hxxp://voedselbankleiden[.]nl

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 09:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://voedselbankleiden.nl
Sample260910-lcgmxstygy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6048	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335058012903203"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{6EFF1930-CB15-4DEF-9E96-7751D5DBABD4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5372	notepad.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3740 wrote to memory of 2384	3740	msedge.exe	90
PID 3740 wrote to memory of 6048	3740	msedge.exe	91
PID 3740 wrote to memory of 1840	3740	msedge.exe	92
PID 3740 wrote to memory of 1840	3740	msedge.exe	92
PID 3740 wrote to memory of 1840	3740	msedge.exe	92
PID 3740 wrote to memory of 7092	3740	msedge.exe	93
PID 3740 wrote to memory of 7092	3740	msedge.exe	93
PID 3740 wrote to memory of 4676	3740	msedge.exe	95
PID 3740 wrote to memory of 4676	3740	msedge.exe	95
PID 3740 wrote to memory of 4676	3740	msedge.exe	95
PID 3740 wrote to memory of 6536	3740	msedge.exe	96
PID 3740 wrote to memory of 6536	3740	msedge.exe	96
PID 3740 wrote to memory of 6536	3740	msedge.exe	96
PID 3740 wrote to memory of 1136	3740	msedge.exe	97
PID 3740 wrote to memory of 1136	3740	msedge.exe	97
PID 3740 wrote to memory of 1136	3740	msedge.exe	97
PID 3740 wrote to memory of 6360	3740	msedge.exe	98
PID 3740 wrote to memory of 4852	3740	msedge.exe	99
PID 3740 wrote to memory of 6360	3740	msedge.exe	98
PID 3740 wrote to memory of 4852	3740	msedge.exe	99
PID 3740 wrote to memory of 4512	3740	msedge.exe	101
PID 3740 wrote to memory of 4372	3740	msedge.exe	106
PID 3740 wrote to memory of 3916	3740	msedge.exe	107
PID 3740 wrote to memory of 3780	3740	msedge.exe	108
PID 3740 wrote to memory of 6872	3740	msedge.exe	109
PID 3740 wrote to memory of 6872	3740	msedge.exe	109
PID 3740 wrote to memory of 6872	3740	msedge.exe	109
PID 3740 wrote to memory of 3940	3740	msedge.exe	110
PID 3740 wrote to memory of 3940	3740	msedge.exe	110
PID 3740 wrote to memory of 3940	3740	msedge.exe	110
PID 3740 wrote to memory of 4616	3740	msedge.exe	111
PID 3740 wrote to memory of 4616	3740	msedge.exe	111
PID 3740 wrote to memory of 4616	3740	msedge.exe	111
PID 3740 wrote to memory of 4760	3740	msedge.exe	112
PID 3740 wrote to memory of 4760	3740	msedge.exe	112
PID 3740 wrote to memory of 4516	3740	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://voedselbankleiden.nl
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x29c,0x7ffe2298c188,0x7ffe2298c194,0x7ffe2298c1a0
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,9116232612130488207,259290038271792988,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,16023683984745879377,11666516763125062661,262144 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,5381753116734755884,6230050663711788009,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:13
