Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-10-2024 10:20

General

  • Target

    7ec9748eae9f209c9e82cdb569591b82_JaffaCakes118.html

  • Size

    114KB

  • MD5

    7ec9748eae9f209c9e82cdb569591b82

  • SHA1

    664dc67978865d5d7d65c913b5cf98744db8f523

  • SHA256

    96aae025d3b90d6007aa643003c77cad20d99f6d50fafc11c871f38ad0f8f066

  • SHA512

    06b86a735ce6709a212582d0836fb830599a6385048a58a79ae03efbda0feacaf1fbed8454d82841385c1707cabf8d58b5f973e6fcbb9d2078e1512a6871d8c3

  • SSDEEP

    1536:twgr8VkeO3hAjsMe+y5M1IwES6yjG2HZTvlSmCwo02BNaaS6cgRre3aJFx:5eO3hAjsV+y5M1IwES/yao02BNPUKJFx

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\7ec9748eae9f209c9e82cdb569591b82_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1260
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc825846f8,0x7ffc82584708,0x7ffc82584718
      2⤵
        PID:1996
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
        2⤵
          PID:3536
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3328
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
          2⤵
            PID:4640
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
            2⤵
              PID:3680
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
              2⤵
                PID:1196
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3096 /prefetch:1
                2⤵
                  PID:1288
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
                  2⤵
                    PID:468
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
                    2⤵
                      PID:4524
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
                      2⤵
                        PID:4844
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
                        2⤵
                          PID:1804
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
                          2⤵
                            PID:2308
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4244
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
                            2⤵
                              PID:3668
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1
                              2⤵
                                PID:716
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
                                2⤵
                                  PID:5952
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
                                  2⤵
                                    PID:5976
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
                                    2⤵
                                      PID:5380
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2496 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2256
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6220 /prefetch:1
                                      2⤵
                                        PID:2600
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,5314484372202364973,4113478955688276699,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
                                        2⤵
                                          PID:5740
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:4404
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:4216

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            d7cb450b1315c63b1d5d89d98ba22da5

                                            SHA1

                                            694005cd9e1a4c54e0b83d0598a8a0c089df1556

                                            SHA256

                                            38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

                                            SHA512

                                            df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            37f660dd4b6ddf23bc37f5c823d1c33a

                                            SHA1

                                            1c35538aa307a3e09d15519df6ace99674ae428b

                                            SHA256

                                            4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

                                            SHA512

                                            807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            71KB

                                            MD5

                                            da52e38c98b0f2047abeb07609608ab5

                                            SHA1

                                            da1210caff36df73e49a0c271ff7d573c2d20d02

                                            SHA256

                                            726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                            SHA512

                                            35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            61KB

                                            MD5

                                            468446a7240461af44b59ebb2047c231

                                            SHA1

                                            47b7c525dc91bece99df0c414960b9490b986ba8

                                            SHA256

                                            ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                            SHA512

                                            ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            23KB

                                            MD5

                                            beda68c7227c7a5a9f974b1c74d257a0

                                            SHA1

                                            8a03576d27c23e9612bcbb5b9e758e4535ee4c81

                                            SHA256

                                            e9b270df7c8655f05f8336e4897debbf71a38a69c3030f33031376b4257addb2

                                            SHA512

                                            4e178897f5ae13f1cbb2b374918e22b5b281a78e3362fd6125701776c8826956c06153147840b52aaf4316bc8078059f83ee4758d84cde70190bde8f1f36e619

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            117KB

                                            MD5

                                            ba1fdf336445fae71e285670280d674c

                                            SHA1

                                            ea84783529f71e28b6be1856aa8a9f31949771e2

                                            SHA256

                                            588590044e23f37d33a9b63194209406ed13a37d21ed5ccc6910e0217f4584b7

                                            SHA512

                                            af30b23cfab955696b03273212808bbc3a10d11e18fc40a40fa8a75ac790669a624e5e972f3337a53e0c07f08f82376b211e66954fba15e0ca12f4138db8e304

