hxxps://digitalporfolio[.]collegboard[.]org

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://digitalporfolio.collegboard.org
Sample260626-sdgsmsct2w

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5840	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269596449953519"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{657C1D64-7332-4D49-BFE2-89764F2CFF91}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3576	msedge.exe
3576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4728 wrote to memory of 1920	4728	msedge.exe	89
PID 4728 wrote to memory of 5276	4728	msedge.exe	90
PID 4728 wrote to memory of 5840	4728	msedge.exe	91
PID 4728 wrote to memory of 5276	4728	msedge.exe	90
PID 4728 wrote to memory of 5276	4728	msedge.exe	90
PID 4728 wrote to memory of 4848	4728	msedge.exe	92
PID 4728 wrote to memory of 4848	4728	msedge.exe	92
PID 4728 wrote to memory of 1060	4728	msedge.exe	93
PID 4728 wrote to memory of 3284	4728	msedge.exe	94
PID 4728 wrote to memory of 1060	4728	msedge.exe	93
PID 4728 wrote to memory of 1060	4728	msedge.exe	93
PID 4728 wrote to memory of 3284	4728	msedge.exe	94
PID 4728 wrote to memory of 3284	4728	msedge.exe	94
PID 4728 wrote to memory of 2128	4728	msedge.exe	96
PID 4728 wrote to memory of 2128	4728	msedge.exe	96
PID 4728 wrote to memory of 2128	4728	msedge.exe	96
PID 4728 wrote to memory of 556	4728	msedge.exe	97
PID 4728 wrote to memory of 556	4728	msedge.exe	97
PID 4728 wrote to memory of 556	4728	msedge.exe	97
PID 4728 wrote to memory of 3100	4728	msedge.exe	100
PID 4728 wrote to memory of 3100	4728	msedge.exe	100
PID 4728 wrote to memory of 1572	4728	msedge.exe	99
PID 4728 wrote to memory of 1572	4728	msedge.exe	99
PID 4728 wrote to memory of 5612	4728	msedge.exe	102
PID 4728 wrote to memory of 5636	4728	msedge.exe	105
PID 4728 wrote to memory of 5636	4728	msedge.exe	105
PID 4728 wrote to memory of 5636	4728	msedge.exe	105
PID 4728 wrote to memory of 5328	4728	msedge.exe	106
PID 4728 wrote to memory of 5328	4728	msedge.exe	106
PID 4728 wrote to memory of 5328	4728	msedge.exe	106
PID 4728 wrote to memory of 5552	4728	msedge.exe	107
PID 4728 wrote to memory of 5552	4728	msedge.exe	107
PID 4728 wrote to memory of 5552	4728	msedge.exe	107
PID 4728 wrote to memory of 5176	4728	msedge.exe	109
PID 4728 wrote to memory of 2016	4728	msedge.exe	110
PID 4728 wrote to memory of 3024	4728	msedge.exe	111
PID 4728 wrote to memory of 3000	4728	msedge.exe	112
PID 4728 wrote to memory of 3000	4728	msedge.exe	112
PID 4728 wrote to memory of 3000	4728	msedge.exe	112
PID 4728 wrote to memory of 5908	4728	msedge.exe	113
PID 4728 wrote to memory of 5908	4728	msedge.exe	113
PID 4728 wrote to memory of 5908	4728	msedge.exe	113
PID 4728 wrote to memory of 620	4728	msedge.exe	114
PID 4728 wrote to memory of 620	4728	msedge.exe	114
PID 4728 wrote to memory of 556	4728	msedge.exe	115
PID 4728 wrote to memory of 556	4728	msedge.exe	115
PID 4728 wrote to memory of 556	4728	msedge.exe	115
PID 4728 wrote to memory of 3200	4728	msedge.exe	116
PID 4728 wrote to memory of 3200	4728	msedge.exe	116
PID 4728 wrote to memory of 3200	4728	msedge.exe	116
PID 4728 wrote to memory of 2412	4728	msedge.exe	117
PID 4728 wrote to memory of 2412	4728	msedge.exe	117
PID 4728 wrote to memory of 2276	4728	msedge.exe	119
PID 4728 wrote to memory of 2276	4728	msedge.exe	119
PID 4728 wrote to memory of 2276	4728	msedge.exe	119
PID 4728 wrote to memory of 2572	4728	msedge.exe	120
PID 4728 wrote to memory of 2572	4728	msedge.exe	120
PID 4728 wrote to memory of 2572	4728	msedge.exe	120
PID 4728 wrote to memory of 5220	4728	msedge.exe	121
PID 4728 wrote to memory of 5220	4728	msedge.exe	121
PID 4728 wrote to memory of 5220	4728	msedge.exe	121
