Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-05-2024 03:21

General

  • Target

    2d169ce0304a9b10451412fd2b1a281d_JaffaCakes118.html

  • Size

    91KB

  • MD5

    2d169ce0304a9b10451412fd2b1a281d

  • SHA1

    a4483699c269bd65ac325bd7d46b8975e498464c

  • SHA256

    7b3c921b955954292310e6fa0240f09117a2ae1ec337014798164a630f03c2f4

  • SHA512

    473c1fddd3601a92144ac12ed2e9c02889080fc60d3b5a16cf6ef2162db38112f9fdbcef7965ec592b205140b03f2d0585aebd09546a36365d16931b2aa17d03

  • SSDEEP

    1536:Cwgr8VkeO3xYLYRmOfy264f3q/86lMhZaS6cgRrR6duC:meO3xrmcy26gqnlMh0L6duC

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2d169ce0304a9b10451412fd2b1a281d_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ffaa37e46f8,0x7ffaa37e4708,0x7ffaa37e4718
      2⤵
        PID:4016
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
        2⤵
          PID:1080
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2612
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
          2⤵
            PID:1956
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
            2⤵
              PID:3504
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
              2⤵
                PID:2796
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
                2⤵
                  PID:1100
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
                  2⤵
                    PID:1488
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
                    2⤵
                      PID:4232
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4844
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
                      2⤵
                        PID:3392
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
                        2⤵
                          PID:1012
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
                          2⤵
                            PID:4608
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
                            2⤵
                              PID:1156
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
                              2⤵
                                PID:3232
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
                                2⤵
                                  PID:4684
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
                                  2⤵
                                    PID:3368
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
                                    2⤵
                                      PID:4440
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1256 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2244
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
                                      2⤵
                                        PID:528
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9460791347139604975,18189034577767597979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3064 /prefetch:1
                                        2⤵
                                          PID:2792
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:2560
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:440

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            a8e767fd33edd97d306efb6905f93252

                                            SHA1

                                            a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

                                            SHA256

                                            c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

                                            SHA512

                                            07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            439b5e04ca18c7fb02cf406e6eb24167

                                            SHA1

                                            e0c5bb6216903934726e3570b7d63295b9d28987

                                            SHA256

                                            247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

                                            SHA512

                                            d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            71KB

                                            MD5

                                            da52e38c98b0f2047abeb07609608ab5

                                            SHA1

                                            da1210caff36df73e49a0c271ff7d573c2d20d02

                                            SHA256

                                            726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                            SHA512

                                            35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            61KB

                                            MD5

                                            468446a7240461af44b59ebb2047c231

                                            SHA1

                                            47b7c525dc91bece99df0c414960b9490b986ba8

                                            SHA256

                                            ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                            SHA512

                                            ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            44KB

                                            MD5

                                            f394054b76e7da0ba02692794fe3eb5f

                                            SHA1

                                            51b09f267bf9c7cb34a855e12f88369dd442b9d3

                                            SHA256

                                            16a59526c76eaec7249fb66639f7d7f9b4ab69896043b9c8630e369a4772b129

                                            SHA512

                                            03d20c7acb1d1feff265dde8680ff250659072069afeb028d82a7123d4064e2224f9b187d212e0b692a662f05c3eddf6568093a8ba1aa96f397e787994414db9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            20KB

                                            MD5

                                            9be780bc06907ecbdf0320d88e6da1d7

                                            SHA1

                                            5af34c97da84ba9319b4b8d6e63352eb9299bead

                                            SHA256

                                            bf111ba484d1fe1d7ebd0f2c1e3e61a844008abb17383c81610efa5f6ceccc3a

                                            SHA512

                                            ffa99bc96551ce59af822011cea136142aba10ea600760012ecc3bc5391dbdd3269e365770f4650e9de12fae39cad2a6f11d2e70a8c3c73ef17cdd93b2fb1822

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            30KB

                                            MD5

                                            5893c273be8995ec111153e71bcd9db7

                                            SHA1

                                            ff0550bf9d959d0cb0bbd7ebf7200a674ae987d0

                                            SHA256

                                            a32b6ae3a86a4da3751e73a149471c984b0cbe1921c3d2c816c16e3b75587879

                                            SHA512

                                            aee191c36ca0e7f071d66b72bd5e39a00863f32fbe8290ec77f067e7a1bc05d94ddf1a7d98a93addc2c6022f6a033e46d8fa3e8b8ea90a8e8b6f352ef36913b0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                            Filesize