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            104KB

                                            MD5

                                            271110dde91c2d5d7d35ef38b7cea03b

                                            SHA1

                                            a07d26ecea36a04178701bc3de41439523430372

                                            SHA256

                                            31b6d940f227d6f1b2a3bdb7f58739b29d7c0bfacfcac4fd05dd2a8c92c1fe1e

                                            SHA512

                                            ab401173d70d40fece5eac7aafac7babc2d680416b82081743328a1eadafa41de2c63edf931ee637356da1a0a3b194f2f62ae8374609b0cacf5749ac70ff0c9a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                            Filesize

                                            192KB

                                            MD5

                                            797721ee43d810fe3b24ca927e860f2e

                                            SHA1

                                            ebbc7b41b2c73ce65d68f243b3e3136ab288120e

                                            SHA256

                                            70cdc0beb310e8242d4398023f34aed34cf5991fed808809662dac4683592d3f

                                            SHA512

                                            032f51da19c3d5f5c9e28d67dfee421dc9392d5e83d476c73470742c650252c3c387c13af6e82869e477ce9825ab95717852a16799b671c550280fb17e58908e

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                            Filesize

                                            219KB

                                            MD5

                                            53587c76d63e6bf56ad37f3447db97f5

                                            SHA1

                                            b0c450e82af8e3dad230f53ebde55332f0b1fc6f

                                            SHA256

                                            18f8c51684478202dc06cbdf8e3db4a7eee3aca8d28382e76e281b19b5c6c4c5

                                            SHA512

                                            44fc886e5df1f944fdeb020e7610e87361c97bccb77da843c8e3f0bd7f145e06e24e51dade6dfb3a2acc56360f7ea494119b7eaec4d765278ad0609b4dd771d6

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                            Filesize

                                            226KB

                                            MD5

                                            3a8bd63d38cb2ff4d96981d6554823c6

                                            SHA1

                                            cb857cce816556eec9a75c1ae8ec989efa3983a5

                                            SHA256

                                            977c2e0231fb47262ebc142a0ec953f6a1f0f6a1cb99d208fc094955b75330ff

                                            SHA512

                                            4ccfd1566e3db09265fac3da87119c9e74957303b3597b47e8525ab5ffd3ec2dfc8fd0b8bf05f480901c698cf1370de392a5e983b7ee01f5771e4f098265cfe3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                            Filesize

                                            212KB

                                            MD5

                                            1f99b111ea2b8c96abbde3bc3577de83

                                            SHA1

                                            29498d4e862e5a01c940f29e794e9b6c37310807

                                            SHA256

                                            d4fabe98a3b13ee691b104799fe495ea21603fb93404b06adf7b85354a1a1c0a

                                            SHA512

                                            2e49a14e170e57578d0b33f63644129135116937fd1d704448a37b266c4e9382d6c63138b4ccab02853ae0508fef318bde1a0476d4530fdfd8fe11743ed406be

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                            Filesize

                                            198KB

                                            MD5

                                            131a26183ac7895efd358928b1e51b7d

                                            SHA1

                                            91efcb559a561fdc94e07d8776e8c44286fb9d96

                                            SHA256

                                            34d42d436ca2c57df9ac71a42ce84be6e9d581adcb634d8d7a1f362e7c87839a

                                            SHA512

                                            d3b2c05fc429bfbd13fe9b91340b95f9447491b555e7b6d6ac003201d1fc7061383d987cf6987a840cf9634658e5ba18bcecd4c6931608e980d5566c693cca61

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                            Filesize

                                            477KB

                                            MD5

                                            17bd357c79b38d7eb3a75263aff5b101

                                            SHA1

                                            13a769be8aaa402f509d9138df238ec2a1da8ed9

                                            SHA256

                                            2f5b6cf400bfd250b28a135aa88ff9c9f7975165eafa173c5f35e8b5c4b20915

                                            SHA512

                                            63b26066003799a5d5b70ad3d78446b2d4e58512623ee51caaf968a147326c64b934158d8b3107eaedc6086891482a33d660b77964bebf682529fff3590a097a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                            Filesize

                                            120KB

                                            MD5

                                            dc54e316f1d430723052d512eb7ee3ca

                                            SHA1

                                            c75dded906ca8a0ab357ccb3dcae39422700dba5

                                            SHA256

                                            c2145bb74221759af4e24368170f00199d25325295a137c983fcae86ebeb6997

                                            SHA512

                                            7765fb38af6454995a26fe0da827984437473d7fb16cec85848fd81ed4fbfbd426cf786b63abeef897f27166b64f7802af6ed0083f10f1f851a728a0e3c08187

