Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-06-2024 04:07

General

  • Target

    8951a683d505698ac6b714dafa0e24ca_JaffaCakes118.html

  • Size

    41KB

  • MD5

    8951a683d505698ac6b714dafa0e24ca

  • SHA1

    c83ddbc30dad7edebfcabe3a5c2ad9fdceaa3614

  • SHA256

    9b25b7ecc173c1b0cecf24096793ef40bd46bf20446e572d4ef0f109c53fa3e3

  • SHA512

    9e195a9df1468d8c2b5b13748c056a27eb5e60d1a5ca40dbc9797ed678e17235148863d6d62f4e4b4e89614921139de7d81b2e7a1559db9a5870460479725bc4

  • SSDEEP

    768:Eq08fQO81KJ8HOHDYq5udDDgWyof0Wnxium78wWTbgsGEEWEixzJ8pYpW8qL5Wjb:J08b8QeOHDYq5udDDVyof0Wnxium78wU

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8951a683d505698ac6b714dafa0e24ca_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4472
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8dd7f46f8,0x7ff8dd7f4708,0x7ff8dd7f4718
      2⤵
        PID:3984
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2040 /prefetch:2
        2⤵
          PID:220
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:64
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2936 /prefetch:8
          2⤵
            PID:1436
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
            2⤵
              PID:3468
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:4280
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
                2⤵
                  PID:4348
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
                  2⤵
                    PID:1452
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5376 /prefetch:8
                    2⤵
                      PID:5104
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5376 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4292
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
                      2⤵
                        PID:4232
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
                        2⤵
                          PID:3708
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
                          2⤵
                            PID:5264
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
                            2⤵
                              PID:5272
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
                              2⤵
                                PID:3844
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
                                2⤵
                                  PID:4564
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
                                  2⤵
                                    PID:5144
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:1
                                    2⤵
                                      PID:5152
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4872 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2760
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3640 /prefetch:1
                                      2⤵
                                        PID:828
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,3870657877656248297,16876236644454915407,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
                                        2⤵
                                          PID:1848
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:1940
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:2020

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            f61fa5143fe872d1d8f1e9f8dc6544f9

                                            SHA1

                                            df44bab94d7388fb38c63085ec4db80cfc5eb009

                                            SHA256

                                            284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

                                            SHA512

                                            971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            87f7abeb82600e1e640b843ad50fe0a1

                                            SHA1

                                            045bbada3f23fc59941bf7d0210fb160cb78ae87

                                            SHA256

                                            b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

                                            SHA512

                                            ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            71KB

                                            MD5

                                            da52e38c98b0f2047abeb07609608ab5

                                            SHA1

                                            da1210caff36df73e49a0c271ff7d573c2d20d02

                                            SHA256

                                            726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                            SHA512

                                            35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            61KB

                                            MD5

                                            468446a7240461af44b59ebb2047c231

                                            SHA1

                                            47b7c525dc91bece99df0c414960b9490b986ba8

                                            SHA256

                                            ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                            SHA512

                                            ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            35KB

                                            MD5

                                            6199d66820d319b4c775ede9fc7b6ee1

                                            SHA1

                                            4fee1e4da9484d70b249e1baba854ef299545d31

                                            SHA256

                                            e2cad833dc8c2683c919b79df8b99ef320a786bc2c99331f9f717f4b68d444ce

                                            SHA512

                                            2b76d355d5db8f2cad15faf40ee05276ddafbe3954a3f2c3fda0416b340920f059df3334e92f95c9e733a17cb402ea50d746bc95ccb7e39f3504b376740c927b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            21KB

                                            MD5

                                            0c67d7fd4177785cb58aec1815b289b3

                                            SHA1

                                            7b79f663c85616f6a2a07b5c86f35185e07db8a6

                                            SHA256

                                            c72385ea88a7ce39e2987878bc082099efc5b3629c1cc416b6ec6d082889af50

                                            SHA512

                                            cc6b22f9ba74a0272cb5104dcb9e426c7d4d96020f235456747d9606fe12eff226bd24c245acd4b8e77152aeab3c3aee2a5c824ab57fdfde5804a0f5d68e5164

