Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-08-2024 11:17

General

  • Target

    c2e21174a4f6a1fac6cd0423af8740eb_JaffaCakes118.html

  • Size

    67KB

  • MD5

    c2e21174a4f6a1fac6cd0423af8740eb

  • SHA1

    e671a23c47c2d624358d99b0f5bc5cb420519391

  • SHA256

    0a31eed1919be21fa292e1715b0f0c5b0ec897850e94d49b4207f84670fe6009

  • SHA512

    d983efca3711ecd208b4604fd1c3bf4ac3e59085f21479c53707933c5f8f91e86496656e3ad17d525128b85b82b7fef5c3c2f545cd72b2965a61287bb321ef82

  • SSDEEP

    1536:jwgr8VkeO3S+qVyiOOtI3Y4eaS6cgRr1bxsnNa:DeO3S+qVyi3YY4Lfbx8a

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c2e21174a4f6a1fac6cd0423af8740eb_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4444
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff9b75546f8,0x7ff9b7554708,0x7ff9b7554718
      2⤵
        PID:3996
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
        2⤵
          PID:2060
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3988
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
          2⤵
            PID:4032
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
            2⤵
              PID:1644
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
              2⤵
                PID:3212
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
                2⤵
                  PID:1096
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
                  2⤵
                    PID:2124
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6160 /prefetch:8
                    2⤵
                      PID:1468
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6160 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1480
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
                      2⤵
                        PID:4976
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
                        2⤵
                          PID:3812
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
                          2⤵
                            PID:4932
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
                            2⤵
                              PID:4656
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
                              2⤵
                                PID:5732
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2692 /prefetch:1
                                2⤵
                                  PID:5748
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
                                  2⤵
                                    PID:3336
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
                                    2⤵
                                      PID:4784
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,6448421595683041399,8388180634629847974,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6788 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:5256
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:3440
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:1756

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        9e3fc58a8fb86c93d19e1500b873ef6f

                                        SHA1

                                        c6aae5f4e26f5570db5e14bba8d5061867a33b56

                                        SHA256

                                        828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

                                        SHA512

                                        e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        27304926d60324abe74d7a4b571c35ea

                                        SHA1

                                        78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

                                        SHA256

                                        7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

                                        SHA512

                                        f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                        Filesize

                                        61KB

                                        MD5

                                        468446a7240461af44b59ebb2047c231

                                        SHA1

                                        47b7c525dc91bece99df0c414960b9490b986ba8

                                        SHA256

                                        ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                        SHA512

                                        ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                        Filesize

                                        71KB

                                        MD5

                                        da52e38c98b0f2047abeb07609608ab5

                                        SHA1

                                        da1210caff36df73e49a0c271ff7d573c2d20d02

                                        SHA256

                                        726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                        SHA512

                                        35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                        Filesize

                                        23KB

                                        MD5

                                        d0007015af7e55b5874b6f7711e9ab67

                                        SHA1

                                        fd514e45401ab3c27d2fded42f34024260086150

                                        SHA256

                                        95c98d45b7481d60c8078e04973ca86a67833927fac958ed6d8c28593454aef3

                                        SHA512

                                        375ea404a1c847f5b5e10803277d6a54fcf22ffdde3f41a06efbf4732858d749488b7ac67ffd9461a3d0b7bfd8f18ad465946cd4123c54383a410db6e699a6df

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                        Filesize

                                        39KB

                                        MD5

                                        449bc66a543c3c5be0bbfe0194b5af55

                                        SHA1

                                        ba7e0dbbd0f7307e905b33aa20cae267bafb1f27

                                        SHA256

                                        11d9b2745c4fc25cd41f6e278f5eaaefd2ecb9663377028f0359fbce2231a972

                                        SHA512

                                        8003d68781e6f16ea6441d30be64d6ee9b62b68585c0a48d6af10612d8b3932f876abfd6ca9f5c23beb184d409b33c5d8720e4e80d9b0284450d32436e52c55f

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                        Filesize

                                        56KB

                                        MD5

                                        1affe2accd04b9ca38eaec2c1a4962ba

                                        SHA1

                                        2d019f5944691fd31d407338eb124ca54beb4686

                                        SHA256

                                        52cff69204aba9de35b3e7eadc3bdc3caca4017eeb9b71ace20488ba6d8752d6

                                        SHA512

                                        93061407f3778fd9eacfefdfb6291b8544630aeb09fbcedec333a039eda460877523370f4154b6c91a5cfd97d6096727e0be3ae9e04c582dbf9095674d161859