PID 4728 wrote to memory of 3576	4728	msedge.exe	122
PID 4728 wrote to memory of 2800	4728	msedge.exe	123
PID 4728 wrote to memory of 2800	4728	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://digitalporfolio.collegboard.org
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffbc9dac188,0x7ffbc9dac194,0x7ffbc9dac1a0
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,3028039088981395662,14846913449575029146,262144 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1688,i,1479322032186091628,8408255059953240554,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,4119224130907397180,5781440729402751179,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:13
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,17321954908182018823,2013350210873653631,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,11674862059428433432,12063818671814813159,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,9341583979684461209,18287505003534430643,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,7410774493080303375,17059993442319499124,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:9
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,11657883488328335347,8199395503232033470,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,13781956544458282112,4076888102186557463,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,14146694237422789458,13785267697636726690,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,14146694237422789458,13785267697636726690,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6548,i,11836041621137245140,7210798973813230094,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3724,i,11787819425567355140,1743304978663905515,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4940,i,2873260452218423415,5951274413974913775,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,9326948006243628092,17217975634310308139,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,3709816871718818692,10933471790820345798,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,7372652023465354133,9038866778247873197,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=2960,i,11971087932461903559,10918428593801486606,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=2744,i,1831198697783457276,13586202047438775363,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,5342328837083800076,10655754702646306096,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6164,i,379355633431315764,12636458486244356877,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5500,i,7937893541339511430,16848736015077614167,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,14972077952796312047,6194276700731646947,524288 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7124,i,8150102786621877499,1684850142106426923,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6832,i,2538003065793812443,13886058569750440530,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6024,i,3427676487928595280,17215024517854566063,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3568,i,13089227105427820495,9790372019427463760,262144 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3292,i,18438172372782476949,14505698803003811487,2097152 --field-trial-handle=2412,i,10207225183194101083,11155267803238191119,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:2800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

284d2e87-157b-4ad3-975a-db50e24e59d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\284d2e87-157b-4ad3-975a-db50e24e59d9.tmp
Size 27KB
SHA256 a5d0b8f0636f95d8eebd5448d5fd214cee1ae6fbb0ead450a141b07b055f3adc
MD5 5ce56473e42dfc4dec3623f4b4bd1a6b
