Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/09/2024, 11:39

General

  • Target

    efb63ec0bc430268552a83de5f4951b1_JaffaCakes118.html

  • Size

    341KB

  • MD5

    efb63ec0bc430268552a83de5f4951b1

  • SHA1

    a5fd925d7d7eb1f6a16792e7b0d393a02c1520de

  • SHA256

    6e44c14667626b05414eaf4937fb2091524d267282916229896e218a8ad3c39a

  • SHA512

    67add1494b876c11f1491d7b6bcb66393070f0d7bc571ba579a9fdf45c3597dd5aded872737f5787c4239bbc893297a6a22c0c377c966cbe22b557ec0d83e449

  • SSDEEP

    3072:rwi2t3oiooanhxYNMGKyDhpx7uwHdD0bUwHmE4U+lttQ:rwt3oiohY9Q

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\efb63ec0bc430268552a83de5f4951b1_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3304
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa928946f8,0x7ffa92894708,0x7ffa92894718
      2⤵
        PID:3036
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
        2⤵
          PID:1176
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3224
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
          2⤵
            PID:872
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
            2⤵
              PID:1440
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
              2⤵
                PID:1040
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4312 /prefetch:1
                2⤵
                  PID:2420
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
                  2⤵
                    PID:4104
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
                    2⤵
                      PID:1596
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
                      2⤵
                        PID:5052
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
                        2⤵
                          PID:1852
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7428 /prefetch:1
                          2⤵
                            PID:1712
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8100 /prefetch:8
                            2⤵
                              PID:1476
                            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8100 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:1380
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7536 /prefetch:1
                              2⤵
                                PID:5040
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
                                2⤵
                                  PID:2180
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
                                  2⤵
                                    PID:5036
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
                                    2⤵
                                      PID:2316
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,7392440406820190636,4886950941169389742,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2768 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:5840
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4596
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:3492

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        9e3fc58a8fb86c93d19e1500b873ef6f

                                        SHA1

                                        c6aae5f4e26f5570db5e14bba8d5061867a33b56

                                        SHA256

                                        828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

                                        SHA512

                                        e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        27304926d60324abe74d7a4b571c35ea

                                        SHA1

                                        78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

                                        SHA256

                                        7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

                                        SHA512

                                        f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

                                        Filesize

                                        33KB

                                        MD5

                                        e2ec36d427fa4a992d76c0ee5e8dfd4d

                                        SHA1

                                        47ec4ace4851c6c3a4fe23ad2c842885f6d973f2

                                        SHA256

                                        36488e81afcbc4d7018b8764c18032b10be21aa45521c9671fde0cc77f70b2d8

                                        SHA512

                                        d1ae29d19f65ce74b9b480c82b87315634ec2e96d199f5feb423918af9ad6e24c8b436e03904d452f71562f04c42acbb250256eed73bcd592a79c08911c74976

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

                                        Filesize

                                        212KB

                                        MD5

                                        08ec57068db9971e917b9046f90d0e49

                                        SHA1

                                        28b80d73a861f88735d89e301fa98f2ae502e94b

                                        SHA256

                                        7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1

                                        SHA512

                                        b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

                                        Filesize

                                        24KB

                                        MD5

                                        c594a826934b9505d591d0f7a7df80b7

                                        SHA1

                                        c04b8637e686f71f3fc46a29a86346ba9b04ae18

                                        SHA256

                                        e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                                        SHA512

                                        04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

                                        Filesize

                                        23KB

                                        MD5

                                        c897f8479da25ec570027594f1b4db24

                                        SHA1

                                        81a3ff06cf35a87e697fc4733966dffc270ad06b

                                        SHA256

                                        7fd05e325904c9c31e435d5c65b9b4ffa11a9116d1df0282d6cd7c87ef6f1dbc

                                        SHA512

                                        b1c1c46810c3bc5c407f7d30a9d74db8242860965d958ffc5bfeed35b1204774843775ae81b8c414ea89322d00d7ab97313965e20cebba588edf13b9b8dcbc10

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

                                        Filesize

                                        45KB

                                        MD5

                                        ede70f717200a59b4cb831635de913a1

                                        SHA1

                                        d4d6e893ac192b5df087e924ab3356852f8a7bc0

                                        SHA256

                                        c63fbcc69de230e4844cf735ccf668eeaf30e42126eeb464da39c2de6b0b0051

                                        SHA512

                                        b621bde28b90ba97c122677989d994cb5e88fd0906366af1a23ad3f9d9f3b7f2bbef95873f29100433d4068fbbf7ab798505e68deefc118097fc5f76dfc4b672

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03ae0658db22f33f_0

                                        Filesize

                                        289B

                                        MD5

                                        85f928ac330ae6b18e4acfd568c5215a

                                        SHA1

                                        0c0ac967c7a5fd63af7fd5daaee5342bfcc2f9ce

                                        SHA256

                                        b64e5dd8ffa9e96997b9bcac95aaa018615601b4c94ebf21e14ac48055499388

                                        SHA512

                                        79aeacb4f7ddc70822ae3c7969b2d922dc9a2dff29687725d1921ad4f3d8fb32825f4bfe2292b564cec09a7b7be30fc610d01f63b25db437f15223cf79d640e7

