Malware Analysis Report

2025-01-18 02:05

Sample ID 240613-je699azbjf
Target http://bojagicard.com
Tags
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

Threat Level: Shows suspicious behavior

The file http://bojagicard.com was found to be: Shows suspicious behavior.

Malicious Activity Summary


Executes dropped EXE

AutoIT Executable

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Enumerates system info in registry

NTFS ADS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-13 07:35

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 07:35

Reported

2024-06-13 07:41

Platform

win10v2004-20240611-en

Max time kernel

283s

Max time network

285s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bojagicard.com

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A

AutoIT Executable

Description Indicator Process Target
N/A N/A N/A N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 1030.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A
N/A N/A C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1496 wrote to memory of 4636 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4636 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4544 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4172 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 4172 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1496 wrote to memory of 1412 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bojagicard.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe925646f8,0x7ffe92564708,0x7ffe92564718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5768 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4564 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2192 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8

C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe

"C:\Users\Admin\Downloads\desktop_shortcut_bojagicard.com.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,7317344288223276374,10626838347072128935,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 bojagicard.com udp
KR 180.67.205.230:80 bojagicard.com tcp
KR 180.67.205.230:80 bojagicard.com tcp
KR 180.67.205.230:80 bojagicard.com tcp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
US 8.8.8.8:53 g.bing.com udp
US 8.8.8.8:53 230.205.67.180.in-addr.arpa udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 img.bojagicard.com udp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
US 8.8.8.8:53 t1.daumcdn.net udp
SE 184.31.15.40:443 t1.daumcdn.net tcp
NL 23.62.61.171:443 www.bing.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
KR 180.67.205.181:443 img.bojagicard.com tcp
KR 180.67.205.181:443 img.bojagicard.com tcp
KR 180.67.205.181:443 img.bojagicard.com tcp
KR 180.67.205.181:443 img.bojagicard.com tcp
KR 180.67.205.181:443 img.bojagicard.com tcp
KR 180.67.205.181:443 img.bojagicard.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 40.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 171.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 133.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 181.205.67.180.in-addr.arpa udp
US 8.8.8.8:53 wcs.naver.net udp
SE 184.31.15.74:443 wcs.naver.net tcp
US 8.8.8.8:53 gws1.bojagicard.com udp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
US 8.8.8.8:53 bc.ad.daum.net udp
KR 121.53.105.159:443 bc.ad.daum.net tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
US 8.8.8.8:53 74.15.31.184.in-addr.arpa udp
KR 121.53.105.159:443 bc.ad.daum.net tcp
US 8.8.8.8:53 67.246.117.220.in-addr.arpa udp
US 8.8.8.8:53 159.105.53.121.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
US 8.8.8.8:53 adimg.daumcdn.net udp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
KR 211.231.99.68:443 adimg.daumcdn.net tcp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 wcs.naver.com udp
KR 211.231.99.68:443 adimg.daumcdn.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
KR 210.89.167.46:443 wcs.naver.com tcp
KR 220.117.246.67:443 gws1.bojagicard.com tcp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 68.99.231.211.in-addr.arpa udp
KR 210.89.167.46:443 wcs.naver.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
BE 108.177.15.157:443 stats.g.doubleclick.net tcp
BE 108.177.15.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 wat.ad.daum.net udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 46.167.89.210.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
KR 180.67.205.230:443 bojagicard.com tcp
KR 210.89.167.46:443 wcs.naver.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
KR 180.67.205.230:443 bojagicard.com tcp
US 8.8.8.8:53 16.173.189.20.in-addr.arpa udp
KR 180.67.205.230:443 bojagicard.com tcp
US 8.8.8.8:53 t1.daumcdn.net udp
KR 180.67.205.181:443 img.bojagicard.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 wcs.naver.net udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 adimg.daumcdn.net udp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
KR 121.53.201.236:443 adimg.daumcdn.net tcp
US 8.8.8.8:53 236.201.53.121.in-addr.arpa udp
US 8.8.8.8:53 bojagicard.com udp
KR 180.67.205.230:443 bojagicard.com tcp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

\??\pipe\LOCAL\crashpad_1496_YFBGJFLPSDCHYUAF

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 eba306d140ce3cc40e3285ac2885ab37
SHA1 05b1ccf7e7f8dd22671d4a6abb05dc719418e7a7
SHA256 d16dfbfb256c60f0bbb962c6f76ed0d19b41a54fe4e46cf94e46bad4f7900c25
SHA512 1d082ac8e6934ea8017e613deb2aecce2ad3d963abd782cdd3667c645c5666f7d8d1ccd7502b4441a4a69ba371423a1f44415915df9d4a4cf0b9ef567e48a740