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                            Filesize

                                            207KB

                                            MD5

                                            e931c73695ea5f5aad22055b29172746

                                            SHA1

                                            d3a45236217ab29933a7339f275da704bc3b0f7c

                                            SHA256

                                            60aefd8c7e8407f68e9da2b1991fa771620bfb72839a700a355bd2ca891206d9

                                            SHA512

                                            715712490d669dece84301e119859f04b39a98df557a2bdf7e4eef99e7f3e45f9b95a55099d6561e8e8e93d27f240da21951f9db9bd4775d947334f4a047d624

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                            Filesize

                                            440KB

                                            MD5

                                            5031b85b56bda6ba74a32832f1444396

                                            SHA1

                                            9694649b22d8e6f5a23104ce93587d73f6865942

                                            SHA256

                                            788fb27bd7c9a7bbd811f8345b712713d38d21b48fc3d0e93484b3482b83a6f4

                                            SHA512

                                            348521ece34a21482aa58ed6c89c45246ca4cdd7b77861daa6a304c7243407cc2e403792765dcc14d4b31021e86b4df394a144c6e9096311422e9d4f5a3c9e4b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                            Filesize

                                            168KB

                                            MD5

                                            82bb39f4cdfe93fd462cd986d8339eac

                                            SHA1

                                            bc03999cdf78c7f5e40c0b9a7472802be66b379d

                                            SHA256

                                            78b52111a2e5809d3838847e87c811b657e26c874f65d29844ce10d31af96120

                                            SHA512

                                            a73d128eeeccf6626cfccc721773520716a95057af4bd378ce2cf5c3f9315fba502242a850c977ee727f5e985047ff00be46560a05e92184d75dd0e59cdcb8be

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                            Filesize

                                            193KB

                                            MD5

                                            6e966a5869f9eb6108b0608c35be3c64

                                            SHA1

                                            b47b45a3b80e4b057a6b7e6a862eaaa46e545272

                                            SHA256

                                            16506ef42b748f941608eb2948241267bb560b6010c024880e724f083a70e9eb

                                            SHA512

                                            961b4cd9f11230ec4a6f94dee1c7bd9aaf752c6062884ff15cdbf2732ca2563fbe0c6a4d93ecf0427366acd71126e987635b55380aa9f5086cfdd9946f1620b0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                            Filesize

                                            110KB

                                            MD5

                                            b4b07f5b990f6c84976595d01333b466

                                            SHA1

                                            71e33f52994f7bd9e39b673656835b1ea9af9ac5

                                            SHA256

                                            e71bbf63c5be68d0e7172d17d55862b75d44ec870f3c7ac9807be45a618115e0

                                            SHA512

                                            db6b17c6cfc80aa345bdd624ce8feb6a9fdc8ab8bd9bec7c65ffc990816f72b0ec3fc24840d7372839940029ef8a6c7dcb7e1b0844c38b2fa874e7beb800d6f0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

                                            Filesize

                                            146KB

                                            MD5

                                            3eb1486d682ac913db6d0c94f309b196

                                            SHA1

                                            bfc208f91d6659d2e772589642d31dfaee58cae7

                                            SHA256

                                            35347c86a6473d75c59e039669f881afd1d3eb3f5d612f978e631c640e1a486c

                                            SHA512

                                            f7ec14ccc13dc4e9e4e5d915a105eb44741852a49bc80449a3f69e3468fe4d1675e0886dbb41da2bab4ef27b11038a231d0afa6f70de25fea211aa64e528a96b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

                                            Filesize

                                            441KB

                                            MD5

                                            2335655c24ee053985bc432d131c56c5

                                            SHA1

                                            0ef2290daccc5827fabd3e1a07731d6188387327

                                            SHA256

                                            ef6fd424242d11d227ba5234df71775e16535cb73db5ba7ffdd2ebccf783246d

                                            SHA512

                                            273644a647479a15012f0aae50676d737661fee38472ebf8fb98fb6ba02b5ea039d1a5df40cb071ebfaec34105dd1c306532d5c885f628ef9c6771219e7f83bc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