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            76KB

                                            MD5

                                            e29a979ee3c5a90b6f9548aa3c875796

                                            SHA1

                                            644ffd740b86f180ed8ae385d39de0731ffb2a2f

                                            SHA256

                                            615fb7fdda631982cf0ff0c972e19762b36812d2940f6989742dba644fd8b372

                                            SHA512

                                            79b7b0a3b5a99b60d6907d32e4b2d1262711cf9196e383fe1b4eb27db8dfd14747a7e6aa43aadf705634b329140f4a9c3693004f3306ec7f6506f5d876f7ec05

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                            Filesize

                                            60KB

                                            MD5

                                            ce65db984b6d2dc17289f18cc6c42346

                                            SHA1

                                            7c7d941074449161cf0340206d9b642a2f5d725d

                                            SHA256

                                            60db4f0a78a5bffea7c91b96a4c97d64905a690271ef88bdafee5cdbd6988e03

                                            SHA512

                                            3a76d2488a3597c4d3b213ee625d9bb24ad94b4ab7480c5c6b060de75c016a9dd245e8897928b85f2b1e956a57d777864212a98178daf14501d6a6233f1d1b41

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                            Filesize

                                            20KB

                                            MD5

                                            cdc9f19a52e87121bdff5faad76470dc

                                            SHA1

                                            61786f32243b3384fb8bd1f460070465d32ad556

                                            SHA256

                                            fb5b531776f398b46eda13ed3ccddeece8fc54653f27b93fec45290a31cd840f

                                            SHA512

                                            d80755833280d63ee7c894510ba25d1ef4ec55757798126bb0a2880b9d0f90489c0d5f5765d90673ee7d6670931be05d38c42929b938aab3d6f643e5cfa0fa3c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            83KB

                                            MD5

                                            2b903ded218bd17767dda5cfc9e2d279

                                            SHA1

                                            180954a4db4948b9349f42ebb62c893253d2cfa5

                                            SHA256

                                            1c2b496cac7a5ef2f6f0d2189a585991f3ceda00e48332743c2d2bd96e2f48b9

                                            SHA512

                                            a68b1f46ca1d1f64f79783edc412593df30997d5802eeaab34d0e01206dc7d83a3de9a5502f68f7b39ab5e1461ac4fcf84d975a799a1780d0111b0e1cde6cfe2

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                            Filesize

                                            71KB

                                            MD5

                                            60af307f3e6b052d80fbc24d47c619aa

                                            SHA1

                                            be6f4631cc253d48121abf15a21a34a7090bc6a8

                                            SHA256

                                            078dd050cc58b42fb179039fd1de2d336eb97679a6a83d376875a30c46967d44

                                            SHA512

                                            eed0c6d85ba0549398b98775b9a27b98f7660b939e7cf8886c8ee0dce5866acac1b47c3863738a6a71122b77facbfd2a970abd45eb9a473b2b5fd55565b3c788

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                            Filesize

                                            92KB

                                            MD5

                                            50f5861f5b5e94a1536cea35e20dee5d

                                            SHA1

                                            ce23bc6d5f5625786defcabd504a3d70cd8d3b79

                                            SHA256

                                            dd6320359b20fcb45b40ad82a0b051a7a58022973748b3688e0a1891702065dd

                                            SHA512

                                            b6224564914e4627bdf3afa927303e206373873fc6b0c899721a1685ab4223fa0f1e8a857fe05b07a4178c404dd39ea999ea0a9be006e5e73993c2413759db08

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                            Filesize

                                            55KB

                                            MD5

                                            3edd3ec77c16893c538deadaeca7c5f4

                                            SHA1

                                            3e9f1e516f0041d71b36fc3b23b310f4e92bf703

                                            SHA256

                                            cf65670b49826403201f36e9c825fbf4b175e8d502ee83c12c73089969efed5b

                                            SHA512

                                            8ecd954563db0811087417312b1771681a4fed5f3efa600eb6d78bd793fec798c8b927c690359e696993cba0da0edbbadf568f30442e1986defef686be4f7b2f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                            Filesize

                                            20KB

                                            MD5

                                            87e8230a9ca3f0c5ccfa56f70276e2f2

                                            SHA1

                                            eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                            SHA256

                                            e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                            SHA512

                                            37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                            Filesize

