4cafb6e7fa5680f4b26f3de4b4ded5e794af8db85847412b4fb9f955d8ac1933

Analysis

max time kernel
145s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 02:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69676977eb916a73085ee45c567580d7_JaffaCakes118.html
Size

1KB
MD5

69676977eb916a73085ee45c567580d7
SHA1

10d811b3fdbb8cd1eb7a98e3b9ec51adc48717a5
SHA256

4cafb6e7fa5680f4b26f3de4b4ded5e794af8db85847412b4fb9f955d8ac1933
SHA512

b31d9dcc3a0f6013270807aeb4cc78238bec0511868633dbf3e5a1c20d601ce8f24771ada7c8e36784ce79000184f4d0d8967c29773b1a87e0d505f1717e3fae

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
2860	msedge.exe
2860	msedge.exe
3136	msedge.exe
3136	msedge.exe
4836	identity_helper.exe
4836	identity_helper.exe
2436	msedge.exe
2436	msedge.exe
2436	msedge.exe
2436	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

Processes:

msedge.exe

pid process

3136 msedge.exe
3136 msedge.exe
3136 msedge.exe
3136 msedge.exe
3136 msedge.exe
3136 msedge.exe
3136 msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 3136 wrote to memory of 2724	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 2724	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 3832	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 2860	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 2860	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4216	3136	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\69676977eb916a73085ee45c567580d7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c0ef46f8,0x7ff8c0ef4708,0x7ff8c0ef4718
2⤵
PID:2724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
2⤵
PID:3832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8
2⤵
PID:4216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
2⤵
PID:1920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
2⤵
PID:4428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
2⤵
PID:1100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3624 /prefetch:1
2⤵
PID:1232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
2⤵
PID:908

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4760 /prefetch:8
2⤵
PID:2912

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4760 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4548 /prefetch:1
2⤵
PID:2880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
2⤵
PID:1908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,14525557821026712025,1305584896791413090,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2684 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4596

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
72B

MD5
c414e118c6719f585a81d1dbc5ca89df

SHA1
cb6fe146bc1f9416323136bef70f09074493182c

SHA256
8cb07bcf63f3b0916bbae237b3a03c1b837bb2bd27f3b35fc2a97b698abc60c6

SHA512
afe9ba3dedc4daaea52a56dfb4a0d9c37dc9f9f97e7f3bc002cbf13f4fc10a3eef0cab06e72ad32c33713346093bb68676c02b539a68d6130d8f6e258c36522e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
403B

MD5
1a0eb4bf7dc2d5a8ed7cf99d37c901dd

SHA1
3da9f6d4e7d8e68f65ccd9927a9d3afa1f171395

SHA256
46f424473786137a7885e85d234db994285eeba86f859746dff09c1f8ff50479

SHA512
e8bd0cb497e7d8475005ed068e01ddd08ebd4d45557edec4a7224754a60d9138ce8e5e59af184df279062d239bd4ec8cee48d65638384031cb63061367a28579

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
7e794987650d63826ed4cd98e7d45184

SHA1
ab26540df204ef0d38ff05151172b88f5864994e

SHA256
1995b676a748cdad6a5d2dc76e274b85fd5d003d59b0e843e511f96183fce9b9

SHA512
4882d371c47b24d0ba34d4cb8c8e5f262656d74cc842a60001b8cb66c5e7e3d21bef58bd4dbd7c6a5e0e3855639d95f386821321828f73b403d0f660d31d4440

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
de2f3fbf2c45883cee3fb5228463f083

SHA1
695ca7785d5e9525e13818d51448a71cb3be8175

SHA256
58981340063a035baa68a4a1e05c38c8d7202a34dc6dce7b10bfd3ae33e46d30

SHA512
58263e66c506a1b8954e73983dd44c677b9074809f7ead22b8cb62e5e4d2973e5adadea40addab8ae07ed1de6724f8e62b8b91464b6037c733df4ad907241324

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
d1b2e6f089cb800478d7e7d307ccb658

SHA1
6f6c372894dbd60b21c7fca571f3d685882e138a

SHA256
990925f854661b4c9fad95d70e8237b81c03debf53375c4f98cc3e2f5e15ad5c

SHA512
90a3d2248be6b7527241b705b3a15570a01e3e6d4b50dcb5396acba10dc2f356b48837aecaed6358a184f07e0dd4e0673c7e48472738200338fcc26319a54695

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
171509a7f3d5c4ad74086f422d6f20fd

SHA1
bb04fc5ff3746ebbe11531556a26f8ccefbb2298

SHA256
1dd63a4247f20e35aa6af8ef58b3cc8dd3eb66ac486b3008fb85c4f3d6ba8e3b

SHA512
7a4959e057bbffe970cd46cd1e065975f1933590af14cb84a37b9bb02df33acf1663e8f0862a8b43709c6ad8d0cfcf0adf23a5b94521deed6dcb6474ac0f38d9

Download Submit
\??\pipe\LOCAL\crashpad_3136_DAHJKAJONAGHYAHE
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit