Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/01/2025, 13:01

250108-p8648stjcp 7

08/01/2025, 12:56

250108-p6k4zszrbz 3

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/01/2025, 12:56

General

  • Target

    https://app.appsmith.com/app/document-review/page1-677d11a9e0044e17725cdc1f

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://app.appsmith.com/app/document-review/page1-677d11a9e0044e17725cdc1f
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3476
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc27df46f8,0x7ffc27df4708,0x7ffc27df4718
      2⤵
        PID:3488
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
        2⤵
          PID:2576
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:4436
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
          2⤵
            PID:2192
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
            2⤵
              PID:540
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
              2⤵
                PID:1648
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
                2⤵
                  PID:2316
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
                  2⤵
                    PID:768
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
                    2⤵
                      PID:4204
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:3080
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
                      2⤵
                        PID:3884
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
                        2⤵
                          PID:1188
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
                          2⤵
                            PID:224
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1
                            2⤵
                              PID:5196
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
                              2⤵
                                PID:5204
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,7606597525272355083,8798461212188807124,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7132 /prefetch:2
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:3152
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:1196
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:1528

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  d7cb450b1315c63b1d5d89d98ba22da5

                                  SHA1

                                  694005cd9e1a4c54e0b83d0598a8a0c089df1556

                                  SHA256

                                  38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

                                  SHA512

                                  df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  37f660dd4b6ddf23bc37f5c823d1c33a

                                  SHA1

                                  1c35538aa307a3e09d15519df6ace99674ae428b

                                  SHA256

                                  4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

                                  SHA512

                                  807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

                                  Filesize

                                  198KB

                                  MD5

                                  fd0becaa34666a99a35f19c89f266ec7

                                  SHA1

                                  10e76956db27997d3d2102da3b22a2207f2eb724

                                  SHA256

                                  7768effc8ee7f80eafde8c2ee47abeab2045d84fc5fccddcb6397e0fa40eedaf

                                  SHA512

                                  7b37927837f84176ae2bea2f7a32c6758c0524e4971e0432646557e7659c6cb196115c892d76d600af86c5ffef65da8d6c2ae916143e1da98f6f14e7fc6e685d

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

                                  Filesize

                                  47KB

                                  MD5

                                  15583ca3ed7bb4602f2ee63bf207412f

                                  SHA1

                                  a1015f66df40ba15c7f0cf1379c8a9e927f59801

                                  SHA256

                                  1d6367b5c4c77ec675ac245dd669461aeb47e5b9b346874bc29bccc5362f5ae4

                                  SHA512

                                  3375367b6c51b45ac9b534699b493004fde094d2e5df9e15deb86c96ab8ca7a0306e61065b85d04fa31f47072b187a95aa3ae5509b7f274c4222e479be4fc5fb

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                  Filesize

                                  984B

                                  MD5

                                  15a7cfd23e6cf866ca9e1d2ceeef186f

                                  SHA1

                                  2563aae6b7f9d6cc7a8326db3ea76e4e8d5f98d7

                                  SHA256

                                  017df961782c698fbdeeaf9701f259077f3fcf6fe2c302902eeee732a45551fa

                                  SHA512

                                  087c0fcbb2357e63d5f8ecd75e91c1cf350d89fc3ea1e7c9f2e04c1086a88f4be1a9253ee38749989f289a3648db59ada32f561d65e763d44cbd5a0f53326e32

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                  Filesize

                                  1KB

                                  MD5

                                  a854c4b3d17e26609d940c9788c54c30

                                  SHA1

                                  87a6af81ad0db7e8889a55b3eaffd46bfb18f4bf

                                  SHA256

                                  1ceb970cffa8163132cab9e398d0d10095500b7070dd7215bc13bb7cb6bce159

                                  SHA512

                                  a33ddddb6aa4e17751b3e594e30e12eb912ebff07c61d1d9fa689a63c94be402a7545c540bfe7c6bde1ccaf57d1e5c39e7b136e929d65d140e7406757890d1bb

