Analysis

  • max time kernel
    266s
  • max time network
    245s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-08-2024 10:12

General

  • Target

    http://getsolara.dev

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://getsolara.dev
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3996
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9991f46f8,0x7ff9991f4708,0x7ff9991f4718
      2⤵
        PID:216
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
        2⤵
          PID:4232
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2132
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
          2⤵
            PID:4512
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
            2⤵
              PID:2936
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
              2⤵
                PID:3528
              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5160 /prefetch:8
                2⤵
                  PID:2424
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5160 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:3948
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
                  2⤵
                    PID:4732
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
                    2⤵
                      PID:928
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
                      2⤵
                        PID:1572
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
                        2⤵
                          PID:3764
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
                          2⤵
                            PID:3516
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
                            2⤵
                              PID:4732
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
                              2⤵
                                PID:5048
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5996 /prefetch:8
                                2⤵
                                  PID:3116
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
                                  2⤵
                                    PID:1572
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
                                    2⤵
                                      PID:3448
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
                                      2⤵
                                        PID:4284
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
                                        2⤵
                                          PID:5008
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,15885454584946888456,8770699883600245393,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3556 /prefetch:2
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:5272
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:4432
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:2584

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            f9664c896e19205022c094d725f820b6

                                            SHA1

                                            f8f1baf648df755ba64b412d512446baf88c0184

                                            SHA256

                                            7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

                                            SHA512

                                            3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                            Filesize

                                            152B

                                            MD5

                                            847d47008dbea51cb1732d54861ba9c9

                                            SHA1

                                            f2099242027dccb88d6f05760b57f7c89d926c0d

                                            SHA256

                                            10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

                                            SHA512

                                            bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18180cd1-aa6d-45a4-864e-1c0917750bdd.tmp

                                            Filesize

                                            37B

                                            MD5

                                            661760f65468e15dd28c1fd21fb55e6d

                                            SHA1

                                            207638003735c9b113b1f47bb043cdcdbf4b0b5f

                                            SHA256

                                            0a5f22651f8fe6179e924a10a444b7c394c56e1ed6015d3fc336198252984c0e

                                            SHA512

                                            6454c5f69a2d7d7f0df4f066f539561c365bb6b14c466f282a99bf1116b72d757bef0bf03a0e0c68a7538a02a993fc070c52133ca2162c8496017053194f441c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                            Filesize

                                            32KB

                                            MD5

                                            afb2cc0d2fa79e82c02af060515ce6e0

                                            SHA1

                                            ad57a44cc52279ee56d83ea0cd63953262dd5d6e

                                            SHA256

                                            3f5b192892eb2cdd1c1ed288e3775aab2736484e2bb6e910c4f2e6ec82c1dd2e

                                            SHA512

                                            a656eb89dff94ed010effcbc582538c5d7eb56fa2d382704bb6536aeed5d2b4bf1c587dee57c1fed70de9d23a57eb7d18af6893a3ccc99bd5252759c914b5b81

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                            Filesize

                                            23KB

                                            MD5

                                            64b98f55f67dec85559273ec790e9fea

                                            SHA1

                                            f8754712f265dab71814931239640a8ad8e77509

                                            SHA256

                                            dafc69368255faee47481a29fef6f8f58b925313131d879bad09a4865b9ab1a1

                                            SHA512

                                            ed8cd5406fce708b7bc33bf7f6710c280e410eb1d61d557093c92000c6111a8de155fb7383cae98d9b0253b560fa4fab890c8b1b02c9eaa534534cecc9bac8e9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                            Filesize

                                            115KB

                                            MD5

                                            91d07e85b11f25fb9b58387d6ee74347

                                            SHA1

                                            9ecbc486b6d0af2c4503e006a82a78a0833798da

                                            SHA256

                                            806c0ad749df8102146e580c28d6869a750d97866414ce2d43f9ee7e0944540f

                                            SHA512

                                            6a8a00a5a09f3610312317da8389890192dca0ab586b8cb71462fb1e32f2e1a481f4a52f8f3337ea1421b5526e0685872f60ff0e0ee0acae3581b7fcadc88a10

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                            Filesize

                                            68KB

                                            MD5

                                            28e2fe68ee3f898c71ce7c000a17594b

                                            SHA1

                                            0be7abea29ba2a0d47bf8751f7c57b01a8419323

                                            SHA256

                                            43e9c758cf2a08ca3a0896a24d0f0662be934aec559662f6fbc1173faa19c525

                                            SHA512

                                            e126aca6dd55b58cd516facf6b91009a81f1d5d9a73b472bd253ccf8d9bc3fbc8a291ff7c7bfc9b0279711f24e086e1c0dad976a0bfad36caa073eda21e971c9

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                            Filesize

                                            32KB

                                            MD5

                                            2c68186d4036787de8eb145330769741

                                            SHA1

                                            1035cbd9c6a719d6a6b01d3cb829840001ea382e

                                            SHA256

                                            b6ed2c2b7c683cdd9fe4067835cc2e37af7b33542f8aff7430221ccc45f6e15e

                                            SHA512

                                            941c6fa552bb64f6539238ca79111d7d8f5bebd39a89e2af464fddebf68f59293e7f8f4e2b4740218c0ee4dc5a673a451033e2b2e98a2a3669b0855424290a61

