Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/03/2024, 16:21

General

  • Target

    de6e86cfbd91ec6547506848fc757eb3.html

  • Size

    428B

  • MD5

    de6e86cfbd91ec6547506848fc757eb3

  • SHA1

    30096c674e3bc3925d474d5f78943bb9c017eec8

  • SHA256

    7f03142f8b41448d6ab2291d11c6fd2d7954282f2b2e85ba7756faa841423e96

  • SHA512

    223d38a1ead0745c9a664731e2420de56d06208916b288e73a6e9578934db7c5cfbe9dc1cabfad8010c3955b79cb05fb36944d64a27fa13156383a42b2575a45

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\de6e86cfbd91ec6547506848fc757eb3.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3572
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xdc,0xe0,0x104,0xd8,0x108,0x7ffd345946f8,0x7ffd34594708,0x7ffd34594718
      2⤵
        PID:4864
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
        2⤵
          PID:2756
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:4812
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
          2⤵
            PID:2328
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
            2⤵
              PID:4988
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
              2⤵
                PID:2276
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
                2⤵
                  PID:1504
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
                  2⤵
                    PID:5012
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3928 /prefetch:1
                    2⤵
                      PID:1564
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5020 /prefetch:8
                      2⤵
                        PID:4200
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5020 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:4956
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
                        2⤵
                          PID:4272
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
                          2⤵
                            PID:1780
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
                            2⤵
                              PID:2996
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
                              2⤵
                                PID:3076
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
                                2⤵
                                  PID:4208
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
                                  2⤵
                                    PID:5348
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2952 /prefetch:1
                                    2⤵
                                      PID:5584
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3004 /prefetch:1
                                      2⤵
                                        PID:2456
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5316 /prefetch:8
                                        2⤵
                                          PID:4100
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5084 /prefetch:2
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:5940
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:3772
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:4872

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            7740a919423ddc469647f8fdd981324d

                                            SHA1

                                            c1bc3f834507e4940a0b7594e34c4b83bbea7cda

                                            SHA256

                                            bdd4adaa418d40558ab033ac0005fd6c2312d5f1f7fdf8b0e186fe1d65d78221

                                            SHA512

                                            7ad98d5d089808d9a707d577e76e809a223d3007778a672734d0a607c2c3ac5f93bc72adb6e6c7f878a577d3a1e69a16d0cd871eb6f58b8d88e2ea25f77d87b7

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            9f44d6f922f830d04d7463189045a5a3

                                            SHA1

                                            2e9ae7188ab8f88078e83ba7f42a11a2c421cb1c

                                            SHA256

                                            0ae5cf8b49bc34fafe9f86734c8121b631bad52a1424c1dd2caa05781032334a

                                            SHA512

                                            7c1825eaefcc7b97bae31eeff031899300b175222de14000283e296e9b44680c8b3885a4ed5d78fd8dfee93333cd7289347b95a62bf11f751c4ca47772cf987d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            1KB

                                            MD5

                                            e411987e506a236a0a4b8a4d91eefea2

                                            SHA1

                                            5b8d24b28ad2dc95c6f91a378f69442c461ec22f

                                            SHA256

                                            54477adb30be4f6b61998caa9f5d75603fe637128fc328d93a7950a795ea10e3

                                            SHA512

                                            e85ce50f3d60b669b5586dae2b4e0fe3200942dccbc68472f6f6850174dfcdcc72b5ce35b7d183982e9141c98446b6021aa650e5e7e209f98293f749cdd1f0bc

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            528B

                                            MD5

                                            9ede0ebc9fc559c9fae42604630981f8

                                            SHA1

                                            f426d5f922a491c87fd9de41428c64021b7aa378

                                            SHA256

                                            3494e8a1a12807cd369eab03759b3b8768d4c422566ba976f4430ead1ac3de6a

                                            SHA512

                                            84a961345d1f479c6c5040b1cc310b0b28d0672a8d998ec8c4873f12d531b395b8c077ac780b4da39b0daf9be5c1746dfa58f1e447b5f8e096327c267673c697

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

                                            Filesize

                                            41B

                                            MD5

                                            5af87dfd673ba2115e2fcf5cfdb727ab

                                            SHA1

                                            d5b5bbf396dc291274584ef71f444f420b6056f1

                                            SHA256

                                            f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                            SHA512

                                            de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            46295cac801e5d4857d09837238a6394

                                            SHA1

                                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                            SHA256

                                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                            SHA512

                                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\MANIFEST-000001

                                            Filesize

                                            23B

                                            MD5

                                            3fd11ff447c1ee23538dc4d9724427a3

                                            SHA1

                                            1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                            SHA256

                                            720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                            SHA512

                                            10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            111B

                                            MD5

                                            285252a2f6327d41eab203dc2f402c67

                                            SHA1

                                            acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                            SHA256

                                            5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                            SHA512

