hxxps://bureauopvallend[.]nl/

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/08/2026, 15:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bureauopvallend.nl/
Sample260818-svsapsveka

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1928	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315404400049383"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2654269261-3199571979-4291878722-1000\{F15DA05B-7D9E-403E-8F70-3F57B89E240A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1252	msedge.exe
1252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 4488 wrote to memory of 1452	4488	msedge.exe	81
PID 4488 wrote to memory of 3444	4488	msedge.exe	82
PID 4488 wrote to memory of 1928	4488	msedge.exe	83
PID 4488 wrote to memory of 2472	4488	msedge.exe	84
PID 4488 wrote to memory of 3444	4488	msedge.exe	82
PID 4488 wrote to memory of 3444	4488	msedge.exe	82
PID 4488 wrote to memory of 2472	4488	msedge.exe	84
PID 4488 wrote to memory of 2120	4488	msedge.exe	85
PID 4488 wrote to memory of 1092	4488	msedge.exe	86
PID 4488 wrote to memory of 2120	4488	msedge.exe	85
PID 4488 wrote to memory of 2120	4488	msedge.exe	85
PID 4488 wrote to memory of 1092	4488	msedge.exe	86
PID 4488 wrote to memory of 1092	4488	msedge.exe	86
PID 4488 wrote to memory of 3636	4488	msedge.exe	88
PID 4488 wrote to memory of 1440	4488	msedge.exe	89
PID 4488 wrote to memory of 3636	4488	msedge.exe	88
PID 4488 wrote to memory of 3636	4488	msedge.exe	88
PID 4488 wrote to memory of 1440	4488	msedge.exe	89
PID 4488 wrote to memory of 1440	4488	msedge.exe	89
PID 4488 wrote to memory of 2236	4488	msedge.exe	90
PID 4488 wrote to memory of 684	4488	msedge.exe	91
PID 4488 wrote to memory of 2236	4488	msedge.exe	90
PID 4488 wrote to memory of 2236	4488	msedge.exe	90
PID 4488 wrote to memory of 684	4488	msedge.exe	91
PID 4488 wrote to memory of 684	4488	msedge.exe	91
PID 4488 wrote to memory of 3544	4488	msedge.exe	94
PID 4488 wrote to memory of 2556	4488	msedge.exe	95
PID 4488 wrote to memory of 3544	4488	msedge.exe	94
PID 4488 wrote to memory of 2556	4488	msedge.exe	95
PID 4488 wrote to memory of 1048	4488	msedge.exe	97
PID 4488 wrote to memory of 3948	4488	msedge.exe	98
PID 3948 wrote to memory of 340	3948	msedge.exe	99
PID 4488 wrote to memory of 540	4488	msedge.exe	100
PID 4488 wrote to memory of 540	4488	msedge.exe	100
PID 4488 wrote to memory of 540	4488	msedge.exe	100
PID 4488 wrote to memory of 3772	4488	msedge.exe	101
PID 4488 wrote to memory of 4408	4488	msedge.exe	102
PID 4488 wrote to memory of 4428	4488	msedge.exe	103
PID 4488 wrote to memory of 2872	4488	msedge.exe	104
PID 4488 wrote to memory of 2872	4488	msedge.exe	104
PID 4488 wrote to memory of 1252	4488	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bureauopvallend.nl/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffd361ec188,0x7ffd361ec194,0x7ffd361ec1a0
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,15518574767525733264,1553958493287662618,262144 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,5721203348364630750,7122841627012339566,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,13658353175791895370,14124008706840715979,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:13