                                            Filesize

                                            194KB

                                            MD5

                                            b70c13d19f84b4d4d1d0876ad2b4201c

                                            SHA1

                                            957331b79171998f0513a950bfbb244f5d90b659

                                            SHA256

                                            83f4209d3d765f7b911dbddb45b7bbbdf3cff027ef4096edcb1e99736f15841c

                                            SHA512

                                            7b0615a3d8299bfb13d7740e15c8f7ef4ff18a2bdf82b1b8a667e3cd574aa5f13ee65b8239a9b8063d135c11a2c699566c537cacbafc4e8dc777ed9093d9ee46

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

                                            Filesize

                                            176KB

                                            MD5

                                            188aaeacc5a7c0aacc4a7fea5896f6e6

                                            SHA1

                                            083f2fca716f86e2b2184ff026aa403a87905eb2

                                            SHA256

                                            ed28b22a04472fe3db96db655240868b0c250479f0933e19254f0c32fa55d5eb

                                            SHA512

                                            ca351fd2da734d2a2c6d8f14b0eab0f2b6385e526a6c24863a48f2b92bbfa9f7971c9de45a9487f3c2fd23157cfe62c5186327d393ab152db8136a0ba427eb24

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

                                            Filesize

                                            33KB

                                            MD5

                                            d37777717c7d1df5db3dd0c15811666b

                                            SHA1

                                            7f975c65e6ad79c425ed6518f09ae87d45480c62

                                            SHA256

                                            ee55e3621562447e937ea2f351b96a0eecade19fdc0724b121c6179924d6b2d8

                                            SHA512

                                            aaa02d1ec66c394528ab25241b07b04a6f99e9cb5780b0a7c87d6d0170a05b6e1723d97e1c2e43a8f6b9b27332533ddc0f955c2ad270602e793512e9ce3d447c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

                                            Filesize

                                            42KB

                                            MD5

                                            101f2295c59a6c129b95bb68093aed06

                                            SHA1

                                            12f5843daaf99bdb874dfebaf10660c54ede2120

                                            SHA256

                                            9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

                                            SHA512

                                            f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

                                            Filesize

                                            32KB

                                            MD5

                                            f3304abddd0eb05980bda1e27d73b6ad

                                            SHA1

                                            c5e556fa6899ddd275299f87a5a810a607286755

                                            SHA256

                                            77282d176e862f63fcb021798d4ea140f27b1870d6f1b6c5aecfa42c23e6ceb0

                                            SHA512

                                            db781067763f0aed813ea0af94e086dd719c1d714b87f36e5584874ef778fb0a6f86c9babe3c554cfcd7eec1cc1b607bc4136525e7c360272f770e000261a818

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

                                            Filesize

                                            20KB

                                            MD5

                                            1d19fd6aa4ec2f288c8aea91ff64557a

                                            SHA1

                                            32d8112d84f551e18bb889fd84ea4b7ef8ada911

                                            SHA256

                                            92eba48a0b3d5d0f2742cfee45003c7090269b38ba235c5ef7ed13c42d9f1fcf

                                            SHA512

                                            c06277b8ee538c14889a7c8ec2002ce8f276d982976c5ae3a47ebd85e5c25f06b6a56cd13b0b6e2f850257b9836d57eafdb562111f55926b8fb10ff92981c21a

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

                                            Filesize

                                            504B

                                            MD5

                                            7db6e93376f42f17f6d8e44b44f82a39

                                            SHA1

                                            7da613b1727fd53e92e87970531a668e7873da79

                                            SHA256

                                            b7ce329438b544e6fcc444bf52d7b625a3d903ac749785c6ded9d52892854dc0

                                            SHA512

                                            45811e84949cd717ae9c2a7e1f09e4f30b58c269d2e30450f18faf3e6d598862852afb3ef4d1319f66bb609d1397c6cc7c3e33b893c985c43b40ee985d366aa8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            216B

                                            MD5

                                            e72f85045e4dbe6bed481d2f7366dc34

                                            SHA1

                                            c21ed17036f2a0b389ef631e6319166b5fce2e2a

                                            SHA256

                                            869f7106213cf762423aefc148867f0e2fcdadb92b1d8ef7dc147a7e5076c2d0

                                            SHA512

                                            3513810a7ecbe2ad5199f6b223885f70fb661dda85a6aa2cf84fb0b73f4af93104a64a26fdc8589200ab52321ad544f62d82cf19ffb034a601e1c06303cd8c0c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            576B