                                            11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            111B

                                            MD5

                                            807419ca9a4734feaf8d8563a003b048

                                            SHA1

                                            a723c7d60a65886ffa068711f1e900ccc85922a6

                                            SHA256

                                            aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                            SHA512

                                            f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            2KB

                                            MD5

                                            f3cabd5efe9ca55384045a4d35d75791

                                            SHA1

                                            229433d5ce964dd48eb6c0409169878e25562c30

                                            SHA256

                                            754571e8ae39b6ba344ce0762c626537a1f46cfec79fd6a2044765cc8cb2510e

                                            SHA512

                                            42f03b1e582259280a4fc6d6ccf183397f115f481b62c8a612a89345cfe9625a8525ead4c4588cfb62dfbecf650a1432c2106fe03814d76728a5ce73b7e4a715

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            2KB

                                            MD5

                                            550a8975478b3c0f4350cf28d94c6e0e

                                            SHA1

                                            12e26c6bf625942bdc0051ef80e54e3aa33aa1ac

                                            SHA256

                                            d491712bd896e28978579a23afe797b530ce3157c904fb675fbcf17cc114fc9d

                                            SHA512

                                            1215e657851eec0d31179e6c386fce5b70f31d1b7f41fca7cb4e92832421b35c05d6f04f6da8a885d24d9cb5c0bf10fe3ec4885aae2665e8788d7b2da51cfcb8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            e12bb63652adac2d29bedcf262f2748d

                                            SHA1

                                            6cfc0fdc2bfd0ae6caac7db2d6191baa9c20b242

                                            SHA256

                                            7b5ebe07a82558a949edde0ec5cb4b14d13da1841d955c13d06d3eb01f759bf7

                                            SHA512

                                            767e8837f888bca53a3f02e20cb0b7e2f9110d020764a57f826fdd312ed137110c9d211355f99ccbf987a69be709f3d93e217b6e752a6b7509f3ce6c80044227

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            88c0e9d3e8ecd267e5cdc8fa989fb2fc

                                            SHA1

                                            4d4c3807060edfe61524421bffa6e55210e48b7f

                                            SHA256

                                            cd0677c21d7227c976bf92ccd86b1fcc1a1a48695ddb34bfd12afef7245297f2

                                            SHA512

                                            f10ce7ea23c9ea7182763db78ac2a471a98c131085e1b0451cb3dc57f1983c3af243cf9a7dcb9a4f50649734ec29dd7314c9042c14c91c7d0717e6abd4457834

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            cb81407f3d0e5cfabb3ebc7bb9f71661

                                            SHA1

                                            07e3da5113d0068715a90f60ef93cd3ba84aeef4

                                            SHA256

                                            3191169ad280928dc3e5e4877706be32005994ddc3ab161e72083ab7b673ed30

                                            SHA512

                                            5d5bf72a353a2624d68671a2848b0290358f1fc8ebc6e0da8bab7ce0f514b7509a4f0aab49bfdcd8cf8ce17b9e661c959da4d397c0fdf368d4c6a154f83ca1e8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            8KB

                                            MD5

                                            0509e5ac4a0065af436b9b78807f7a5d

                                            SHA1

                                            dc5b37511e94a0e5d4fa72373c6f2aa1ac55141c

                                            SHA256

                                            1cb2f331bd22fd0910ba50dfb66d33db62257fe2d46306234afaa50bf4bb4c98

                                            SHA512

                                            50e5ff6844b49ec098ac3c6089c88e9849f6ad465365c5b4f4d7b843c2e7a65e70fc28a2ba2ea4d7c2a520452492cd77b6f5f9f9ff35787a4f4535f5441eeb0b

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                            Filesize

                                            72B

                                            MD5

                                            ed314add4f611a21b0382adfede1ffef

                                            SHA1

                                            5f56597ac67a6975af65692693428de7a434a3a6

                                            SHA256

                                            4bc57c3d221a38f27046fc0d314b980f940cc5089e2156f73c385b6d68385b78

                                            SHA512

                                            2b129aa4df941b54d367ab6b361ec063b949c42d1c29960e856f7b94eb3e7c459046b3c61edcc9ffe3c66b4067627e0c80952182efa9638228f7d11dac4f59f8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                            Filesize

                                            264B

                                            MD5

                                            39524c8654eac0858f377f8c5f1dc5d4

                                            SHA1

                                            247b9f93920e1e82383a5bd50785cdd901d4572f

                                            SHA256

                                            598db82c4129ef28ba95fa85db6f347bc451fa8aad83d0bc75c71b250c659935

                                            SHA512

                                            5fb881110f91df986a50240da15e995d0455088d4ed16e43c081fc10ccac5f5c05ef1debc56b22f35ca8324d6ac546d98ebff662e3fbece91c039233488f1b96