SHA1 79d938a2678be737644eac55e1256e27d7a97dbd
SHA512 603f0dc536676cd9569baf1093685ce3b43d9c20da7dd5ee9fa2b06eed9250e3054b6a5adf47f0f463486382dec9b29a2cdb25b1dcaa687269dc698a075bb6ec
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1LxgproRLPR2Df:NmymipWgvHfSvu1ja8NgCRLPUb
TLSH
T17AC20C3B640CC77E4F844EADEC25AE976DD801CB9B988D5447EA890C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 162KB
SHA256 d0c40f0c258a69c144569dfcc960a0502815490cb8d221efb13184b5065a1759
MD5 243419d687dd550c918addb1aaa1352e
SHA1 a541637568ebea2607f235e5184a3f1958a53a49
SHA512 1cd7305005e94fad681155b9a2094c8424d21da7961c0ab1e473d2a8de821dc7d588712666d30e1e97bf17a6551cd787436cabc524fcddb367c0ce41a952ce7b
SSDEEP 3072:WPOEeoS8HaIHB8R5CcRzldhrZyBdMOakwKDMJzph1PXwqtMMw/pRl:WIb4wgIZyBd5akwKDMJzph/mRl
TLSH
T1E8F3125EBD6DE59BA0E375D46929D50033874D83A4DAF0A590BAEF3E893CB1B034017E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 256KB
SHA256 e3e4268545e49178c95c3ce577f482d929b4d3d2529002d227e1e4a4a4179020
MD5 9016673ada3309136cb419910553b486
SHA1 d3699bf16abe8771e94bbf5562babee9a3146e42
SHA512 6c590fb10b73d27e6fbf1367d969a6367f71574fd3bd1c2858ffd03711c16b508b2488cebc2234413534cc883ce09f9028fb2687100d92b26c6eb3e515fce367
SSDEEP 3072:ya9c1xq7uKCqFGJGXkg4RrgrBGryyzDFfQdJhz8WzJcjfV:yec1xq7uMecQWrGH/FAJxxzJcT
TLSH
T1E444F1A5FB41E283CF537FF1F06C2EB30B6956C535D61E0B0EA25C10A099A15E72F52A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 512KB
SHA256 2ce14807456d9567337ed7cef963905cb0267568af3a4435fcd075005da39eff
MD5 17fd754bd728e9dd2c1049caa865062c
SHA1 5b90defc04d8fb1637fc47c324afc16adff23cda
SHA512 533888eae9b030798bcf9ac67667e6b33469f24b023846efde6a773838b131f262602f555969f2d38802d1182a34d74734fad327a0a13c56ccb851c0d301a36e
SSDEEP 6144:jtKfPCQIXMD8ARnTGCkggHtc8NYJRNna/vP0CSc:2PCQ3HTFk1N2NWP
TLSH
T1E7B41235F6C38780DB1366B9B07D3E960F5606CA25E6979F27337C41B881225FA2B50D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 512KB
SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
MD5 a0355e6554046083e262e04dd1ee6199
SHA1 73f053d90ec3e9ddf235f2f79902350096be795f
SHA512 3e794941897c103033e709913af6e7057295c2e9f4587f19d1a13bcc867c86f6816d168245660195ea96ac17c833696abad4a4f034aa9dc2a45033ca09d52a11
SSDEEP 6144:aVIHGR+Y4LbXL9wD4GR9R9YsRUhovbfxGyTmSfKcKApMqdjdLi9NrMCrx4F:JU+YI9wD4GVwdVALzu9NQCo
TLSH
T1B2B423E9E1268529D30484B1BD769D0939BA3B681DEF3D4B04009A62FBEF1D0761EFD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
Size 24KB
SHA256 2beefe7293101d64840c308506967e9e2a0b2a6c4500ccbb7871c1342f2894eb
MD5 dfcada20b4cda38d23f6fec8d0260763
SHA1 373ce141ff860592bfc61220e4b5c82480533d19
SHA512 d8b43808a8ad313a54f2418a2d74dcff9f02648519a7637d580e47fea6fa60e8a57c95e3f00643a33accd6479bf0fdba3a858818e38058775b9aa238761536b6
SSDEEP 384:3xbeyInNsrD5LZCzRFwiSmWR4a7tjVwlgtX/UC7duixIaILK7fjzUmcdq7+RCRHr:lRokgcvP7C7m3SBSIjsDkLYd9dL
TLSH
T1A3B2C6985582703CBA3B852167D8AB4C7234DC06DE3228EDF77B662E0FC67D642B3158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
Size 68KB
SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
MD5 8b512e3b59cb89f3f306e9e69f799ab1
SHA1 e0a1c29cf12aa60249c80da1600a2d7778984788
SHA512 d5b39e2618e5cfcde62a34552aa24def071b21cea9913296d33edafc7fb024426ebc8e92550b40f0bb3231c8ddb2945538a7e6c0d4f308c7cdac7d5e53745b87
SSDEEP 1536:phILhlQU1HUf76Z+AGYguWv0KxwhT30N7Xw1RJiuwPy+R3zP5:p6Lhl/1HX9GjuW8KxwhYRXw1z+55
TLSH
T1FC6302008F370176B188A8D9FD49E3B6CAAF58E0914BF595020B188F7F5F8D1A55D2BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 38KB
SHA256 4392ddde86f22a921269feaf788a13509946046047df6926017041ff33d0293e
MD5 04bd0131c5ce154413f71d20017679e6
SHA1 a83459180dca62eb56edee213409f83e12fa6172
