3dad3c8dc6f18dc3e055b415da78b704402
SHA512 682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 189B
SHA256 045646bc1a87f1ce57c87ba8a6ed5332e36f71e667ac712be1df2fef80385f8f
MD5 efd079652ad21c50d69ad30ccf61a40d
SHA1 000bc74057bb6ab42d2a160349e1597edb211bc2
SHA512 35f643af8bb12bb445e3e6ce7577376dc69010ddf8d7e76752d703cb50f091bdeb9947b9718baa6e9e286d69df19a794522e446f29d58dc26dfea571045f51ab
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b4d8147fbd74584ed13204059eeeb3fa002a2b829f746932bb0efd7e36fb1272
MD5 d37c7df54e544c411298ebc1ccf780d2
SHA1 979ee611d853543522c1b80cfbf6f8f233093d90
SHA512 45d80a045761aa1803152be655a61f5c1d04cc4ed1bf20cf34fcc93d6f9fb5d9fc1c3a7caa1b58d19e3cdcaaaf67cc27563e7fcd2a753af50bfa780208587815
SSDEEP 96:nlk/h41vUcTtwpvWMoiVmdeHTbZWMUWQyV+VDCziEwb:nlk/uRUSGWMX/Hro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 e52769d3e56eac901b66e60377e1449c19c253e089a9e1655ed058d6f9f7a848
MD5 18120aec923fbd102def557575e074a3
SHA1 2dd7aefaf3508c1d9f161254367b56afc47744a1
SHA512 d1565dd21a1078aa0c62b1a69d1004af86ad41ceff24844c88fe261d282d4c8f495e8c22afa98fade3a9529bd6b43acee043335aeac9cdc4870a0305d71f9e24
SSDEEP 96:nlk/M641vUETtwpvWMoiVmdeHTbZWMUWQyV+VD7AiEwb:nlk/kRUaGWMX/Hrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 547dc2e03b29002c2c65d41b64dbfb6afdd1c523d4accf0d218744c5cde3d60e
MD5 c3a2f86969692a764b0ec38d905214d9
SHA1 5cd126473f2c452ad05a206d339a00a3406f490a
SHA512 0d37b6d64562dd6c1fac91b22fc2577775c8729bbde8829999368023cd8a907ed55a9e2f98661ef002665fa0893147d422c452614c71c0e4e5d466d9c8e97dfc
SSDEEP 96:nlk/Mt41vUcTtwpvWMoiVmdeHTbZWMUWQyV+VDCAiEwb:nlk/VRUSGWMX/HrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 6e073cf29c14867ee4fedf01c977a5316073cdab4cf6e675897129f742fa1bba
MD5 709db933ba6bf70fbf9ed817df683ad7
SHA1 5573319e757c1f48293dbb240e5cb13414ec0c61
SHA512 38d9b250737231507bd6ef441585b103b2a028fed6c6166032edf6c41ab57b69a117862fac4eff2bb4bc6f53741f3013cf959f6f659fcb58bd37006bda8f2140
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe584ca4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584ca4.TMP
Size 203B
SHA256 36c84ded93c83cdc1aa2bc09c1dca0e4620097643a4546d19d6c7043c88005ab
MD5 fce6c305608f5a767af087e514151ff2
SHA1 90dc471c24dc53d602e4fde6d9f3f7d3e965a110
SHA512 6cf6c23228e71367c46ba4741a84ced71f45613b62cf909eb0eb0c05de874a3eb1987186b1e16bbc31cf01f6d3729dc482cdde42aecd664eabf0929300261dd9
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 7391eccff1012546e0e5c47ed236f84b160d18c97a14a5366b64e2888e3c6ad4
MD5 412388a51ab19a3289d0af1fcee1c87a
SHA1 32be0113555071f2bb4483eea3a18cfe8bd0f0a0
SHA512 4f4d347b9e9f3e588040da1abc4b3b3015cec16f6e4ed6a04cb65682838a9e8f3a70e7fc5c56818c0bd7d42b59ed9a15104596bdc2d246783f5d5171c82ef8ae
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupcCe2RU2kjK6OO72MmO/vy:A9iIxuERzA83h09RZxYc8+K6QMZ/K
MD5 SHA1 SHA512 SSDEEP

Submit Download