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,4579208387007787692,5222349654488407904,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,4890590912035597494,3611952518388499534,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,12482577193840095672,8264789885603846473,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,12544555968872958191,12928208446174284996,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:9
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4248,i,10416441951302733027,14816986063713874001,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4308,i,1591933212291678925,12582246930900469560,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:9
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,6475313212060158759,7058618474970788440,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,16865685036380745523,14742263536676495790,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,490734832350599019,18367316863241943512,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,490734832350599019,18367316863241943512,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,11777812146368604243,7639783090440382976,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3948
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1144
    3⤵
    PID:340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6496,i,16621388623159915114,10302979409625993900,2097152 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,7679023724569210593,1464539399280440248,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:14
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,5864341765795653491,12679348751831659564,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:14
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,12099693622094612766,3271327218920204196,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,14599411271723471457,4729819671636351830,524288 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:14
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3584,i,4214717785365952926,15889134825595937373,262144 --field-trial-handle=2384,i,10688834809426093419,6844422352024648916,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b825960e093c505ed8b2d25208a6a3ef4eb588fd7e3f0a739f6681adec4241fe
MD5 f001f4c7632aabbc8547c40a2a9665a2
SHA1 d3257e13c3132d0536b33ef02f337f9476b1c310
SHA512 c9c2806c7593f3b769405c2676589dac1a14d13f8c6d2e67e0b14995b01f4e41d04a60b8f556d218c2168180bcb2316746a622635dc3053b54c55fbde5cf4f2d
TLSH
T185D092217B5DB082EB0A0A3188639B342A6EC94A389BC21A7122400DAD66808E3C944B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22365024d48727271cea3f4a0227522b6f03c49f56b43e6c84b7ff09091fecdf
MD5 06f667ba3e99a1653d7a18267b654b23
SHA1 215c6ee19110026e8893c47477f4e12711e7c9de
SHA512 f5c1db56da435db9aed5ca1b2fd0fc395cc06bfca2c0a716350e1dd59d05dfac9f6e0cc97ea6d28624b96006d4eaacb12207f25701f287601683ff070a2f9da9
TLSH
T105D092213B9DB082EB0A0A3188639B342A6EC94A389BC21B7122400D9D67848E3C944B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 546c0169a073b316275643b5f7b676394122882a9290a43fd023ccfbbedadf55
