Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    900s
  • max time network
    844s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/01/2025, 11:21

General

  • Target

    https://google.com

Malware Config

Signatures

  • Detected google phishing page 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://google.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2832
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff92b3746f8,0x7ff92b374708,0x7ff92b374718
      2⤵
        PID:1908
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
        2⤵
          PID:1400
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
          2⤵
          • Detected google phishing page
          • Suspicious behavior: EnumeratesProcesses
          PID:3012
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
          2⤵
            PID:840
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
            2⤵
              PID:2736
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
              2⤵
                PID:4720
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3060 /prefetch:1
                2⤵
                  PID:1580
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
                  2⤵
                    PID:3044
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
                    2⤵
                      PID:1660
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
                      2⤵
                        PID:1576
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4836 /prefetch:8
                        2⤵
                          PID:2224
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4836 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:508
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
                          2⤵
                            PID:2848
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3644 /prefetch:1
                            2⤵
                              PID:716
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
                              2⤵
                                PID:976
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4008 /prefetch:1
                                2⤵
                                  PID:4816
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
                                  2⤵
                                    PID:2436
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
                                    2⤵
                                      PID:3444
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
                                      2⤵
                                        PID:2344
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
                                        2⤵
                                          PID:3436
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
                                          2⤵
                                            PID:2092
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11731490394655979958,12047119335025426993,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3152 /prefetch:2
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:5108
                                        • C:\Windows\System32\CompPkgSrv.exe
                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                          1⤵
                                            PID:3900
                                          • C:\Windows\System32\CompPkgSrv.exe
                                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                                            1⤵
                                              PID:4464

                                            Network

                                            MITRE ATT&CK Enterprise v15

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                              Filesize

                                              152B

                                              MD5

                                              37d04af7fe040412c05f24f2c6cd8f2f

                                              SHA1

                                              2443f06f4525f3d766514f122857ecc74fc2941a

                                              SHA256

                                              1ab5a5199a050f7d642f1d2793d42657778c954a3fc31a799cdae6b5439cf725

                                              SHA512

                                              b3449a38062566d668b5823876a48762e67959723fd1ee37168f58d150269e25300e43342611a72052b956a2602c44ca3ceb452eed1a4ab12b5f752461e32555

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                              Filesize

                                              152B

                                              MD5

                                              4c76084ef5a62345ea5fe42f496230ce

                                              SHA1

                                              ab677a8684211939ded110b61dcecd68d3e0b606

                                              SHA256

                                              1db95ee6e5eb9737bfb6df17177540cd05454c27f4fd73c916c39f690f749c76

                                              SHA512

                                              d0c3578750ae89785645d31a931c598c8dba7035a17b6fb9bcd3ceb76a69c8dcb4b23ecc89ed85be30599382db72d167bf91313ec44b59778247537e14cba66b

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c2f767a-3b94-4b11-becf-c597035522f9.tmp

                                              Filesize

                                              705B

                                              MD5

                                              78f6fb6d30b6d03bc6300ade56537951

                                              SHA1

                                              7179606a3802ebe8ffd5620b99352e36c1be1840

                                              SHA256

                                              4bb1acbb721a01e8e307fb58d7924947c6d970d44d8efd94bea148cf81084f91

                                              SHA512

                                              93d336486e520224b9aa7985d344172d8677f693d145a699d7768d0ed154af61ff214b9dd5b3dd58dfc940d3616927850737254df8a5faca21cab34473e03da2

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

                                              Filesize

                                              214KB

                                              MD5

                                              ba958dfa97ba4abe328dce19c50cd19c

                                              SHA1

                                              122405a9536dd824adcc446c3f0f3a971c94f1b1

                                              SHA256

                                              3124365e9e20791892ee21f47763d3df116763da0270796ca42fd63ecc23c607

                                              SHA512

                                              aad22e93babe3255a7e78d9a9e24c1cda167d449e5383bb740125445e7c7ddd8df53a0e53705f4262a49a307dc54ceb40c66bab61bec206fbe59918110af70bf

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                              Filesize

                                              1KB

                                              MD5

                                              39c146fed5dc681b2491b7d46bdbdd6c

                                              SHA1

                                              2f6d4332c2bfe4c04f6875eb4be147ed16af92c3

                                              SHA256

                                              63d57237bfa40611388e157e3bc04d0569c5ad26d0553c3b5fde0a8e1a8b1738

                                              SHA512

                                              fe01ac1d8ec9c466b4729d8164195caa60483b2bc643368fdd12a7001d3f7c219f4a74ea3fa6673d31e5e759eacdac5bbd0a4cf02e695a6b0701d287b62d10f8

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              2KB

                                              MD5

                                              33da5d8b28c83128296220bd5ee7f606

                                              SHA1

                                              868ebfd4340fedc932aa403e49d479e47bd403fe

                                              SHA256

                                              0719250aa812e9c5da7b82d6d89140b7b85c23eb2b0f71abe3b6f89ae2ded5aa

                                              SHA512

                                              4096357ed41b78901a6ddb18bd68327760b0fb61636b1e7314608cb3661187cda94566e97c5647b40a020a707ababdce41cca90f560a913d28c4c62c8b648f43

