hxxps://beierle[.]win/

Resubmissions

04/08/2026, 06:32

260804-hatmxshl9z3

04/08/2026, 06:27

260804-g7vqtashrf3

04/08/2026, 04:21

260804-eystravyey3

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 06:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://beierle.win/
Sample260804-g7vqtashrf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2368	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302984489117333"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{21529761-0805-44B2-B553-C345FED124C6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 2124	3012	msedge.exe	88
PID 3012 wrote to memory of 564	3012	msedge.exe	89
PID 3012 wrote to memory of 2368	3012	msedge.exe	90
PID 3012 wrote to memory of 564	3012	msedge.exe	89
PID 3012 wrote to memory of 564	3012	msedge.exe	89
PID 3012 wrote to memory of 2536	3012	msedge.exe	91
PID 3012 wrote to memory of 2536	3012	msedge.exe	91
PID 3012 wrote to memory of 1212	3012	msedge.exe	92
PID 3012 wrote to memory of 1388	3012	msedge.exe	93
PID 3012 wrote to memory of 1212	3012	msedge.exe	92
PID 3012 wrote to memory of 1212	3012	msedge.exe	92
PID 3012 wrote to memory of 1388	3012	msedge.exe	93
PID 3012 wrote to memory of 1388	3012	msedge.exe	93
PID 3012 wrote to memory of 4124	3012	msedge.exe	95
PID 3012 wrote to memory of 1936	3012	msedge.exe	96
PID 3012 wrote to memory of 4124	3012	msedge.exe	95
PID 3012 wrote to memory of 4124	3012	msedge.exe	95
PID 3012 wrote to memory of 1936	3012	msedge.exe	96
PID 3012 wrote to memory of 1936	3012	msedge.exe	96
PID 3012 wrote to memory of 3816	3012	msedge.exe	99
PID 3012 wrote to memory of 3020	3012	msedge.exe	100
PID 3012 wrote to memory of 3816	3012	msedge.exe	99
PID 3012 wrote to memory of 3020	3012	msedge.exe	100
PID 3012 wrote to memory of 4132	3012	msedge.exe	102
PID 3012 wrote to memory of 4844	3012	msedge.exe	115
PID 3012 wrote to memory of 1280	3012	msedge.exe	116
PID 3012 wrote to memory of 5016	3012	msedge.exe	117
PID 3012 wrote to memory of 2488	3012	msedge.exe	118
PID 3012 wrote to memory of 2488	3012	msedge.exe	118
PID 3012 wrote to memory of 2488	3012	msedge.exe	118
PID 3012 wrote to memory of 1952	3012	msedge.exe	119
PID 3012 wrote to memory of 1952	3012	msedge.exe	119
PID 3012 wrote to memory of 2592	3012	msedge.exe	120
PID 3012 wrote to memory of 2592	3012	msedge.exe	120
PID 3012 wrote to memory of 776	3012	msedge.exe	122
PID 3012 wrote to memory of 776	3012	msedge.exe	122
PID 3012 wrote to memory of 1152	3012	msedge.exe	123
PID 3012 wrote to memory of 2612	3012	msedge.exe	124
PID 3012 wrote to memory of 2612	3012	msedge.exe	124
PID 3012 wrote to memory of 2612	3012	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://beierle.win/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbd12cc188,0x7ffbd12cc194,0x7ffbd12cc1a0
