Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    29/04/2024, 23:50 UTC

General

  • Target

    http://finalearningstatement.info

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://finalearningstatement.info
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4184
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe7ce73cb8,0x7ffe7ce73cc8,0x7ffe7ce73cd8
      2⤵
        PID:248
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1916 /prefetch:2
        2⤵
          PID:2076
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:5040
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2792 /prefetch:8
          2⤵
            PID:1344
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
            2⤵
              PID:108
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
              2⤵
                PID:900
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
                2⤵
                  PID:3204
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1
                  2⤵
                    PID:5032
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
                    2⤵
                      PID:1408
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
                      2⤵
                        PID:396
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
                        2⤵
                          PID:2296
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5548 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:4992
                        • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:676
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4040 /prefetch:1
                          2⤵
                            PID:3732
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2588 /prefetch:1
                            2⤵
                              PID:3512
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4668 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:1848
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,31398078177363809,806911996854152524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:1
                              2⤵
                                PID:1984
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:3116
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:2872

                                Network

                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  8.8.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  8.8.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  8.8.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  8.8.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  8.8.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  8.8.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  8.8.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  8.8.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  8.8.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  8.8.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  google.com
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  google.com
                                  IN A
                                • flag-us
                                  DNS
                                  google.com
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  google.com
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  google.com
                                  msedge.exe
                                  Remote address:
                                  8.8.4.4:53
                                  Request
                                  google.com
                                  IN A
                                • flag-us
                                  DNS
                                  4.4.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  4.4.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  4.4.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  4.4.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  4.4.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  4.4.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  4.4.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  4.4.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  4.4.8.8.in-addr.arpa
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  4.4.8.8.in-addr.arpa
                                  IN PTR
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                • flag-us
                                  DNS
                                  finalearningstatement.info
                                  msedge.exe
                                  Remote address:
                                  8.8.8.8:53
                                  Request
                                  finalearningstatement.info
                                  IN A
                                No results found
                                • 8.8.8.8:53
                                  finalearningstatement.info
                                  dns
                                  msedge.exe
                                  360 B
                                  5

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                • 8.8.8.8:53
                                  8.8.8.8.in-addr.arpa
                                  dns
                                  330 B
                                  5

                                  DNS Request

                                  8.8.8.8.in-addr.arpa

                                  DNS Request

                                  8.8.8.8.in-addr.arpa

                                  DNS Request

                                  8.8.8.8.in-addr.arpa

                                  DNS Request

                                  8.8.8.8.in-addr.arpa

                                  DNS Request

                                  8.8.8.8.in-addr.arpa

                                • 224.0.0.251:5353
                                  msedge.exe
                                  590 B
                                  9
                                • 8.8.8.8:53
                                  google.com
                                  dns
                                  msedge.exe
                                  56 B
                                  1

                                  DNS Request

                                  google.com

                                • 8.8.8.8:53
                                  google.com
                                  dns
                                  msedge.exe
                                  56 B
                                  1

                                  DNS Request

                                  google.com

                                • 8.8.8.8:53
                                  finalearningstatement.info
                                  dns
                                  msedge.exe
                                  360 B
                                  5

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                • 8.8.4.4:53
                                  google.com
                                  dns
                                  msedge.exe
                                  56 B
                                  1

                                  DNS Request

                                  google.com

                                • 8.8.8.8:53
                                  4.4.8.8.in-addr.arpa
                                  dns
                                  330 B
                                  5

                                  DNS Request

                                  4.4.8.8.in-addr.arpa

                                  DNS Request

                                  4.4.8.8.in-addr.arpa

                                  DNS Request

                                  4.4.8.8.in-addr.arpa

                                  DNS Request

                                  4.4.8.8.in-addr.arpa

                                  DNS Request

                                  4.4.8.8.in-addr.arpa

                                • 8.8.8.8:53
                                  finalearningstatement.info
                                  dns
                                  msedge.exe
                                  360 B
                                  5

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                • 8.8.8.8:53
                                  finalearningstatement.info
                                  dns
                                  msedge.exe
                                  360 B
                                  5

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                • 8.8.8.8:53
                                  finalearningstatement.info
                                  dns
                                  msedge.exe
                                  360 B
                                  5

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                  DNS Request

                                  finalearningstatement.info

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  7c16971be0e6f1e01725260be0e299cd

                                  SHA1

                                  e7dc1882a0fc68087a2d146b3a639ee7392ac5ed

                                  SHA256

                                  b1fa098c668cdf8092aa096c83328b93e4014df102614aaaf6ab8dc12844bdc0

                                  SHA512

                                  dc76816e756d27eedc2fe7035101f35d90d54ec7d7c724ad6a330b5dd2b1e6d108f3ae44cedb14a02110157be8ddac7d454efae1becebf0efc9931fdc06e953c

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  bdf3e009c72d4fe1aa9a062e409d68f6

                                  SHA1

                                  7c7cc29a19adb5aa0a44782bb644575340914474

                                  SHA256

                                  8728752ef08d5b17d7eb77ed69cfdd1fc73b9d6e27200844b0953aeece7a7fdc

                                  SHA512

                                  75b85a025733914163d90846af462124db41a40f1ce97e1e0736a05e4f09fe9e78d72316753317dabea28d50906631f634431a39384a332d66fa87352ff497f8

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  6KB

                                  MD5

                                  b715c0ecd5d35f413b006822cc5a4b5d

                                  SHA1

                                  1780b293d9bc76470da293db9209c502a3123b79

                                  SHA256

                                  5982356b2d0a2836aba949f0d45678cd05fb8a082977f2fe654284b17ca8b032

                                  SHA512

                                  99963e5790f122d078191114489343c1f64ecf386af663d5b5d60df88bde62513779ca7469a703df498df5cf7dcba7be280dde7981ab63167df6377f6a7a3183

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  6752a1d65b201c13b62ea44016eb221f

                                  SHA1

                                  58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                  SHA256

                                  0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                  SHA512

                                  9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                  Filesize

                                  8KB

                                  MD5

                                  a2ceadd3cced4e36268ae96551bbfe0b

                                  SHA1

                                  b6f9a2011737f12765b89650e7b245be0945d543

                                  SHA256

                                  6b2217bd87696a8bd442d4e07e1fcd353d11dd715e4b904e42c2e520cf3ab079

                                  SHA512

                                  d6e041e62e75e0b735b43d3fcc938b0cc9a2690e31c342152ef3f0ad914fcf8b62499bd0bf8e2ec19ee24612bffb640d74ec6a67b1ac8393c7bd98b96872af5e

                                We care about your privacy.

                                This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.