                                            18KB

                                            MD5

                                            e4bedefe2836b39d626053935cf2f803

                                            SHA1

                                            105fc75ff4d76c2ae06e422f6304dc9b1552389d

                                            SHA256

                                            758015e3cb56989df5cfcf912d2c3861a62e623d386ef12d4bacf15891a4eb81

                                            SHA512

                                            041aa8392fd5bc2922301312c4cd315b9af15bcb5502ac8467cf13e9d4e76e726f0822b50392d3fcdfcd0f37a119cc8afbe26e75130c36ddadb102d1595a0cb1

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                            Filesize

                                            58KB

                                            MD5

                                            5d1c0cbef23b330a715cb5c0752c61a1

                                            SHA1

                                            f96f8f06d082b41e0cc598cb2aff66b3395a9349

                                            SHA256

                                            1774d27ef0f3e0225060bef1e1f886aa219cb6c3fb382cfe3f5f317ac75421ae

                                            SHA512

                                            dc68fd22ad2d5764e55678fd568f68685b38c3c0f3d8a08cb3e33a7ae42bbd135b186062029132a64176e40fc6c5d59b5d1889abecf2374159210d47c269bcb7

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                            Filesize

                                            113KB

                                            MD5

                                            0a0e9795625eccf6bfde71b899b1d1d2

                                            SHA1

                                            beaf88d9eb5205b3f100dcd6e879fa15243d881a

                                            SHA256

                                            fb6c7392a72919f79a970373cca6a4e79ad700b895dc812f4e3badb759c7096c

                                            SHA512

                                            9356a96337315d7f022e001f0793a94167d9555442e8ff6b8bb5c3357071f116c8c4c7a691a2068208899c96bdbd5242bade86246f462f5b6f2576548ef5c457

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

                                            Filesize

                                            94KB

                                            MD5

                                            dc5ba5044fccc0297be7b262ce669a7c

                                            SHA1

                                            f137ff98ae379e35b0702967d3b6866a0a40e3be

                                            SHA256

                                            cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3

                                            SHA512

                                            bab5eb2c4acc0cb1c65e8dedbd6b422480fc20076d6c1b12879cbf1e5b352969e1553a0e878401c2f2b9507b64b02e8abd4c6d1ab7e3d2c06272a491ee712e8a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

                                            Filesize

                                            89KB

                                            MD5

                                            8896e082b3fa1738e2e2f558a7fc1fa4

                                            SHA1

                                            310a231a18550385297e140282428a06feb675a6

                                            SHA256

                                            699713f69dbd2387b7c3b57204bcdc3d86d3ac350718a7ad65a5293e0d2c53eb

                                            SHA512

                                            13fc8fe5488f5dbe957a55fe7452ee503fb5219c3f2b3eed3277054d86eda0d48275164f16818dde3676a76ed55311c49216cf88bb99859a55117c64f7000709

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

                                            Filesize

                                            30KB

                                            MD5

                                            8e23aac6b3739ad320a4135b21a8e5bd

                                            SHA1

                                            15856a09010af7d3cfb80542cfd304ef0219b624

                                            SHA256

                                            0b8bbc3accbfae7ce08858ffdb58b2efe4f7d4c7e99593b694272661406c8f47

                                            SHA512

                                            500482ea27153e1a9bfc7ce593dbff1a5610c69b8b0d9841e587f83cc9d188a1671165c6e6747f8748a569d41a5ba9493530a418ff81e257e629cc2946e075dc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

                                            Filesize

                                            16KB

                                            MD5

                                            4c2f6e3023629b7425ddf8e84d530236

                                            SHA1

                                            752c4c5461a5641c90a014e723f0a1b6cc099521

                                            SHA256

                                            59428409607de0383585a7866b05148c4ddf8072889453693c2ce2f48917fbed

                                            SHA512

                                            f8ac0e2157b70f3eb6fdfb8ee9271a2733e7a1aa8fabd120b0cced23cc780cdc5bf699e7c434ecb233312cdfacf53aff0363a9b1e07f9a2cd830722d480f8679

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

                                            Filesize

                                            16KB

                                            MD5

                                            dd02358b3b952b98e70a97d686941d92

                                            SHA1

                                            b2d3afc13c9e84722587d4b1d601cd58d2527727

                                            SHA256

                                            67dc736683ea783a85dffc1189d3a422060966421e3bb6346ee2cf8d3f29c533

                                            SHA512

                                            615e260ec73e07338729f0e74a5630b896d7decce1703b9197c2987c83b39133d23ba85bf5455748164a162c1c479eb218fc70501524682d072f848ed20e2e32

