Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/08/2023, 11:58

General

  • Target

    http://www.qt.io

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.qt.io
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb8d546f8,0x7ffdb8d54708,0x7ffdb8d54718
      2⤵
        PID:3060
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
        2⤵
          PID:1560
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:4892
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
          2⤵
            PID:5092
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
            2⤵
              PID:2252
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
              2⤵
                PID:332
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
                2⤵
                  PID:1316
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5676 /prefetch:8
                  2⤵
                    PID:3680
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5676 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:4556
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
                    2⤵
                      PID:4552
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
                      2⤵
                        PID:2368
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
                        2⤵
                          PID:4000
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
                          2⤵
                            PID:408
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3096 /prefetch:1
                            2⤵
                              PID:3976
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,10432718646917798114,6533536995504638797,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5244 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:4316
                          • C:\Windows\System32\CompPkgSrv.exe
                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                            1⤵
                              PID:5064
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:4288

                              Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\335f74d4-1909-4a7b-9927-6a0070516118.tmp

                                Filesize

                                12KB

                                MD5

                                709a1303453d263759d3e897d908ee9d

                                SHA1

                                e2e1a0518b56693c15adb4f5139afb4a6c816265

                                SHA256

                                3bf8929069ed3b81ca6e48693b5b4bfff178af05468d41a6f3ec1342a9759188

                                SHA512

                                4d940fef7d6ec886cec950b6f58fa223120b5e471c9808db6d8acf29d731088ef65a3ee2c3e690fb647fbe4a79a53463bc9f5684a02fbe539c477a326b64ecff

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                b5f5369274e3bfbc449588bbb57bd383

                                SHA1

                                58bb46d57bd70c1c0bcbad619353cbe185f34c3b

                                SHA256

                                4190bd2ec2c0c65a2b8b97782cd3ae1d6cead80242f3595f06ebc6648c3e3464

                                SHA512

                                04a3816af6c5a335cde99d97019a3f68ade65eba70e4667c4d7dd78f78910481549f1dad23a46ccf9efa2e25c6e7a7c78c592b6ace951e1aab106ba06a10fcd6

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                Filesize

                                107KB

                                MD5

                                f7a9b30ab858e69dd65448c16cb038c3

                                SHA1

                                95a28b021467d09a5ecc118f9bd8e0dda3e264c6

                                SHA256

                                22fc3d198d1cbcabc5d6ab6b5d6775bcdcf29467b1ddd6d6b0feffa447bc4c8e

                                SHA512

                                63b16dc4dc4de66175afefa27238b646413507d055641c502f2d388a818cb02837d6a48df02cb8ea33ce2762eb9a68df1ab7a2bf4f3e35222dabcd68baf2e420

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                1KB

                                MD5

                                34027171e6b2e9da090875e79b230446

                                SHA1

                                8aacdf0369ab7edf532c9d8feb4c226c26594236

                                SHA256

                                49f103eb498a2ecadefa79db1392daa69c53f750b9a0341044339b13f30bab69

                                SHA512

                                ee856e3384dfe89b15bca08ccdbc0d96ceaab6edd44fb56f256999960ddd516ac2977b467f64b339c47d31333694e7ed0a9babe436b24737da8a1fb01a040882

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                672B

                                MD5

                                ec97965a2bed2e166e0b86a80b566b49

                                SHA1

                                68bb18bc19d7dc67ae2e0f9699b50c20972ed126

                                SHA256

                                7d504ad480b0bde540dbe231d69e9a583c813cd857fa4dfa5431cea92af9b625

                                SHA512

                                699bff0baf96c48631917adf599bcb01f3b2767ddfb8c97434600b5123915a7a1920a9cb1d15ad14313a22929adbeddae3801d0a746b9f7297811f1957c39bf2

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                1KB

                                MD5

                                7b61b49e1308585aad0e9364f17b278a

                                SHA1

                                66e87612ee35c4089d98092bee370453a6365160

                                SHA256

                                611d2245a498332e5b5734b5b86735aaf02196ce633a6e2be20af913da9688a9

                                SHA512

                                edf8fa4a41e9a0be94e6ee477d94cdb68f9f8de858dd956b130361fe9bb8e0725d1d810dfc2709ca75ad1bc0420620e7ee31700e7c725334ca6069909f84449d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                111B