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 187224c1f4a5a910562b2102b63185d6
SHA1 b1e8ca34ba0d2fd7390eacc75ae71a3cfcdc3065
SHA256 45324d85e1f3b3d2c607068f68fdb1135c42baeed9d17a03df2df92222ce6614
SHA512 584ff384411b8cd30d6fad6660a93832adf39518bf6277f740e6765e658f7c7b46bc30ce932a86884bfc151bd9eadf4dde8cb9342930683e4faee0d4f9dff2b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 85e593eb9dd3b7029e73869b8e4701ea
SHA1 bcba00ef6d53e2888240026ef5b281f8089fa3f9
SHA256 64eaa8fd96ea44be297a67e8105857e9f79f163db1cf17172dde41c264422b5b
SHA512 17bb94df2bfb64645ccdf5fcbea56fb4434512f10bafcf7429009b66760bab6ad801d752de734ca80585bee2f4e575dcdc1b54c7e1d979f956500f449cbc95e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 805fed39148cf7d16b25a5994d8e49ba
SHA1 6931fcd8710af131b0284fdd7f5b06b0463c1808
SHA256 ad3503ef2dbdf62f34ca5b9665e91d39d271855568219cde11e9a84a0f0a4727
SHA512 9cb92da7353f09eb9affe40d3f183a1ee69dc23124cffd2939713c89c080c41c6c4998bba6e3c890e5f0665bb7ddeb06ec189a932a24cbdc089e4b08e20bba23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d786867eec8d39943f19d9fbe05b71f3
SHA1 89cdb3a1146f604ca72beb6eb2adf9c6fb3ae924
SHA256 19611b77c3b92d182ff74e57a0e3bcafc67fbe3ff66bd551a3b465c285cc89f2
SHA512 dbb024d8d39aa8e4aeb233078a0f971885140e3cabc7bc30eaf1a31a6438a39e962ac0b66818e3fe39f9f4e6c05e86320bf4bde82e72a9105119e284b94490c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2876b6d08f21914b3f7fcbdbdd62b1f3
SHA1 75414ffd66f6ebc33c2677ba08fcb0ae86d53115
SHA256 b85dfa6caa9f369367e41e1049edb394f32f7438c74f46aaa83ba09952f17152
SHA512 944cb6da698b61064bdb25466772ac4399ce3bb16ddf46ef3a226547e87f0a97eedbe36460c1df25fff1e91e40777894b46bbb2e7f17355a17d2e28b8d9f668d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 071c8e59c1f4cf592ea37826bc006fe9
SHA1 cff1bcc15999811b6e6261237927443e69247c17
SHA256 30f7e9ee917818359b490e75032fa44450fe03b61cbf79d4164daa22f3410374
SHA512 824168ab78d8082cb9ed5b7656167870d473bbda784d51755892aee22f9cd08ce89d0876e70cbe6bb8cd9daefc381a19068d6d6250ab10e6d0165393a5d0b2a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e21b70dfb199d4036ff8f2350206f62
SHA1 0973ce7de59f842c1369bf731100b03201fb283b
SHA256 ee2a2fe2a92fac2bdd86d32fd46abbcb74b912628bcbccda495934aa158add70
SHA512 01c90eca48e244ca79e16f67df6bace024dd8ab0a78e818bb3d6c4147031b90cb9839bb2f7ee5fc9e5596de02745f0e560b5fd312b3925e347a1d3129abc7fb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9ee0d8fd8b1626a55222482a201d8bf2
SHA1 70f79a9441dac0a2673510b77efcc083a667f2c1
SHA256 2b9c589e2243328a714ee25dffdc3a5bcdb8fea8e141ed894ba73a1a207bbd22
SHA512 e1cd7aa2951e72f6df1b93e8cae8589cccfba343a35b0747e724027f757d2acd2b9b09ae0a1461948df531628b8938b061ca9076d59df059674a01a58a95538a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 8336ceea7ba89cab6dd02c4563f0916c
SHA1 cb568fded022dcdbbda6c4341889951daf86016a
SHA256 00de3ea369f61d91b7f8cb4c62a966501240d6f347642a6a45f6faf935b52ce3
SHA512 97e3f0c9e81df8ffc259addde4aa83f0353f488f1b42c7db84105c001bcc766d214c5ab4a0830d3513393fe581df27a674d657791e9370fb1b3a96b58e4ba378

C:\Users\Admin\Downloads\Unconfirmed 1030.crdownload

MD5 534b5ad1e18cca73c2071cb9fc7f8b32
SHA1 a992de7210841097a888e1c577f029b6315354be
SHA256 9c363458977306d3b1521dd0e9433b7f973eaf194577a9a1948e0d092aec1379
SHA512 2eb60e93c7275bdc09a4522bda89fe90030b3a070c9b2839e08ad44c92733697809816af1352d1bca140d79925e7a8a437d436213e999637f0e3f2a0c2f70f94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cb98a23ed155167d278cdc0a11e81e3c
SHA1 203da9ad695f022fbe94521afbacf71f81cbf774
SHA256 49ba8f7ba6b49e581e7e9b4b3098c8dfe2606c503262c02f993127f2a48ae015
SHA512 b09e0fed9caced58234dbe26d4a81681380eb853119addbe741fe2db1602b4a7cfd4659d385975e63f41ea1a4e448e7666b8d9d51d4d88af737375c81cada8f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5dde7c1747b1fe122dced98dea039c3c
SHA1 babe78121e0197090c8387933c619268e551ab98
SHA256 4798074e18decd0e2e0d62ce7094415f20f641f7b16eef5d9e3d03107d29b3d8
SHA512 efd291bef66e4465f1d4619180d83dc25f24fa088b02583880fdfde0b16b4d6574678d243aa69c9e0b0c1e4ea245d37e9ca7612e6eb1c4efcf594f3022e02c6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dd68d92fa4e403225c474156ef774f93
SHA1 ac6da8e9f4cff6c137a68a72fe1d6a1aad11d7b8
SHA256 7fcea3304cf849a0c305ce69e142911d53592fd04f71d6fe0f89136e37c8ed4e
SHA512 1a195d6f4072988369008fac504caf62c9f07ddb74fea706752b61873eec53b78105002fd05b4c8dfb1e515b792f31a0553cc5e28a1d17ab6bd93aec9d698e21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\476ad030-f6da-4a1c-ae41-cbbe9dd87ca9.tmp

