0918590e20470b25ea822edb7237e64e8f98c880c33d7bb99e73e2d127ff8526

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

65b0a68e5cb17e7529861bca503692a3_JaffaCakes118.html
Size

251KB
MD5

65b0a68e5cb17e7529861bca503692a3
SHA1

f51ba766d8116b9e0a72a8d1dfaf08f45e93732b
SHA256

0918590e20470b25ea822edb7237e64e8f98c880c33d7bb99e73e2d127ff8526
SHA512

6085282d1276612170cdc017d95fca7c62eed48eceb2428085bad23e7a3ab57af29db73591b30d4025cb64e1922dab9f5c26ca11ea10a711cd84d8e029b5caaa
SSDEEP

1536:TnBHv7ynvCTS6iU1jW6+DcDzPLHio2cZU312ZqxR222kDTUvASin9h0vAXKMtvo7:bBHTGCT3iU1j7ZS5TUvAtr0vAXKMtvo7

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
3124	msedge.exe
3124	msedge.exe
320	msedge.exe
320	msedge.exe
1724	identity_helper.exe
1724	identity_helper.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

Processes:

msedge.exe

pid process

320 msedge.exe
320 msedge.exe
320 msedge.exe
320 msedge.exe
320 msedge.exe
320 msedge.exe
320 msedge.exe
320 msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 320 wrote to memory of 1540	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 1540	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3052	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3124	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 3124	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe
PID 320 wrote to memory of 4516	320	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\65b0a68e5cb17e7529861bca503692a3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffb1a3646f8,0x7ffb1a364708,0x7ffb1a364718
2⤵
PID:1540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
2⤵
PID:3052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
2⤵
PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
2⤵
PID:456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
2⤵
PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
2⤵
PID:4776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
2⤵
PID:2856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3032 /prefetch:1
2⤵
PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
2⤵
PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
2⤵
PID:5052

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
2⤵
PID:2640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
2⤵
PID:3100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15515259078263913143,15700139959126870670,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5192 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4f7152bc5a1a715ef481e37d1c791959

SHA1
c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7

SHA256
704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc

SHA512
2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ea98e583ad99df195d29aa066204ab56

SHA1
f89398664af0179641aa0138b337097b617cb2db

SHA256
a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6

SHA512
e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
60b0bc2baacea0ffc15aceeada58a5a6

SHA1
0d57bbca3f6b9202eb2352bbcbf9fb430e825546

SHA256
569556d4b0b85693ca8ef794612c3fe2d737d8d3670bac22cf4413741f9c5d1c

SHA512
3af2ed772b9f0a7774a8a4144ecbd71a2577c513d3b6a41e3c2ac111a1900562960f76b302d08d442669af9ba98bb8397bd94fa4dd57b6bd2b2c995e0dd4a53b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
820B

MD5
f8797911abe202826eaff1d56ee1cf1e

SHA1
f13b09a41ba4f2075c9a0d1916eda859562a0262

SHA256
7511c68e8d49b90b6107b1f823e1369a73b9533957b17c968f2e79e06f41ee01

SHA512
3af1d2dc1aad4f054f84894f3fe7160c9f9a7d8829c36cb4de3e0d7f7006e91da53abd8fcfbaef7e1e38b9f27cc4ddc6ca080473a37214d43b294b0686d36518

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
07b0301d305c01d5b106e3e9522d65dc

SHA1
d6d6a9a3da446334a8ebe7175b885bd42ecd1580

SHA256
0d648f22634a098907391cd1c3133173d97dd0867bc75f6dee71b8df1df9d7ca

SHA512
3689bf2738641935dc80ad231a2b4b7a42f7aa2db778df34fdab9594f54312a620b7a8004db4397fd74b396df71c62de663f55a79791923d8caac6e4554e977c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
18b3e3c3edb245eb38432450a6b9e82a

SHA1
e9a989dd7ca3dd9dddfb55e73be2b0b0888cfa39

SHA256
9e6721302a60fa8acba46b2f2691543dd5e5cf7df1c952a7b1ba4f36a3e9bafe

SHA512
e446391b9bd65e9904e8e7f9eee1bcb671190d9d2e14473e791dc6f3f726a5b3af9021b5e841fea822e2cb8bf7d46e7a84070718d19fd37972dc0b06f9e8b033

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1882552ff5a0165843441a2c95122508

SHA1
34077b84c63a5f8a631e8853d89683ffea109c64

SHA256
aa682a8a4c5fc78dda45ba8b8ba4c316da393d42f93cf8cb68efbf42471fd107

SHA512
4ebc0a3bb6e1c32b386374101d674fd7203e0970559bee1265329736797a56d9be70876a9d860986fbe8a4acc3ee5963ad314716543803cc188746e46f9cef3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f9aaf742f9c5cff2bedaba4c13e60c83

SHA1
9d7402772b4481ee59cc974b9d278dd55817e664

SHA256
4d66d6dee259e5698e36d3bd49dd47604a948b75824b49a8c03def30c816c453

SHA512
c0c434c160f01503013330508e6e9d6909905ee6dbbf04344d463c42c94957ec864a461a6102fa28a48b5c5ba0623c9c789ea40381cc121eafe10de861100f32

Download Submit
\??\pipe\LOCAL\crashpad_320_KNRDSRCCUVFPVLYV

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit