Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-08-2024 00:02

General

  • Target

    c409a5ffc6866d8eb965d8245616ae62_JaffaCakes118.html

  • Size

    86KB

  • MD5

    c409a5ffc6866d8eb965d8245616ae62

  • SHA1

    948ce11c7358e2fe99f38097776cbb03c40dc26b

  • SHA256

    35bfd11048dda6fd543d37ed6492452fb3ac31781ddb9a56015129beeef8cd3d

  • SHA512

    e99bbf3c4f0dfd63d3a147fef25591c14d5c02bae4331545f055eb5b171cedf115b48434feb82a64a1c39a7fbcc7f753ff0cd8f1b9ee9fa1be35b5cba4e93015

  • SSDEEP

    1536:nwgr8VkeO3wGivNFSN5y5sjzO1rRmaKaS6cgRrmipsor:neO3wGiFFSN5y+jQdma/Mip3r

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c409a5ffc6866d8eb965d8245616ae62_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4412
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff82b2d46f8,0x7ff82b2d4708,0x7ff82b2d4718
      2⤵
        PID:4452
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2028 /prefetch:2
        2⤵
          PID:4992
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:452
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
          2⤵
            PID:232
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
            2⤵
              PID:3660
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
              2⤵
                PID:2440
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
                2⤵
                  PID:4488
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
                  2⤵
                    PID:4248
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6164 /prefetch:8
                    2⤵
                      PID:4540
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6164 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4416
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
                      2⤵
                        PID:1040
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
                        2⤵
                          PID:768
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3984 /prefetch:1
                          2⤵
                            PID:532
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
                            2⤵
                              PID:3096
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
                              2⤵
                                PID:1680
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
                                2⤵
                                  PID:4364
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
                                  2⤵
                                    PID:3844
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
                                    2⤵
                                      PID:1200
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2696 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:4828
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
                                      2⤵
                                        PID:1348
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,9361932015099959387,14896920388179736871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
                                        2⤵
                                          PID:388
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:2392
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:2836

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            ab8ce148cb7d44f709fb1c460d03e1b0

                                            SHA1

                                            44d15744015155f3e74580c93317e12d2cc0f859

                                            SHA256

                                            014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

                                            SHA512

                                            f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            38f59a47b777f2fc52088e96ffb2baaf

                                            SHA1

                                            267224482588b41a96d813f6d9e9d924867062db

                                            SHA256

                                            13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

                                            SHA512

                                            4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            71KB

                                            MD5

                                            da52e38c98b0f2047abeb07609608ab5

                                            SHA1

                                            da1210caff36df73e49a0c271ff7d573c2d20d02

                                            SHA256

                                            726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                            SHA512

                                            35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            232KB

                                            MD5

                                            e436a692a06f26c45eca6061e44095ea

                                            SHA1

                                            f9a30c981cb03c5bfa2ecad82bd2e450e8b9491b

                                            SHA256

                                            7846b5904b602bd64bea1eb4557c03b09dabc580b07f18b8d1567d1345f0a040

                                            SHA512

                                            1b09a98336cbc0c8ff0f535a457a3db3cd3902e4a724bb2e56563648ed1a36201dd84e63f45dcea80bb6edfe80a17db388379417386dec76341fb9eadbafa88c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            21KB

                                            MD5

                                            879f5574f297fea0aee7821c9e1372db

                                            SHA1

                                            25733e202d37f1d97384f3fefd1aeedf1c55dbb1

                                            SHA256

                                            21cbe64ed94dac2376d522daec748a2474e65c81ef47d28373dfa2480eb87ae1

                                            SHA512

                                            791fbc3582348c1ecb794be12eda1c1cddeadbb5408b713b1bdaef8eabd41970052d2240a180b0d79c02139ba8c9f659d4a5b89979552a9142652f0409a6ca97

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            56KB

                                            MD5

                                            d4b166d7f09bd43b1989809bb1d37971

                                            SHA1

                                            86dd5388625e93dc6cfc0fc3d4efde201beb6657

                                            SHA256

                                            a0a2494b6006a35d2335e06ada4134cf5b7387918a857a201c86500db3726704

                                            SHA512

                                            88e359e79e4eff068eee465b525265e1637d943b9e05a60235fc0dd10a1c8794668c63f96db01bce0e0bc08e3797d59d5c278294a955d83effb1a74bc7a9a751

