Analysis

  • max time kernel
    263s
  • max time network
    264s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/05/2024, 22:04

General

  • Target

    https://github.com/FOXICZECK/Synapse-Free-X

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/FOXICZECK/Synapse-Free-X
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffd9d0c46f8,0x7ffd9d0c4708,0x7ffd9d0c4718
      2⤵
        PID:2148
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
        2⤵
          PID:3708
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3344
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
          2⤵
            PID:3352
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
            2⤵
              PID:1132
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
              2⤵
                PID:1796
              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5316 /prefetch:8
                2⤵
                  PID:4608
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5316 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:3848
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
                  2⤵
                    PID:2252
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
                    2⤵
                      PID:4448
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
                      2⤵
                        PID:1480
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
                        2⤵
                          PID:2928
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
                          2⤵
                            PID:4572
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2576 /prefetch:1
                            2⤵
                              PID:4952
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4820 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:3752
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
                              2⤵
                                PID:1900
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
                                2⤵
                                  PID:4896
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
                                  2⤵
                                    PID:1052
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2268 /prefetch:8
                                    2⤵
                                      PID:2384
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
                                      2⤵
                                        PID:2076
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,3722147205531692216,11996674088239637604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
                                        2⤵
                                          PID:1140
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:3528
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:2240

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            1ac52e2503cc26baee4322f02f5b8d9c

                                            SHA1

                                            38e0cee911f5f2a24888a64780ffdf6fa72207c8

                                            SHA256

                                            f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

                                            SHA512

                                            7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            b2a1398f937474c51a48b347387ee36a

                                            SHA1

                                            922a8567f09e68a04233e84e5919043034635949

                                            SHA256

                                            2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

                                            SHA512

                                            4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40eddfd0-2743-4a9d-9fe0-8707d131bd82.tmp

                                            Filesize

                                            1KB

                                            MD5

                                            c1bb0a7bce8a4f402d478a2e40990372

                                            SHA1

                                            ead79aa75d32ed229b877381e707cbc4f7c468ad

                                            SHA256

                                            fbf7e38242e752cb659afd8716aba1e48c4adf650e72c9ea326a572db15502c9

                                            SHA512

                                            dd5a485e54394b93623eb6aa10631512700ec2c00534ddb1b96df47ca4cdd396a7e7edda86cde942c69dca9bc715b90f58ef44c45f782f941e1f23433fdbf2e4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ff857b7-2e4c-42a7-a735-8863e1d4dc9e.tmp

                                            Filesize

                                            6KB

                                            MD5

                                            a87bf70dd0679af6cce4e39fdd0398fe

                                            SHA1

                                            0553a06ca56695c9a0a76215cdefb59cd98430d9

                                            SHA256

                                            18d79aff6fd0d3c4098dd2ce26cee6ade409ca44629482370b71fb4c90ab5ea0

                                            SHA512

                                            b036137a5a23a37acedc4399841ff294dc595c302ecf56417ce9f529baaac67974ab86163cdb5730e084ca2378a22029b9979e7b6f1a7e58a0c56abb926b33bb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            48KB

                                            MD5

                                            0f2b395cc63db1bd8a5d093e558cbdd1

                                            SHA1

                                            833d0657cb836d456c251473ed16dfb7d25e6ebe

                                            SHA256

                                            f3797115dd01a366cce0fbd7e6148b79559767164d2aa584b042d10f1ffd926d

                                            SHA512

                                            e8a4ada76efb453c77a38d25d2bbd3a7f03df27b85e26ba231791d65d286fe654c024b64f9d6869824db5d1cf59e4d4eb662f5a55c326e5e249144ae1a66b798

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            44KB

                                            MD5

                                            d732347f6815841f0e06ed29eb4feb85

                                            SHA1

                                            fb48ed60e0118c282068d2ac773eff8cfd563f44

                                            SHA256

                                            b808d430644948438edb4d2db5b36d82ba3b095c2cf9829278ac22f3c5c217f6

                                            SHA512

                                            4ec3ede25fe4ba2e1c6bbc0ec620dc06387dcbd28fccd15e91c144e4afe49ee06e28246943c3ac2d4a81c9b9243f6aa7bb60792306fbb8d3905d738b3ee17b22