  2⤵
  PID:7092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,14137080276844650087,12566489934834772452,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,12959313201625092841,3971673260598681637,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5180,i,17930244535417292824,9725940393677225562,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,3079058525044557935,9672709614547734121,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
  2⤵
  PID:6360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,14604971654685564713,13775562074093396795,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,13626315125162117112,11125511006092502218,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,13626315125162117112,11125511006092502218,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,10050143920018197974,11554906948947941255,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,8008566095690589694,18187754781596929308,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:14
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,5323776252564452283,6661365743342180172,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6336,i,17444768014953940837,11012195749710841068,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6396,i,9960380606557591403,7067870191345390311,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6680,i,2598657966212685144,17704198820133348417,2097152 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,13756191348939033790,17601965568096388633,524288 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:14
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6872,i,8777339182407726399,12781322227495343609,262144 --field-trial-handle=2232,i,12869112185917383482,1739415395806366849,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2196

C:\Windows\system32\notepad.exe
"C:\Windows\system32\notepad.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0a5f65c29337f6f6836ece76548789783eb819a075e088314b12f13ec91fd9d7
MD5 0c87113c02161786202f33b47ba587a0
SHA1 d1fea16fbfab85279262ac4d414cd51015626f8d
SHA512 cd4225405ec7d268597b22c9e0dcd6c0889070c51267552c11e470a732b0da771681b0f6b48aed376612229a58fa486ca0db863aca1320afb4f9a95929c934ea
TLSH
T150E02BA9D820BD271DFD5B1961580747E740131B3B41894B3B3D822D8FF06374287C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 72KB
SHA256 fc886667b90ffad1b0229b102c340d9c93c8250aee944f4df3f35d8833811b04
MD5 2a55cd14779a918e614e873501c38d05
SHA1 4a59f4c5582092271e6c87e69d06d092d722fb44
SHA512 8c3523bb283d22d6ac7e65811cb0e17eaf879368210c26a20fd553204df2e06cb9cf58d4c19fe3b1dead430907fd186d87bb9c9a7afb09fd389d69cc9b39fecc
SSDEEP 1536:kNS2AXW7axoDItayH1pEPAfFzELcpceTwoX0eskqoMf0PHKi7+XF:JWktnHwAfJEL4ceTV0c1HKG+1
TLSH
T159730227B008563A93A0C78C371A48359FFAA0FA1B1452BFF1DB50DBBFE450635589DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 408KB
SHA256 7a50cff2ba27964e1dc892708f201b97f5513ecfedfc4e7e82ecf6c1246f6132
