Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/05/2024, 18:06

General

  • Target

    47624cbbf8db783a21459b57bb3d786b_JaffaCakes118.html

  • Size

    173KB

  • MD5

    47624cbbf8db783a21459b57bb3d786b

  • SHA1

    ff61c1ef5c0e0711f83cf9ca2690b45711d43e21

  • SHA256

    62600ab97f7b4ade2dd0211cffc53703827aa90305826b90d90abbc9660bff80

  • SHA512

    0c2369be54507a08964ea9f37c6c9c5c1bdba9614e76839be8fdb3d9d9c5d1b9f90e71c6937d738780aa66b51ec6c3bbc83b6ace9f427ed6f4f8b82c5c679b9e

  • SSDEEP

    1536:6wgr8VSeO38L1XFSq2r4QYWdH3PqSIPLMaS6cgRr5xlyS:EeO38LpFOfbfqvPLdnxlyS

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\47624cbbf8db783a21459b57bb3d786b_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:936
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa4b146f8,0x7ffaa4b14708,0x7ffaa4b14718
      2⤵
        PID:3144
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
        2⤵
          PID:3688
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3280
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
          2⤵
            PID:548
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
            2⤵
              PID:3124
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
              2⤵
                PID:3984
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
                2⤵
                  PID:3552
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
                  2⤵
                    PID:2276
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4956 /prefetch:8
                    2⤵
                      PID:1316
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4956 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:3568
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
                      2⤵
                        PID:2256
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
                        2⤵
                          PID:4572
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
                          2⤵
                            PID:3216
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
                            2⤵
                              PID:1784
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
                              2⤵
                                PID:4072
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
                                2⤵
                                  PID:2600
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6004 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:216
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
                                  2⤵
                                    PID:2028
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,7062083497219887042,17472078257147275004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
                                    2⤵
                                      PID:4656
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4884
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:748

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        ae54e9db2e89f2c54da8cc0bfcbd26bd

                                        SHA1

                                        a88af6c673609ecbc51a1a60dfbc8577830d2b5d

                                        SHA256

                                        5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

                                        SHA512

                                        e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        f53207a5ca2ef5c7e976cbb3cb26d870

                                        SHA1

                                        49a8cc44f53da77bb3dfb36fc7676ed54675db43

                                        SHA256

                                        19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

                                        SHA512

                                        be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                        Filesize

                                        71KB

                                        MD5

                                        da52e38c98b0f2047abeb07609608ab5

                                        SHA1

                                        da1210caff36df73e49a0c271ff7d573c2d20d02

                                        SHA256

                                        726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

                                        SHA512

                                        35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                        Filesize

                                        61KB

                                        MD5

                                        468446a7240461af44b59ebb2047c231

                                        SHA1

                                        47b7c525dc91bece99df0c414960b9490b986ba8

                                        SHA256

                                        ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

                                        SHA512

                                        ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                        Filesize

                                        30KB

                                        MD5

                                        1262fb3b6c8a66bb33af5bb8de15a59a

                                        SHA1

                                        7ce924780c5287c5dd8dbeae4e712775ea1f83f9

                                        SHA256

                                        d539a910089008f073b426d44a496f1952ba01b9ff018425c18d21bea42aa128

                                        SHA512

                                        59e35343fe3288bec0d002d1a321bff62d70ebfda1f06c73771bffeb8d1c60824fdce39ad3437db9de5df4f08e7f4322611efbbdfecd3292706d244909c61386

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                        Filesize

                                        46KB

                                        MD5

                                        a601783b430a8f930e3f10d74cf5094c

                                        SHA1

                                        79528fe1bcb67c3c25d6d813a9ff57a4c7eb8050

                                        SHA256

                                        8c94a9da768e6bec7c897a8ee08c1b95191970f3f3091a891ad472d6bf5305cb

                                        SHA512

                                        63d97e76d40f989969d0e11c13deac217adf5c45ec3d93c80169b9292bdda5fb585aa91673ba15a06fd33a350d16d73856c0aa52ac093fc52456e303b86aa6ff

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                        Filesize

                                        54KB

                                        MD5

                                        3d43ad52a5e97214b6780973a555d0c1

                                        SHA1

                                        ac5dcc5dbafe9781453c87ee892c8769cff3df25

                                        SHA256

                                        2760b7d22f5936561faebf3afcec848f31faab71bf5c95243e36908178d33342

                                        SHA512

                                        e117dfd48a35fd897b052e4623449bceaef0b9d9742ebd078b36d6029743598e1a91c81c0f984f0b3e2b81ba02bd6613c78db6f477ee202374ef94bacf48b2f3

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                        Filesize

                                        133KB

                                        MD5

                                        4d1bd282f5a3799d4e2880cf69af9269

                                        SHA1

                                        2ede61be138a7beaa7d6214aa278479dce258adb

                                        SHA256

                                        5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

                                        SHA512

                                        615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                        Filesize

                                        20KB

                                        MD5

                                        b6c8122025aff891940d1d5e1ab95fce

                                        SHA1

                                        a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

                                        SHA256

                                        9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

                                        SHA512

                                        e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        144B

                                        MD5

                                        871e52ca25c6492a1f1da20d6e557a0e

                                        SHA1

                                        c2a79fdedaf28e62041241567ae99599364e385c

                                        SHA256

                                        799e04e79c01aa00333d5bc5e991b5b7d3e860513787fb241682e3a8d1c8d5b5

                                        SHA512

                                        8fac3381c745eacf822475edcb2169e493fdcc679d1511ea49f95798d317bfa7d1171bafc6ac5b7f627989766b676e585517481047c28d5f0b263d6f8f78cb15