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                  Filesize

                                  111B

                                  MD5

                                  285252a2f6327d41eab203dc2f402c67

                                  SHA1

                                  acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                  SHA256

                                  5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                  SHA512

                                  11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  5KB

                                  MD5

                                  3536541466af96a31b26b59179323343

                                  SHA1

                                  d28a4e16f34b4ddeac80e1fa26284c444b50711e

                                  SHA256

                                  c203607a6dc642aead05a82e3ecdc839f0e73fec8dfd1d9852e01c701191fb15

                                  SHA512

                                  f05add84b8a381339b481a9dc55827191a38d7c062c0cdbdec2b36807b1346f0916c62a62c85a010b78a96937f9e1ecf69a685b5dd049d1e6f14e525eec3c7dc

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  6KB

                                  MD5

                                  55a93e6bf7fad7b97c23c8625b70b2c2

                                  SHA1

                                  1e2b12b10721ae97276c2cd78f2f6eae9fc47d1b

                                  SHA256

                                  6c1608bcbece467677839dafa3587c24f6b6fffd50d98c18ddb926d60d7f26bd

                                  SHA512

                                  f9f9147c80f4f005b6c0030aa338f0df1b2623beafb1213b3085884685d74c0dba7a983f9f2074d018a42c86b66ac99e0ecb1147d07ca4c5fbd7cc74e3a4c12a

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6e12416483546a4e9130cc9adf62b94fb015a6f1\5e0cc6d2-f874-4333-aeb0-cd95331eb220\index-dir\the-real-index

                                  Filesize

                                  5KB

                                  MD5

                                  338a4419d3bf2f6fc55822921e2f18f6

                                  SHA1

                                  91f7b8bdc49721cb50197d9868fa290f1da1b21c

                                  SHA256

                                  0a0b75073a8d32d07a4c0bfa55b1a3683b5233c03835cf40ea737417cd18832a

                                  SHA512

                                  3582145f1e46959bf4f0e6e743d46446baaa6749715731fdfee9098e770c75d7040396cbc625a1112dfa6eaa2a9cc89f51e473f606aa14a7e4c979e37c6568bb

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6e12416483546a4e9130cc9adf62b94fb015a6f1\5e0cc6d2-f874-4333-aeb0-cd95331eb220\index-dir\the-real-index~RFe589054.TMP

                                  Filesize

                                  48B

                                  MD5

                                  16cd373efa2767589c4a546b2f232f52

                                  SHA1

                                  b462f79f5f35345ca6c408ea4519d8656e251c2c

                                  SHA256

                                  e4139de2a8ea420a206eb96f3428f0b8a91cbbab682aeb7e7ecf40ea083d5aff

                                  SHA512

                                  8000726535c4c2c4e6910e1efe59123dcd9e4326f49ad5dca97f2c6abfbc6f3b55834017d96e9d7e6bba63b3891abe804bd6a27fe9ee7dca070b23e85af01516

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6e12416483546a4e9130cc9adf62b94fb015a6f1\index.txt

                                  Filesize

                                  98B

                                  MD5

                                  0fc34eed1ec3e4d9abd12a702fbc08a1

                                  SHA1

                                  5db9bfaae12090e9144cfb441e2e4c9825a94516

                                  SHA256

                                  684fe13e2a598abb5ae15893ca1b311b78befb8873f09fe3a00fed037b466745

                                  SHA512

                                  e7a8b8488da8edaeed844dd0074306400ea7933973562c0652ddee7f03fc244e0db57b475c40aee898f76f59a8abfc99b2bfbc5a22e087353cd5cafa4cc17ab2

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6e12416483546a4e9130cc9adf62b94fb015a6f1\index.txt

                                  Filesize

                                  102B

                                  MD5

                                  ff09a3765bb503b659b033189469e0bc

                                  SHA1

                                  426860c9e4ccc39748632e0e6e51e9c3b3be593c

                                  SHA256

                                  2d158ec944cb536641be6c9ac078c7fd5e14d620d85c4268068a47ac589fc9c4

                                  SHA512

                                  357378d9c367716ae7fb186f088b19c834ec730e0b860e08f14a05701e2fdbb5864345b18f4c4be89b2cc49154e96dd1ce4b20c5e0093efbbccb450f03e7a963

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  46295cac801e5d4857d09837238a6394

                                  SHA1

                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                  SHA256

                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                  SHA512

                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                  Filesize

                                  96B

                                  MD5

                                  69eb34068dd97b35ed768e01b2129313

                                  SHA1

                                  16ef9f12ac044e66c30a24215cc897832dd17117

                                  SHA256

                                  f8c0da023ae56a845929e356d050ef7e45a714e33df8c7c8302c4edfd4444ad3

                                  SHA512

                                  3f9e53f11b0d4eff295a87c7f1f180d5dba6c5ff59118d37a02bd45f5718e6484094b747663fac9706b97fcd43af594623f7b6aba968ae45464ea612e531e892