MD5 42af94577490c2f5dc901ea2d3e2e4a3
SHA1 8c93675968611faf7d148c12c1b2170c22075770
SHA512 273d37acb003a2626c57183301d729164bc310d682f159493c63f51f56ce1424e8367db630cfffdf452451011996a79e492c8f78c0ebe75765e1b1f3a94e5515
SSDEEP 6144:CCPRy65+Rj00vSwG8VeWXC8WSMLJI4U1HWUDjfK7PROSLw10UXiA7fg1wfN4kZiQ:LxUAa1d7MLHpU/MQCwqUXiA7LekM5ZY
TLSH
T1C39423D0B157AE489DD980FC00E12ED0CD16D2AD6A077FB61490FA9ED5AE7AD0C891CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 28KB
SHA256 dfc0597a9eb456f287b08b3e3bc40edac9b1dde59e48ef57828226f6310ee9da
MD5 e5cfcc30d50faf1ad9e614c4a40945b6
SHA1 a85b4e4e6dacf583b8bce447664620cf95b244ca
SHA512 48c6ab039f7d3192226bf24a2d7780750025232817fcf70e2e83a48e53270dae106189d0d8e2bac1675a5b5e8252655392edb97f370b75dd0ea9712c97f19fa5
SSDEEP 768:Es+rMj5ANJSn4fQwY6mQGZfJRgPIJE1ToKcLbuOWQzRdydy6L:E8MJuIvXm3gPIJE1TopLPIdy6L
TLSH
T194D2E1AC727C1CFAC705953FF4C7B629544E8A61EB142E45D0A601CCDE616B4C72AF03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 9KB
SHA256 3afd57e1616fe6b6664e5890063ae193a484b5135db8dc04159c1ba633209f52
MD5 043b5a562d0c60a659a3160353c64900
SHA1 60d5e72b65e249b9e6152684966211a5aaf18beb
SHA512 28a08960fb59d00d1cc0bc4d93b437ea8120bb848f6adb1cf53f001d7b58002b0a370d3e74da6cc74c72a54884cbf1fa5798e6b37b368ebc3d68e3c963c9e59d
SSDEEP 192:H2yeF5L7Z3nOWXA7qP2LtNLoC81xoweLYsw3N:H2RJO2AvRB+1dMzw9
TLSH
T19112FBB6B7B116E0FB1B94B318C1499EB6F544CA2E839E164041FC375D73E8854E24AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 d83dc7c0d75040e916749036b1e6ff74fffe3868eb977ae367c0f6a6502542df
MD5 113c3e34f7c3543edd4e8ed6c86ccd6c
SHA1 15f572f193d901e430ce910594901b03542a203b
SHA512 c528551baf83b27c34c1663e5195980385b517bc4206d416be1ae5ebcf0c5b9d8ae51692bd7e4e6e70462580cc48634b41e71a5cb4bbe74eef268a60c5b1ea4a
SSDEEP 48:5xPxbil3mh8PuPpxJbQ4qbG+7UhsegTdliSMjpCMOp/Z306E3GlC:nJiJPPuPp84mD7U2egTnebSlVIV
TLSH
T19F9141BB42F117D0FB27D8B355D1A86CB5F085D501879B1A8582FD766E02EC8A0C389F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59bfcc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bfcc.TMP
Size 3KB
SHA256 61c6117ce57a084498f5b1ede87ca0977be70fe2b793fe341475aa32c971bcbd
MD5 ee94a4441d4c04895d7f8e71c35a1e5a
SHA1 a6c47882a58ad0a01d9318e943360033f3d63a63
SHA512 ddcad16209a97e127873fa78e813a51bc6e31719ddc3eb1e921156f2f1d02f83692e389c01c36c0d624e2a10d3d7e1bd32940cb428b5bcc20be0a7fb80f484ac
TLSH
T1BB61607B43B21BD0F712DCF345D1A499BAF484E101875E19C9927E3A4846F8CA8D389F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 4e189ebe6dab1548d5736d2ff65b857b7798a1208157e55368533a0580e64c82
MD5 7e736799e9429f0e1ef60e85bb599bac
SHA1 db74228e50708f5985de9187c56d0205bd7da7f9
SHA512 b67a6a9dae49c09c397a5af94d6128b4315b5bfb2d102ca8000cc50dc28a67ada9e65ca56549aa2def0cce4ba833d3806d9dad7c8488e90961de48ea388a0ef5
SSDEEP 192:D1VWfBLdituY5aVZaij6GCukc5jYzii4+f0XXqbeNhOp8mQI:D1VWfBLdituY5aVZaiGGCukc5jYzii4u
TLSH