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            20KB

                                            MD5

                                            357b4145c3264fe69f8c412e823adeed

                                            SHA1

                                            5fcaf1043bb72dbc719ce56a173b3da59db7ebc9

                                            SHA256

                                            4bf695f9d9be4d4e815594d2b7443042ec14e4dcbaa6d35031cc0420b8009410

                                            SHA512

                                            974c8b0220e6490324f5eda5590d4a895d7d67b87414ca1124dd01ac92e3bec033623bec67b4441fd6b69bb9034d4ee8210ee0f92fdf0a8efb6546e62ef8f7fa

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            25KB

                                            MD5

                                            6fc61a5ec487c61871fdf93b525cb6b7

                                            SHA1

                                            207aa49b68aa64b41aaad80e79bb911815113801

                                            SHA256

                                            b56579a6b89026425b1b4e115d9236981b164c57f0671a7cc185bc081f843101

                                            SHA512

                                            dbf447f27ef7254a0bc4beb5da73c229a7cb7a99042bf1ca833590b51c050e9730064e2b6d64e0ac67b837f9c08cb6638087d438ff9e1769868201c001e83f66

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            20KB

                                            MD5

                                            0f3de113dc536643a187f641efae47f4

                                            SHA1

                                            729e48891d13fb7581697f5fee8175f60519615e

                                            SHA256

                                            9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8

                                            SHA512

                                            8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            65KB

                                            MD5

                                            98dacda0e5963458ebc5e1eaf24fc8bf

                                            SHA1

                                            7e806b57843268dd74d704db9170dd2b46603afa

                                            SHA256

                                            a114ae14eb4aef4aed440fe33d9451670164f0090c4717db5c49f64c6e99272b

                                            SHA512

                                            5dac472b86d19a61a63444a94b3c081d9282a5e7851e357aa0d627ec7a75ea4999b8610473a2928b73c93643797d46f0a84edf36f4903839768fc6363002af9d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                            Filesize

                                            21KB

                                            MD5

                                            c355eafacb45a36e6f6d6dbd52b55b95

                                            SHA1

                                            2016f7f6ab53f96e21204b4dee24a9b8156f5283

                                            SHA256

                                            2dbe980b7a73c9d1cc2779423ae78b1e4521732934c87a29ef5141deb8e436f7

                                            SHA512

                                            0cc5cfcad9659b6d2bdf9f28563905acf3cce6d2a9c3ca7b07d15a2700aeabaa162ec0cf9cc04ee86983470924d5502b4d4ea0e74e00eb31e523f463ba025dee

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                            Filesize

                                            59KB

                                            MD5

                                            4bc7fdb1eed64d29f27a427feea007b5

                                            SHA1

                                            62b5f0e1731484517796e3d512c5529d0af2666b

                                            SHA256

                                            05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6

                                            SHA512

                                            9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                            Filesize

                                            21KB

                                            MD5

                                            b0e31ea842de3ba057c3995e64bc60ec

                                            SHA1

                                            a7f2b2eabda48324df35f69b72a4a2e4fe374bc1

                                            SHA256

                                            b7dd086912ba39cb4e7fab3290ddbade1d4ec77309a96f0f9738c9826406bc84

                                            SHA512

                                            8629ad7c4464586ff3b5141e1e5c58701d11f744b2a36852269fe0195109d6d6d3ee2d47c636939a6a2b20664ac0697a8e422eaaa3b5f512d472890e94a598e4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                            Filesize

                                            150KB

                                            MD5

                                            0b1dfab8142eadfeffb0a3efd0067e64

                                            SHA1

                                            219f95edd8b49ec2ba7aa5f8984a273cdaf50e6c

                                            SHA256

                                            8e2ee8d51cfcc41a6a3bfa07361573142d949903c29f75de5b4d68f81a1ae954

                                            SHA512

                                            6d1104fd4cfe086a55a0dd3104c44c4dba9b7f01e2d620804cf62c3753a74c56b5eae4c1dc87c74664e44f58a966ba10600de74fb5557b3c6c438e52cc4decdb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                            Filesize

                                            24KB

                                            MD5

                                            bf609568f7b9c6ef10904704079ecac8

                                            SHA1

                                            11d39d86d3450033d41bf5a48f011bbd7f5b41df

                                            SHA256

                                            3ba119d63c43e5ba33b9c0fee5c720a55d222b0c8dccab36266a4edc1ae3df18

                                            SHA512

                                            09de7eef9f1aa0bed6ce0bfd23c6fdc74950cffa0f92f85c636501110cffe912e7319235373dc086a9535b0be7229c799f9c638675d5c96ab32f632ba96411bb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                            Filesize