                                            103KB

                                            MD5

                                            a5673a0f120dd8c5330b7bcbdd65c487

                                            SHA1

                                            df78a0cf34cefdca04116273c0a22c85710706fc

                                            SHA256

                                            9a5129bc1e485c954fc5d977a2f849e9b0a8aa5bdb1231458b830fbf5acbbb6d

                                            SHA512

                                            62a1393cf1f4398eb916d54765d2214e4e9d87f03c92b8f0bf4127d91e2e42fa9e0827b7c41951d4427536ae56499ec54f430d6a9429d798feb560510bd0d607

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            29KB

                                            MD5

                                            c047e8b9c5984ce1fc2bffc38a3d04c9

                                            SHA1

                                            70902b95b31e06e322aaa080e639b2380d61aae3

                                            SHA256

                                            e418cbfb18693cbaa3efeafa0025a7c942763f736458666207556e7111fb748c

                                            SHA512

                                            065ba80777beef9d1673fd930c858240681b5ee067163c836fa2881d180ce71defe345552e1421e89c7a90f6867335488b592fbf3b88387f5ea1ff113adc83c1

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                            Filesize

                                            61KB

                                            MD5

                                            cd6709137404a742ec9c7db02d563922

                                            SHA1

                                            1aed862919f946d8934c9a2a621d036cbd95885e

                                            SHA256

                                            12edb77ee8e29c2286fd334937f1fd8c25d47bdfff879e77ec2db1dd46d3d91e

                                            SHA512

                                            89e7b190a9a06ab74231ac1e9908209b629730792f05540a58928feb02a15f32a1430c9def7ca8cdfe72082e99329d6f4235e2c68d5ee24420fad1f9f5cd87b9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                            Filesize

                                            47KB

                                            MD5

                                            8644f7abc41abbfaf3e3a4de0c9da1b5

                                            SHA1

                                            967f83387b6f472ebb5b1dd829ba116cfb08d231

                                            SHA256

                                            589598d5ecab9099ae12d8ab06d915e3834a18407ae2a986b0133b142ad749ae

                                            SHA512

                                            f88bd78f20df118858c8958bb327f4604ba8441518b7c2653dfec12a6c24384aa87ae29bef4b0fd5f70f289e24e2944183c6629b0724fa19700eb86eb7e48be6

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                            Filesize

                                            20KB

                                            MD5

                                            87e8230a9ca3f0c5ccfa56f70276e2f2

                                            SHA1

                                            eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                            SHA256

                                            e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                            SHA512

                                            37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                            Filesize

                                            18KB

                                            MD5

                                            e4bedefe2836b39d626053935cf2f803

                                            SHA1

                                            105fc75ff4d76c2ae06e422f6304dc9b1552389d

                                            SHA256

                                            758015e3cb56989df5cfcf912d2c3861a62e623d386ef12d4bacf15891a4eb81

                                            SHA512

                                            041aa8392fd5bc2922301312c4cd315b9af15bcb5502ac8467cf13e9d4e76e726f0822b50392d3fcdfcd0f37a119cc8afbe26e75130c36ddadb102d1595a0cb1

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                            Filesize

                                            58KB

                                            MD5

                                            384d0a4c41a936479cd1c7d7552b3813

                                            SHA1

                                            7ff093c47dec8cfcad537167a99a713ff9dbd33c

                                            SHA256

                                            e410c3777a79100621c3bc784f81261567f2788c6c0b0b25960800b4d0ed9d60

                                            SHA512

                                            23657c3024cac6965b6c47e4d26e8951e3df85617c82e181809dd8188d2c09ffe67881945a1bd222dd422e1db136a3ea9d7c88696e7a428e3523f5490b987d2e

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                            Filesize

                                            40KB

                                            MD5

                                            5c6915af5fc1a2f3ade5d21d864d650a

                                            SHA1

                                            7459091b99d32474141b9a324bed7c2831353d5b

                                            SHA256

                                            1c0c57ffa35d64b3606683725c13ae67e58456253e99030e444d6bbd46d6d698

                                            SHA512

                                            ca59484c79701a9e1c7c57d1c6047eb79c746354c081f6a19bcdac9479626255e09b9b357d9d1cac830c386ea32443cf677b2964bed8b2a55e3670bcf7ddb16a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            288B