T14702C1F7C3E6866DC91191F0AA187E1BCE5D0915436C3D4AC4D4AE1FA7F24B1E281B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 8f6df38e35bfdc443c4b7bb1fd2e344747b94a8b73ece0b782409184fe230309
MD5 9c313af28ab408520ac497c0c74fc647
SHA1 a5909b686ad15615cb5c12beff43236afacf6dfd
SHA512 d8a8debf517cad86ea5bffddcba284d809fc6682f14f1af13a4c9edc4cd30adc6f11b787e8d32652ab6351cbeb1cc8ff4f44de872cfc51f9ea43a0881f5a9c67
TLSH
T1FBD02223160531B9A56DBE8B956AAC8FCB3B21704882EDD530E098A909368AC062B540
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1e22582093f9f6896f5da1b02de195f080c44a9339054ff788c44924cac973f8
MD5 86cc3cde4902b32545504f671dd5f0b0
SHA1 e4d38fb908fd72f08fb7b5c15783fa5535f4dc5a
SHA512 ae1a8c3c7b7cf6ac86e5f63da4046cd5a7f83294e7404352631a566d13e8248d71ed9eb7f4385a5efed907f5fc8ac8cdb978585cd9b3b20b27d4dbbbc0ea0473
SSDEEP 192:sxRWRGyMqZjK1Ml8wbd/fcsSvKiNRZcOzoD8pFe/g6+WN1MC/YcCYpB6sGQEGuIe:sxRWnld/fcsStN/cSE/5j/WYisGQGo01
TLSH
T1EA72FA55A9749D3BDCCBD609FA95BF53D2F95133A1905E44AAFC8A0C00E6BED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3bdf366bed810bb51a3c8fabe8162972d3f4ca91e5da427a96820e99ec15ef12
MD5 52093f3f0ef08c0d0a0d869633e73558
SHA1 46fd09e8e189e5a8ecc2d0886af2499c16149ef1
SHA512 003bd80e93902e526c9f2e97881f53662090360aca2ebb3f01338211ab37f24b735d405e7c9bc877e9587bcec842f81057bfa4c079b0d65dd1439af00c5f393f
SSDEEP 192:sxRURGyMqZjK1Ml8wbd/fcslvK7NRZSOzoD8pFG/g6+WN1MC/YcCYxi6sGQEGuIZ:sxRUnld/fcslMN/SSQ/5j/WYfsGQGmB1
TLSH
T15362EA156A749D3BCCCBD619FA85BF93D2F95133A1905E44AAFC8A0C00E67ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 99fee3b02b15048a4fc87bbaf33a3b6f68351aeb66e2f2b32f0d335a5e1a6b60
MD5 632ee929f76e41f1603ad7946468c375
SHA1 fa2134f778f67d5eb99d52890a954e3100951681
SHA512 81c427d55d9e481e5130e8456d62506b4fee8ad29c43cd0ea63c0b872ca1b8d37b925c1b0f428eb4ec14cb3f518dc45df92029e8701610cb4426a87a323127d9
SSDEEP 384:sxRtnZmzd/fcsStN/ZnXbG/5nkb/WIisGQGo0Afz5e:spZmzd/fivlq/5uWIisGQb7te
TLSH
T127920A46A5249D3B8CD7DA5AFD65BF52D2F85063D9914E88A6FCC90C00EA7FC2113C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 145289645e1d8dcd07119ebf08eb3dbb9e5120e13c82ae10ff01622028ac1b59
MD5 cfae08f3b7f5f471f47b3f6b6b470d8b
SHA1 e9809ede3f24dffb7490c18eb2b858d955a2cb87
SHA512 c0bde29c3b1ecba4bc3129c54278606f2f699f507a145f03f38cab2258ec555165291d945253fd5133101d929509619a5477102465689d908c78cf8790dccbb8
SSDEEP 384:sxR3nZmzd/fcsStN/NnXbv/5nkb/WIisGQGQ0Afz5e:szZmzd/fivJT/5uWIisGQl7te
TLSH
T15A920A46A5249D3B8CD7DA5AFD65BF52D2F85063D9914E88A6FCC90C00EA7FC2113C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 1cc9eb0ac031fa23b0ea8b28a95e55c25539c8bd840d6b3cba3d61b6225de456
MD5 5ea2ef87304d7bc30a4ba7e45af14821
SHA1 98d2b0abf0a554114548d265ec3bce50ea4f8d0b
SHA512 e98293830eb6c1fff9e3b7a0d689606ea2e5a3785935de72019fc5ee3c8a6009df6d972a805feb6e1ac1f85e02d2cd404070798228efe8be5751ac8ca9875972
SSDEEP 384:sxRNnZmzd/fcsStN/JnXb+/5nVD/WxYsGQGQiAfz5e:sBZmzd/fiv1K/5lWxYsGQllte
TLSH