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,2839326739653176455,17622485691660080256,262144 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,2039936664238815237,3964992021215826812,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,13121736721558411898,3761134122288075675,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,16771074054969104582,13235890290981374185,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,13442837819733245422,11724848033620088264,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,2785106824515898144,11076508688968461611,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,14865184002268364228,16743922117807002121,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,12560057924952393055,12331690503498935468,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,15875562147613802897,5538920246064809895,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2920105862399636189,5212100838162059918,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2920105862399636189,5212100838162059918,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,2536811421029725624,3735631995678943472,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,13422069728065703607,4737350875353259938,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2848818794508037616,938063189494015514,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5156,i,10662138816844787094,13627053249957599835,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,10221456531251849685,8670305342444658885,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,9827277978731561422,13579962043714584898,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,12099824323736536863,3096953633609282210,524288 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6592,i,12537648113574395316,58369367790024366,262144 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5280,i,5653244476033380839,17334115453061284316,2097152 --field-trial-handle=2104,i,11825973955853348354,10399134119486612395,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 81927b02b479a7e21193021efe5e69ec12abebbd34e8c9eb71e45437d4d7782e
MD5 a7a50d473b268d2131827c1480e64fae
SHA1 6bdf7a862c0e0a4119eca4c89ac413387e761e6e
SHA512 298dbdd4a13db2fb57b2369d981445d4bdcd5083ffcfb8a2e05ed2dde67212772e87891d4da45a7b19064d5e1d4604e651ca6c4f2d8f7059d7eace4318353c7d
TLSH
T1FDE0D84822C6D1E50A0CD55BA29A4664C590B30B9F5CD8F72224669D544100759B5FA8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 3c0927b0234eb9c92d5ff8e13829b059bc326e48534ff85b296db7dad1f5769b
MD5 ac928c45c1563a96590f4a157e707d41
SHA1 5eeb9480aa593ac07d9a5197d7c2b64eeeecee38
SHA512 f4774ef7923244567e8e868766d99201fb2490967891faea94faec0a2721d032da135affcabf4bd01a5be0bb91bb875ce1dfe19d95f684376f745adc2f35cde0
SSDEEP 96:SkerHX/rrldoDZBbmsQ2nJF6Ax6PUeOBNd7HgGn:hGX/rr3oDZBbjQCnEPUecNdHgi
TLSH
T166B1F9F1427448DDFB99C8B030E94026B530B9EDFEDFAED682D09A346E96744493B12D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d96fd5a2e5d76431fa0f4af457b03d7dd21b20fef702da38c4d288732e480a01
MD5 6e32a41852ab349f645342012a4dbd5d
SHA1 b94a0ad7f93d19cd926b3454811051613d37237b
SHA512 3c7d7b524f1e3d393bb653b6cb12b8bab0dda2cab0e66d7639a59eb01625994d6d4f81316e13acf6638c33f17bc32537a10d9982af20595e7a8e7bc288a6cb6f