MD5 77b1ea2249083e55a4e9c4c8b9e5a842
SHA1 e84cc3a776ec53eb99cee674b825e88a373b67da
SHA512 7bf415a2250c4f653cd66bd69adb32404c30aa0bf94ab78ad0f606a6888e55c17add88c95c783416a935b1b36b8d8b0a26939bb6e81bb508340aad4848d44c83
SSDEEP 48:lxVICmMZ5nxjHP/maqEe3WoV0DjsVp/pas0ArTRJWvhFP/ht57:57mQxjH2xPVEsVrr0Anevv3ht57
TLSH
T19381C31514E9042FD7E097F28CF01E0239738E968963BE9A60C4BFF3A69A760D719F14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 1dadd4e91deb48c84dd497f710d85c365b7dc2bdff5ebdad452ed3270553c21f
MD5 18851add9ee3c1be82f603210ec751f4
SHA1 5365c940333dc4fcec6cc9d6f5a8c77902613d69
SHA512 6f01f26a5788e9581514e5e628c442fa5fc62fe551cf3aea4431174288db64280bb16a7d465edad01cb2c78f68a0f8bb26668f1fcf7e4729f13efc438c615aa6
SSDEEP 96:1mmQxjH2DcDPVXsc6jrrRAniEurv32Y5G:1mmQxjH+cDPVXsfjrZOY5G
TLSH
T111A1C41118E9046FD7D097F28CF45E0238738E964893FEC612C4AFBAA6D67B0D719E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58de07.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58de07.TMP
Size 3KB
SHA256 69f3dbcc1c987cc0bc019788cfb245e5d1c4f013baf68f8f45624d82962ddbae
MD5 053e7337b64b16a86b90101d34a52cbc
SHA1 2522e875445e90173c1523bf8de5bdc3cfa15430
SHA512 eb2134edf433a425732f2ca0a318902c37d85d29c2b997e88b6d1828aa1f5a69a4d2884304cff40d717c1d084912d16b8567dac3a6c3eae22fe874689dc19c82
TLSH
T12771E66405E1045FD3609BF28DF01E0638B28E518AA3FE4A60D1BFF7A61A320D719F28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 c7f8272414c1ceb1a368ce6800cda4fda8074502eb3bff7010e56753d03e95bf
MD5 b4d90074dfddbdf5ff9c8b968665eaed
SHA1 29ce42957e0b1bab7812aa53ac5485e58d5eaab2
SHA512 ad15e8adff0abe426af185e0a829dcec004297d19ac87648e54985493ae6ba1d26e1585c5d1271453e3e3e24f6798f22d0ee5c67ac33925b560ec8a08a055c71
SSDEEP 96:DaOLHUGQ8ZO7z6dfaw3/REZHVjfe22GmHT7g2NngP:DJLHUGQ8ZW2xaC/REZ1jfF2Gm3g2NngP
TLSH
T1A5D16BF697E5C2BED85211F4AA186E16DF2D0B2843683D59C9D8DF4BE3F1474E20058E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 d8f0a623849665baeb7b1b29a3fd6d1c864ca929d054d8d628e8fbefca78c3ab
MD5 43b19f9f48fe4fafff9c017e12ed8416
SHA1 d4bb1897fc81bf0c94447ccf9cb6d68ee7544565
SHA512 f6c6dbef91ad47d1fa3394eb48b9c4e22c594a7283a077d6f3b167126a882014792cea8f124269e790c36e9738edaee32b0bb2aa601d627c6d0c7f287fb641f2
SSDEEP 192:DJLHUGQ8Zrh8Auapy+rWiuERlGJeJGml15Xd:DJLHUGQ8Zrh8Auapy+rWiuERlGJeJGmz
TLSH
T158E16BF697E5C2AED85212F46A286E16DF2D0F2843683D59C9D8DF4BE3F1074E20158E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8c1e7d9771e4ac8a5d66182368345be4fa84ba560f239e324504a69f42fc8d8f
MD5 bb54edbb1cd0789398cc9b57a97693cd
SHA1 7e9e45d649b187793a7d0256c94c52578e92f118
SHA512 b155b1f4670b77f68368a4d55fe372a432347c8c6a695a6b793cb0a7e5e378456921ed74f250de96c567e12c04318488aa1cfe20a1bdb83224de857e4efa8df8
SSDEEP 192:sxZURoyM/jK1Ml8MFf/fAstFkkIpIdpaow/W6+WNf387/Y0uBHILF1IgUzJ:sxZUidf/fAstFkkIiad/bfs/5uIUl
TLSH
T18752F9126A34A977CCCBD319FA45BF53D6F55462A2910E44AEFCCA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 28a5b6cf1b1837074c6d367c551da421ec4f51f327620c6db17c3891ef905c06
MD5 a782efdae0f2d8bc99e7a42a19f6f136
SHA1 49c091fed4b50a2e212bc1b5b320126627c98b24
SHA512 0f6f59d71d5007bc629ad2baa19608810559b2c37e7ef4b30e94209ceffb8ae13b4645a5f57c7d7d23b32609fffcc1b903bfed66f5513528f8eddd62456f506d