T1C2921946A5248D3B8CD7DA5AFD65BF52D2F85063D9914E88AAFCC90C00EA7FC2103C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 009499a09a5feb566b513275152c2fac6baab127127d1f0df6bec5a09375eb9c
MD5 e4df2898184c9931db5d76c3ef00795a
SHA1 f175b2ebf6f4f9fe2d7ae05a0076d8758764c8b7
SHA512 acbbc1d7f335ccd362323c9dd9d1e11589903ee7cc520d19e73297a2b1de2bd6ffb32171b72d6463c6324c3943f3afff15825cf678ad1e0d6b1cc534eb56173a
SSDEEP 384:sxRNnqVmzd/fcsStN/JnXb+/5nVD/WxYsGQGQiAfz5e:sBqVmzd/fiv1K/5lWxYsGQllte
TLSH
T1B2A21A46A5248D7B8CD7DA5AFD65BF52D2F85063D9914E88AAFCC90C00EA7FC2113C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1abae34b-dc37-40bb-a396-809cc45f8cbf\index-dir\the-real-index
Size 72B
SHA256 7e0e331fa7b9a1da680315d009e5e3959a28a35b482e1565886a214657cfa7f6
MD5 be530e72567eddbd8d5f58e5656da6c3
SHA1 9ab5b609b4262088675f5ae1a862d29c43e534d1
SHA512 5fb9751f44398a9e95fc206755bb6b81c6a656c7691ad28220bec622e79484c6c3589e86408c9bccc3f76d76ef68f863d40d91965d92d2c263bbe7284fac64f4
TLSH
T179A0023003D00007C02711B255D602A252409854B115524652910279DC6586056C710E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1abae34b-dc37-40bb-a396-809cc45f8cbf\index-dir\the-real-index
Size 72B
SHA256 688e8161cb4a836021a06e809a642f5c31547416a7140a0932705aed8403e92e
MD5 d41d66936742347f99b13e9af047f788
SHA1 d5fe0af80b88079c99ef0884d9b0ad026f6afe9d
SHA512 c54c88d7807b61f1fb55fe54c2b1d40cad6b1e0aca22da63dc4c60aa1272ae085966d04c2ba52279706bd98f54ecf501b803f36a599c19e5245926623d1e83ae
TLSH
T193A0025E13982122C0135BB12DA6119D2311CA510201130775909247CD709C7CDC104E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ed1b04a7-8938-44f9-a010-f8f840069220\index-dir\the-real-index
Size 840B
SHA256 c95658a9e65d70d6b76b8f30a53a34987a29922ff37c93a3001013fa07a9f91f
MD5 b8fd2cc3fc6e27cc1c4a8adb4453e6f5
SHA1 c2d942006d4b392c499f7afb2bb3f36df9a051d7
SHA512 a1f1eb247f6022d500d9a6e705d0ba855a2c4240abecaa0ff9798c364e352444ee71d67f1231e1666b7b3639e19a388a3862f09321e2d950a70dc1e45a260d8d
TLSH
T14D01A257DCE5984FCC27EE7B657A604A333A04ED2249CE8B101D783846556395711619
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ed1b04a7-8938-44f9-a010-f8f840069220\index-dir\the-real-index
Size 3KB
SHA256 ba8b648c6d12220a10b0d025f201f3ed6e16f9964fcdb258b2737e6549be7b38
MD5 1e467cf8cd006d7d7b67dea62dd17815
SHA1 531c49de1c1fa6aac2dfbca9546936a784a8e9bd
SHA512 ed284010a1773b3af5a4a58ab718dbc4307c297c3091b49fecd8a31714d4f2510b42578eeb31fdc3fac039b6a96c9228a01c5e16ce52d2b55dbb78bea468b5d6
TLSH
T1AC51D74F4E435B3FFD98227214B61499333465CC03585A17ADFDC134FCC7318A848AA8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ed54.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ed1b04a7-8938-44f9-a010-f8f840069220\index-dir\the-real-index~RFe59ed54.TMP
Size 840B
SHA256 4d04d8c64d2029c20c66c4e63bcf8ce5c6f66c9386a690c0830c36d70ab45597
MD5 8fdd5b47a0370f491fa7d900fff02086
SHA1 2024217729fa3403cf7483347f5310a221fd86e2