                                            MD5

                                            f176a134e53248f2d27b880c5c9c3d66

                                            SHA1

                                            c300b8f1ee33f4497170e0d870a2ea966cd04b9b

                                            SHA256

                                            dfac8a9156e7c03009e094a5c6bcc0baf43d1a60305288f83779fc0bd823367a

                                            SHA512

                                            d22a0feb7c7943b11f7f7e90f9302934da1a5a4096c8d8030d0b1944b68b9857152da57650c3c1c70eb16e952f48525483bd6a96daca25fa750941a9d64e7ae8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            408B

                                            MD5

                                            be36e770b8653203e2f0fadf70cab9a3

                                            SHA1

                                            4e206c97c7153502eb545c9c5111ea6e4a86c6be

                                            SHA256

                                            aff464847901cd34424cb572cad8de7192eef8acdab438030f3f0cdd3728be01

                                            SHA512

                                            ebdeae642ff35d1154d776587bde3f2505e7efab2b277537f43856f04be890c3aae45c57f23d22f1d2698ac298f29ec711861e8e20846d30e4ede3e9de075b46

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            1KB

                                            MD5

                                            e149b1c698e3061a2d3bbbedebd4ed30

                                            SHA1

                                            7569bcdb2a517a8094fd909cf35dd20a08dff4e7

                                            SHA256

                                            0e57ed4b6f814ccdf77cc8df85e1fdbcb83a080aba0e6a7ea1310e323963afc9

                                            SHA512

                                            d3f559613ae86e5ed42722fed4dfdd3eee793ad64ffcfca765c940dafabc152faa889b2da953fe3572cefa26c4708a5ad9b0ba0f7c21390e97ef90ba1556a948

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            f0236127ed6793041fc1e585bea2bb5d

                                            SHA1

                                            1019a2a1a98a1fa539c717e85cb977b163ccc0ae

                                            SHA256

                                            9079970481c9ad8379f27460c5a9bdc4e4dba5c217ffc6d719725907023cddcc

                                            SHA512

                                            1bec261318e63494405d72a6c949785fdcd68f113cb291d83fa10fc06172cbf3caac1c6162bc4b707fccc972350d8ad0717bf15ba5996059c28d212e4e5d17c3

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            b3f08f90c52595f8016516bd77100538

                                            SHA1

                                            a281df977a88b2859c39bcd3f7457f4b55571197

                                            SHA256

                                            6851fc1fbd259268bde80fd3c42f4aefe5865f0c75d2382624842313c730c7b5

                                            SHA512

                                            4bbcff88a7af1b861f63eafe397d87d32bbe64d476bfff3dac8c2b5ab4b7bea29057fb19e1debd34c731cc9d6ef6f2c21e52bee0295c95d050c572cb04e984a5

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            ee7d89527f0e9f8ef6c88adf8fd6a065

                                            SHA1

                                            cebfaec7cb48de122cc3dc0c72f9d741dc8c7115

                                            SHA256

                                            3cd77f0b7e56c90a2f834cabda8de79ec13506a223a73504abe1a844790e8540

                                            SHA512

                                            2385cb649fde21fc465d477ff10605180b79ed16548f4ada2480ee4eaaa27972ac019292eb53c7f9158f3252e9c62930ed56387607d3496ca588640ab18c4248

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            54bc4d59850b9279a21f6c47cb1550fa

                                            SHA1

                                            b280e39289fb625cc64fed030f3e753d9da6d0e5

                                            SHA256

                                            c395f79408169450167816fd4fdb950b506850fa60c12b7c85e94f4c4a07646e

                                            SHA512

                                            936f9165b57527f7054cffb53a20e04002f77f0d150a38f16eaecae7291a66c82be6c8b1f06444ce153a139704fea00d3b3ff29e78eab6f3c838910993a954b0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            1937cc8b70ca5b13017aa5d65bd4dbc5