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

                                            Filesize

                                            16KB

                                            MD5

                                            ce5dc126623e1f5c9683d2035aa88333

                                            SHA1

                                            fd22f733676f7715f925cab8eef6303e85115a2a

                                            SHA256

                                            3c3da48d2f1c09c0cbb47d45df53990971b1cad3954d9124a770ae08a9640e2a

                                            SHA512

                                            99fa9418e536ec75f59da37c5e3fbff75114ca9e2f8a96c23c2da2b4d18bc582943c434c7b70de82f60b8531e3cba0a99ec0e3701475ff418c2e186104fee95b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

                                            Filesize

                                            81KB

                                            MD5

                                            92766a32ec361fcf8649896084601a83

                                            SHA1

                                            276db26c08712ef2a45c68ab3bc77efa4309db3d

                                            SHA256

                                            c7beee9d47a8b15170870ac9cc12a561cb38613ebd71cda842196f350aa877d9

                                            SHA512

                                            ffb63af22c72a1684eea489f1041796c46582071e44b713dd118ad2c49dd09637955a26cba59d9f2f4732a51f1fa29d0f409df1c10b6f5fc74cc39c81b245bf5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

                                            Filesize

                                            47KB

                                            MD5

                                            015c126a3520c9a8f6a27979d0266e96

                                            SHA1

                                            2acf956561d44434a6d84204670cf849d3215d5f

                                            SHA256

                                            3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

                                            SHA512

                                            02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

                                            Filesize

                                            32KB

                                            MD5

                                            057478083c1d55ea0c2182b24f6dd72f

                                            SHA1

                                            caf557cd276a76992084efc4c8857b66791a6b7f

                                            SHA256

                                            bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

                                            SHA512

                                            98ff4416db333e5a5a8f8f299c393dd1a50f574a2c1c601a0724a8ea7fb652f6ec0ba2267390327185ebea55f5c5049ab486d88b4c5fc1585a6a975238507a15

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

                                            Filesize

                                            47KB

                                            MD5

                                            bfe7ad4aa54cff8909b2d7632073cc30

                                            SHA1

                                            7c2e625bea4d449ca78cde09ab59dc6c9cb4726f

                                            SHA256

                                            47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098

                                            SHA512

                                            b083c9e0766f281a39f582404f08b3d3314c7757ac151c4cb00bd3ceceb4fa06b12d08d881a2c6bf80a066ecad22fece7cff41269d2dbd2bfe38d873922a31ff

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

                                            Filesize

                                            139KB

                                            MD5

                                            5bd40035063847fc47a0428e28f62f88

                                            SHA1

                                            c55698a6008271a8505709a2e32c8a04abf4a723

                                            SHA256

                                            9e96fff25fc107a89215889f4e16df527f4e9a6ab20a00380147873bb8d27514

                                            SHA512

                                            196eefc6012b3ca5015f3fffb5e02b6918d4061ceb39735b7f573b33d991384d22f983f6497ba7692161aea862c21a455462feb0d5740ba8dcbec56069b39c47

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

                                            Filesize

                                            68KB

                                            MD5

                                            02931ba8afd3a4d56aed141580f1e431

                                            SHA1

                                            be4a11912059d3bb61c0091ffada4f221638a1a7

                                            SHA256

                                            5e979c6268534fa61187857cf4a6ec35920ff679462efb1df676bebda6c6c57c

                                            SHA512

                                            83e2b5378a24f293ec8de5d5ddac5abf5bca3d104685749a917ddb05821df03fa67ee8996d503a80b8f08a2441650e01f307f14e6cf659c60d4236f2859d5356

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            360B

                                            MD5

                                            0e7453b89bc6184a1b988dc24a47fe7d

                                            SHA1

                                            c988bae8994da6956bc89c361b1b59d7310e6100

                                            SHA256

                                            8816a287fee2130748df5bd76f3622b7878702973cbd46bff783b0071add6866

                                            SHA512

                                            86b175d862ca922ab5713b12a6a0faaca1f40789d5f582618a208d17c29a3afaaadefbea4313a1de49fd88a8b072cf59e9330cb457eafdad039007b4125f3d23