                                            MD5

                                            203e0aba9500c6dcbeeb3edf09862f1b

                                            SHA1

                                            18c8e2b54792696ee876ca141fbe93caed5db2ee

                                            SHA256

                                            23fc6b652465271db47c690ddff6855035f8cbf6ec46849d6f6a7fc39a3dee0f

                                            SHA512

                                            7ccae58aa327890438ef9fdd0f460b77ec59d836771ae78f224dbac613ac0ca05eee8f7312d8267c528ffc559c0b65c9414578d281bba77dcc13522812d4f8c7

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            192B

                                            MD5

                                            b8e03aa335fcff9a70f5aabecc06ada7

                                            SHA1

                                            bd213549f4d993eb6f9de6c8d28a25f1551ed385

                                            SHA256

                                            e6330213fec5b093722da7b6cad0cfbfa2929435ae51a04414f9e6db586b27ea

                                            SHA512

                                            e498bd676f2c74380f24d588ec0d4fd9a5cdd9d19627d1aa1bfdd54750ab57dd847ba38bbd9d49bdf8f5dd71ac13248d52744f22e6934bc71fd2bde190137411

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            288B

                                            MD5

                                            adc0f9402b1871a46044dbc379982193

                                            SHA1

                                            035ef3b5440c3714cd80d15d55e8491692fb7acd

                                            SHA256

                                            967b781f7338e163ef1c857c751faf6074ec667fc010c80b43d46658b6d63022

                                            SHA512

                                            5faed20dcc2650015169740e711bdd5fadea316bb8d95ab8ead0493a959d1ac5db1cc2f44e3849f1e32f9f0aad06ad2c6458d6dbeb2cbbd4fc140ae4d4fa3cdb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            2KB

                                            MD5

                                            dc5ca710c28f021bbed81a309300a8d8

                                            SHA1

                                            cbabdddcaffa2010ae584afa57247b1b6baa073e

                                            SHA256

                                            1be59bb722caa5331f941440c8a1e736b8b90d11667853ed5ce8d62a1f87294e

                                            SHA512

                                            d423602cc006ebea12e8b06be22f6f0d6cc1bf3d1b96b38391de3b4b17273e27f5b8b0d323a90b50ac42c069ee535365de213347a08ba7fa6aee1d201dfc1eb3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            2d23979eab350efddae39f24512d001f

                                            SHA1

                                            f2bb78181d3aa69a005f0c45a9e292ec86324cf5

                                            SHA256

                                            79773be70f074b948bf81aa3e6d9f2b4ac0259c68e7372161e33ca1586bd546e

                                            SHA512

                                            d843cd86a4ba31a11d07869a2d939bd92dbb870c55a22b8ab4656c2df11e250edff2d5f8a504a0093b54e110a1d8f23b6b60d5540b347fd8b883c42528d5f3c6

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            39f2a3d0dd70f4477da4a50be9f8dfd7

                                            SHA1

                                            85707028301cbd81f551e955c21e96dc6244a8ce

                                            SHA256

                                            ef38d910f8e6548faf3db0672d84e50b11973aed52a5a33b9b99f7cdfc4e22dc

                                            SHA512

                                            8f0bf6808d141c51a2def230cb015f8d1e841ea7516c192c00ff119af0c84c679d5e6663bbeaeb9d587b8f9cdf51d2657cc92dc1418383c76181009302dbb85a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            9d0e46dbea30680a864b0ba29141bb47

                                            SHA1

                                            7125ce0e2a817b9214d157db8c45b8ffec887e88

                                            SHA256

                                            68f9ba53f0801bf8b0087d44cf5dea1c915c47654ec3b0efa82aa6e7801dfe54

                                            SHA512

                                            c312d3b6a75b9029befb7e167a973a04ce5e94f377af3f66287e9bd3baf8844164ac26031e4491c4edd6820dd029ccaa21dc26e9c74f8fd713447bc5ad273bd6

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            8f7d8e306b0f9cb1fcfb52063c8e5b50

                                            SHA1

                                            f886fa284c86b007f6808716be5b3281aa247992

                                            SHA256

                                            932979f47066bc33fd0ea70466513e0bbc92f5f225dbfda56ae38f7104849065

                                            SHA512

                                            714cf2c6b30c13c09f98e79043c0730a14ffef99fe26a275d327c568191f142478bdf624be3c46a652f6951a90c05311b582249181cdc14c0c402d4379ac6d71