                                            SHA1

                                            960c7a94d3e910db4b30bf17b7e157d0d6783c86

                                            SHA256

                                            e25a75fcfc028822d685229f82eb31784019c742756ef9d14b9f25e39d24b10d

                                            SHA512

                                            a1ca37e6233cabc6e55cc995074dd9ee482c6c60d3164a625abb9d263ae2948714a6fa633099cc31bc5cf4935044d617b51cc598f3d423d115386912e324fdc8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            ec0655243738bc0b18d2941398ebe9c5

                                            SHA1

                                            395be7ed9d9b475d61292cef635e4b8bfbcc7aa4

                                            SHA256

                                            742c0fdf2c3946d13a877b7deb2d76b42d622e3c8bb243c7d1d859ec92f6b7b5

                                            SHA512

                                            7966946f9895b61520fb787620fc180bc4e1824241a290cbff084a421712974220cc8a3367d968d6e31109ea624b83d84a64ca530195a4753613c33b1d3c0e1e

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            485e567d2c2cf02d6260284290d70acf

                                            SHA1

                                            1dd9459dd866cb5620d8d2cd653effc9e8e6f046

                                            SHA256

                                            7c2796e80c81b695b2a3b9ed45e50c54c80fc3d8beb6996fce45f617ff182352

                                            SHA512

                                            6b7e4a151b58063f82854ffb3c027dee0ae7563a9ea13417707140204155684eaa5f146c40bac12097814a28a5a78b1d36f6c97a6cb16fca5d7d1cfe71bab618

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            370B

                                            MD5

                                            a6174d5acc9fc900bdb3ea239e0961a5

                                            SHA1

                                            d18ff8720fee3cbb4946b1150f89402464114dc0

                                            SHA256

                                            13a8bdf12d5e67c671a3625831d313e4900222258571f608217eaea98743e688

                                            SHA512

                                            6d2b84b8fd08cd3156cef9877ae4a56b2a7f6920cf1afcba1391010d532fabd6280825229820e2812d4a4f906ce7bede33fbafeb05a6f28d16958bcb6d30b5a9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            370B

                                            MD5

                                            c8acbeb77571124d132b584f82ee30f1

                                            SHA1

                                            6e522854dd3a2e44a817acb27ef3e2566afb8efc

                                            SHA256

                                            33721e795801607238455ae4f7c96513f9501826e16cbd22c1e45cae12bd76f5

                                            SHA512

                                            68c5541c2cf656af1a6dbbe142828db9d79e3a2a2989cd666298b0847434157784cdc2e21426f36cc56d3e4616820127632f97071c51a48ef1af381267b34643

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            370B

                                            MD5

                                            8859d7d1e177dcd48537b0e2601de9a7

                                            SHA1

                                            984d894c072bfac17d28eb5ea3981fe027d13b23

                                            SHA256

                                            b17f930bc9dbacb5a13631aea41d9194e13c06a622870ee1c0b1301662f75ce5

                                            SHA512

                                            dfc41a822a711359c745fd376b9d10fd598896bf76f6e9f5964fe9d34638b4f7ffe02c14e278a80500508c590b35ee706a0bd813b0c2b040ba2b16d7b79f721f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f55c.TMP

                                            Filesize

                                            370B

                                            MD5

                                            ee4b5c7a7f13dd5599c418cfd75e623c

                                            SHA1

                                            1380713a1f2fffaef0ad2b63ddb4f69497d43cd6

                                            SHA256

                                            6c3c6eff84bc4bcb7a75dd27312d93c5ff8ffca50814b14fcd73fe7423d5dc17

                                            SHA512

                                            e4d869bf06a6c7e6bb2e48770e4e8424425cee8488940d79b2f6ae7623212763a943c8af55f2eca4b24f242e76487a1b9ad713134c8c23c134436e0adbb80020

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            10KB

                                            MD5

                                            9e425cad645c15a5cdb80677e01d3dbf

                                            SHA1

                                            6e977894a4629e7026b3b654e14ef78739be7a5a

                                            SHA256

                                            9a8fcab0d99077a24ddec64bd4cd4a2d867efa677244a2e2b378ab030da0d596

                                            SHA512

                                            dba88ad02e941ce4f9360f7647b004d978e100a3fd2f0c96f353dccf93ed8dc2c26bad9f13e97ec4787157b92084b9044c49b6ce6852950e18e3703ea5dffd82