                                            20KB

                                            MD5

                                            8e7b638bfec7451db22d5f6d54662360

                                            SHA1

                                            22c4f81a1216d4b1b48b5f66bbe6aeb7c7bee595

                                            SHA256

                                            9ca11ec635e88ea63b7ba633594f5323cfb61ee4499c42b90f3d9968accffc6e

                                            SHA512

                                            024db23141f04f898cb434c7624d23265c3c1dd702f15e40b793060f38cd4be3416bafdee02a72027e41dd2c5fba47ae8765a0e62c17665e8287eb782eed1373

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                            Filesize

                                            140KB

                                            MD5

                                            1a08a32ac16566a7fde9c98b9631e7f0

                                            SHA1

                                            0daca353815d696470440fbddbacfda9b4fd519f

                                            SHA256

                                            61b1eb10b7a50ead98f984a77aabdb314d577f86f84efa83a0f2dbecab1220ad

                                            SHA512

                                            a5b91af5acd16f623233ef453b88c911f795c151a11aa0463718e9a68cc03bb863bd7a910863098f1f84f6ebc39ae8e6340c5a77efbf18bc1bd3a06b36b08413

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            2KB

                                            MD5

                                            b35aef23ae8b6657713a7898c6111a13

                                            SHA1

                                            645aac2f7bf0eeb0a727a315cd1d4709f2e38037

                                            SHA256

                                            fa390c2bcc835a3b88392086c7d5d84000aa001fd24ce22e71deabfff5ffea5b

                                            SHA512

                                            4f59029dffbc5b5a1d990565f723806ca5f380a9120753ea2be2921253b030862e17c43368d372dbd879df7d5bab8b0329e85eff8885bb94642aedcf9ed2f642

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            2KB

                                            MD5

                                            8290407a314ea5777314a410eb94a20f

                                            SHA1

                                            03aabdbc7c13e05add249a6198a5e4fb6db6b7d4

                                            SHA256

                                            1f98f4caa7ef3bc65a1604c47633697e7784b17b4613948def03cc9e2f97d87c

                                            SHA512

                                            ee00ba263c77e3a0f2f188ad030af8feebc6e048691ec66e71b4ac612f2e6474448ce6c6b07a0c1400c4643d0fa625ef88e660c081c9f70b860ccb05bff8dda9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            2KB

                                            MD5

                                            a73eb4358efa3554d689b5f2a1f1f3bd

                                            SHA1

                                            83cff23068133d2e8374051280314044022f12b7

                                            SHA256

                                            b15ececc0b559e41145a1aaf6cd88ca4cacf0e8615351fa55575d286253a5c1a

                                            SHA512

                                            50a9d1ab0f6f2d35bae2e9943d97040b3c2867c9e222b6ec1282d833698e8f79c1685b5fc02a195653ea5bf93b4249df39f7ec84ebb046e7a7cfda9754ec5d99

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            2KB

                                            MD5

                                            2ecd9ce9f0902b4515b3bcec1638598f

                                            SHA1

                                            5d1b4a6f45bc9ca8b5d9a747c60ab1dc6a06bd68

                                            SHA256

                                            55a161a4024560230e9a886e4b80994a64295745116fa375ccdcc8ca412c657a

                                            SHA512

                                            715aba898cdff942e2b998490cc3ee6ba31ce036dd6a7dc68f5a8092707fafa72e98369128c690b8863e00fb225aef26d504dd057d852021c37f6592340c8eef

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            595B

                                            MD5

                                            b9780a9b8210b1c336121c07234193d0

                                            SHA1

                                            47b92b1a52b929435f34b9d71527ee0b254be58e

                                            SHA256

                                            479bff9435340c3dee85fa9f450091039430f5f69ddbe2099210638c2b436667

                                            SHA512

                                            accd7261aa2f81ecaf2c00a92620ef59af8610bc825f3798f7818ce4d53c698ace29389c3c7acbfbb5a626b35d31b023f6348fa0bbac8c014ab06ca1e2311ce5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            1KB

                                            MD5

                                            603232301ec077bbf1e106ed5f9f2891

                                            SHA1

                                            5222ab5193509e7a2ae08a6f73cff838e326ffa2

                                            SHA256

                                            a28710b0bb3020ebecee866430e47d7705af6c414a20c4430d2f0f942a92166f

                                            SHA512

                                            19e951074fb10c5ca4ddd507f1a613c97d041d4dc71e187b7cf5f5bf8c83141601e143ba6d240bf0606ae365f31ab5875dda34e39fca26dcf9ae9c2bf2c62af5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            3380bb30e28f503a1cb5c2301f7bcb9b