SHA512 5818141afbbc45553e72fc106699d9357437f1c2751751dab4f51ad7127e92a6ff85fb67905073addfdec5dd581c8c22ffc8dd6b85919d6a1d72550ebda5376c
SSDEEP 768:hrGgBfBZrOcgLWz/irLn2nTXzHXP0JsdgCQL1/UAv73nWEjvvuUwp5:hrGA51OQ2naXzP0Jsdns73WEaz
TLSH
T1170302AD7D526331E7FB684CC972AA1340C424498063CB1FBEFF098E9D44A4FE056A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1d25ab6f2517bff1bd8b8a131b1d7380852a7a3f5fd38df3ecc829210f430179
MD5 b3e953d56a2fc85a93677eba0138289f
SHA1 77c52b5f0e818cde998ae2ae1f49448632edd1d2
SHA512 14c08102dbe9f13a93295a356401e40221eb80f51feaf5c22de4a48b3edbaee36d44342b06ab23ead29fa04b7e9ec72adb8ec3a93d4564b74a3d3df420c465ab
TLSH
T13F613D71E0EED9A5E7E209FAE0DD208F3377E476B5AB1D11039DBCB89906370B15A124
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 fea0e9b6cc3a85154c73bebf2d482902251d983b70ab121a0e087367a08d6304
MD5 fc55524a62b9326b6c092019ea893154
SHA1 116542ff2d78f93c68b95970a371feaacccbf622
SHA512 1f175729affe101609776cdae43fce90e3511d51a68e726f57b00d87b2c2cd54d78a51b8c286621e5a94cdf5662fb6c7b35227dd0a17d255c93329cc514a0209
SSDEEP 96:DAONFaEteBJMq/HFpttxfE/0d/hE7fb+ECKZou6DJfyTgVH/Ro+Hoi3xVxhBMsy7:0Of7teJMq/H3ttVE/mC7SERZou6DBegY
TLSH
T1A2C1CB32A4D9E062EBE039FEDEF8081B233BC63D71974E02056E797CA407BD59D66065
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592030.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592030.TMP
Size 3KB
SHA256 ac2a2f6acfbad71c3b912842c632a9da775fda8f86523bcc839392566e441acd
MD5 2314ce0e5631804b1128aaac875d072d
SHA1 eec50795b94bbe98bc6c00d922488d1be606239c
SHA512 86e8644c403bf36e8705d1d7a4a24d658324f581d6b17652808eb7a1dd4e573adab8432c422a9996368c2ae001cce3073d030fed4bb2d9e44124fdf30fb9ab7a
TLSH
T197614F31E0EED8A5E7E109F6E0ED204F3377E476B1AB1D11039C7CB89906370B05A124
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 064523e59509f0dae2e7a44abad0880180801ab88addea4e16db2da5393aeae3
MD5 9adb77c5a4cc0035dc97323a8b2aee78
SHA1 12b5b22275f402cfa1312d33a140773feb8b6a2c
SHA512 2690ce8a1cafb33de02ff7ffbecda40a0621350334aee1d423ff36eef83bb8bd6a64916f9d32821f084769a5b62208435260534ec5102e8b420f80587544e05e
SSDEEP 96:DROPlfiCH2bciuzBj6Vfcfct8JtjjXvAx:DEPlfiCH2bciu1j6Vfcfct8JtjjXvAx
TLSH
T198B1AAF3C3E9862DC91195F0AA187F1FCE1D0855836C3D4A85E4AF4BA3F2471E191A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 0035a2be2e246ccc15fa23edc8391272f547da25c57779819877550d9db3d20d
MD5 4d21fff6b39ee52288b78b21c1e0209b
SHA1 aafa42c27ca7c31e01c8be21b33228f66757c78c
SHA512 9f278a14e62187fcf33632a54a5c3a8a1333119866e0a623d83e477071a342a9b20c173b825faf2e6d7d5b610f2fab411bf688c612d4ca092727a3ebfd708056
TLSH
T194D0233353103075A59D7E898059AC4FD735102405839DE460D1985A36354AE461F554
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 0fea30763e7969f2d73f945364399e38ae115355f2a9fe7bdba7b71af4860d00
MD5 2297ce559efe9e831dd20023b7de6292
SHA1 aae7522332d31e3ab9dc2b2a1164018b06e93e08
SHA512 e1bbc6b6eb18e73d4ed8cceaf9b52454ca75fbb58cc149500d716a55ea59aea6045d62fe4e496c86ed51b5dd33836f4a26b9643d8940cd52ff515119046224ea
TLSH
T187D0231313043075759D7F855059AC5FC33710301542DDD464E0D99925354EF850F754
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 1d2bf9aec2bf4ec01934e86e7574147c488f00b1e448ae94e35d6aa3e1db61dd
MD5 395c936841afe3445de399cc966af0d3
SHA1 0ae0941ed388704fc8ff60c21d4c3a82c63b0cb7
SHA512 cbb21f80bf851bf13a79d44c364f5e8b32e62fbbbb351cb51c906d9fa9f7979565282f018bcde701fe9dfdcebc9e925998a7022f6358041b678ae388f5fc716d
SSDEEP 384:sxRRnEzqR2m1j/fVsrgIYKQkCg/PT0t2yfkFUrzUz:sdEOsm1j/fYgSfT/PUHhrQz
TLSH
T187A2D6165534C97BDDDBD119F931BF57D6F81562DA801E48AAFCCA0C00EAAFD2212C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ee55640ced5341556494cfb51f64b10ed0067d3a01211a37a78f05aad2d0d040
MD5 ae19ae286a0978905b94cafbb0c76683
SHA1 45445591da493eae8f63e92e3bc6b707f2659329
