Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-10-2024 03:57

General

  • Target

    6d0a3c51e3af6c6cad8926fb6c30ab4d_JaffaCakes118.html

  • Size

    69KB

  • MD5

    6d0a3c51e3af6c6cad8926fb6c30ab4d

  • SHA1

    eb9fa160995b80117d52af03d516ed97d1190e23

  • SHA256

    d07ba38cfa850deb609d5413770eaa449898e9d1cd7916b4574659f7f47b6d54

  • SHA512

    4af91e38bc3cb16755ecf95cc392f5df23df60ff3ccbc2d26a7249db651d16865af86013e94041918ae6250741525c34416b0a6bbd6f981296ab396b2e5d78d9

  • SSDEEP

    1536:EOXwgr8VSeO3faAInwnYloTdwaS6cgRrCpR4KpR2M:PeO3faAIwAoTd5spR4KpR2M

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6d0a3c51e3af6c6cad8926fb6c30ab4d_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbb89746f8,0x7ffbb8974708,0x7ffbb8974718
      2⤵
        PID:2484
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
        2⤵
          PID:4748
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2504
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
          2⤵
            PID:1488
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
            2⤵
              PID:760
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
              2⤵
                PID:1880
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
                2⤵
                  PID:3664
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
                  2⤵
                    PID:2936
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6008 /prefetch:8
                    2⤵
                      PID:4012
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6008 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:2896
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
                      2⤵
                        PID:4272
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
                        2⤵
                          PID:2236
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
                          2⤵
                            PID:2384
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
                            2⤵
                              PID:4920
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4544 /prefetch:1
                              2⤵
                                PID:5684
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2580 /prefetch:1
                                2⤵
                                  PID:5700
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
                                  2⤵
                                    PID:5340
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
                                    2⤵
                                      PID:5400
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1880 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:5128
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
                                      2⤵
                                        PID:2188
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,5020549115569886227,18231386993603114537,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
                                        2⤵
                                          PID:1764
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:2088
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:2236

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            dc058ebc0f8181946a312f0be99ed79c

                                            SHA1

                                            0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

                                            SHA256

                                            378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

                                            SHA512

                                            36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            a0486d6f8406d852dd805b66ff467692

                                            SHA1

                                            77ba1f63142e86b21c951b808f4bc5d8ed89b571

                                            SHA256

                                            c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

                                            SHA512

                                            065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            71KB

                                            MD5

                                            da52e38c98b0f2047abeb07609608ab5

                                            SHA1

                                            da1210caff36df73e49a0c271ff7d573c2d20d02

                                            SHA256

                                            726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                            SHA512

                                            35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            61KB

                                            MD5

                                            468446a7240461af44b59ebb2047c231

                                            SHA1

                                            47b7c525dc91bece99df0c414960b9490b986ba8

                                            SHA256

                                            ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                            SHA512

                                            ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            23KB

                                            MD5

                                            beda68c7227c7a5a9f974b1c74d257a0

                                            SHA1

                                            8a03576d27c23e9612bcbb5b9e758e4535ee4c81

                                            SHA256

                                            e9b270df7c8655f05f8336e4897debbf71a38a69c3030f33031376b4257addb2

                                            SHA512

                                            4e178897f5ae13f1cbb2b374918e22b5b281a78e3362fd6125701776c8826956c06153147840b52aaf4316bc8078059f83ee4758d84cde70190bde8f1f36e619

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                            Filesize

                                            75KB

                                            MD5

                                            43a68d351bb9f342ca22033f264a864e

                                            SHA1

                                            0572b44980463321964658b0b2f1eab1f1a56bf2

                                            SHA256

                                            06a47cc8a55c0860621f562f3474bf0587a4613c423e82463b82e918a76cbee0

                                            SHA512

                                            2284cdca306f3800ae94e75c0534669a2a6b21d072086a8edcd2391eb898c2fedaadb3dd4ac53780e9c695f0085c2b2ac2bea7161b1ab0f566e36ed02cc8d743

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            115KB

                                            MD5

                                            f107414beede991c9705bc3501c75a4e

                                            SHA1

                                            c895ef08b1a2dbf718cc5152f14bbf6958e0213f

                                            SHA256

                                            59b3d39174ff5e84fcc6103b3f858260461e238563f882f1b6bb7c630bb7201f

                                            SHA512

                                            6298d45c526f91a3467b759ea21a0c0267463b1aee905975097ca14f7e998a08cde9f13234b0723f6ff5e5641e3357d10ed699007ced1b8aa8459ff213664298

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                            Filesize