TLSH
T12371D8F442B908ADFB59DDB070F281027530B9FDFD9F6E9680C0AA387992354991B17D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da2e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58da2e.TMP
Size 3KB
SHA256 f0eaae3939b7e179bce8318dd6e57fdaddec0a1243e5c8c8f7011b7186f29a0a
MD5 e03d34ba6d591ca675f20db696dfd6a3
SHA1 ef7d17c86289ff2dce9cea9b758ad3bfcaa1b3db
SHA512 e3afff5829003a18f7cbb67715f254a29f886d3e4fff6d4e40cd54583f9759c66e05c4f8cce9bd1fc0a7a2366f275f8383a5babea277331de1a9f72dcffc7920
TLSH
T13B71B6F54279489DFB69DCB070F181023530BAF9FCAF2E9680D0EA387A92354990B13C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 fce0ff47873a564b1112edf6795d7a53eadaa6de2d97f88519a27880be4a5b7c
MD5 a5898f6c6dc83df6929ca3bc4d93c759
SHA1 8d8d1a96ab0a404fa0fb1f6cbafa62d138f6294b
SHA512 99320193d385d5d05f0d9589589e665b53e6737ec43b9c7d5fef100346daa04af02e145e735224a274852f0115f1499fafb9169dda8078980b0ef4781ad46fe7
SSDEEP 96:DpOukukuxu+mC3zIfueRuju+suouxueru0u6BuBGwBmtmO+mgmDmH:DsXpkFm4sfPRKvsXmPrH/WGkmtmzmgmo
TLSH
T1209169E687E4832D99115AF1FA54AE1ECE1D092583283C2AC8E5EE4BE3E2571E10165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 e15ff1c1bcbf13e9febc83fdd55138f0f2ad717dac1b1b28113c1e5294921a3d
MD5 74f34bcc3f704d3c6779c8fd2a54dc8c
SHA1 c45a7da78ec4fe94318348812a851b050271f4a8
SHA512 c4fc0349d062a15a79e95d2c780797a1a20adeab083fd17a812ed1c51220c7553169d29bb11d70fe95aa373483fd5781b70c2dbcbc361a1e07105af38420115f
SSDEEP 192:DsXpkFm4sfPRKvsXmPrH/mtmzmgmDkmBmgWGJ+eSJVJyd6GxKJo:DsXpkFm4APRKvsXmPrH/mtmzmgmDkmBH
TLSH
T1E5D17BF7C3E4866DD9115AF5FB146E1BCE1D0921832C3C6AC9D5AE4BA3E24B1E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 456dc4c433458a55505a711cf5b608aa00536e385d9f927adeb15584b9a2e464
MD5 36810d30d20b83d092a8db657619a91d
SHA1 11a813db70db7633e48665e30a2cd99daa25f558
SHA512 f014ee49c7a2d69f285850f3aef39c0025b0a25c785dca4c52cc3d5f28f456b22773df21dd55a42e8dc9c94275a97c59d03279d9bf2a43bc42933b9c6b2d9aad
SSDEEP 192:sxZ/R9yM/jK1Ml8MkT/fysnAcKIdpqIwHW6+WN4hZ/YzNRs7IgrJ:sxZ/DMT/fysnAYqdHbQ/d9
TLSH
T17152F8116A34AA77CCDBD209BA457B53D6F9447392904E44A9FCDA1C04E2BED2307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 bb09e2c68bc14a64d160d4062aeebf0e573a296b0c06606224aedb0da6a29011
MD5 8373cedb9d3b03906bfa2141e2bc7514
SHA1 341426b50edf872ce32ba73504a255d86d012651
SHA512 6218ecb0b8b65ba471f01f8c77c3e8180bbddeb39f793891e4c6cddc936245362d1cde040e8ff231362a4375af4e0b71f298536bad830fded1b2f92c85b8bbd0
SSDEEP 192:sxZSR9yM/jK1Ml8UQHkT/fysyxFKIdpvIIPIdwHW6+WNpd+QmVpmJYzZUz7Ig5ZJ:sxZSDqET/fysyxJfDHbMmJtF
TLSH
T150620642AA746A77CCDBD219F940BB53D6F5546392805E44AAFCDA0C00E2BED630382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 95c11c5408ffb4557e1c5ac5bd32191039d51df19381ba3d2af8f9502c4ea8db
MD5 1c2a58f3f2a21acb1924d56b9283dbd7
SHA1 61f155a47ecaa20fac569067e1290ff10a48f961
SHA512 41ef7208d0ba94bc62477e47b899b9e7cf0a9c73117226f422e6dd8f6137880cf7397ee673414af9d33b11b2946f3c63b99eb8ecce1644ee9481c6c619516e74
SSDEEP 192:sxZSR9yM/jK1Ml8MkT/fysyxGKIdpvIIPIywHW6+WNpZFCxYzyUs7Ig5ZJ:sxZSDMT/fysyx6fWHbcxnF