                                MD5

                                285252a2f6327d41eab203dc2f402c67

                                SHA1

                                acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                SHA256

                                5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                SHA512

                                11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                4KB

                                MD5

                                3ccd3d83d37cddf2e61f1567d446126e

                                SHA1

                                0c5d73950b2af827c8b2ba78472a792c65c7a8a8

                                SHA256

                                a5a28c3e949653288cb20d806989524507d8def36551f520704c0559eb59500b

                                SHA512

                                bdb37100999301bc0c2b30224209c13ae96620be7405e8bf942998d51425e52235fbb6928d16485543fc40ca202c54687dacf0c414a12ccb037e020e44de4b37

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                3KB

                                MD5

                                9eb68e5d9eb6e19848f0e64f1a6ce3d8

                                SHA1

                                674fcd8010acfd9e4fdb8f1242776fc0b2150b9c

                                SHA256

                                2a968d3a94d05d4879bab9da536d9f4790206726c3f169040eec6da465cba802

                                SHA512

                                57bb9aa4a4a0bb0f5c6bd24445c233343867c8f723a60ad9bfc14e0b5db214f2d163c48bc0993d5719c6166e2ec009af2e8c5ff1421e542a0bd6de7d495a9baf

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                e6e0d9713c57ff21a9996d22f9c77bba

                                SHA1

                                0f820cb0067d82c48309406f510b2f4d666f56f8

                                SHA256

                                550f85d51120a50e7238c35c6b5af234a1aad377cf1d7530cf10982a0b8d0c5c

                                SHA512

                                8d3dab704a92053cea12c16ccb62adae27af086c7f9ec81d136b723da54ca457bcf48005ef33fdc35e5e7b3f38e149c23564b85f2cf371b6c1237472fff13683

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                972c1a4c84d1cc53186376fcf5fccb48

                                SHA1

                                ab1c54a4564236ad54f751ac8ab1af7bf85bd42c

                                SHA256

                                d32bcedf627d308563060ca206b197fd46926d1c16416bbbbd5009f527147320

                                SHA512

                                ba3e2bfc83a5721cf4fedb8adf948689bc79d8303f22a13b2b91e034c0b30ea7c00b1285bfdc04a9748046c802821e9067cd9cbb6900bb9b644fd0c68252a999

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                5KB

                                MD5

                                8dbd81e4fac18cb0bb01af81bc531f5b

                                SHA1

                                46fbc10315e7ff5b7a89bd00d50f204c64018d0c

                                SHA256

                                278f1023c00ff8ae22170dde19a4ea022d6f5d93b460e3a3103e14bf69685bc7

                                SHA512

                                d81187c800056b5766f5d39bf65125b4ab0d121f1d4951afd4c001ac924e2571191653598ee2d7e44b3ace6c035098108e21d9a4bd8a4b41f6df30db126ca9a8

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                2a5ee665c3e7181cc76e1da037c847bf

                                SHA1

                                97c13ca689c2a9478e9dd964f71afefccf50d270

                                SHA256

                                2a339198b12ee59fd038ffde2f33f6ff6e41c6c0d1f21bb54651cb4652cc6e51

                                SHA512

                                d7144f7a83b5049b41d1d1ec05e8755c50fda7c275b2f8806726a514e40ff3326b7552e618a49ad6a09d1cf39165db08190d2aaab4b07f76b6c1832fa123fac4

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                39730cf00fe79f917840f2ee4c56fc87

                                SHA1

                                ba01c47a616049ca2fb508e3b8561cde21b5ecbb

                                SHA256

                                26d8ababe24758a25a3df4e0c7a46dbad407022d3dac3b9f9747a440d1c5c906

                                SHA512

                                f5e740c456122338d70d0e62d1586c8af6046fc3b8457df3a84d4a4dda76f0b8653d6f2d693ca554ca2ddf5ebe625db1528601f3048e607e2a874644cb25da13

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                Filesize

                                24KB

                                MD5

                                29213338df67d29d6454ee5d61ad3970

                                SHA1

                                8c69ca76a2e639060d5ce835a9600e6ea3764a83

                                SHA256

                                d29fc0d97fa74d382d0f557ecea4e42b7d50dbce43915bfc0c114c16e532aa51

                                SHA512

                                14db25eba8a863d390b97fce4315402ed7c249598ff6c31d5a191b0f71c274eead42ba0658403e744110de072e6ff1cac3bccee1e48875bde6b1fe39a60d2407