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            e3367e67c1f7f60b815b161d34be0dea

                                            SHA1

                                            47dc5062738aa62d2127856eb5eb78e50e3cb1d3

                                            SHA256

                                            41433730621d40a26a04f1869ea9458b7fa180e3edfee49c2ab96d69ced8ba84

                                            SHA512

                                            4276f4efd7b14f9d51d27ef4225b3f3386128dbcc713af1b18e10a2093b7c43cfbff28c08206887115052a7bfcacb1cc5a857588085e1838920a3685281b2947

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            bf6cf48885a52cd1dc2d5a3353149080

                                            SHA1

                                            0de610db3bc661f07392b3f8b0c53c938b79cc1d

                                            SHA256

                                            d07f46f6df985a33a28321f5404eb0f2e0a47f4e05cb494d949600e0aed5fba9

                                            SHA512

                                            58625d7ad7c668bc5e49a49a3f638ad741c1320f5eadbec2049f25fc71792a1ee9042d9f123b187e1ed6daa66b8f0de8dd4368197377d65f75e7cf110661c923

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            88bf9f18b1243985749e962d8042a5a5

                                            SHA1

                                            247acd1870a217f4dca90a308feec0596a0a0d9a

                                            SHA256

                                            9850b1d04e604933d776e73a906aa60b477a9d31dfe47a90105511490d4e33e0

                                            SHA512

                                            ccfcc6a9857be315a73f395b8ddf3b4d997f7272aa194d708c9c18bf53d4f829721f4b6af8b76666eaf5026d710354dd5c35ba3d9e7f06de8e4ad13886378e1a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            1d9b95e31db04f5afa3d2bf5beca717b

                                            SHA1

                                            ae7cb349d7c499690746082dddf95aaa8cd121f5

                                            SHA256

                                            281491d67f7cb3a607a4b827c269d78e30d081b1840d8110d258c89294f46546

                                            SHA512

                                            b9c3a408e6a30450a57197fcff563c834fd224463502742b21ed5961d358b607d1b19511b689513f70d9e4de2c3403066bfdd2e4189e9bd733ee6a0ea83ff0e8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            ddc2248cb5c4d8e3d9d555cd9aca62bc

                                            SHA1

                                            78e2c2a4b4d9e161d22d9f2d0844f6e754b137d0

                                            SHA256

                                            d83eff26781bd1bc28ffd61fbd1d0b7640c8c407e3e10c53333553e4fcae2ead

                                            SHA512

                                            93cb0e0ecb45331ed767fa820786282d5d27f9cf103d0c32351fe5fb0af1408d5cc496a3f4fc6d771dc2e37e30b4de236d345d7b0c92b9b7180a9ca678d2a560

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58483f.TMP

                                            Filesize

                                            1KB

                                            MD5

                                            0cd3ea51bc2dd92128d03ee9e36652ba

                                            SHA1

                                            5e145b50597a6b80aa179364e4672e8f71ae7e93

                                            SHA256

                                            541f30266344e9c12603745f9e2c087f8ef735ef3210b318b9f7016ed64f5463

                                            SHA512

                                            ca12d73cf5641ded2d3e83530c439e8bf7acf4d1e8115466e95393a762d3998c39bda01dd8c31be53cf6d867b698f8705fa142193eed404788788bc13ffda529

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            11KB

                                            MD5

                                            c1cd6827676becd264b916f67cc7780e

                                            SHA1

                                            6f11f2c0c28515fad37ec23f1d9d11ee4256975b

                                            SHA256

                                            aa3a7a5e77cda6cc33c62f6ae3519b08f6895925f186b74bbe807d76eb0efcae

                                            SHA512

                                            f8a09c6260240434eeaf652c6cccc27fc3c0b5d47003c3e5070fdf6fe686905a22ff5906786fc2123a58db75abec2f189735c2473034f8cb4eafaae1d5fa7277

                                          • \??\pipe\LOCAL\crashpad_2504_RWIBPJTWQSGEBPNI

                                            MD5

                                            d41d8cd98f00b204e9800998ecf8427e

                                            SHA1

                                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                                            SHA256

                                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                            SHA512

                                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e