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f0a9.TMP

                                  Filesize

                                  48B

                                  MD5

                                  ab758ac007059f8fc59e942bc15929c6

                                  SHA1

                                  c4492c22bbb43f9b5ea8882dc4bab79d12c3869d

                                  SHA256

                                  280e826b59f3b9d1b67bc268d5ca2d9bbb74c73dbca2741d9fb19ff7a654d152

                                  SHA512

                                  edfa28cb7adc30f8d0015802b060ed38348252c4e5a64d38e9201c754e07496b88d3a6ef286b0d999079270635aaefff7e6e37d86314bae33a656c4f30653ac0

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  9b96dbc548955753303ae7a08d6efc25

                                  SHA1

                                  4cef84ed8eb62be1458b16529f866275e25ad01d

                                  SHA256

                                  c7b4c91ef0be12a06bcbf042f3a56e8cf3ea682e7bbe4d12ff9f9c5ac0eb5e4d

                                  SHA512

                                  8077accba3dbb97fd055eb7409c443cedcc9275af78b63d5118ecb077414b9c9e2639230a4824455543fd7acdd8bd0cc2786fb20eb87ffe743a8b1341dc7fbc2

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  ced9e71edab19133ce1c796f9e9a9689

                                  SHA1

                                  de7419bec1f669727261dd6cde79c80690496008

                                  SHA256

                                  3f4de4e5f96115c1165a48d0e00b8b87b1fb1036ce2adf68d25dc9828583d74f

                                  SHA512

                                  ff5a3c6b264b0e59685d6a159bc261f186074050521c5505a4324ff5f35b37dce7f03a5e7297f12807d3f05b9ca96394707e3d6bfae206ba167d22b8b8b441b8

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  489c426cc1a90aaef558fb979186d30d

                                  SHA1

                                  920fe5111dc71a62bd9818f4edab448dcdf2986d

                                  SHA256

                                  f2b5425dabee6d6448573ea7b41fe9909927011d9659e9a3d435ed44aafc7aad

                                  SHA512

                                  57d7122e14e8e595bac744c9625dae26203564ab378a4f86caa94af8161f21f7d308011877b98f6b34beede0e9e86345bed9bca5b3a24ab2b58f8b22199fd384

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  c5f80d843cfa21acdfe1940ff62ff524

                                  SHA1

                                  5e8b1445e337f10972adae396d4d9a2531da3f5c

                                  SHA256

                                  8d04cae554e3b7dd8c160588aeb6d11dc6f273784c391c82752b4048e8c87e2a

                                  SHA512

                                  ba6eb6eeeb9d79bece287bc06b6b596ba4fb3a2454a913c73a31c466678dea5b1464c1791702e76e96642204a6cac5a037a28d2da8d76e65f675e2697fb7733a

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e0cb.TMP

                                  Filesize

                                  1KB

                                  MD5

                                  b1ebfa38deb194d82f1afba392149c42

                                  SHA1

                                  be6e1b2ebc57e2ec7d65ddfa560a295da78f3d9e

                                  SHA256

                                  632b125ae1e8b412ea4cd0cf01c8de79c1c941c818b48885b3db6f75b1d903cb

                                  SHA512

                                  30d677d3a79be99db95caac007fc85a5db6ce8cf314c82fa6214d4fe5586ea61f08d50f441bdca65fc7503030b7d7c876a06328dd5a8e39b169d5316eb1189a2

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  6752a1d65b201c13b62ea44016eb221f

                                  SHA1

                                  58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                  SHA256

                                  0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                  SHA512

                                  9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                  Filesize

                                  10KB

                                  MD5

                                  483568279d59ab7bbfc7695dcd5eacc1

                                  SHA1

                                  695d00a4394148d23c57ae9b61afa430f3362597

                                  SHA256

                                  d056da2ec666e7b1ad70e41af5b295b868c42e3ac3f31d07098fada20dff6118

                                  SHA512

                                  fd9d0c519c5df86b8539708631bee0e89f5336731486984bbfa2c6429ac1396f0c193da83257243f2292044c4b1a28c298654f2a6d9e8657d7adfb56c864853d