Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-05-2024 15:31

General

  • Target

    2fcd72c614d604ee8b1eeb1cf8d9eae2_JaffaCakes118.html

  • Size

    87KB

  • MD5

    2fcd72c614d604ee8b1eeb1cf8d9eae2

  • SHA1

    7df9fa5f61e699fe02f770eada61637db91b4c8f

  • SHA256

    84f09ec0396aceb3f4128743291a8158f1a1fc64b16ec9d53b5eaeae2a74ce16

  • SHA512

    d03845cc653729a39f3bf86653b679452bd4330c889163751b98ffc47f8d53f0de6fc61935b000f2baaf09cf91711488de5425507fabf93f752e165f8c103c8c

  • SSDEEP

    1536:DslNcHH2ECZMhUFp8oK4qnlKaqaksPtd5UzpZcE9oyNrnV9:D82HWVZ+2p8oK4qnlKaqAxUVyE9XbV9

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2fcd72c614d604ee8b1eeb1cf8d9eae2_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2644
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffae94e46f8,0x7ffae94e4708,0x7ffae94e4718
      2⤵
        PID:4148
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
        2⤵
          PID:112
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:5012
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
          2⤵
            PID:4748
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
            2⤵
              PID:400
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
              2⤵
                PID:2664
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
                2⤵
                  PID:4680
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
                  2⤵
                    PID:1640
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
                    2⤵
                      PID:1032
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
                      2⤵
                        PID:1584
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
                        2⤵
                          PID:3164
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
                          2⤵
                            PID:2476
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1976 /prefetch:1
                            2⤵
                              PID:4820
                            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 /prefetch:8
                              2⤵
                                PID:4404
                              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 /prefetch:8
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:3544
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
                                2⤵
                                  PID:4248
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1
                                  2⤵
                                    PID:1720
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
                                    2⤵
                                      PID:2088
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
                                      2⤵
                                        PID:3540
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
                                        2⤵
                                          PID:856
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5200 /prefetch:2
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:736
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13149984705113298354,7735818376535435245,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4420 /prefetch:1
                                          2⤵
                                            PID:4524
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:3924
                                          • C:\Windows\System32\CompPkgSrv.exe
                                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                                            1⤵
                                              PID:3068

                                            Network

                                            MITRE ATT&CK Enterprise v15

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                              Filesize

                                              152B

                                              MD5

                                              a8e767fd33edd97d306efb6905f93252

                                              SHA1

                                              a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

                                              SHA256

                                              c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

                                              SHA512

                                              07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                              Filesize

                                              152B

                                              MD5

                                              439b5e04ca18c7fb02cf406e6eb24167

                                              SHA1

                                              e0c5bb6216903934726e3570b7d63295b9d28987

                                              SHA256

                                              247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

                                              SHA512

                                              d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\782b5a49-119b-4599-9834-523707ab7ade.tmp

                                              Filesize

                                              369B

                                              MD5

                                              e4df8c0bd1f4c412a55b9bab3dcfb0a7

                                              SHA1

                                              67466446eebf47d75f0f2d032aeb2666a04ce7ec

                                              SHA256

                                              db9cc279630184a3b892069594a817efcfcee152ca5b1dee9ede50d881ae24d7

                                              SHA512

                                              3f866721f365bb655952a8d3d61d92c89218c4e25939725cdf57d7ce053ad59c9cfa271dddbf65dc1cdcca14815c5d8fdebed73042e2ee88f32d32d62e9280eb

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                              Filesize

                                              22KB

                                              MD5

                                              5e74c6d871232d6fe5d88711ece1408b

                                              SHA1

                                              1a5d3ac31e833df4c091f14c94a2ecd1c6294875

                                              SHA256

                                              bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

                                              SHA512

                                              9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                              Filesize

                                              20KB

                                              MD5

                                              84a9c61726b9311020831e771067ca4e

                                              SHA1

                                              2e804b67d90d9b087a83996506e6e0d754fbde59

                                              SHA256

                                              08b182362fa4b4fad12e929a8270443cf5fe990f02d3d00b0f9b0133147703e7

                                              SHA512

                                              3e32ca56224d2ca3dbd98ce5266c7dfa021382ae5b3138f19c56a3fd128f017cfc471d63764aff0346183ea213efa7cbe4a2ec991c4ab4c191b4c52103918d04