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                        Filesize

                                        136KB

                                        MD5

                                        4651a4bc4ceaf8d1811aea20ab8584cc

                                        SHA1

                                        e9ba2c1e8b5f2391eac8fce3567c920a68391c11

                                        SHA256

                                        73cbb0b6d9c83a076751991cf4db53e24f0a83a6124d74d5fd66cc1d830ba138

                                        SHA512

                                        0e2552bdeed8ca32fdd2d9d90c1dfac85514ec4f54840778566b9cd37649109487473b1cd234c0195ddd17e127e185f8782914b2e7dac9bb26fb8233bf615fa1

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        120B

                                        MD5

                                        b6df29b1a3fae29e2c14dd7ed108f236

                                        SHA1

                                        1259bbcb0119eca01c38a8f35a4dd5e53fefaa28

                                        SHA256

                                        11f3a38cd36947893ad268e895bb6379bde70ef867dd8255302b345ede9927e3

                                        SHA512

                                        259839efc7c5714d6f3ce8fb7002ca96c0df7eed97555cafad31d8c0c309fca6950a3dd1d9d2fbc483ed13087d9339d37d36685f837aacbe03abb23197a040aa

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        120B

                                        MD5

                                        a1a4a4f53c0daf48641e4f1ac3720cda

                                        SHA1

                                        6fe985c20ba1faaac3433b2b69caf5bc45a2cd88

                                        SHA256

                                        05258b0bdcb1b243f2f06d1d7026c39bbf9d4530ae98d476c202cf36cdf7ad0f

                                        SHA512

                                        95200e59246c67b1d9434d469cb94b3746e9ce0683c5af156ab10e5fbeb2b012bfbcfa875ab6213de7e4d7dc8b782f8188692707823b589ed17fc5583ed9f80b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        96B

                                        MD5

                                        3f26c474ba561fa9ec42b079e3a0192d

                                        SHA1

                                        1089fd2462bb2556c88c2e83e7d47a7d7feab997

                                        SHA256

                                        cf4ffbd911fe24cca4360fb62fea463f21056af1422b1b89cbdb86f27fc67c87

                                        SHA512

                                        40f7fe1a94a378ad3418d5b3ced5eb62c0de3b0d21c74bff70c00797c4888881169abfde9b20e9e5c9f1f2cd1dbd5ea7cc4a9729e2bd6195787c70a86a6bacb3

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        1KB

                                        MD5

                                        cd331f403286f0ca74f32d8df78a5741

                                        SHA1

                                        3c5a84ad80643ef7394092aff53dd660a8a073f8

                                        SHA256

                                        06e08be90c61d0bbd7410379efa02724982f6c016e05ed501ae781c0fa975c00

                                        SHA512

                                        604ad7b85f0ad3623a952e3c5187cbed73014bbca9864b980af1b3e333bd475c76e1810b2bcb8d6371427cef57f97813b617bfcf7069acf937a16381eba99a76

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        157ce392bd939a15192d51838a3a2fbc

                                        SHA1

                                        869c8d0d289c43c9c18e0fefada4c1e9d6dbcbe0

                                        SHA256

                                        c69eb749e42f5d2309fe80a37333cbdb695e40e47226ba36c14faa4bb72d4ce0

                                        SHA512

                                        d549a7eb823234c22f448a079596c9212b3cc0cd00dc0226f44c42bc73a4fcfb09fda19db0f68c14f9b9b0bf0fb8c9ca7e2faad9d8285d92c26460eae8145f10

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        c8701d259436b0a696fa8133e30741bc

                                        SHA1

                                        ca43f46bf23f2f08fabc8fbc72477644ad6ac5ce

                                        SHA256

                                        4fac6af2445e5c13204ea5f2ec2f1ab66b8b98b686182e16b02dff6be3b3d898

                                        SHA512

                                        a0b96a0cdb6002659f3462c90fbbbbe1dc909aca7d6517cbd1b5d064bff686a5f3d8ab714e018389496ab74bc2bfc879827f70c59c3b76ce25946cd4a4d84609

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        5c56dd7b58732ef8d0c25b4e833fa926