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57be10.TMP

                                            Filesize

                                            48B

                                            MD5

                                            3d3318f0a5bd34fbf6aca34b6bb5b697

                                            SHA1

                                            2bdad662ba875dcd1b7221770a3fd0ab0979a327

                                            SHA256

                                            ab5c22883a768d7898ca802337d123963fb70ad454138cc2276bc7a93086ccad

                                            SHA512

                                            a4c1aca85da87c681fa5c0dc386c5959c17c0a86ee2cc056898efaae881c5148d8fbafa8e8225501b13d96c090aa033e03f7e5dab173672bd8ae7124504a8fe8

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            3KB

                                            MD5

                                            161b8f69804c5fb4ac7d96192ecde36f

                                            SHA1

                                            e825613c21df89551fc737ec2d6732def69cc794

                                            SHA256

                                            eeb02bc5f265e7537400f07a8fda0787bc2e743f8be94289038ed4262956ec39

                                            SHA512

                                            7c49a849fd26c33f3fe359abff3d678c5f7dc04aef350a7222cc3110926463fd32d8471c38c90f0e6372bb0a294b5c37ad4c19b461a64c28a7c14e3e4cf6304d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            2KB

                                            MD5

                                            6e754a6d3fb38269d5c53dedb53edc75

                                            SHA1

                                            3afc42fe1196a140c07a59c5222a8136c81ca347

                                            SHA256

                                            ceb1accece0c85b70ab14fc4719b6997991e3562326e171ea189f146fccbc56a

                                            SHA512

                                            8a0d1a33d71b7d53ebe0e34e6733a6f93c0efa6ac7feb50362820b520ec42edb12c7e91fbbbfc8ae346bd360bfcdde718c422711749bcc28cc8d1106dfa71759

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            2KB

                                            MD5

                                            66ea33d3b0b463b27294472c6c128419

                                            SHA1

                                            cc60eea9a316e340e482df99ab4c14b2c4dd4cf1

                                            SHA256

                                            da03953488a706586aab4d72dcd9404853f0264e21cf94a823119b5187093803

                                            SHA512

                                            6a3d65421c84c8890cc5664a5f08b281c50017c14329ccf526b0b49570deec305d9c74c99af31dd51b40c3b09f05f0e49c903815b84b668e63629adf7520c633

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            3KB

                                            MD5

                                            a87e53ce17fb0b7862ce2132892d811c

                                            SHA1

                                            8b2c463fadf583d474757af579741829518c8ad0

                                            SHA256

                                            52645d6275cdc46340dec0ca9ab2577d77cec9768c444d28918c50a087c2dee4

                                            SHA512

                                            a8b2e9f2109ad1e4ebb7f1a8f9f97e82754da35d7e41ea0efa1ebf5432eb84e29a621a4f0d55b335bc64bd5ba174aba813182e2bbb4cf86d0372f6a8e9c17291

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                            Filesize

                                            1KB

                                            MD5

                                            c7d9bdfab327ad42a59620e0056cb59f

                                            SHA1

                                            a9a890166e1a5135d375938202d32881023a8dc8

                                            SHA256

                                            40eb5c3d4e34f5a3cc28664dd48cd4e7b00bfaeb81e59169ee19772a6d440fe1

                                            SHA512

                                            f23651ac0b96dbb3458eb564039f4bd50d60daad566256471ec4e3939c2c11a8e94dece6fdc26fe5507bbec06751c6874205e0770eee4eb009be2cde34016c5f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bd26.TMP

                                            Filesize

                                            1KB

                                            MD5

                                            fb85b9691eef23f587bf2e4c511367a8

                                            SHA1

                                            1741ab3a817f01912bf85f02ee7b2d193dd1cef1

                                            SHA256

                                            cc3458f5116f12262bcaf1ad510852402d449199619e697adace3d7ba9cbdda7

                                            SHA512

                                            13e09b326decc9c35599ea7cb3e7957feea2b0782a2c19387584ddc9fadb25e1d898c143f4f45266e83020898107015f24fd7a8835d95885d0f1a2349c55d354

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            11KB

                                            MD5

                                            3e24fefff5528ec88be4ac630d7fd72c

                                            SHA1

                                            82c582c86e236db3a687660ae865a482a75ec1bf

                                            SHA256

                                            9475f078761cb14929d7a89cb7da2dd2b493c8277b5fe0969b8b689585d2ce6e

                                            SHA512

                                            f208a60bce6fd926e0a72eb126f0d5f33b671f3c82ff21c0cdab4c9a2f881381fc8b5f612869fc99b3ed9863a7fef036368119155a09149b8e435d9e91b24fd0

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            11KB

                                            MD5

                                            1e2aa574cdaf086cb969da7c6f079c48

                                            SHA1

                                            85678d10f1b4a2e7bfc276a25d84f226d2b6188f

                                            SHA256

                                            390015be8ff282dfbb3ff03e71a11e86ff53d9a098976be2830486e649b408f0

                                            SHA512

                                            98e2b4c75157cedecad68b8d8bd7a2ec04427120b45dae8a67bc449c3c8dc78e6b030306cdc2de0a3c957761de97fc594128307938ad826959f3c52b71a0213a