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            456B

                                            MD5

                                            f89b3e2ca947c6f38e04cb713f6ffa04

                                            SHA1

                                            1ca47740e84412ceb3b5080ad0a61be14bfbb2de

                                            SHA256

                                            268ec83ba84e1683eb518a66107c69e51a6287c36a389d0d8b7d3ee131857e51

                                            SHA512

                                            c64cbd6d1fb616e8802d6bda1cfa1d7ea5955c6d502318d3569a24a9d4ebfa606f8bb6025a92ce2034e37789e122607106217cbf994b00a625c8183292625359

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            456B

                                            MD5

                                            0ee530fde9375013ebca153d3dca18a1

                                            SHA1

                                            59bde4ac2c4b2c03397638bd95c6e80cacc42cc9

                                            SHA256

                                            9c599de7352ef940246974c60080a62e4ba53bc0eb1e02973c0d76b32f8ccabb

                                            SHA512

                                            6718a62917cde0b65bec999dc5331089819c9fdd42d2d84aef4aca597fd1220ebb44948d1e7e323ff7b4639e2ae46a53eb90c7c9e11e39a6ff48ed740d2cf491

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            456B

                                            MD5

                                            79a2b484cde834212740ed096e2af04f

                                            SHA1

                                            3809a39b7d3ec39f902005714b02ea59a95845c0

                                            SHA256

                                            dfe2a3782b2315a3e9c23ca602de42910d5bae52e93304ad8edd766cdc304436

                                            SHA512

                                            ef84e18ac03659cca91048eb792fc8bf14c0b3948f9787a724eebf2475c6a4ebb03bb1863e5e25c107de309a37fd83f88c15f641b7b808c1dc45a72a79e584d9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            456B

                                            MD5

                                            419d1f4fad2c708dc34bae295d0041b8

                                            SHA1

                                            f23317fc8dc38d7da58e7c559c50be10d1004a31

                                            SHA256

                                            f9dfa72b7a81148c3b51e9f0fea10163ab28481356d4a1170a52aad3b3326932

                                            SHA512

                                            79a70cac329f844dae4994a6b7660b2bf0ddeafa8d6d67deac579d392bcc999d410dfaf4ad0ef61b9de8ea38da7e88c7aa109c2da120c4669c4bf349062a2b46

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            2KB

                                            MD5

                                            e67ac7bfbeafad90006dc4044a88e607

                                            SHA1

                                            aed12514554357d5ce5bb8c51d247d434cefcf37

                                            SHA256

                                            9cfa0b061db683f25f23c88086234a4047b383bf38961ab74766118a7ebc6faa

                                            SHA512

                                            26245f71cc67e19d8af800c671e358b9f6af6f7e88bce3b252e6f937eaa7e79b6228d2087e2ea9b0ef194f98a4b6e690f3c4d15bce427cb53131dd7704bcb453

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            2KB

                                            MD5

                                            4bcf62665740d071d8462fe575270c07

                                            SHA1

                                            14c616f585f5f454ffb530131913b6c1effb98e0

                                            SHA256

                                            64226d855b1f114013b9ae97c4e60c277eeb2aaa95706acf9d2195bbbcf7d4cb

                                            SHA512

                                            b3e52199b8809d81725eb138c21c5a5667570ca7b328b629f74d0251b4f76a2f76a600a5373cd343d3bf2142e31b245a65e5ffe8fdff9be3fd9c129fce0c2db9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            6f5aa22dc1ca910b24b5adb9dd513a6f

                                            SHA1

                                            45ad06c531ad2863a9b6fd97c0a08527a4c6ddd4

                                            SHA256

                                            09b4d3f5a505dd4c6d00044af6373cf4ce91aabf7dc6a2e9f37aaeb017c5d5e4

                                            SHA512

                                            b75816bae1324fd8283416a08c291a3f218d074ba2c0705ed9e4842e7ffaa10e31a6a2726d8057b663d9ea9f79cb5175f8f50db6bc4911b97e5779991c3ae992

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            f2132c1d18d4420561e2575c5f96525e

                                            SHA1

                                            d12dc778bb7ac77afdc3e94d3df7c247be3fcaec

                                            SHA256

                                            171f462548073c417493002355c7a6252ca80da9cab16f398adf9b2d6e797b1a

                                            SHA512

                                            bfb6f3f5b14234e60be902ccbb2921a74377e0d859ed2dafa158883137b98272aa10c511af17e8504b3fd5fdc083185b9c9646a5be827915ace88dd5205f8764