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              2KB

                                              MD5

                                              fcf120d83c4f75eba5ef375a7f2aa257

                                              SHA1

                                              0415f409786a032afdc47866b4fabc5ae2c5e681

                                              SHA256

                                              e72e815c34f7c85dc774b0558c9d58b91771472fb2a3d2bcc15cac566d91a0a6

                                              SHA512

                                              7a6c7a3ec0fa55cc0fb357d8dc864bff77e3111216e823a5dc206eeb2615b5ae48a77c4041973a443311cb61cd38e545d646e8ba5adc8c7ffc10cefdd4ac5828

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              2KB

                                              MD5

                                              b84194aab4124adb3b3e739162f18114

                                              SHA1

                                              cd11ca58a0c683fa9f500580411fb2f872a538d1

                                              SHA256

                                              7f27a36ffc75caf4096f1d3ee0e7bf3746332db69bdc1dc13c6d00b84e2ed5cc

                                              SHA512

                                              e4117decbcb2f9b573114f38fa04c0b582fdde04997da78d2b60d4b3bf5fae94820a3b087c2894ed53d52cabdad6062393b0e12c8e64b347906cec88f2d068c1

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                              Filesize

                                              1KB

                                              MD5

                                              8f73b4df7025cdbe9456c08c7dd2e01b

                                              SHA1

                                              d45428cbac0eb4d76f6eae81f5045d8741a9abcb

                                              SHA256

                                              26763b94eb4d7edfd592674a983628c4ecd10cb9699a67094d41eb4ab745177b

                                              SHA512

                                              eca0d5b33811fed482c732a7672a1ce8228fc3edac2c4a508c7c25c13841fb1a759ce53af5cb6df43b8b1cdd431b7f4562fa1358deecb2c3fa31b0ea7d63be35

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              6KB

                                              MD5

                                              297b35b9feb3bc6b274dd0526605d30b

                                              SHA1

                                              26080adf11deeca693e3d6432c6294f6b89cc32a

                                              SHA256

                                              70a7b21551008affa1da447c803d3a3463f5deabbabd06156f52eb1d8742864c

                                              SHA512

                                              58bc9b700198e309d777497c9fdbd201e82e5702da3addd2eabe939f4e74bfcc29546f550ba1d50f660b7879458a736a88687cd7bb98dcd15bb390ccbc13a365

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              7KB

                                              MD5

                                              059dc5221a0014155777c9f2618b07e2

                                              SHA1

                                              de2ee8387b12f0cd2daca7752fefebca67d00097

                                              SHA256

                                              e54d4238d6f244e82e6c000ca59b8ca82d8aec8aa8f8ec90c0ecfb29fab51329

                                              SHA512

                                              6a284a0273c9be78a07a6fa01c9782b1361376d19d564535c89ba65f896ccf0de8ba919830aadc0dbf7f81ba3831bf54777c839a371f1f91d93c208a63fd0327

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              7KB

                                              MD5

                                              c4be90539af643e2259157a6a8e1b92a

                                              SHA1

                                              6f80c8e5ee456db1d667bc79edf2e663454d5fad

                                              SHA256

                                              9b3519c46dab251e2cf375bba3b47b484dbfde9a4928b8c8ad0a123c713d06d9

                                              SHA512

                                              a3a3304d6ac1ba33f9f10acfed2800e2a036fd7952acc9b32eeed65b40a0d457a71e144bbd926bfdc4ab9ab5b69463fda0a3a3d4e9e5abf38c90eee307aaefb4

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                              Filesize

                                              6KB

                                              MD5

                                              c5a80cc280be5ade9dba50947e120f2e

                                              SHA1

                                              7e939cc8083b5741d5a6d8210003221f8afa56fe

                                              SHA256

                                              3b9c1308cb1013d2016350c58467ffb8d83cff319c94d8ec8af2e42d55756029

                                              SHA512

                                              912c8b7a8ea8bb95df2439fce7e854f159f1c60d7feaba9665be926b198bfca9d55fd3ccfc298fdf5e6b101a49dc213fb60fabd82db95b33f0ee8e185f0c50ed

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5819bd.TMP

                                              Filesize

                                              705B

                                              MD5

                                              5bfff2920a83734b52b49e7082309936

                                              SHA1

                                              c66b6a353973db5186db75c285574e75820f9c97

                                              SHA256

                                              232696599326d564c2c44e88d67aec1fa3087f1e4d5f9053ba190e974d48ff82

                                              SHA512

                                              d320d051fed1998b0638e955d579a039a37ec5446bc3f575e05b0cbf47b4e0414d77d8051f2a6706839603922797f65f75751c355d183b6301297703d8d38b3e

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                              Filesize

                                              16B

                                              MD5

                                              6752a1d65b201c13b62ea44016eb221f

                                              SHA1

                                              58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                              SHA256

                                              0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                              SHA512

                                              9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                              Filesize

                                              10KB

                                              MD5

                                              6b7772b048aa2eaac32db1fadb115116

                                              SHA1

                                              9a6403876389a01eec02623c61f98ff69d7b2249

                                              SHA256

                                              1e6ce6aa7bf2e61cb6d40e4af7ac5d62d7904a4c9311c9cc5b2676c2b7866d18

                                              SHA512

                                              f286675141f31a46f113d91e679c327d9dce3a9628ffffc2a10138e14201e826191fb94dbec23ee46afb63e039601b47d1183ee0d08b0bad6d8cb3e5eedfd102