                                            SHA1

                                            2b1848faf83cd671b9fd9d0c541bd39f0df20acf

                                            SHA256

                                            4a37365a3adcc4ee76ba3eb7fe0550c119a25ce78ea13fa9319958f1bfb06032

                                            SHA512

                                            8eca4a7fa96f26e3b70cac7873fc42060bd9a70456cd0d2cd73b69fb05ec86a404f3c66a6123957d514df0c22478e3050feebb3241d25b688228c99e901c22b4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            517f61e013d999f1ab814621355a6df6

                                            SHA1

                                            251615cdae874ce1dfceb562f1c26b00bb84fa8d

                                            SHA256

                                            53df650325bb6e3ca3ef50125d2ad25ad2d24175309d849b65baa70ec49b4cfa

                                            SHA512

                                            02972d1b118204375b3aca210ed327494111f873444a3455c1545a59d3cfedad988affda2a89b06aca9573c283902f83d5ec1ceb671bac28a30b9ff30e8f16eb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            f7d017ff186a344672f691b4207a7b4b

                                            SHA1

                                            758927c19877aa8ae43d8c6a8bf3d7331f8bdd28

                                            SHA256

                                            10400f848cf59b02962e477107349ab22364c9f4c186f8d584a6b3099b7a8e2d

                                            SHA512

                                            9467fceb3b38346824484ba695db5a883fd25f559e75c4cbe561c405db8e786bbaf8f5bed74dbefce56a8d62762bc95b6ed08f613438e596e91880d33284835c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            dbdc97debeffe9ffba5fa7ec34d6491b

                                            SHA1

                                            4d8e30a2896d70ea12b1f01e68c365e350bfebdb

                                            SHA256

                                            3c8bd0f9d9eccad8eab893926787b11e37553b3c973813bd4a75146984c0b28c

                                            SHA512

                                            8e65a91e99502e87b41f1c11aff0c44204b408494dcafd33ed153391f4e7c553e5bbe6be3df6e7f0a51a6422c7cd56d277e465b518c36e0f160ceaa7b05041a3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            06253a57ed8a4ed7eec88d010b2fac45

                                            SHA1

                                            0b64e220babf986672be04e026e242c2332858ce

                                            SHA256

                                            d6f939aef56e8e4dadb6b64fb95138863fcf2a8f45d904ed9703d499ecb63bf7

                                            SHA512

                                            502839ed6f58ae266d068c2874078cac431366a547abcd2f317f1fddb53e346afa86a36e8532680804661ec48fe15dcbc30e2bc2aa25e056a62a7dfd4da2cc10

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            9c9f16f915d34b6a119bdbc04447455e

                                            SHA1

                                            720d26c0b8909f91be9cf067cb7561142f806057

                                            SHA256

                                            4b216973253535b256368e735c2575664492f902d20270ac3f0e0ce1263c9a09

                                            SHA512

                                            56cf5a55d036f3ebc9283b09bfee91f9dc2dfecdea648eb207d4c272ddbf2c95309f58b09c13f203a4096b394639f71cccc78015f9be98085bb670911fffa0b2

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            59a1c5b537bf41a2f99eceef5a04775f

                                            SHA1

                                            5f62dd95bbcbcf3992face5760e3c129b8197846

                                            SHA256

                                            74372376cd3ff842d0d3ad98507cf4ff1f75894d59ad28dd4f9b25e14c8ba008

                                            SHA512

                                            cf5b1ddaf9d3259d82f326f37de34ed15478b95d5823ff1689ad46d83b56c30a566cbb9ce271483108732e7ae1366b698212ee797a69adbf6bcba5dec6fb36e5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            6383eaede29a3a39349ff8c67d8e50ab

                                            SHA1

                                            9e3884b0b5fefaba084e13e56a6ec7ae8ef2444a

                                            SHA256

                                            097c475c935a7d95c3233b3c0f8f62a4523e7f3c14362f127538622d179f2890

                                            SHA512

                                            8374e065e45d25397418833aa23b58ae40ac6d6e8b6a380bfedbfe45dedb30494a5d5c7b3b16fbc59158a6f8b88267a9656564bd5b5232e8f1be580119a6ea47