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            bfd31a94f39101a12c4c5ce23972e449

                                            SHA1

                                            51f8974c95ac66c64b6ce3cd1cca7c4dc82a60f3

                                            SHA256

                                            6b397090f89cc26a152fd7cb904cb33b71d6bca8af982bfcda5ba2273ac1ad37

                                            SHA512

                                            3cc1a9fb803087d292760c299e6eaab9c5f291ee54dbe4cfe96c34d971657be81bab50933cd6bee8a09b9cfc54f37aaa6f16ea64edd8056b6a58a88edc0b4adf

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            706B

                                            MD5

                                            2e823b4fc40e00a211813d15390d137e

                                            SHA1

                                            4beeb3125e5b719a4309990739ca4fd44f8fbaea

                                            SHA256

                                            6b9b6948d4f57be066072b80b46f800bad37f6d593a529583bf3ee6411d4acba

                                            SHA512

                                            a27ed032bc070b2278dd63cc6cefb54b92accddb69e50447ce3f686730806f07b0e47682dfe4a353369f27c5b29cf8690d00cf044c87c8a8c081cf24f092178c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            706B

                                            MD5

                                            b6c4241eda229444d18b8df720210a13

                                            SHA1

                                            baae326d91f45ddd3ead6db43b90bf702c7c84ed

                                            SHA256

                                            32fb6777dfee4080d2dee35301ad672eccafd0114ca211d896a951b0af29011f

                                            SHA512

                                            35d95d04dc31009aaba32b0fa22df830337817d6e154487c54eb8ebe6ebc16bc372e516dd4ba0c3488df3bd6c83bcf320040fbec22a358d654a1bca290456df5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            706B

                                            MD5

                                            430ef2af407a8dd989a0eeadf8ac0b77

                                            SHA1

                                            afe8363b7c308bcacb8b4611bbdf47939682da81

                                            SHA256

                                            6703784a7d3236c2f3ababc49c63ce2e9ff89eb0fe53c4ad1043897dfaa8fd5c

                                            SHA512

                                            3d3ab6366622c7c892b4fbea891db11f0911f7458b90dd09b9b7a038c4869f4ddde870d9afda284cc4abcabe6e9a849614d9ebe7638a552fe4c972a0702eae22

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            706B

                                            MD5

                                            52479b879f026aa504ec32f4e9859b25

                                            SHA1

                                            458e5895bd55eeea38870e246a8b4abaec8be8dc

                                            SHA256

                                            4330da451882c3a2a8acf34a3ad7c5d5fb00372f05ca57eb9670635e611c2e41

                                            SHA512

                                            60232f8a1cf42385a3430f5ca173c1a103057a8953642ddaf6ab2d916b240c88fb1e231b47ff80862e843a71e510367c6426b73493f4711f318a9ea2107e4c43

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57de5a.TMP

                                            Filesize

                                            706B

                                            MD5

                                            92eec5ac35d2473847690759041659ea

                                            SHA1

                                            989d708269f1d411f4a3001ec9732a7ea5434b61

                                            SHA256

                                            64088a035af6db63f338d76080e0dfa7786bbfc8a1b5c85ead9d030cbfb2fa91

                                            SHA512

                                            900672d97e3792acabde9da9d4d365bc7113b2aab5117148d9ba01e086e23bc65cf441397342384a1d79f5088eca3557d5c172904f0183c294520e51dcada216

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            46295cac801e5d4857d09837238a6394

                                            SHA1

                                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                            SHA256

                                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                            SHA512

                                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            206702161f94c5cd39fadd03f4014d98

                                            SHA1

                                            bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                            SHA256

                                            1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                            SHA512

                                            0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            11KB

                                            MD5

                                            e53052d5387bbf8ae392b14afc6634b3

                                            SHA1

                                            d9e61fcbcc59776e0e5eadbff3368ec1000c375c

                                            SHA256

                                            af777690f8c24e3874614176a92533e4e37004321a56541737f04a33283ca550

                                            SHA512

                                            3debb0b3ff30a679b6f4311099ee457d8c3806c7b194d29ad3f1c86228d9876b641d034e62f0de7d9a4780ec218846e29dd0a17f08e3fea6aa242ba81bb5599c