SHA512 bda7fcce1aff4cfe98bcdae0ce9c896f1070d5d808669b62d84b1a64d2ab623031954e541dc9f5185c3318c28650b6818411f6aaec1a55b17959d73320d0e1c2
TLSH
T1D401E1A740A1EC46DD1BA5B6711A505AB33E48202129DB4B309A7C790A566394B42959
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 68d5573fc6a14873fded9bc7b775ddb0a08832741da9aef8164e3cd771801916
MD5 de7a1349f4e6c8f4a4a4f7478f2110c8
SHA1 08ff80f99b201e5038bea416dc95f838bce1504c
SHA512 56b33ebbeca6b84db4e77dad4cbb64632c4a78b90239a89716d022edc9a5a95a366f1048a0ad1e751eb3ba7ad82981ace1ec2e04be4e6e06a2f2f7133596741d
TLSH
T14CE020F72DF72C21EDAFC3D51431406400967464CD849E4E505DA2D765E13A9748BC32
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 50720c28069f3f533178a90edb1742e54160b5769ab4f0aac583b48e8bc9588e
MD5 6df8c610447e532a3051fac528598d35
SHA1 59410f4098db134dfd96647d7620d8686a8df3d4
SHA512 c904bf8e5ebbd5205cc08dee0d365f054ec50a0021b30db188ed886d172254439931d7f8f554f189f1a241f8ed5ee7007f8c09cad9c96d15634dd85d3a6eee66
TLSH
T1A8A00260895B900DD405067010A5694433B069DA010A330AD5D8D4EDCCA525561C7201
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a44ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a44ab.TMP
Size 48B
SHA256 bfcf1df6333fb7985d7e0105a814faf589a9ba6d7a41d57f40031ab85cf8c6e8
MD5 566629de4875c66753f4638be38cc933
SHA1 ce535c066eafffa715894a0fbe75e625f6442aad
SHA512 a034d4b29db0ac568ef873ae61ff01182a8d268d3390e6ab13fbd492728d6b7f665e8377da41a3fd2abe79015d43b79357daa8fe4396ad3056c2114e28dd2fda
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 978e893db71128cea1f5f7fc48b121279289ccace77f762566259d5062922680
MD5 c7fb6f4e3cf903b17ff323401ade866f
SHA1 7a774243aa67f10886f5f5da4f9d54ecb41326db
SHA512 3371a2e6d4ffbd3e193e5ed7c240b97b639d0549c4412737440981bd27eb38390a4af859eaec49a5f29f7a4fd5dcede3968cc00ed62a948f0d3df25e6e9192ca
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EwtWSI+uxKbOq80B4jQozKONrUa:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRN
TLSH
T1E3B25F51713F5280387DB50C81B8986F86C2B4637519E53F7BA802A65F6BE039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d069611d96779e03975b9c905660ccb9ead78e04846ddaacd1009f280b8be6ea
MD5 9d4825b852ef233fa7aa6ec05f085714
SHA1 e1783917ffb7ca6bd207624ffa57d69487d7e22b
SHA512 dd67c5ccd648a4d5102a4aa1bf0f09d58b147497f68d73ab340cca72641fb0167d9f50448588cf8f8f11af10960cc5c9b3fe5be25cc6f36ce2691daadb6f4d5c
SSDEEP 384:ngiF1tNn/s3n9Sn8Ng+8TUNTUlIRiPvuTYarEqfbYGO5GMeCZrtkOTOObjI9G6wT:7F1j+9SX+wgUuJ6GO5deCxiOT29MH
TLSH
T193D26C36E855CEB7ECE74FD9B24A3A1AEEE08263859C59C4E6C85D4C01CB1ED4707C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f5a84d08b74a9df9eecead4a3825803b25a0ec86d30a2ee817d27888613e2aca
MD5 d6350ea108ac1ab1a03c0228a042a1c1
SHA1 5d86302c026e901355573f73d4af55a1f232805f
SHA512 51142cf29b8ade743bf7482efc5bb44486aa7923b4aae923d7590e392a85fc1b2e22725b86ac86211bb788ea10fe2f3ca892ed7c0d7fc0a670c730843a3e08a5
SSDEEP 384:nIiF0ZcIe8NL+8TUNTUlIR4E7PvuTInrEqfbYGO5GMeCZrt9OTsa+VYaa8LEEIzu:TFyeQ+wgeEuQ6GO5deCxbOThgNIy