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a13a8f097399c666_0

                                        Filesize

                                        434KB

                                        MD5

                                        4a2e3db21a33bfeaba4ebf27a5f8078e

                                        SHA1

                                        e7496608acdd2267a86f4bf44ee1536eb95fc9b2

                                        SHA256

                                        e2215d137f05364b22b029ad7b55542ea7c3f5a3bc1441145dbf0543dafce15c

                                        SHA512

                                        0a99333a68751fb0d5902a887519e2623b54eff1977b38e9fa31b31de0b6ec4da5bc384c8b1a6b3b9b1d2b21e54d60f76d74555877fb8fcb6a72a743e5bd4fcd

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        432B

                                        MD5

                                        642a3ce6ab2235c27cf699fab71f87d6

                                        SHA1

                                        4f30e12d067cb5313564f873625d059b6287ee47

                                        SHA256

                                        70428a63c15e8bcff5c99ed0c2f7e357071cea59c67ba1622220b94142359c6c

                                        SHA512

                                        a0d4b632a6271c3a81ec36b80a5044441d3ff1d292c767e114e5a82951aa05ee3cb34481f9a2471b81dd60a239789fd91df14b981a96108d80c540ca1905fd6f

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        384B

                                        MD5

                                        78c3f16269f1660e2c32413c4985ed84

                                        SHA1

                                        1d8e31c9f09640bb242b454b01fca67d76706249

                                        SHA256

                                        8c6fe8f664c8ab0a514ea76a66134233a911cb61eb17c9a55a2b637d9b5a4d63

                                        SHA512

                                        197032be3d5c8cc5e5e41fac2bae15c6dd2d86ba552c4c6df59dca4b6c06d0f4882e377afa3efb05c0e4bbfc32cc5072ec522e164725f9a8c3050720ec03b2ed

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        2KB

                                        MD5

                                        7aadf091924d752aa511e8d428e175b2

                                        SHA1

                                        75dee156f667e2f4e744078c2bdac82ebe2cbc75

                                        SHA256

                                        af8ce48277c1e7120dab407ef521980077e8040b15a73868837a8883a8cc2b40

                                        SHA512

                                        73f0428beb2fa9acb94589630e2632ccbdb9f25abe437182d8e8357ee9658c0fc0e2281cab375c85cb6ca8d4c10b7062f03181e1f70a85236f97de14d74cf8de

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        2KB

                                        MD5

                                        68be8585d844599207a557392d1db873

                                        SHA1

                                        2e06a11541dbfa2078b89255d4268ea069ad3691

                                        SHA256

                                        e6ce67262e41eea0bab28f48fa84a38becefa8c9d5446071f6b0bb8051fa72f7

                                        SHA512

                                        1d4bbbc18d2e2f284a85ecdcd35e8fadedc75d8cc609f3eb36ecfe4835c04b8f9832c71b08a3c8158bd21e4eb3645659bd8ef495dcc80815604da5c7fd8da597

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        55939d99eb078dca54c2a387912554d9

                                        SHA1

                                        5fcb4f8b59981cafba07a4bb24134d8d826ead5b

                                        SHA256

                                        75296a5ba07c07842cd3d6b08682557be15a1239be84a6ae2222fc7c8377aee1

                                        SHA512

                                        261c950fab9782df303b8f3c5a6a3a03fd7836eef674b4d6bd9cc057bcf46c76cb233a163432d1c226003a93e541b33fc66c5353ca18afd18647c72dc095baf5

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        eef23a6e2d7bbb830ec513ca1fade581

                                        SHA1

                                        883c07165537a360f725ad4cb6a134fcbdee73d7

                                        SHA256

                                        4194b3f7d6506a25e39dfe7b177b41f7f5e6e9231e286fdbe98e54c4a33f17bd

                                        SHA512

                                        09ef3c5ee123a2229336a0b5c68bee48d8157a97947c037c808da3b39bdfca7bd6ea3b39003a7de1f5aeacb352478b522be40043219a4a217121ac83c9bcd0bf

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        7KB

                                        MD5

                                        c15ae8751f02bfd384d0f454671e8940

                                        SHA1

                                        6c70b848704041e47c834c760d0108e3f1622c29

                                        SHA256

                                        b1f3741539782a601a1214cd8cf8e1816c8f71ae359ce44e5a9eec0bea8f3a6b

                                        SHA512

                                        36c1996083455036e02804920cc46cde3e20fbba465c888e359f677962ebe5c1de2080714e5740086e388744f131b41009ba5a3be6f578962f8310e92dcf1bbf

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        6752a1d65b201c13b62ea44016eb221f

                                        SHA1

                                        58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                        SHA256

                                        0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                        SHA512

                                        9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        10KB

                                        MD5

                                        b29c1884da7b7a868939b3f0c7293fc9

                                        SHA1

                                        2b4e4ca6ad3d7781bbf222c671fa31201de55f8a

                                        SHA256

                                        3c1060895490c3e5693d48387acc3bceca7d3dc775419235186880a0d9bde4b5

                                        SHA512

                                        61e3c63e5f1842972518fbc535c7e1fa065efe325fca812aec385e2687167f0a4e573859e0fdc8340392014ab51653d01ef49e533e18b527d4f4694e026f3ed8