SSDEEP 192:sxZURoyM/jK1Ml8UQ0Ff/fAsU1kMIpIdpkoK/W6+WNf3aRxY0uBHmyu1Ig5czJ:sxZUKqCf/fAsU1kMIikn/bfAx5u02l
TLSH
T1BF52D612AA346977CCDBE31DB945BF53D6F9547292910E44AAFCCA1C00E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6b82f8aac3de40271cbd9c47dc824dc69011f4274785de19b50dff19d9af80d8
MD5 ed0ca8748ab6ad41285fcc12fbb0218c
SHA1 a4f8d2e52208d039ddc372624f06ed5727a1a98f
SHA512 1667e1ebb9df3ac610f91aac09fdee95cb379eb7ce9918738edf65f6af10bd563b13048b4730bbbd2220f5c0c5645cc5963122a07aa63e83ac22d53c02603ef0
SSDEEP 192:sxZURoyM/jK1Ml8MFf/fAsUFkkIpIdpaow/W6+WNf387/Y0uBHILF1Ig5SzJ:sxZUKdf/fAsUFkkIiad/bfs/5uI4l
TLSH
T1D452E8126A34A977CCCBD319FA45BF53D6F54462A2910E44AEFC8A1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 29d0da9c56d2b22497c326e0edc02bee32909f41a86dbecef41215d9d7364681
MD5 fa7bbddd1d39c2b4c356655abfffea5a
SHA1 9db5885206fdd5a42536286f3b672115d89ccf56
SHA512 d749f3448987ce6016abf3e5f2ec1b813874c8f1474ad48643b1cb4eb8cff694e2db15c3004008bef7eb63beff0f2a3072c86b04cc8271b22fd61a34ff8b701e
SSDEEP 768:ZQ/Lh8dF2/kWRmAcQ3w8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3KjLl/060ld1rozs:ZQ/Lh8dF2/kWRmAcQ3wu1jaKKjLp0Dlx
TLSH
T197E23A3B690CCB7E4F844EADEC266F976ED801CB96684D4447FA894C03C73EA411A59F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0b495d3eaef3d5658be2449c230003bd6da48de87909189fe3aab38de3337b76
MD5 9679e6c078c09cfe4af8aadbb0d6aacb
SHA1 55a5cc27d26e0f5c1c484f307ac1ba500152e4e3
SHA512 e3b341e17b58eea04fa20f88d8d98902920e6dbd4d1d65692ae03b5b549cd7b422d28ebe5b6f8cd614ff7de2f59ef6847547431b25f34c6fb69f5a689e037c5d
SSDEEP 48:K08I/KFGsgtJtEtltZtTtHtjtgntPtWtzIatBtgKZt1BtLtgVtRtwotGtrtpttye:K08gKFGpIAKdaiCiMKrK0z
TLSH
T1F091029634BB02023C7E2B08B79597274A8271A73119A52F7BF840B50E27E264DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe591592.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe591592.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 dcd94f345e8d79fdb8f30728c6c27e80a2c32cec34af239f64c983b5fa454a1e
MD5 6de649180a7be20dfc2254d0052512a8
SHA1 5c09c834dc2607ab42f9a9a76d726b340beca275
SHA512 f1e4ede26b4b2b5a5917ca33c7efcda55b9112a59caa8eb86812b8a2f8268b21cf20db496f90def80eff8573340aa8bafe5ec149c8b05ee66e549ad72dbc725b
SSDEEP 384:4ZcIh8N4wRnTvw40Hm9N0FptJR8LMXCfVySllYJTfY81FanpBBuR:Ghc7mIibLgECfVZuTHQXBuR
TLSH
T1F6928E735C346C7BA9A7B659B45B3A135EF8C02B83C96B44D9EC5B1E01DF3980316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0c5849e113dddb172e17ed7985a52648cb28514c7bf22fad7aea7b244f648bc8
MD5 2b394028332ae17a9302df60d6fb76c7
SHA1 41d346c1ce96d290e7aecaf5772a17e9c6ab286e
SHA512 b3dface815a15baa3a71edad2e41d14829e56ef707d2cfa4da032e17d8aabb6d49ffa17a90448acd9f1b6b79dd7efd9f333c05648b4cd461d5419dfec6bdf9f2
SSDEEP 384:HZcIh8N4zRnTvw40Hm9N0FptJR8LMXCfVySllYJTfY81FanpBBuR:vhZ7mIibLgECfVZuTHQXBuR
TLSH
T1EE928D735C346C7B99A7B699B45B3A035EF8C02B83C96B44D9EC5B1E01DE7980316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d92d47e5539d83dc91534ef9f146f2dff5e65cd6d0ff7080be76a6e273792e0e
MD5 4fbb843ec2481602ac056931b08a20bc
SHA1 098498901b0f0a94eab19f780fedb1af95bcdf44