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            24KB

                                            MD5

                                            d1c8fc93e329cfdb4cef6b1363e40db2

                                            SHA1

                                            2d034d8d0056a8c1596714c7129fc31c74a2565c

                                            SHA256

                                            facc5d448f6e3267100a4c236f09aa98bea1cc3b19e2b2a0985501ca499c4ca2

                                            SHA512

                                            07434e4af30064d5f67158d10b704afccaa31f974ccaca5e76dc9f1b05d76106b44f124c3a94af93eb1b44a5aeaa70ebc33e0f9f904d1cd4c8386b281735d008

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            135KB

                                            MD5

                                            cb98a2420cd89f7b7b25807f75543061

                                            SHA1

                                            b9bc2a7430debbe52bce03aa3c7916bedfd12e44

                                            SHA256

                                            bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

                                            SHA512

                                            49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            216B

                                            MD5

                                            8cf65b1fddcf12476c6eff7dd228f3df

                                            SHA1

                                            6e698588445147a007150d14b848dec670ec0bc6

                                            SHA256

                                            50359a3b5d8181906024b2f0b0f00715bffa9be34b0fb38648cc40099934493f

                                            SHA512

                                            f5444214b1fd8ba15bdb79c2a2aaa0d6509b83509a16b4394a6871b79c0c3d923c9eb2391a7816d4a902fc013f514d3323b9134852c447aa8f2d0675f9e321be

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            216B

                                            MD5

                                            14f3e73756cd390097dc966d54bb65b2

                                            SHA1

                                            2cd688cc436ef6faa6b78da54525616b5d24d88f

                                            SHA256

                                            259a2338903cab11d8914917fe7ed27d85f1114d3fce4af3d6031fb17f8baa6c

                                            SHA512

                                            557b79d4e133c8e5f5dafa60185363834fba8381c5888d90b358e43581cdecff8fb09271d69162ebc6210651dfc58ca88c5a91456a83f3cb59797b3d03f20b17

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            144B

                                            MD5

                                            0a417951d9b91db06070d959773357a9

                                            SHA1

                                            b597d73c4f881616c4c81eaca0980781858b0c3d

                                            SHA256

                                            aae9d347a05d933e4212ed23ae939d506e381b20b71b62abed67bcaff143ed01

                                            SHA512

                                            bb152296416460d5c94f693b2f8ad7766b72574d0445ca9339a6e6b26f5fc4d3a0e47c8430e89d203590b9c08023674c795eaac00951c22cd6385cd0fdf726c9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            1KB

                                            MD5

                                            3e97423425c2d64e25e729b2fe4e937a

                                            SHA1

                                            949ccf405fc22d030484ab4fd26fdb9151be9ff7

                                            SHA256

                                            d11b814bd161dc50dc481fdf01378f0d831655622463cd4ec1dbbd136213c052

                                            SHA512

                                            d76db9981cf33d7395d4b939f3084040480e24abd2d07b975490ebc5986676a6df19d5aec4953d676da5483c48ddeefb9ee8ab88cfebfe3423c74363069ae2bc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            96f6599afeaa6fd046c14f6b4d05f46e

                                            SHA1

                                            1dfcbdc2acb436726e153bcebda851604645eabe

                                            SHA256

                                            83f0440b5acfb01b8eb117551962f2dba22f4f3c17ff41b9f875a73787a60728

                                            SHA512

                                            d0f6580acb86ad0c398cd5539608458eac549d3560df99d2d6984af707eff3401bc5adac09ee14c18170a37771ae2b1ebfe22274a9e93c77f61f207799adb553

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            4f47c2b7c80fff8a78880c39f0310b4a

                                            SHA1

                                            db9c372dd35f8a3283f0ae17c9b3f2d10e2939c6

                                            SHA256

                                            a3df5d297188e3380ecee73e328bc89c251b1048e5cadf298001745e82f7500c

                                            SHA512

                                            1a309ab484d2324601e766d3b2083116508fe802874963b279d0160d0d6b12352b0eb59ceda23f997e56642ba7392282e6d1bd16762794e83acceeb1af80586f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            336b904f7ee81df95d1c6cb5be87bec2