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                            Filesize

                                            32KB

                                            MD5

                                            be8d3235af81a452ce2c12f6fd041137

                                            SHA1

                                            78d1419de5447ee740c75aed08eb1b2443097fdb

                                            SHA256

                                            a97c727c2e4273d5db399fdd0cd3ffa299d4354fae08a63d70856b0263971d39

                                            SHA512

                                            51c99b9aeccb49252791505589c6a5d6cde5c9e9f2eb43e4c4f8df27534ccf646c62ef043c979802c71e44d0f305a59dbd8b7f1c3b015fc34880d9b2deb26c44

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            72B

                                            MD5

                                            437943a4366c8c38467a46440d52ed28

                                            SHA1

                                            ee392f00acaa06b468f41851e35ec7c8c5cdd374

                                            SHA256

                                            7e34c806b489b34d484d9319892e6f80530f21204ac1056acbcb761c21f079c3

                                            SHA512

                                            fd3875e32cddab641aa7dd624a4eb8e5c77e31d49ec2799e3e71de8f6fce4fdc2defded4b4d64af6773a7ae38f0085b4a7cb9bf617b4c75177a88d086322c96c

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                            Filesize

                                            683B

                                            MD5

                                            2c8e828861a6f9c34eab40cad50b587a

                                            SHA1

                                            18014d0b377c08a939dfb99d6ea80a6fc81ae658

                                            SHA256

                                            b26aebf78c141cc074b22446463b7c9b2b591a6cc9c8e5e92a629c36f465b3e7

                                            SHA512

                                            95fb26f13ed90cdd30a39558c8cf5e41cf1bd5b7d8632ba0c512e1a3618d2ef1a4d8877d43c111e5b832c3e0c94aeb7577488fd85676dcc5c6ceefd8678b7fdb

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            5KB

                                            MD5

                                            2c1ff5478e13a62ff9ca373d636eac65

                                            SHA1

                                            78dd78ff1fa2f919256272d13cddf169574ab689

                                            SHA256

                                            c9637716a6052dcc7d214096be2977fdcf50adf9f639ed8fccccc3adc494af3e

                                            SHA512

                                            fb25e9175fdd3413f8f544f34d2b9bec9b0792cd671248a8a0580486bda45c5aee085f4cb8eccd3da100e5b8f98ec1da46cd9fe31d0b5dea2672583ed226aa6d

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            cc0967b3d305ba1387c248efd9dd24df

                                            SHA1

                                            8145fedf413540c939b596ce748e0a9d1962cd2c

                                            SHA256

                                            7c2cb63ccdc3c48d8b41d4b2dff6be59a692fbefcccc5d16e9382d5c9b6e47dd

                                            SHA512

                                            147f316a6f8a63d8979d7d11fe8bcbbb9b1dfdacf3df3edbfa495f159d302dfd2b7964ec4583a01a8cf495f0c42f9bb6ef5cd9cf5e181367bc60453b12285045

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            6KB

                                            MD5

                                            c04348518efd1145f7f32b1aaa32e507

                                            SHA1

                                            f5b09cc0c2042a80de209aaaefe14c270cd73317

                                            SHA256

                                            0c0a19a4fd2fcbf6afd473b582b56dc2740e7a8435edeb5ed5fe097833eb641e

                                            SHA512

                                            3a057a9ca382fc53899120c34329217688cd078efc46367b0341d46884a6fab1a86fe5d946b35223d7fdaf793e8ca0a0d2f125ec5d0850b9c367c77e44d878cf

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                            Filesize

                                            7KB

                                            MD5

                                            c2e3286a72a7a7bcc11853425f4d1820

                                            SHA1

                                            f8c58c3114ee3a0da1c3cbd6b4d0a21957696f39

                                            SHA256

                                            a6c1bec2027ae32e12ceee319efa53f13d6a6a9a95f27af61d05e634ee62704c

                                            SHA512

                                            28aa507891a8733ac4b5b357bec3a3647e7d23c9ebcd41e1680f85c2c3890af5dd0da07b0d43e466c34c39c6acbf03311be00748c22c219beb8b7e7008065145

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                            Filesize

                                            16B

                                            MD5

                                            6752a1d65b201c13b62ea44016eb221f

                                            SHA1

                                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                            SHA256

                                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                            SHA512

                                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                            Filesize

                                            11KB

                                            MD5

                                            1eaf9378dad88852d85a24ac8b01295e

                                            SHA1

                                            3a4afb56de7e0b8966c42458bf49726bc0b2ef0c

                                            SHA256

                                            40b8150797e61a7888ae9084cb2dfd87506686b979c1bd21983891516474e4cc

                                            SHA512

                                            0eb235122015a442b0102f0a8881ac4ac46054969283430d2cdec24f41cf067afc04d8ed4cfbccb730d5e19d1aee08227537d5db6a0a962e969dc899cac86721

                                          • \??\pipe\LOCAL\crashpad_3996_TTFCPFPMDVJYBLJX

                                            MD5

                                            d41d8cd98f00b204e9800998ecf8427e

                                            SHA1

                                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                                            SHA256

                                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                            SHA512

                                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e