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        192B

                                        MD5

                                        630ec82c98db2ebe43a16f35925d2b7e

                                        SHA1

                                        f4979c6d76b1dc9d0d33ae402df53fdbcc0c0f80

                                        SHA256

                                        6a6e7299288da16b8c5c3a01e67edca5634c61b1ba2d52f1297891ee2af7d316

                                        SHA512

                                        9d39f033a666460a767b8dc083a49b1ad53741639f270445e935ac82a602ed931d63010eade8899cd1047bb8204e9710a7334deb9c8734776675cbb16a584ada

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        1KB

                                        MD5

                                        5e301bf9989b86479b419ac093e3c040

                                        SHA1

                                        6b73653b913ac907cbfc6dd8d38fdfb0b71a7a60

                                        SHA256

                                        34bdba6c91e024693b1c6ac1405937d5bf4b714d6fcce94efac905665d69cd25

                                        SHA512

                                        e909ce22c197218025caf066428396cf63c9306984b88a9bc97c345f2657770b637bb98a52c7fc91e03921a1c9d7b66688d99c04a3136ba0281dd6ef08136afb

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        1KB

                                        MD5

                                        90912541f25e20ed28264ad582894643

                                        SHA1

                                        16bc4fcc72d59afafcce7121c7532a17386b5621

                                        SHA256

                                        0b32d9940bedc09a280c2bf7251a063312fe406df4ffe09dbfa5215432c861e5

                                        SHA512

                                        86e0d4bd2050505c4ab25b9ef73da6a02adf9321419c383548f28a89637ad12af14f580ccb45e8b3721a2a2906dfe86dd72702d088b99c88ad1dac0c6ebb07ef

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        247cdf3a08be44844ae1b9ced791a903

                                        SHA1

                                        9467b5a7edb4bd88abed8faf053ed34e7c73bc87

                                        SHA256

                                        9e965c825495fa43fc1c59fa48f263e4f5f18d099f9d214007ab6f9060eddc2f

                                        SHA512

                                        c763cf29c086809ea725e14292bc3d7e689ac699320774856664dc30b46cc8ac07a2d4fc38362ccfe6b1b2705e004470dada30b0f6b6a99f4713c99f94c2879a

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        7fe000aadaf574f90e5c2003ae05f19b

                                        SHA1

                                        3ce0594d840322d7e233939c63808bdca49c33d5

                                        SHA256

                                        d9a62011382db3fabe460139f1f55788dca48613c31f80d50107d807ff186a48

                                        SHA512

                                        21d8aee1eced9a53d00d6e7a84548c2e5cd1dcb74e4e9f9f75fd8adfa26ec19c2a6629d5b659e0b463db62693930e10706e6ef19be786c88714f03b4ae650d39

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        743afe7fe84f2d1761917934c7cbd34b

                                        SHA1

                                        077ed4adbb401de5fa09dad318e8524d972665b2

                                        SHA256

                                        5041b4379ba113eb1d4ed1376ff0b44118895f5e56ebdf670e97861fe86e7c30

                                        SHA512

                                        00f2a7c6d03a741b3c98c5f07973874b3169c672b04523ca8548fcd59a1a647d0afc0397d2e22f02146203eacff7890703ac2215a6825c2ee1b8a70fb8809024

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        43b4de6ed885f4ebfcc8b7d749f1ae84

                                        SHA1

                                        84c1dd1c77ea97a0cf21c8ff2ad23c1dfe9b6d8a

                                        SHA256

                                        906d039876ecaba0450030f08e76253af7522fc2790ded860eee3de843b8b0b7

                                        SHA512

                                        b41a7c5ae2c3e50089d7d1b17084ff95efe938555ba34d0149f4254b7a3cb48ef6e1913d59a400f88f1adcfc61fa90f3fbff2fb3171098404e75d60c5b350be3

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        203B

                                        MD5

                                        d88390bfcd26726b3da684892e798ca4

                                        SHA1

                                        85f9ddcc54a5d22bdae4b099b7628e54923bd2f9

                                        SHA256

                                        9bccbacc251aa1a774f0c9db09f3d1c58bf9d35cfa3c404f2f59aca3d36a215a

                                        SHA512

                                        0c39fd54d5e1e58156367e69f9f25f37dcf67d449d95e9eb882bd628bb1e29d1c2b6478bac48006e898d10efbadea7c2c84b2e2cf3640b6e5f9ac2ef4b8994b5

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587d1a.TMP

                                        Filesize

                                        203B

                                        MD5

                                        ba695821d72b6183149e5858b0fe844d

                                        SHA1

                                        03d195f97bfd046369e16b2dc9ecfd5e70b836be

                                        SHA256

                                        80e078cf29c00eb3d3b53f6fd3fedc24c73e727330eea60166c7f7dd0fe85758

                                        SHA512

                                        73385468c0bdefd11d5fd119ac67f4c36a9ccf52d6a1bee756b51aa4e24a767c9ba4bdb1775de67ac015e19a61bed233cd8f489fbf24a29c899b585bdaa73cbb

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        6752a1d65b201c13b62ea44016eb221f

                                        SHA1

                                        58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                        SHA256

                                        0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                        SHA512

                                        9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        11KB

                                        MD5

                                        d97a2d50e4cd2b2af6f4792805cecc26

                                        SHA1

                                        66ca729f6ca6ed9dbaf9c189bdee3427059f30b0

                                        SHA256

                                        d771daec2b3fc321413ad4683ca225feb62530c2799fa9cd69140d2df92bde72

                                        SHA512

                                        ea9de6bf9470c1ca8b49aff55500d9d1c02996f0c3355dbab6d16c5520260805ce1b02baed7cd16b6e3cc06bab1f2b83c5c99ae5e4035c90f45d6726d2a2f320