SHA512 e7dde1deb62bf96a6e74c80227b35f247733984745811eefe6489ad33770c5cbdd50f6116a35a1d93ea1e201eb3a890568b8d30e99c69134d1ab75893184b07f
SSDEEP 192:sxRxRJyM/jK1Ml8wFj/fVsrDzMdybLzoA8pZe/fi6+WNIY4pjYGhIgD8J:sxRxBbj/fVsrDIzE/XI7s
TLSH
T1C252C9165A38997BCCDBD309F6557F53D6F81573A2901E44AAFCDA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 aeca524ab56236c699e536853fb1daca1cc37266b754a125efd7bdd1318c349a
MD5 1196f0f01107c9355718f85096f6727f
SHA1 9f971ab162d57c986b7d3413bde53e674777c214
SHA512 ad391ab3a7c7520e777c7598f1bab60ade8774ab3d736e354425bf9fb5d6918bb4bb70c7501cbb08764f22654ef6ab09f0d4a66411aa8b18dab08ad40a5e16f1
SSDEEP 384:sxRpzHm1j/fVsrgI113t/Pt0R/5FUrzUz:stzm1j/fYgIX/PicrQz
TLSH
T15A92B6165624C977DCCBD219B9317F57D6F815629A901E4C6AFCCA0C04EAAFD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 23761b44d7badf189843832afd3d2c76c6a2ea8b9816e5bd7cf425ee028fc959
MD5 d2d460a64887b03ebb6acf6f4fe10b9b
SHA1 b8e10e7cdb559c043d1549ff44e89b4b492e26a6
SHA512 4187405d6030ff0030dec542e43e7eb99c7f8155c6ef475e4a1dbc882b2b0ce3c89fb164f4eaf77ef868e3401b25714b292ce9852478dd16cb0c7a1a2c81264b
SSDEEP 384:sxRRnXzqgm1j/fVsrgIYKQkCW/PTy0t2yf1FUrzUz:sdXOgm1j/fYgSfv/PzH4rQz
TLSH
T10AA2D6165534C97BD9DBD119F931BF67D6F81463DA800E48AAFCCA0C00EAAFD2212C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a3639db5911e3dcafeb75548e9b02589de5c8efbb458f487f4e8acbf93516b1e
MD5 99600e1f814cb4c4960440567d02c76b
SHA1 d0836511679b9413bbed0d2c7760945e6461d89f
SHA512 3771f86be1091cb66b194f55e5a121edee5af15e58daf7774fdbffff07cb14ffca57348be70bca687b9b64b41950c3b81c7d36869174bbf3504fc0fc2b2cc923
SSDEEP 192:sxRpRJyM/jK1Ml8w8Oj/fVsrgzMdyb3bDQnoA8pJae/fK6+WNFNKqpp/Y4ppYGhW:sxRpzGOj/fVsrgINCX/Pq0/pW
TLSH
T11572E9066634997B9CDBD219F951BF57D2F81573E2901E44AAFCCA0C00E7AED2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\69969f78-3926-4147-a617-a71fbc32aba4\index-dir\the-real-index
Size 72B
SHA256 25ca7867487a9691a069fa70edd51384a0caf502d3156b80717b649ef4e487d7
MD5 f9a35c6c63b75fd06d7b758343f7c697
SHA1 23e7fd71cefe8286cc9b295459f2d2c6b5a47cf7
SHA512 51381d722b1c4e3a1fa542955c8e623a1cc60952fdab04d524ffb8fa52d7d05c7da4649ca3d56d68510448fb281ae2492947e0e59d7e94f495c4c396bd1036aa
TLSH
T1B7A0027451A84441C512CEB87152AA5423B76C155513530A55B498959E511585B520E4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b69b40e0-1047-4b59-876c-87ca83767113\index-dir\temp-index
Size 72B
SHA256 dd94591c02423aa27f015e5856e21abd53780061ffda81daa7a3b963492d1c12
MD5 7efa69721b524b706989edf05274c098
SHA1 d6311d4205c521ba19dab13e0798328f271ddd32
SHA512 603e6bb48470b40d55c44176080ae878c45bce61596ea0582e39ddd0c46e3ea3f56233dfa3b4be11cda5e2f67209abe2b85819cd5e29520ace6c9dff128a4506
TLSH
T1F6A002A802581116F01113B81883215A23716C59861202139791F478CDD07425702011
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b0953.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b69b40e0-1047-4b59-876c-87ca83767113\index-dir\the-real-index~RFe5b0953.TMP
Size 48B
SHA256 b84c7525341140b0b45d0f8f2aa5fa514f2d7574d8aaa32cad89a0a8d699c7a5
MD5 17dd95ced812a410b255bd5df0b52181
SHA1 a8c33ec5e6ca8dd34e73027597848834f5394ddc
SHA512 7fa100f067317eb4699cce3f35d5edda690dc14ff9a9af08ead823bce88db59dc90f352f7229ba513a7fdcb51a249476ef80a93d8b20a56f210bdac327849aa3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9162636-ddbb-4f41-abc3-131925cb7714\index-dir\the-real-index
Size 816B
SHA256 2b48227e8faf5efd0d397148ffb67bb69a5d60112c57d56ade788cbd8c6c1182
MD5 23f6db7b725fca531f5b1b7bd5431a96
SHA1 87f0f21891e755258e4f10ab7ddf11aea803f6aa
SHA512 6a9fe8fe19ea69f62dced0f464f795f0efc72f98cc6beb23cbf135b01347cde78f9c7d070b5a05f55cddf044cef5fcc4d6a00f587ea89fee48a0623b198dbc26
TLSH