                                            SHA1

                                            f333f812228ff29ebb8c09107cfa7f976509dc32

                                            SHA256

                                            65b274e56f4696d81adad6e50bef0e2958f8f333792714a259739d3a825620e7

                                            SHA512

                                            47c651a3629512dc03ae13523f53fce1a005ab34747c99837307e03456bc6bcb376a0ced0ce7ba56fed98d60f868a1e469d16e73aeabe51a37d7cca55fd12b3f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            c868b77cef00e1431b80414627114fa2

                                            SHA1

                                            db92a3017982994c2e448cadaf43f962793a18b6

                                            SHA256

                                            92719825b6aa4e7ea14a50974a46d213a7a281bf0e9e41f181db7e81290e6483

                                            SHA512

                                            2a4870b985e0accb862949ab7e6db087d909eec1a844d7c697848480220715ac5d3d80c148afc07626923fc5413cd85e48d8802a63f381bf0f6db72948a3708d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            371b62b83e887925bccd89a3e4ab2ba4

                                            SHA1

                                            3de366f3891e1bee1182fa60381b67415a5b84d0

                                            SHA256

                                            588f62efdfdcf61849671443c4c08fb825d09cea5462a293b0813058d2a402ed

                                            SHA512

                                            6ab97f90e9315a0ee37e4471dc619d124f4a13de03a85d54ac869b3f2d9265022080de4f98bb68c65948604ded9559867d5dc56e809fccf27bde47a1923303dc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            539B

                                            MD5

                                            2610cc60997520aa894b519f4ad3438b

                                            SHA1

                                            e68f1c8a8df07c92352035d8f993e47d22bcac6e

                                            SHA256

                                            6365851545a7c4b535072c6b1c752fb0d6cf76fb18739130b12df35e4886b67b

                                            SHA512

                                            67154aa1c13f43f6dc761cd87d20d19c6f3797f8cdf94ed28cdcde85ad66df485b6140d9252cd893f5f3ea813a074d6fc7f097e8f1907a6a2fca4e53de9a221f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            539B

                                            MD5

                                            1f4947045984cfb7e03ab96d698726c5

                                            SHA1

                                            ab49d73fceff21c893bbaa5a5e7eb6c9dcd2b108

                                            SHA256

                                            db4b658dee8c886205e4e561f06036fdd22cfc0e6dcfce1e032e4647d73fb512

                                            SHA512

                                            e3b26629936865401a9a4615e97946d34907ee11be59d8459d07c3d390c755f34c42650335f1da670bea7e5ccc5ad61f99918e1d8b0475f24a8fb6cba349c1c0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58ccff.TMP

                                            Filesize

                                            539B

                                            MD5

                                            afa6b33dfa91f7c036ac31cd3e24e5c1

                                            SHA1

                                            1573a48b1183dad188e3d6b765220c893d3c0e3e

                                            SHA256

                                            a99d28571183ba4696828dcca0f9f797be07602ca5991dab7dd718cb2f6cf711

                                            SHA512

                                            ec76df0d3f379ff0c0127cb41cea2149e68abbedda85f7fe42f3851c1dcf758d4a699da4069f3ee9c67f602ff5a91d677c1f423bdc6621bf016aa4697f92886a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            10KB

                                            MD5

                                            549a9a10fe41b2e98fd1f930e3e74764

                                            SHA1

                                            954ff56590505e04a4923ffb7aed11d2c94d30a9

                                            SHA256

                                            c6216e4f517f73876716e1e625c9ce1f118096da9cc358875e36bdad0f1d398a

                                            SHA512

                                            b98dab66a6f8df0813c7e5f86852917714e7760cd81319976219a06f729881795e5b0351c85c1f8bd0094fd9faf95a14860c9ef08c0a71b707537670519f9fbc

                                          • \??\pipe\LOCAL\crashpad_4412_WXMREDXZSPFSRVSI

                                            MD5

                                            d41d8cd98f00b204e9800998ecf8427e

                                            SHA1

                                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                                            SHA256

                                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                            SHA512

                                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e