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            b1c55fc19d5b88c7fa44d33c167e4672

                                            SHA1

                                            e460a4a88efaafa771448b1c8c0cf1fdba8076bb

                                            SHA256

                                            8debcfc105e8c404835a1e2b623e5b62b0c42f3ad1234aaae981ec693598dde6

                                            SHA512

                                            4507c234d0a5a5752d08a0ba64ce63f38eae4ee5fa69cff8db10b3af526f9e30254a49e6439f5fb07e896a7c779b1a3d4c4256cc6a823c76d4ad61ba1fe71a85

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            323c25ce05e21edcc45c188da1e12562

                                            SHA1

                                            9e45d7ecd7d5a72c8b610b902608d5b357efdc49

                                            SHA256

                                            57ad1744f6d7e675951aeef12c7691ab6a43e054c9687ff76c97832a1b8eb353

                                            SHA512

                                            a3ff73a6869b6e21712ad3eec8c4e3df2ae30c0e5e1658b70118c119b21c838863e7afe59b75d657040c12e33239b888cf7416599129a8cf834df392863d427f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            5f2a8a965cb7f9c22c40af7ab12b76b7

                                            SHA1

                                            7ef2627aa75d6c355f01884f16218b3174c41063

                                            SHA256

                                            e40a91bc86fecce1614c6cb788650430ac9ce759c530489e674f177893ff51da

                                            SHA512

                                            c8e34e79c84ff0221f79bc1ff70eb455b6a73aa28ffccbb143e653376ad1b2252fa147d850d398ce5541e7ea1f22a774d4b9a42c27afdc1ce563b69517cf1824

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            11d4f1cc3705819434f7efb9137abb62

                                            SHA1

                                            e0c8b96855f94e51117cdff0560f513f641ceeaf

                                            SHA256

                                            137443428e7f7354f9de385b1fc3692d25f82370705b3f835654683fd91d85bf

                                            SHA512

                                            6b3ca13ab201282bddf84abaa7bfb15d6ea5515a62864f9fd3c81f7fc5ab8a69ef279c1c24b8836bb1e26b78fb3c0083e653e51aa591c7c208d2efc9717a1357

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            de2d4b6282b4b89f7493f7bdbe5def0e

                                            SHA1

                                            b9fa6bbafee04fd544eeee2be6a08d4835f83920

                                            SHA256

                                            e362c705e34584d86fc23d61f7da9406cf3fa42361278598c06dad7066d5a558

                                            SHA512

                                            e8dcd1f97ea4b2336199466fa281afcfb4cf61fc91650570fe9e965a8431bd25bfeba1cd61815950c72ba7931a0196cd8323d54eec20bb8ce1cbf04c1b6579b3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            5ef0f1cbd8c1d3b78f1b1533f4e5e42d

                                            SHA1

                                            1dcee81f9c05b8b0980d5c6790339894e92d9b7f

                                            SHA256

                                            bdd9207bed2d103daddc750e9f27de150f2f942529f0e3bed3452449ace62f7f

                                            SHA512

                                            50ea1c9eb7d18014fe969aba3cd51982888732d2d490b53de1659de8b1bc645b303da429320110f9242870c1db0b76a33c859327cec006459e61db8707a4ce2f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            4112454968a3d7ef680ebf829c2830f0

                                            SHA1

                                            667353aac0d27a3135ac407ca12b88c355bacb3e

                                            SHA256

                                            4c4ee308a9ac3adc1ac0845732f6435da0a8a142671766b2e3081846ef5f3866

                                            SHA512

                                            a4e32445221d73fae6a5061ff827b1fae97f5b93d115dadb5444c4c7ae316a3e10012a72491954fcf1cdd56c881887b57f12a5e9bfe2bb181b8b21920c0fccf2

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            d450c2bd00765021301dd4b1571c7930

                                            SHA1

                                            e7ef0c383803108a2bf8ec524c84eb0fac0b53e9

                                            SHA256

                                            ebe469a96d2e7002f1cd208fe851c4a5e9c4b12ba8695afe8cae8a6a8baf79d6

                                            SHA512

                                            5071ecede4b31ab2f37726535806a22809607d92ec8be40c4e101459fea21ece1db0fc8c1685e5262f0003f6c3c9889599091515fb7416d75bd8f6fbe9d85456

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            77d66f30a886b6792db232f8b4287d22