T1A9010CF2BCE03882CE221AB52AB6700C237382FC1E488903116CB23CCC877B429206DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9162636-ddbb-4f41-abc3-131925cb7714\index-dir\the-real-index
Size 3KB
SHA256 b0c0510c4732d25d97fc9e7d2b8b8d81239d2a735c8a7421ecb09a44c9fb6366
MD5 c47c2b01e564480a801fbfc6f5952fe7
SHA1 c9f492fcbafebd93ba2fbeeb2b7717f0c5369146
SHA512 de821b6508f0e7d1c25d13f084e21f2f11680c0434dc19e84017183e16ced04d6356c0a5ef07a1fcd34820e0943c40a012e6529dc3b0f5add2ade44a67b96e27
TLSH
T1AA51C92E9C472A07DDB8127354F604982BB9B5DC6A48CD0725EC6138F8C3B3E24A965D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596121.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9162636-ddbb-4f41-abc3-131925cb7714\index-dir\the-real-index~RFe596121.TMP
Size 816B
SHA256 3c993d9b7857191e31e40bb52dc3868736b9ae1b8b349660aca171f2c9856384
MD5 08361517527dbb3b47cb6cef1483357a
SHA1 32604c404cda29c69b4621b3f301d2101e47d199
SHA512 5613c144b30c70595f6f5075d31f817420349179b9fad84e472a77bbfdebf1713979e2fe0f4833dfd44e55bca88c9a525386f15400c197f1a7bfa8fd0267a385
TLSH
T17A01EBE2A2E13E86CE0115B4AA83801C337BD8246D04CB0B20A0E63C8CD7BA439A02DD
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fbd7b077-18c3-46a3-ac36-a6888d658875\623cd082b6202da0_0
Size 62KB
SHA256 c92940af63642af55153fd5bd66fe0c25b47947efb7e27485c958bf0e3a54b31
MD5 e6c4a72cb318a0f5a70b61d96a951e6a
SHA1 a9101bd0fe62a861a58eb7b040079b1233c4d677
SHA512 dbc4ab2634e222dc33f9883dbbbb3444c2e864e25115dfb5cb5de9268c069f2f5c53942a4c6175a7540690cc76b1511e6051f6a8b2f51d982bd0bcf155e19bb8
SSDEEP 1536:7IG2+BHKut3JHjvGEs7RONVIqtNdOceSZiHHPwqpzGV/d:7a+0ghGEEROfFc8/d
TLSH
T1AA5339A3A2626136C7AD21D2A4967F01F21B17461444C9ECF0BD75913B18ECB67B3BF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fbd7b077-18c3-46a3-ac36-a6888d658875\index-dir\the-real-index
Size 72B
SHA256 401c693f5da7e5a70f9aa6ca43cb523ff9e789d589ee1fb70d90e92c3d9a36c4
MD5 f4d48bc1c2b4d26e47646265d92be89f
SHA1 74cb100cf2f5e7b36960bd7dc3c76f0344005eaa
SHA512 a65687a9a1e41958acbb4ee99db2c99993c36f2d405aa6859c2deb6c7ca660d65df70760e92174905ebc81197091e125050efe5d014868db02f9e2bbf17363c7
TLSH
T1C3A002660284001DC40623B43597015A6257EE1843866316879090A4DCB55855DA120E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fbd7b077-18c3-46a3-ac36-a6888d658875\index-dir\the-real-index
Size 72B
SHA256 4b76b3b9bc124dc8281faae07d89e3e6631a16b16bbc42c2fdfcb84480c41744
MD5 a6032c91304541add85250e1087e99b0
SHA1 91081445997cebbe31bfdbbf0a1bef97e8aad885
SHA512 2da35e5d70d0a5b415807c1adde2bb3e3b4b56ab0004feec20ff1a3926988c6190912c4a4d0787318fd8a5be55fbceda1b5bd443b05829ca1adba9e547a163c7
TLSH
T141A0026103A4B049D262D1B517520245221598202166121EC1E302D8DC71C50854120C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fbd7b077-18c3-46a3-ac36-a6888d658875\index-dir\the-real-index
Size 72B
SHA256 041fb108e1f7d2fe105d580c3f21a26fa8a6947c293fb799a3153e2c30bee2d6
MD5 2b0fe0dd5b5877b574bd8d74f28035aa
SHA1 725769ac69b0a7ec317893058ba5897a9133f8d6
SHA512 fca3a7efcbaedf48aaaca42d504cbfaf108b8aae1b1e51958770561f19631443a990be56353ab24c4c01faaa76908fa85d32dd27d2117fa39673f9a575fd5d30
TLSH
T185A002164681080DD04662F535D621616293EE3A0302530646909048FC725974D7150C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0d292b59b6a5ff1e247e3528c9adf25ad883ae6b53ff1aefce13887475504ef5
MD5 1fd87d96feca63a0569a159233350784
SHA1 7f7379272505d78675ae7620ef7d34226019d3c8
SHA512 87c0872eacd682be888912b7ee357a6eba0f2b5b4868a889f4b20e46d4b4304d10c5937b7a1380ea20c048b369792b431428dc920936c11fce1b22e200f9ba49
TLSH
T1FAE068BB2DFB0824E8AFD7E21472589404007854D905AD4F107656DB90A12112C9AC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 7af9a7e7c24c474309c16d80b1b3b81f38721b71dcb824f98036055bb0dc88e7