TLSH
T1BBC22A32D8A4CEB7ACEB8FD9A74A7606DEF08153859C99D4D6D85E0C01DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f38a4b76c15bb4b0e15d095f89e5462889aa1db48208247173adcf4173df6345
MD5 033340bf93027622957099d1e50b6a0f
SHA1 ab5a367dfcba41b479eb549258c1af0729eed220
SHA512 a650a62c6a8a4b5ae829b9dac1f678c99dd3b84bd200c7157ffef5bf1323d7b572f667820ae5fdc074dd84bc9189074587823c8d6b6bd16434208d6fe1312655
SSDEEP 384:n8iFPZcIe8NL+8TUNTUlIR4E7PvuTJnrEqfbYGO5GMeCZrtqjOTsa+VYaa8LEEIS:nFHeQ+wgeEuJ6GO5deCxwjOThgNIy
TLSH
T1DFC22A36D8A4CEB7ACE78FD9A64A7606DEF08153C59C99D4D6D85E0C01DB1EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 844ba7ac907750ff3fab37abf7368738636d664ea6ef4811ab36762933f370d9
MD5 197d18ab8a19110cf22cf20e6c4f2451
SHA1 539d8025fab3af89044c8dfdc9045439fbfbfd19
SHA512 c2df6df7d0bf9b22d85109d7cd796d2dc8574106709ab14c92ac89f14ae29beb952dcff710e0cfc601a807fe53a606fa6cceb208a8596da6d13c6db88740876b
SSDEEP 384:nIiFiZcI58NL+8TUNTUlIREE7PvuTInrEqfbYGO5GMeCZrt9OTsa+VYaa8LEEIzu:TFQ5Q+wgeEuQ6GO5deCxbOThgNIy
TLSH
T15CC22A32D8A4CEB7ACEB8FD9A74A7606DEE08153C59C99D4D6D85E0C01DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3c979c23b3dad554f9fec099535de5a94a0dcbcfea8afd97ef9795fc4d036d3b
MD5 3a938f602ab6be6fbb9b9212e98e599b
SHA1 d6b75a880a15570a34ffd78e18005ab4a90e5527
SHA512 a81a967669269f34926021ae0a3f6132087226b2e323413c5774c59a1a557586d342f3b43f9703da76dac11512f65b32d1d761afdddbeffdcf8019a7eb2b4971
SSDEEP 384:nkiF1tNn/s3n9Sn8NgN8TUNTUlIRiPvuTusREqfbYGO5GMeILXOObjI9G6w7cd83:/F1j+9SXNwgUulUGO5deWX29MH
TLSH
T1F6C25B36E855CEB7EDE74FD9B74A7A1AEEE05263849859C8EAC85E0C00C71ED0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5e32de6932b3a76ab43cdac9e6ccd807077aa7281bd588bdb7890b3f2ec173a8
MD5 17e0241fed539f2294b53f47f984be3a
SHA1 3f54510d01c4dbe8ba458e8b4d38a818128e3389
SHA512 9e82140a62d75aac199f640084843e9e1cc326066864d6292fa5f88bc39529561c9951cee600a3a8226768149e7fc9cf62844fa7a6771871f4b09d67818bb3bd
SSDEEP 384:nviFPZcIU8NL+8TUNTUlIR4E7TlvuT/Ts2EqfbYGO5GMeCZrUqPOTsa+VYaa8LEA:6FHUQ+wgegunsxGO5deCxxPOThgNIy
TLSH
T12EC23A32D8A4CEB7ACEB8FD9A74A7606DEF08153859C99D4D6D85E0D01DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ba0fb8ca1a313576aab0ee8bc07714524784b58d394677763640dcf8883e34db
MD5 0bec0afa4e58586d5b594e2e05bf60fb
SHA1 c8d26fb527db4f43e9ab4f059e9635e12032ca81
SHA512 eb16be66af1bf2124cbc941258cf5c0ab9a4bc0f64145fc15ee3a17d6ed000ba3c18c1464c3ea56afc132ed4182d601947fd9a84e6a28635f0b528de49ea6bda
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3e4010d87e88460ffce7293c7e6c8a64335969a0577b7d0275426df88975880c
MD5 f1ce6fcd79c9bae0f7f6f268008f75f2
SHA1 48b00e2c4759a516a2de91c69a25adea75df9777
SHA512 c2ca95f04173ec6d514e37305be5816ab3df0b5b14e0129d7722892e30c97c7b8b3d26c1bfa984fe0a1fb08896f784b89f0954895e5595491a98df2b82042b0c
TLSH
T11FE00203530050F7C52C073500C327A07ED3913004FA02456F1005581C27300BE70F80
MD5 SHA1 SHA512 TLSH

Submit Download