SHA512 2ea32c9d8ebd1b62bd68b18bf8b831ac69ec946b981a244cda0f62695b49e7a119256fea6cb2b6bf811352530cf05756e2709a55d392b829cf8d45eac4d990c0
SSDEEP 384:riFiZcIF8No8TUNTUlIlzRnTvw40HmEN0FptJR8LMXC4VySllYJTfY81FanpBBuR:GFQFlwg/7mVibLgEC4VZuTHQXBuR
TLSH
T1C8D23BF348D3947AD9AE6757A73E3D024EBCC027B285A640B7D85A1DCC9A1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc0824a8d420c4fb4c4227a8584655194eb94658ce5e3e3666715eccfba0d6c9
MD5 2ef0aae394c843d51b442bdd60bad679
SHA1 8217909a4e21faa5b9ab6e26eee9efa351d40556
SHA512 25ccec62ba481f4e56c16dd8d6f35e1e8ccff1f601772d35ef7e817c5ad38c610c32a0d9b038b8a40d86deb89db60af6f373731ed989ab4a1dd41822b2b84239
SSDEEP 192:qGNi6d9402QmiUyMvDTBF2oP1J9jzorTRSgGwCxwU6:qGNi6740S/LTBFptJR8FJU6
TLSH
T10002D73668786CAB9EF36E45B4473B136FD5212FAAC56B44DAE41B1C40DB39C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2143b4e21c5d5f441f1c5320f61f10e0c46ac1235b0884e44fc571132daa5ae7
MD5 995de3a5015b1ea2eea90b966d7046e5
SHA1 133b540c4ea8ca42d5e81f34aa3f2b9e0f980197
SHA512 3f042d6a7a822cc34b005ad4776b2ae74996d46602eddaed3358504f464b32b6a9825bda4e0e0498da63327b48a250a8bd9efbd869501f66a39ec69cda4d9cff
SSDEEP 192:PGNR6d9404QmiUyRDPBF2oP1J9jzorTRSiMXizkiDaqdU6:PGNR6740YkPBFptJR8LMXCdVU6
TLSH
T1EF12D93768786C6B5EE37955B04736136EE5412BDBC9AB44DAEC2B1C01DF39C130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b41df9fc5bbac0f99a973bb9200d76fed25aab0e795917eb238a0967b57420c0
MD5 86da742ecb3c46fb6c6b80fac8184645
SHA1 ec7a344de1d6ad94690a166bd98acf95993934eb
SHA512 5ff8aac9c9512b5fe481e3c2fb21c343da883bd99ad1da423aba8db091808040f69ea9d0805b4a023faecc508e463dc5b881d551cc5bfa9e19f76b5695e1bf65
TLSH
T140E00203D301009FC07D033060C7177037F244306333415B5D10067029123802F043C4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c771a4bbd601c5592b85a886ab05e71208d765b9e8b3d0c87692338ecd4ecc33
MD5 7e6a21ea4287bb1cba35acafc4e25204
SHA1 8c3df2a04268bd78b91cdef6116f0613e6b4dace
SHA512 b4d2fd50095171ee54b4a27bad1e19d8e850476193d99457e782fd6548904faa0a448f36f2d91aa29bf1a589e2b921b3f31093febeaa0947afcc234ded60532a
TLSH
T13BE00202D301009FC0BD433070D71B7437F244245373415A5E2006742C223C03F14BC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 41b4522161c53445a42874d77d60d9c703d45005f0b8c1ee75218cecd13a686c
MD5 7c800ba773c884d5ce4ee702aaa714a2
SHA1 47a8fdb6ee8aae9830b94f37d7b63087368ae9b9
SHA512 9129b50097c72c69bdc8bf77f5e6043c302193040350c8ff156dca4cb98beba5c74303a0f44f8cbd915f8591f7e74e0fe359ab2ed066db0473977eb49d259c41
TLSH
T107E00203D30100CFC075033050C7167036F384301333415A5D1001701C123801F042C4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58d59b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58d59b.TMP
Size 392B
SHA256 13c51093b1dfc8dc124435d823dce1e5aa832166b007b0401b71b588b203effe
MD5 d2e84e97ae49dc7818073b5821120344
SHA1 fc7801488260bc1d5db2ff30d8fee2f3895123d2
SHA512 6cad5ebad8b39e80f9329968c856d67cc18fd72824d331452b3fab4e862cb4d729188e27fc29121a4e0d383602d159c1b599693c90a2d38db8836fa1c6c3a191
MD5 SHA1 SHA512

Submit Download

b64d539a-1c10-4cb4-a7ed-a9badd7afbf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b64d539a-1c10-4cb4-a7ed-a9badd7afbf4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download