Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2024, 09:16

General

  • Target

    c06b6a5618d7a2dcdf4bb539f499bd16_JaffaCakes118.html

  • Size

    31KB

  • MD5

    c06b6a5618d7a2dcdf4bb539f499bd16

  • SHA1

    92ad62b117fe050008f7430cef16e2c89128891b

  • SHA256

    852962ad30802d7615633a5b0c5180a09d42ac0a8bdf543c0740390668f4355a

  • SHA512

    3d1eae88c4b4b12f98f28ee0d60fc44a3faaef71004523747472dc5bed2b8390fc7faf400f05403e4d6457e280fb0bee12dc8e280f39769293b563f34053bf07

  • SSDEEP

    384:B7DnjJg1NM+wW/0LhSsSp7+WPq4kehS28hkHKW45jTntGLQGjV4D7SdllGqR7ECa:dJg1NKkCfmVRpC4KR5MTCD7SM

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c06b6a5618d7a2dcdf4bb539f499bd16_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd790346f8,0x7ffd79034708,0x7ffd79034718
      2⤵
        PID:1832
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
        2⤵
          PID:5084
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1732
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
          2⤵
            PID:2276
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
            2⤵
              PID:224
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
              2⤵
                PID:1436
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
                2⤵
                  PID:4472
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
                  2⤵
                    PID:4536
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
                    2⤵
                      PID:4104
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
                      2⤵
                        PID:3516
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
                        2⤵
                          PID:880
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3920 /prefetch:1
                          2⤵
                            PID:2932
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3420 /prefetch:8
                            2⤵
                              PID:4124
                            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3420 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:2888
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
                              2⤵
                                PID:3292
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
                                2⤵
                                  PID:1012
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
                                  2⤵
                                    PID:4544
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
                                    2⤵
                                      PID:2316
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1260 /prefetch:1
                                      2⤵
                                        PID:4396
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1752 /prefetch:1
                                        2⤵
                                          PID:2876
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,15174542615617364364,2645940518969209488,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5320 /prefetch:2
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:4864
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:1576
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:1744

                                          Network

                                                MITRE ATT&CK Enterprise v15

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                  Filesize

                                                  152B

                                                  MD5

                                                  e4f80e7950cbd3bb11257d2000cb885e

                                                  SHA1

                                                  10ac643904d539042d8f7aa4a312b13ec2106035

                                                  SHA256

                                                  1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

                                                  SHA512

                                                  2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                  Filesize

                                                  152B

                                                  MD5

                                                  2dc1a9f2f3f8c3cfe51bb29b078166c5

                                                  SHA1

                                                  eaf3c3dad3c8dc6f18dc3e055b415da78b704402

                                                  SHA256

                                                  dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

                                                  SHA512

                                                  682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                                  Filesize

                                                  24KB

                                                  MD5

                                                  d1c8fc93e329cfdb4cef6b1363e40db2

                                                  SHA1

                                                  2d034d8d0056a8c1596714c7129fc31c74a2565c

                                                  SHA256

                                                  facc5d448f6e3267100a4c236f09aa98bea1cc3b19e2b2a0985501ca499c4ca2

                                                  SHA512

                                                  07434e4af30064d5f67158d10b704afccaa31f974ccaca5e76dc9f1b05d76106b44f124c3a94af93eb1b44a5aeaa70ebc33e0f9f904d1cd4c8386b281735d008

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                  Filesize

                                                  45KB

                                                  MD5

                                                  aa6a698d1c7fc6d35265b10af5570e9c

                                                  SHA1

                                                  00da372ad4964a5d5b8afff7fe1b207ff284f232

                                                  SHA256

                                                  02f6ae7bda59fb1a20d3386021fb972ced348bf724fea42157225d416f9f049a

                                                  SHA512

                                                  f5b2f732e899cc0fed577e1ef1c51c154ede5d206543e8ac7c1fabb182901f8e93e137b63f12cbb87b3f570a283a368bfb1b9d637cc5b1c4f1669ff5cfbf306b

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                  Filesize

                                                  216B

                                                  MD5

                                                  76a546bb86f9a06394907b1f46dd83a2

                                                  SHA1

                                                  aec16bdb2c4946e6d710dc98c504f18445122842

                                                  SHA256

                                                  94fbd7c347583d0f8dcc3d75c934659d33f0badcdeaa4ce27f3eb4c60229b672

                                                  SHA512

                                                  c99b2f957b4616091270aa41913182a2ca07c8d92eb7fcc2197234b6cc183b4f53efb796f72d806ded9e28764d566cb58791a1621d7f1e38f2312cea3e50ee7a

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                  Filesize

                                                  384B

                                                  MD5

                                                  97b8fafddc73bf5441efec422d914eea

                                                  SHA1

                                                  a2bc2bfef6be12f0108044b07ed7b766bbff817b

                                                  SHA256

                                                  6a652ffb9b1af0b648242c8c88cc2e4f0ff715bfbeacbf9a166749ddca5bad76

                                                  SHA512

                                                  2d1c4a057bb17c1df498bbecc5efe740a9f32a065474aa177d20215c8af81e5ac95fb3fedd08ffd35af7e3d9e3e473323a5110f17e57c1125ba808a30c87c3f6