MD5 136c8c50c2dae0523137c186d615265c
SHA1 ec2029a96ee11309fbacda033964b47614460df6
SHA256 72ac66a6992e6cede8755104d8e63cd918120927b72bc6fb7fb53d74ac5c591e
SHA512 c675d56ed482008afc48bd4ab494aab1dd84371b886a3c12e94a6cf4ec495094ea18bada8797ae07b2c61b164fa42865a20f8b9302ac73e37b742636ba858333

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6b3a1f4976ad364daa7692634b09d0d5
SHA1 524b9b44363bb4fde70a20968e6fd0443e367d39
SHA256 2e2802f6f6f74f1b10c047de13eece26b376467ed1ed92a11854a4a60df219d1
SHA512 2be9643eae32e37c0d7ca83b2a928560830f4fb83dc13454234bed52cbd9e54c03556351b8d5cf8353d3728692888c047e3cf2a6970e52a0162798f6d1943888

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bb873bc4ba8172152ba4051868fabe3c
SHA1 4c0f1a469dd3730946b6cb09d4fe5f32bfe2224b
SHA256 f4bf8ce275fcf2d06a82804f79d6abf15a4eec4f4a25c337ad922532eb635508
SHA512 a1f4a41871a4e32afcf048a368845a9088edf690e5f9da5d0523d0496788de2b1cd02aa4ccfa7ce5bc0e3133d0f237481be405a74c3e55b6ea0984c98dd4e99e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bbd06fb20bd824655f69deae2fa6541c
SHA1 177a15e9bc00aafbbcfac3609ed0da3804519960
SHA256 795a26a1227b334d8897251e68ff7844bdbd54c330e9f3d2d7df08fa3157b426
SHA512 d2033856a68f64a201e24e3be603789670d9b3911950d6feb5f0c2bef14a5f68c05c7e732e9a16cef78b43fbe840ea10c7be775ca6efe70ae984a1494e116e94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8c3276f4887815170fc98fc4babf19fc
SHA1 6bcef67bee33d3eb1cdeb1fec033f47ddb19d586
SHA256 6e221fae41a778d471d82ca35462e617380ad56aa54de1b0a955d90c8d636049
SHA512 40cd701747e9de12d1f464bd688b416e13e0b2965d6b7400a397c4cd2614849d793a760914730c742cbbbd3edcd1ad893a57683ba3dc0518fc7f0c8a3fb973fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 aafeca8cf16ff1e4e7f8ec06193da28f
SHA1 5bdc80630fdf60ec465673b65f583afb14e6d71f
SHA256 7af363835ff52757ff7212a0e58b0a7aad245b92c4762463640b0becee80b53c
SHA512 7dfe76dd2271eff1ea2cf2b0d16e8db5b6b0a160248235a9d00ee8bd9ccb37806d242f715f021f06f4a44326055c0db45307d2143c53160481ef497ae0dfe84d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 81fb4ab5e5a65fb4ba517dd70730b120
SHA1 28b050a33cd0a349e0b576fbfb05ffc5333883df
SHA256 8afdf1f329af87c820f0204c705b60fd3bde7bdc3bfc530564a086863be1264f
SHA512 2df16c8a329c99ca998cbb26834a597d9660df6f84f0ae072444288f2c42192a0c82d0778c5d1fdfc5f1b2dc9278cbcd206b0705e9b58b4a475abf824eb30c4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b696ae0c169945fae539892848a7e2fe
SHA1 e9611f4c37bf0418d2b053312967b7382c72b672
SHA256 ed26f0d65c001fc81846ef024814311d02591c6c66ef0ea5d832be1f0668024e
SHA512 1559add4cf4e273c5d3f1d672b9c5b325ae125e2f807622ffd049ff460f8f127f529a6eb50fa32960b8724c4762bc65e9ea0dcb00afeb4fd86327565a9388d35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a193f3fcc1bf295efe847ac16e5353f5
SHA1 4406e20454df365c6bb6ad7ac3855723bf32a691
SHA256 931cab1f9ba08421aa3ddf76f91037e935847623794af60ff3ecb95193165e57
SHA512 b731881fb9cdee8b310c553cef34c3ad5aaba432a00f4d6852e25d0aea1e933bfe522b8f04b2a98994c503c10eac9916dfccbeb87cfe7d4aad70534dce591c7a