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                              Filesize

                                              66KB

                                              MD5

                                              98c4bf16f55aa4138effd446e4c73c19

                                              SHA1

                                              9a84f990cd42cc550e43034f8b0533940c47726d

                                              SHA256

                                              a23988894bd7faa26deebc5d01dde15a04997207ea4f666367fdc3468a1479b3

                                              SHA512

                                              2b5162f3e3ee631115ae8312ab39f8d0e7c0872e69c9f0a9d0197f1fb82995649b90afdefaa3eeb3b7eb1a2ae5c92b5602b3404226a67113d3a26ee23c670892

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                              Filesize

                                              264B

                                              MD5

                                              d5e0207f364869e0cb3da315ea8896e1

                                              SHA1

                                              f3bea2b7ce3b18bd938c11494e2c75a92ee62c23

                                              SHA256

                                              a5dd63d387f58c7b0932e40ada03c4dc4cbf07ce9f6ce18ab932c0f710ab2549

                                              SHA512

                                              8bf49d06e02a7125441f5b3c49a3d687b222903eb56a04a07454f3f1947aa865aae53e23fd92eafa3df64280bdaea53001d4ef7330df1d4acffc002c60fcb5ac

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                              Filesize

                                              168B

                                              MD5

                                              17543af4e5c560f349921a69ff9286f5

                                              SHA1

                                              926581f495e713ac324c2aa88d96f556e7b4c9c4

                                              SHA256

                                              3fd24eb87700fb877d40e547794ea72ce0d42611a37373a4e7335a7cf89fbdf5

                                              SHA512

                                              db101f0c963e3022e659835058b6d495a2248f899e3cdb06b5648588199408437e0a284387b786676a0dff0c8baa58823ef16b1cd945463be3d345e9a832d7d9

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                              Filesize

                                              288B

                                              MD5

                                              b0b12197379cc759107160cc33cd114d

                                              SHA1

                                              624e07f1c13b867dd8892c7c701f91e542ba8f9f

                                              SHA256

                                              3fdeb499c8b2f555272fd47620d5e1bef20c4e46dd63e3e680e0edcfcfaa86da

                                              SHA512

                                              76b3ef3131eb424298ec253e9022d7167f2f09400a121fdb6db70825268d21d3684c270ba68d3bd866f46cdc336af01338bcb3b7cddd61263ec4b4e0ed9c671d

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              2KB

                                              MD5

                                              1a88f84956d46e246b7980cc39f080da

                                              SHA1

                                              6d1a3eddd0d9298d460e1bb88a85e81b0de3c104

                                              SHA256

                                              080f884b67a26462a8f9b37e12bdc527fa0566c28ab7c3dc3bde045e31f4f71c

                                              SHA512

                                              232b8ddafd6e1d2c99ce2892fa36301934972741f80992c807c10ce0a23e4f91898a0c3fc8c97a85f22624215979b9b077c4cca8998ed8f77d29b5429bc35c4d

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              2KB

                                              MD5

                                              b4eda5ecb9b90cbc40bd7d5bfb00a1bc

                                              SHA1

                                              c57f686b5dc621848d2a2086c73ffd8ad9ff9a42

                                              SHA256

                                              225f7674f5b45e88b61b2b079515fabf84aec514733213024ff92a55e28df31a

                                              SHA512

                                              23338de662c1c7bf70aac5e70be5731db2a94c4921c00ae54184ac95cfbcd52d7f5fce7292782e2612ade7453b773cf8942fc2a71bb3c3a6d59892fa8b937d1e

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              7KB

                                              MD5

                                              1e7b30e406ead517795211bf2ce638ee

                                              SHA1

                                              f64586719d2c6fd3231da94172413a95cafb23a8

                                              SHA256

                                              9b236d9062bb15e9aa7716618b7df1d47a2b0568f5e6b0627da3cf9858798550

                                              SHA512

                                              dbd681beac5536eba219805eeb3f76328da08efe20bbd47660272ad9f6553f5e516b2d5bcae98eb45a7fafecd834cb069aa52d7fb1af7989f3659b094adbe431