                                            SHA1

                                            1edbdf35c73388738fc3f0e9372660456e2ee656

                                            SHA256

                                            2885fb7af0220b8f7393c18b763bfce67f007f09e148ea00ca5e4ba0bf3967d0

                                            SHA512

                                            e357fca706ebc4e20d18bad7b3a5f065b32390b61e843d8e9ee0657f8aafc3f93366376de241517e816e3457d79ec4d4bebc7a37bf8655d4b5b190e4b47b90d8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            6874a82a8183280cd872806e5a3e93ca

                                            SHA1

                                            385cc95d75f4ee6c7229c76f7343b8f32ac62629

                                            SHA256

                                            e42bfcbded45bf270e2f4f15041c3ef0f81c54476dec54e1dcba809d877c7bb4

                                            SHA512

                                            f5160ce72efd22c12ce7a6f0f6fbd0aa90c6bbc8d4a134bfac633517009f47c08c936ee6d9497c8460ea687725d2dd3cdee8c0c0ad1f6a28e570f82b2421f805

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            7ced57facd80ac2c8a78c423ced6191a

                                            SHA1

                                            74bf9fd783da44dc744d63f86162cd408c83217b

                                            SHA256

                                            3a953c859d54c41a3f9b36eb1df4b4ee834540c3ab07fb2cbf5d2322a34469e9

                                            SHA512

                                            076727b7b282f364a79cf04c3f0428bda231ae359c8a4d9db536b6f3c6b160999710511be5145714cd2ead7834a827aea9d3a047c5be3a8714a4087d91df90cb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            394397b435f5b6850e461f5e1566c4c9

                                            SHA1

                                            5642351af788bd92daa9731a9c52a31f0e82046c

                                            SHA256

                                            4f997802098bf479fc15ef58e4b4a818fa62938c56ad06c79203e2fbf5da76f4

                                            SHA512

                                            b9b240272ea47fb48b1cebc0462fbdd9e715c22e71be411d2a3ef5553c19a881f16acaf265c7a6f91c2fa67167eec54b12bd7eddfb39932eb7d4a8b411a2ca1d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            a2c27efed9b9d41e1f779187f75b8ea0

                                            SHA1

                                            f39989adc07fe479d34b3de84e9bd280f069d089

                                            SHA256

                                            a3760458cd9a7c7059695c49e87cc3744549929bb9664a000154909d8c86a4af

                                            SHA512

                                            fe07349728beee8c0dc6828b60dead665093bd7e77db64b6588aefd6eb111525b16db11abfddaa189b610930825e8fd671ce119fb69c6a52477234b5a93faf9f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            a44589e9277cc41a4638b96be305595d

                                            SHA1

                                            2ef118f00fe3e664a30d3f3dcf47c15b76746d43

                                            SHA256

                                            3122f7035137925aa02eac197b6a533fedc743784500bfcf21bd49ab1bb6cad6

                                            SHA512

                                            50dc6cf7afe87769713666084761e5132b57f4d14a0c228e30c300274143309590d4caccaac9ae16e9c5b3da81d77410f6400b17a9a98176523b2980cc3173e9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579b46.TMP

                                            Filesize

                                            538B

                                            MD5

                                            0b417f08fa5f157dabc6e127e463c05f

                                            SHA1

                                            0c507ad22b8632a1543cf30eae92fe5e32e7b522

                                            SHA256

                                            d735e23e3acaa15d1ca55243f0f5bda605322845ed435a2b1d88ba112d1c3b0d

                                            SHA512

                                            425d8d78985b1c1f7037e5843472691b88e485161903fb156d3cd26dbea2c63021391a99595561c1ce43d54ff4239feae4c03c1132eb1fbf21cdd8dc04e48cd4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            10KB

                                            MD5

                                            1bc77644dc4889d330405612fb845dd6

                                            SHA1

                                            e1b31b8eaca37062c4a49b0b92143cf23de3368e

                                            SHA256

                                            5f12cff3be7ab2b35acfe5deb70e287547ccc28513d2745861447eb4bcc584e5

                                            SHA512

                                            ce05fa1a0ea6e4e8ba5b8da8ced812266af3e214675261b1c848c2a21a9c09d65b436fa6565a4647b89f8feb2b765862c95e92103b1117d10ab0785caf2e33f9

                                          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                            Filesize

                                            2B

                                            MD5

                                            f3b25701fe362ec84616a93a45ce9998

                                            SHA1

                                            d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                            SHA256

                                            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                            SHA512

                                            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84