MD5 a3649ec1808e1d7f4f0294b383cc86d3
SHA1 9b4efc928748d8db17ee3f29d86faba6bf333b66
SHA512 36026e8b0370f7bf0ee8e905a7d66e6a8c433aad6e7a1378052cf9e57ab131469d8ad8cf372417e758eba6b43996e1cf6b34dd0941c3c3c1de65220d28bcff2d
TLSH
T1FEF027B73EFB1914F8AFD3E624B5589408147C54C805ED4F107676D7D1B1215299DC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 6ea94741775c1deab1c9f725bc24e547a5d015cd5428d082086edeb18cfc520d
MD5 a76288c88b7e512f48394c8865ff6d5a
SHA1 0d26b509df7a7cce5e8a68b266d966cde117aea2
SHA512 e8fcac3fb5b4ca623df7a8bee3d73532f2a6e9f70258f0d755de378716d37529fc5fc2e71083db8fe0cb412072bc1dc57b35366441c49d75c39b1859900d503a
TLSH
T15AF05CF73EFB1914F8DFD3E524B518A405047C54C814ED4F147666E7D1B2254289EC66
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 8dc0b03917d3a3c64398595f2bfa8788fc7622479c1152071895dbfc509f4d1c
MD5 efce19b34f9fe5737d949393e004121b
SHA1 a4aa214c06ad7e187aa368a5e9903c47cd3a58ad
SHA512 c8ce0bae9413a6bc90fdbfb406c10828468be62b6657a71206bb0116563e1827ef8b401d1cae17da17d537b04341d986c90bd3b64e4864adaa17e29c2ceb5c20
TLSH
T1CEA002D2A1D60855E00406B5B14122843223D9300705265356E40465A8563454113016
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b6c3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59b6c3.TMP
Size 48B
SHA256 f7e776b9eb1619f1e69910005eaa39df8dab0bb39894d4e930a17c7a94307ea9
MD5 d698977c3a7d087b565701c99e498766
SHA1 b3c0446581d2719fd7e92cc33bd5e4d80479c1e9
SHA512 9d9e1c911dd7248c791a9a6a71602333d9d994a544257d4e12ea222bbfb31945646eb9619e656301eaa5e60899a5de8b7e7b963e6ebb4e921c17d0d3bb6129ff
MD5 SHA1 SHA512

Submit Download

16c841b885534d4a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\16c841b885534d4a_0
Size 194KB
SHA256 b8b87a9cec74a777324c9a93d99cf9c9ac018fa828f9b7bcd1b7362a9a09d3a7
MD5 6333b382f884e61fd2fe9c31d3b3ecbd
SHA1 b381e0e0ca3097c7cf7c7b028791d0e08965fdea
SHA512 bd658eb99583872ecf0390543c539bdb7c5b45e768abc4225bc47ebb8960464ed92e208e8c86050794f20bb5321168b315ec6063a3d6947ced05df9fb9f19d16
SSDEEP 3072:2egF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:2egF1cc9zByRIZa8HlI93h
TLSH
T14E146B316300F43BA9139E61A27F7F0E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 e7cf42932666547726b883b4a1aa9a69204d45cfab563675a78522e3d3b8e72b
MD5 ed42c284ae1af6ec52d0657a34f9d13b
SHA1 91a0e13932dcd4c3d798e2b47ff8c51f183325f0
SHA512 d6e65d7505b102b586418ec88a24a4a4abd7238839e187319a8a4eec6b2c3353229459a1c38a81d728fe6e0ca4fdf74b019dfabbcb38c7fb5a57d1936e62ee8b
TLSH
T177A0023013D41C35EC2002FA10CDA2956615AD11714ECF07649A4888CCB265C620F486
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b642a50b-1ca7-4fe5-b8d6-1b98343c9565.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b642a50b-1ca7-4fe5-b8d6-1b98343c9565.tmp
Size 13KB
SHA256 0e548927ee562209e423374dda0db5da776b4724bb457aeb91269a341e7eb906
MD5 96d3c48f892732fd85ae81d4adcacf23
SHA1 7012931ee974583cda04c319f5fd0599437de4e3
SHA512 157b055f9760cb68e86ce0c2cc3f1f994883e273f340a598ad862dcbfcf34c7b8c16ebfea866a5d03a9bb0fc9cbbed2c61bed9ffe0d002f6367edec3b7cddb18
SSDEEP 192:sxRiRJyM/jK1Ml8wFj/fVstDzMdybLzoA8pZe/fS6+WNIY4pjYGhIgIJ:sxRiBbj/fVstDIzE/nI7s
TLSH
T15652B9165A34997BCCCBD309F6557F53D6F81573A2901E44AAFCDA0C01E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59bbd4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59bbd4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 1b207c86e91186a9eaa6baf8e45712084f58cdc662be8d0ec59b1f5db35ddd77
MD5 ff0a02437ad91b6358e00434561ee840
SHA1 8f352eed0a54b397137b7634c0a1fdf4a0f6b095
SHA512 27d2ca2593f0edea05246005919607cb18cbc707f6f7abdc8a7a9ad0dcf94a180c625288bd8b507759fe4798f6b49016c0699783be83c57edf663778441c2e05
SSDEEP 768:xj+9O3cdH/fyjfI7f0A7NpespIRM0UmkTziwjgzS6wn12bfw:s9O3cFfYfOfJQsZ0UmYaKyw