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                  Filesize

                                                  2KB

                                                  MD5

                                                  8aca3b9a043664f907bf1ed802f6f6d5

                                                  SHA1

                                                  01fa54b6d9793dc3d1fa492498dd12dd6c722692

                                                  SHA256

                                                  1f2f8a74a745a6bd9734fe8fe68ef5edf2f228f77ca71a24a22baf5d3b41b393

                                                  SHA512

                                                  bd9e0d4d785f4713c23aab0ea86ddd371fe25b428c5063e121cf99a783a3347deec224143c89eb6d2ab2a17e2753458ee2244418b704c6a5179a834c7fb9c613

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                  Filesize

                                                  1KB

                                                  MD5

                                                  7c252882ca8fb0688fe043cd426df855

                                                  SHA1

                                                  5815eaf1caa2aab1156932fc587355b1caae90b2

                                                  SHA256

                                                  e8083a8f687f55ce0b89d4899712f85b8a5217a202e9951a75667073bc004371

                                                  SHA512

                                                  929556ac147a66548a783a33b0df981abcabc980c6271250531f9c1036ac4fe984c4294e6c7c883b98a66a1e1d59fc5d5246c18494ac9748e5ae9c047560f8b2

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                  Filesize

                                                  5KB

                                                  MD5

                                                  7354fc6495a30f42381afe7d48973937

                                                  SHA1

                                                  c1dc0d99429936e2c48b7f7b586829ea443bf1fc

                                                  SHA256

                                                  e037f6a4d0aed9b298920e8d3f5730e88034bed68f8aa1d9669f93718fade898

                                                  SHA512

                                                  16a5cafad76985ff711424fea5e4940f6760a847ac0dfd7f625925c467119d5a2839bef10b51f2c6f66ad5d53eab959459ae710439228cbafed6b104f4eadc99

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                  Filesize

                                                  6KB

                                                  MD5

                                                  51a3cc5f3fa62b4b18089ac5112738da

                                                  SHA1

                                                  a086340e95a02d75f2e7c88911424655dddd7a03

                                                  SHA256

                                                  6d4dafa560c9c4c2760dc595f80a0b440993027cc302f1fff6c6a198acd27c79

                                                  SHA512

                                                  fbe4cb0032c2dd1e3352d328fd6d45d6ea80acf377533098a05c10481dfd283f2d9f654e692fd578436ee93622a6f31c2cecc69beb9f762566e62a9de3782ca2

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                  Filesize

                                                  7KB

                                                  MD5

                                                  fecfdcff2180082c3d3fa04c57fa2bb2

                                                  SHA1

                                                  3bd16290d2558adf1203a765550db75ed83437f2

                                                  SHA256

                                                  68d94dbe0b0c3d9029b8e03af120f3e86bae5503759c17518879918c4d818202

                                                  SHA512

                                                  18c01d845e047577e7648fc102fd126b6cc50e63aa5fad3385fa4a21f4374ecee8405325e3ab0983f0f6be2baba9cfda8806258852280fe265265faa662cd374

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                  Filesize

                                                  6KB

                                                  MD5

                                                  075d7f8f023fb4cd4ca63ca9d991b911

                                                  SHA1

                                                  4642db1e1ebc195e737c276fdc8560675c839c1c

                                                  SHA256

                                                  5a5c8ebc69f97460e4940cc9c6c6029aa967de4b3c45183b1602e37795ed78da

                                                  SHA512

                                                  069363a8def018a5aee8db918243d6ecafeba3b3f4603348b0403d66518fd55041a3a2fa455c233bb0cef7c16eb30d791657bab1158ff5b40d55d61d4c8cd2ea

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                  Filesize

                                                  706B

                                                  MD5

                                                  2db22d28d813e6c66eb90ec9f62fddaf

                                                  SHA1

                                                  dd5ee70b3a4d4d7de08b13433ccbd48d09279fd3

                                                  SHA256

                                                  58f2adc983b898ba280e291dd184a3c23b382e83d872572c7d410116d30bc55f

                                                  SHA512

                                                  abb70e6b71dd668c7180f818b8eee143468c8a02af2f1add53f2ffda8f03d678b78be1faa0e781325ff7b9eadab197a7cf5119edd1656d18d5922bdd339a5442

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58feed.TMP

                                                  Filesize

                                                  203B

                                                  MD5

                                                  6360ef9604829de5795e2873c93918d2

                                                  SHA1

                                                  2873fc2bb43272a60534c653744ed33a994ab22f

                                                  SHA256

                                                  9d8eeb5d1e0d53b9df642e2228cc5be2573476872b5280ff7d0fee13c35be18d

                                                  SHA512

                                                  36326843e06eff9336ecf9d0b4b9a95aec9044bcc395492f0b3bd23e4bb241e2ee8578e2d99ba1e67ff0f222da08841447b8e7f03d0be65d95c0135907c3e844

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                  Filesize

                                                  16B

                                                  MD5

                                                  6752a1d65b201c13b62ea44016eb221f

                                                  SHA1

                                                  58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                  SHA256

                                                  0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                  SHA512

                                                  9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e80179fa-35e7-4d6c-9640-a8ed9d55f42a.tmp

                                                  Filesize

                                                  10KB

                                                  MD5

                                                  33cb268e99bc29dfca0dbca2a704e956

                                                  SHA1

                                                  f4c90efd45097203ef50308f1b069894a1763787

                                                  SHA256

                                                  7d3b7f3e19cfeb7a266dd4662ed839a72418d82cd79069cdd44c9f9f36fb72fc

                                                  SHA512

                                                  f09f1c0beeaec9e082791ddbb29a2327520719362f5bb5cc679b03e7c881a1ffb0df059f569170b531cec6c41532eb20ed9d66e7107b1ab64c06e14287b8e592