                                            42KB

                                            MD5

                                            101f2295c59a6c129b95bb68093aed06

                                            SHA1

                                            12f5843daaf99bdb874dfebaf10660c54ede2120

                                            SHA256

                                            9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

                                            SHA512

                                            f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            408B

                                            MD5

                                            e92bc499a3e621ccda4007b601f6ed84

                                            SHA1

                                            6499b25d763edbdb35b98a3ef4262813fca79975

                                            SHA256

                                            e79c5d23cab7d23f4856f15b8d3ce764d2f5651f565ad57a4e9314cad56c1476

                                            SHA512

                                            ade70e3bd7a72f6a75e292de54009271b2ace91d7bbcf3642f15dab718aa56244c06d6cba7f0942dc330aa4a9da4125b1c85a9e0bfa4d15031d1998f38fd01a4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            408B

                                            MD5

                                            3ad5d75db4e1b1ee0b510473ea1d191f

                                            SHA1

                                            722bdb899fb9bb1741d13ed09c8cae24cfccfa6d

                                            SHA256

                                            6060cfccf54db760a0909593846545d2d583b0dd056673b97e1de4acced954b5

                                            SHA512

                                            b722dc99e7ce494a3637924fe114e3b446840c2f5a35b84fd9c5bb99941e15b6bd36a00c4ee04436153d9fc60b38c210d51ddf2fe5490ebfefc465b629c1d5a8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            288B

                                            MD5

                                            e3622363350290bb8accfcb40bfd1a7f

                                            SHA1

                                            13ab02ecb3d13aebe63d1a73ffc9e8fb328d00f0

                                            SHA256

                                            f68143ea0b47af0a0c186b60d67374d7489b93eafc68433a2e9da7c38372bd52

                                            SHA512

                                            54495dd51882101c1e77e513845b37e8a5943d067e5e3c2bcf8745c11f700c7fc1d9ec34acd2bb9feb0be9c596b02ab0e1decb0605a5d7663fdb255a7566f927

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            1012B

                                            MD5

                                            c517a3b4d70003ecf7676b1cdb3c36f2

                                            SHA1

                                            f381ea5ebaf3f4ada0c443752744576b300e7d82

                                            SHA256

                                            fda5640ca8def11bcf9deb48dfc91dae93ae5de6bedc1804c1b8de34fcd14951

                                            SHA512

                                            804d9388245dadda3320af10c421b0d668616eb438d0e3f00c1259c77f7e6f3b727c900d476e69cb2144360e0e52e1c3ff319760e4778b93da446c096da7e0a4

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            d75cd3cb29b33e8ca8146d6536842191

                                            SHA1

                                            92c2099cce41d224b78df699a69fc647f6addd8c

                                            SHA256

                                            ef566e2a6c5ce3d7e57c4a0340ef3311def1a228a347c1cdbc6f5d287a6decf9

                                            SHA512

                                            00d0b5059289ec2e384f5ced67b0c0591d451403e1ea0087e47b3c15fcdfa0c1bf3d590b414f3ae6d16fa650bd9fd5c05e61bffcdad6facd50b0104680a90a2f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            69f7ca49243d8719f49ec84189373c42

                                            SHA1

                                            eddf5e62b063e4806ec6260e1594e5c70ed29295

                                            SHA256

                                            4c0dff5725e95e7ee56fb382dddf861f2944688da34583dfa41805ffd6926dad

                                            SHA512

                                            ec2e1ed3835618b9fe56a76f80d369e79f4444cfbc49835ff4ed038a109859186ace68b313157a1826c889f3488affb3a1c5aef67cc4eea311c26f8106d48dfe

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            cef007b696a09d4acc6f2a43113e3752

                                            SHA1

                                            e696e9613b00457ab43d9912eb7297b269762220

                                            SHA256

                                            9e865a871a8f16f1f282c4cafea482e6301680f24c5d5fa4385ed00b1ae2c12a

                                            SHA512

                                            549442364a4b83b2ad48d13b93f99f75d4066c0a76b4f9770be3025b22c7a2bece67d9ffd14a91249d5ed221b0ac81863021ba314474fd7cea9ce2d90cd45ba3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            5685817ae092730dfcbe433d57ac3625

                                            SHA1

                                            987a0d110b8d4d3522b60eff8af9bf1a96f2cd1f

                                            SHA256

                                            1ee295ce4b2503e251284f5c60737db35a4023ba445cd8cdd5c06a6386a4c81b

                                            SHA512

                                            65b21ab7e9228785953ba62801668b2a2f4e4d08be825180e95c17d44998f416612f63d409b484100abd7ef1f168cb56acc03e8b406478637fe9d118047b02a2

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            549b9b2a2a8a247e6c176ac57d856b7a