                                        SHA1

                                        a4463cf541048d4023f83a3073a8c0acec032663

                                        SHA256

                                        a0b4234025e59a933766517f48c5f796f250ead22a27ca08a5419edab65d47ac

                                        SHA512

                                        1a223c6c1c2ed4779931eb996ae00fea1d7069775edbd239a7f67350e25dbd8e6f639be31ce207e50a4274358cb703102d6a1b00174b3650e7261e25faefa4bf

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        2a7bd966daf42ae1dc9cb695cb9841ec

                                        SHA1

                                        090c5357e1cddb439752517287fb4b8f1b8689bb

                                        SHA256

                                        489d8505da74abd2f6543978ee38938667ced43bd709798d034b34ff737a0f1c

                                        SHA512

                                        749bef102cedda02976973f2f853aa87bc52ca802d8b8597718327619517b3860b01bab0650ecbc0e893d8be3e380ee344407351e026893737cde09eac2d473e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        982dfd23bbf16886b3b0514684ea722d

                                        SHA1

                                        9aefcbaad3995500ee1825df99e80d7f6829a7a9

                                        SHA256

                                        09de6eff948d107ca0c93e6b9f277d7655117c2f75695fcdd723f9d6931051a7

                                        SHA512

                                        027585d12429aafc3087056db99e6f8b61b639b77bbaa9d0052c32a77c09da210dfb3972fc35083cc7813000dcbd8b7fe1281d1d8da04714d4fad48cf94a64e7

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        371B

                                        MD5

                                        5fe554a69829cc573c113e8b6c2f1607

                                        SHA1

                                        d628a0a0986afc5de3f28668936843e52a693419

                                        SHA256

                                        dade20e9fa6321f9d8b00fd9c7161952c04458c57130cf968120f463b37d1ef6

                                        SHA512

                                        171db309dc9b678dbaca86bbf4ec1a0bf870e9f86585d71e3679a97fc330e5e1f164849c49dcdbf56d30b7b9e732104942037e5e1ab46b0177fcb359369052e4

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        371B

                                        MD5

                                        f9219dae5e5cb6433114d865afec9830

                                        SHA1

                                        feb3a9cd8ca6b86834709dd1ac7bf7bcfd289b44

                                        SHA256

                                        adae76af235c8500e5951850febe015dc4cf4c90e4a4aea84dd533c179ad9342

                                        SHA512

                                        41ffea787b8c64db119396bd406ce55b25578078cdfb00b6afa8ebad0eb10c2143e91932e7efba1f0c897b0a33bc2b4f156cafe5f1a2a1981a09f3cb863d2184

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe588a49.TMP

                                        Filesize

                                        371B

                                        MD5

                                        a97b06fa79d1925c1c0df0bfabbc90f1

                                        SHA1

                                        988c1aa916176e6795be756d54a631f8ff32ff08

                                        SHA256

                                        ff72926347cccd58f1f9bcc070ec19cb7574c575aca300fb0b3fa34b90d814b3

                                        SHA512

                                        ce1b6d432128a69c8d2c2305c0a1c5fa8fe6df02f7a16e8ab361060413a4a978c1ff6e39c950fdd728b3cb4035e144280076add40487e956c6e2ede292097a2b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        6752a1d65b201c13b62ea44016eb221f

                                        SHA1

                                        58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                        SHA256

                                        0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                        SHA512

                                        9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        10KB

                                        MD5

                                        2b2b0a7fea83123830dd96e5b98a987b

                                        SHA1

                                        9ec45f99a88d285037c38e339d16c260a9e528f8

                                        SHA256

                                        46858eb7648e8f18d22104fd9706c4febbf13f6163efc1d3012a8cbe0816e389

                                        SHA512

                                        22e56821d564dfd7c3193ca396795d05ff7963f0bfdb60b1f5f913f10aaf73b6f7c22bea6a505e65506ea69580aada61ed1ecb33c0fde69b7d6720d2db20b7e5

                                      • \??\pipe\LOCAL\crashpad_4444_VPOXKQFXUPYQNUNP

                                        MD5

                                        d41d8cd98f00b204e9800998ecf8427e

                                        SHA1

                                        da39a3ee5e6b4b0d3255bfef95601890afd80709

                                        SHA256

                                        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        SHA512

                                        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e