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                3KB

                                MD5

                                5de47a90da895ee714c813ded6bceebd

                                SHA1

                                29e658b77c9702731a70e805107ae65ec39daa58

                                SHA256

                                a871bbda33a38f314005ccff707a5ad9e2160970750c9b90efd5d97177bf93d8

                                SHA512

                                5f97815b5e1b05abdea1fb49fed17acde628f3ff207a1e8b97e289f9267ec39d7251d7047f286b6e009e61a464c66bb49b402b3216d6893250df243d8721d538

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                3KB

                                MD5

                                e46798922d1384a5e6f1ec2bae939223

                                SHA1

                                f0de916597b186672fe69a9d52638e2b62119d01

                                SHA256

                                6b5958d5983cedaaf9cd756ad6d67076381ec476f37764ed7b350e75d829275f

                                SHA512

                                94b234072fdb92a5b08d59c153cecce36fc527c1dda4bc8f267110ee80f6e29b02bd80cf42c54fea5fc6b3f07e693d4300359eac8cd209d0b5a62010b72c2b57

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                3KB

                                MD5

                                341209d6929e0488482b9539f02ebee8

                                SHA1

                                1a31c06810cdd0013cb243413072f1cc6a228844

                                SHA256

                                37d36932a31b6324b9cd375c8307493da151b70e01b4b4d12a276ba6678ca3bd

                                SHA512

                                b4af07e4b33600dd50b009ea5f2db48e544416d975efcfe408e1759aabebeb22332ccca449b7f993afe2bed7e9edcef4269e3dcfca96a5eded6761527733a499

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                3KB

                                MD5

                                a42b27081ea25759a099a00ebfd1bc39

                                SHA1

                                ba7fd0bf071aa69410fff639408bf1b580b72e80

                                SHA256

                                55f5cfe108dc94815c924e282d44b8a22da31fa333620732553bef020837ac7f

                                SHA512

                                b0cf0bcb1b1bbd4f014165c437ddcd6a37737ec89f5a44806db57ae2acdbd08212a67c11cbf5b9b9874c4a412f54f41762faccf9d54a584d6b7e15d423ad05d7

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                3KB

                                MD5

                                f93f433e23720adc7f307bf348e3d61d

                                SHA1

                                759c08a878d5a7de6dd8544fa09219ca87d2e818

                                SHA256

                                af97427e0d2bcb925363e33af4916c95a521b1a5b6ffa0752d462bf343c6ea50

                                SHA512

                                9fe0be04d762487323f0e6bcadf98db0a1129ea54ad7da2d1e473dd9c0a74a1701dc2e46cfff97118bb43520b0c3ad57d01ed1c03b6e72704fa3cf6a90c99f22

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585b0c.TMP

                                Filesize

                                2KB

                                MD5

                                044bba077b52b2d6d3b9b423b5c52adb

                                SHA1

                                f7c70dec59e482fc1480cfceb58432fd4e0c207b

                                SHA256

                                000478638b631e587a791d4b0da79befa2c9a34439e5241dbd5ca671f1836ca0

                                SHA512

                                e0f04096bbe48972c227ffe285151d52644ccffc1982c610569e915a1f07bee00eed33fbb45c03ca3445b1234e238be3cf734399db5c8cf3e4a78e926af5d50e

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                Filesize

                                16B

                                MD5

                                6752a1d65b201c13b62ea44016eb221f

                                SHA1

                                58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                SHA256

                                0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                SHA512

                                9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                12KB

                                MD5

                                266d351c7863f9a6f1d26f8f902adc77

                                SHA1

                                5cb0dc5fbab8a87520d3d6f180ea960a9081057e

                                SHA256

                                5f17145d261414a8d57a56d3f50a4ea1095e6ecbaa2677fe5880eb7d9d80df99

                                SHA512

                                e087489f01c105a31a82e24629a4871ec598e6f8074eb6b18b49468304037dde6b5c985e825c83b848e468e06ea8a8c1da71bcbdd1711793277d359faa0b2ef0