TLSH
T10EF2AE32D8205E635DF6EA896646370BAFE00263D2C42A448CDD9F4D45DB6AC530BE6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e2310c42f8085b55be3cca3a4d063abce650bd84983e70b50a632d8206993631
MD5 b58fa529edaa3267ccb260e75c22edb9
SHA1 3d656bd77f83911f14d09457080ba685c8d1f2e0
SHA512 124b59b19ce15dcf7ea5aaeb67b545e072b696c9ce5d9f03fb008d659eb75ab4d8b63093b1b5b18d74d8f43f64850db0fdf21b0f675d1907afccb8f7da3d9f0c
SSDEEP 768:0j+9O3MpPfyjfI7f0A7NpespIRM0UmkTziwjgzS6wn12bfw:j9O3MpfYfOfJQsZ0UmYaKyw
TLSH
T126F2AF32D8205E635DF6EA8D6647370BAFE00263D2C42A448CDD9F4D45CB6AC530BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 fef73ef5bddddacb7bbf610e11bc8dcea55cafd14d260977605f4e5b5cc64747
MD5 d48f643c6bc2fb402f1cea3d8f2e3249
SHA1 1947dbc1cbfd66f1060708f54d64d36f85f5387d
SHA512 259b8025c139395e00e926a84557b7a9dad3f1c1880d4ac77e941c4ae099e546d8cb427b54f15b57c4d52f265e496c66f0289f6594858f317133fb81ee2648b1
SSDEEP 768:5F1j+9I30wgxfH/fyjfI7fuA7NpespIRM0UmkTziwjgzS6wn12bfw:I9I3infYfOfHQsZ0UmYaKyw
TLSH
T171134BF284D38976DDAE9B4B673E2E069EBCC153B18425407BD85A0CCC871BFD30A956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 0d02c8c3aa3549456ee466f6676f5b844f6254e7d39f21096b33f96cf5630196
MD5 15008e3f825adb2e10210902e27ee6dc
SHA1 ea2b13aaece71a871924aafc9aeba4a979d03ffd
SHA512 031feb7bf261ecd558924734d8120bccba73ebaf7534d13485f7594bdb197a448e9085a8fcd6901afa7ee137c8945a635d98bd96758c01d62493de42cb2397c6
SSDEEP 768:3jaeqD4MlshiLdMmf3tDfyjfIpA7NpespIRM0UmkTziwjgzGxnApXLPQTU:3qcjhIdMo3xfYfDQsZ0UmYpnKXD
TLSH
T12003CF3698205EB78CB6E68A264736576FB00253C2C43FC8DCDE5E0D42976DD630B96B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 38292ce6bbd1d25fa9c662d36a2e7957de8ead86c4d4d7602d93285afa4fbaff
MD5 56fd2bad6a1de0e8ad9e7cdc4833a434
SHA1 0215893d8349a7e99ef97aaee2d3efe5b2e1d44e
SHA512 40a3fdc77fed1b9859985859565dcb42d504361335a8cd660b6205cc383d0fa2bb811c541c4889c6300cd49de97634aa6bbe0c2498bf6e929c066b1c4af85522
TLSH
T1E9E001219701006FD03C033000D31B303BF1C15123B3470B8A6001B82CA33002F34BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 95b38a0942c67f80c80846982325482bb15439074ddbe52d90d4eb483453dcaa
MD5 2bb5114a8027b9d73dc227d754d72541
SHA1 5415b82b8a7ca068e5f8faa502d514586013f978
SHA512 58b72c713355afcd877e7358d50b6c246288a49dc6f3605440d422b0dc91e7db99def816f5e791cc57eef4fb18e52e9076b765ad518be2341d5e33c6499d321a
TLSH
T11AE009219701006FD47C033400D31B203BF1C15123B3460B9A6001B82CA33006F74AD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 085fc9ffb668df51684495ae5e02104263baa4d41a4e8bdb145025f4122bce40
MD5 65c22ee97a3f113094d64ea883e647c7
SHA1 abfc274dd5882b64c8d772ae204aa8525db135e4
SHA512 be293800759d5a7e66525629de7fb4aaaee87b3c8a28b2e8611482c72a400561938f1391d0f9325e74f90b5b4e762c66691671db98935a525e01cbb1e53f4038
TLSH
T1EDE001215701006AD03C03300093172027E1D15012B20706895001642C933002F34BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2f4e81e205958401171b4ce9c3c38c71b947ecdd8c51603f2b319a1631a8f711
MD5 5c03eb206dcc74153b4aed22a96fa3ed
SHA1 7a79843cb5fbfe4861cd0dd812ec01167017f02b
SHA512 195a56d9ac0eba3daa6ef52b69eb6415c950cc7200850b0552ed9f2d3f8eb0c25ff5d1d6d735b7cb1898a5997a21da91d6e5bae87af197645a27d000e02498ff
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5a18c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a18c9.TMP
Size 392B
SHA256 40bbb9fd587de6fffa49ee6becd68b89f255f385fa01f1c656266e84c59adafb
MD5 d340de77b810e9bc93034c1a44d0170b
SHA1 7bd8fd9ede7471df6f226a767a3bea0be262fe5e
SHA512 d45e260fe6ed8ff48934af75f74fe7931fa84985c2960e9f819cd0a41c587bcfde73f35ef5d77ac4bdf3ecd480aa440bb5eb89a1fb233c488e3a79454e0ea518
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download