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              6KB

                                              MD5

                                              86cac5abe4b605bbd49f915b4055ea63

                                              SHA1

                                              b37a340bd00c5ae04cda68184bf60bd73c38ef8b

                                              SHA256

                                              e3ea21570d83584ff73a8751f8c8f8ebd0feffc32b7d0985b342237cc847aa52

                                              SHA512

                                              3787e821598b4f64d73f43a5501fb867c4739c3f00879483529d4f5a9af18ff38d542a02814fa14d88e90b8fb190e0eff80850d2a4d50dcccb29ff01f44b86e2

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              7KB

                                              MD5

                                              dba404a7213b42ec79087be5d15c356a

                                              SHA1

                                              a0431c6b60e72067258e9b255ce7ef939dbe2b8d

                                              SHA256

                                              5e1bffbf0d632acc8fbacab4524d3d39a736604a3178e5396121b5bc39ed32bd

                                              SHA512

                                              58701b7a3249cdd6dbb293c4959a9c34d903d911c69463fefb7e86a29094f0e80432e6e324ebe0673c25ee308f622e52819a2e76d5ca04f42bbfb2567fa9aa70

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              7KB

                                              MD5

                                              42693822bbf39dca6d9c8fbd78d5e888

                                              SHA1

                                              4943e01974f1b9b559d993a33f431ad5690e4287

                                              SHA256

                                              7650fff07e22257ba6a29bbb45f7f24aff89851bd4aa3820902e1651064ce5e8

                                              SHA512

                                              8c0cab1e6cfe05d3942fc7611715c26ae9488f316bdcd38bdddadd2bc7a411eddf67e5e95310cac803512083f05e2073e86a4f0365da384bc8f11ece753808c5

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                              Filesize

                                              371B

                                              MD5

                                              5d27a31a8d1903210b963e9724825879

                                              SHA1

                                              93a5812a76427fee0324f5aa41221ea819ae84b4

                                              SHA256

                                              2b4ebb4edf52a080765018762576f5780403c1ce47d1bb836aa29e8503bd9bbf

                                              SHA512

                                              ac038d0a6a876770f4014b5297234ccc88399322125ba1cf0fa79dc7042ede0dd1a831909f6593f5221bffdb3655ba3d580408eafb9386a7f7c0f097f6d3c60c

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5831c9.TMP

                                              Filesize

                                              203B

                                              MD5

                                              a5386c074ceb3e838c0b0f1e9738de23

                                              SHA1

                                              212e51c23b2e745a9aa3004956bfa6b61923c98e

                                              SHA256

                                              3c8685f96fb2cd723181c86e744e2030fb3e544c887129921c97d05be85c2658

                                              SHA512

                                              bf9da6381a729fa3c01928b122b9b21f87c4c04a45a1e4cf6ca4305c7cdc015a8f37401b4a659bc2ccfdc8e6e5d09de9da7f8e4a5270e8c2edc67fa398f38aa7

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                              Filesize

                                              16B

                                              MD5

                                              6752a1d65b201c13b62ea44016eb221f

                                              SHA1

                                              58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                              SHA256

                                              0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                              SHA512

                                              9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                              Filesize

                                              11KB

                                              MD5

                                              271de02b52fea73fa3aba48baea0a224

                                              SHA1

                                              dc9929d47d51c72677b953240efb634831929d90

                                              SHA256

                                              101fe57850db66720e7533da2f2d2b5bf010e677a3f1bf62da32026927d01280

                                              SHA512

                                              cb7e8b9e075cabc04ab4afdada93ad12ccd591ba9f8822fa331dd7d1ee57f409eb50e8065c00d459ab174ca4fa4f65f79a31111d59a852b1e43726629420c71d

                                            • \??\pipe\LOCAL\crashpad_2644_APUHJHGCIHUTVSIW

                                              MD5

                                              d41d8cd98f00b204e9800998ecf8427e

                                              SHA1

                                              da39a3ee5e6b4b0d3255bfef95601890afd80709

                                              SHA256

                                              e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                              SHA512

                                              cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e