                                            SHA1

                                            cc25d8fc9f7aafd7514bbc572e8379824ee117d9

                                            SHA256

                                            92d98168c1c0837996efb8d1b0b9247d7be5fd09df76ecb02f36d450384295f1

                                            SHA512

                                            7a2a6fa5a789e206260e49b0c978215435508ff1e05b7b6aae985157dd10be320b43e23e10d34ccc04a4a811d8399ba89ebdd0e1b51b888a6970f3f0e44ba7bc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            d9c5ccb7aac44f8209c3e1c7ab8639f7

                                            SHA1

                                            39aa25620379c8cf1cf750ef1ad973e4d63fde93

                                            SHA256

                                            bb9ac970d2d71f4681213e719ad599f95f2d5921cc90c3a040849bc2bc7f9bf1

                                            SHA512

                                            d3cd1b99ff7d7d54510bf2975e9a6576a876c49a0e2a8320f9b3dfa204df33ad47dd9d1d00a54e89a0c8f7aafc1965e0366b51f2300097804622fce2d0401d28

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            ba28cd6b791b404bf0ab178eda459c66

                                            SHA1

                                            ae70c46599c054bf703faa1d5fbb093e56660155

                                            SHA256

                                            b0eb75391c53a371be66231a4b0d678a64e6332f1924892f23fbd69aafa463fd

                                            SHA512

                                            e20b7d5d48db7100987d4dc73b5012600ed1e0c156af1a4c098dd36e8b84af2a99b506844707deaafb2fd41ec0c600f85aa35d7914bdda3bf4739c3a149a356f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            203B

                                            MD5

                                            3e43963c49cca97d05cb7e24628da0ce

                                            SHA1

                                            ac6c01cedb8da869d979b13cee02f038cf1fe13a

                                            SHA256

                                            6c2c2bf8f0b9b4b500c72119cd9ed494bccc1099fcb4799bcca5bcf890d0e814

                                            SHA512

                                            83c8eb11d5f47b90653896173b2033c1f4ca9f0efcf1f90e8e7e8492c762d8da583e753d2425743b461fc094d81390af2f93a172d617219a2718b5c9b5226273

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            203B

                                            MD5

                                            6ce7a08aca7a4fd63c56c43db60b7c67

                                            SHA1

                                            d56b2b32bda5871cb93fddf55d6c09a0b2698302

                                            SHA256

                                            4178f4ec1736f176f2e24d111bf20cda2861a2f3ce086dbcc754f47e82d21886

                                            SHA512

                                            45692a2b8a2b3b8259553d140fe04aeeb51927a9d756c281226c332778cbe031e7fb000ab926bb54ed3da98c846d6a15ace59aade57a81278e3ff923873bc8c8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            203B

                                            MD5

                                            7975349a35de5efc2056e453aa85c5ee

                                            SHA1

                                            e6ae6a1c7e51cfbefb6a3376d69c9c96c29cc7c6

                                            SHA256

                                            2f8753c8332ee7733c29a9e78cffec8e4461a7902c4da4fd415426666c73002b

                                            SHA512

                                            3fee953658b167d080da6b2d3c6d82f3fcbe2d306242c85a8477203904eb0754ceeba69bf4bbfeb3c177f5cde1453b042e9ca80e6ced5826edcfdff690ab0606

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587980.TMP

                                            Filesize

                                            203B

                                            MD5

                                            27a57b011eef0be6c1ee2dc162a25514

                                            SHA1

                                            62d16e32cf3b9ceb08e677675626fd0e41bac0df

                                            SHA256

                                            6105e0572224ae85a87e30efcd1d072280948c653db42d2125b4108a265983b2

                                            SHA512

                                            e69d55c2d27c5aac33f321f9a36d301bf00f502c8c4585b07e4ffe6e7744b17f9e480435e356ade1b825857b8804e1e7a3fc3c2f813db672a704ef0e503025bd

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            46295cac801e5d4857d09837238a6394

                                            SHA1

                                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                            SHA256

                                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                            SHA512

                                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            206702161f94c5cd39fadd03f4014d98

                                            SHA1

                                            bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                            SHA256

                                            1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                            SHA512

                                            0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            10KB

                                            MD5

                                            acf3ddaf806c6671d642e63006b7c97e

                                            SHA1

                                            c2b4adbff77b52541f7b24ad0fafc3ff56f8f373

                                            SHA256

                                            76c4d235011ac4c4fbe57b254c56a92d47250f602d53d15bf6e29043bd50ef21

                                            SHA512

                                            4bb962b03f865f089f19ecc2738a4c86cf1920d8b08730ea8fa6529e3496b6ed5b0ee08b342e4cdc3b2bc7dbdc869e00722bc32987e43b108de52f05bf4f5e91

                                          • \??\pipe\LOCAL\crashpad_2164_WXWALMVEMVEKICFZ

                                            MD5

                                            d41d8cd98f00b204e9800998ecf8427e

                                            SHA1

                                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                                            SHA256

                                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                            SHA512

                                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e