TLSH
T12C62E552AA346A77CCDBD21DF941BB53D6F5446392904E44AAFCDA0C00E2BED630782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2058e63220b5ad443e921002e05ab30526ca186cb2886489157e3eaaf8d234c5
MD5 6a33c07a6f70ce9f3c8caaaf2ce5acd2
SHA1 406b2d31963622eef0f923d4a13b7d466bb457fa
SHA512 14ec97b31b6b34ef5abf48ad5c5c472eeb77f51e20b7ebc264000ca0dce9e01428272f80efdb2810984842785c98489db43b2075a7daa954f4819fec8efcb0f1
SSDEEP 768:yFW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSj9roItieYa:yFW7kf0Wvqidau1jaa5LA3j2pa
TLSH
T1B5D2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 76dc2fff1f3dc3b40dacbfc53ff4cf2df172969e2f36b78df52dd0df34a198c7
MD5 63c0733a1f291c86945518b65f003f23
SHA1 0736ffe428149d0e5167b78de2e379f89186d01b
SHA512 746aa34f08d903cdd2a521cc4f05146da68dd6c3139b47808b2c593ac16cbac107365accc92fef812ca19385b783d71ae2608e466b86247f4520145383b6b5e5
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTenI1K0k4Py1zIhKM4MAQIi:KIbCKcenWK0kymzuKM47Q9
TLSH
T12C915F02317F068138BE284D966696666E4271A3381869FF7BB810621DB6F550DFFDCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595b26.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595b26.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 037694fd27c43ebce718764e5deddde6769cd09e014a575ddd579b043a3d5cf4
MD5 232013cf1bb1935723848c8462cc4725
SHA1 2e56f2c96b26a72310eb32d076c9718607667165
SHA512 72e827fdf63693ed9c7b4843fb27432248578cbc619464df8546291146c65a4725b36a29cdab573e42f84cb390987adc72dff230c8ffa499fec724b9ebdf84e1
SSDEEP 384:WZcIhsNdBMlb2+HCtdKR+29k1BeRs9JKgqijUYhOGj:EhdtawlO1TjKgqmUYhOGj
TLSH
T1FB928D305879A9379DA2B541F48737075FF88037E7C46F94A2ECAF1D019AA98131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 71294a12d4821125757132985a75327f1f7875d6eba050a9a63c0841ca5e3f74
MD5 c8dc291ac797a09580fd19e90e353def
SHA1 7943851f0951f73d94139575e561f22bfcdaa4e0
SHA512 7a8e5eaabf17e33b0f11b3d08c4eddef7cdb8a6f850243b1596abd7c6e5ee88c86dedc43bcd7c39b446a77ede41763f3231c3f7afa3219f07dcd0522ec340684
SSDEEP 384:4iFiZcIkzsNn8TUNTUlIlfMlb2+/IezIdCtdKR+29r1BeRs9JKgqijUYhOGj:DFQY6wgIJIezIdawlx1TjKgqmUYhOGj
TLSH
T1F4D24AF148D79536D9AEAB43E77E2E024EBCC067F580AA50B3D89A0CCD461BFD306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7112a5f4eace89f795eb3567c229e5d838969aa58d7a04053a7b6cc460791718
MD5 509951744fb65eeec9cd8c192095a825
SHA1 e0f6df376a357f2ad33fabde9d6de5b54d969837
SHA512 874aa4d11ac0219b1d1c845bc1e70099f746e6dafa4789634505fbc12f821cef7b92dcb2292419a8c8ae9e394e4ae2ffc1bc21f443a64048a083093cec472c3d
SSDEEP 384:vZcIhsNdfMlb2+HCtdKR+29k1BeRs9JKgqijUYhOGj:nhBtawlO1TjKgqmUYhOGj
TLSH
T1B5929E3058796A379DE6B541F48737035FF88037E7C46F94A2EDEF0D019AA98131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2e8b3d353cf925e1544460d75b150e45566b1ee459492d2615379dec6992909b
MD5 234fd59119b3d596cb3c89c4671b30f6
SHA1 90c77e7d1805ee6cc551be1ce630bb1b421bf5f2
SHA512 6962b12daabb062f27b735977307579a3c806aae51b58b5c1ca4650cd19c96c6dacb9bd23c6130fea79f2b98cc245fa44fd69a7102dfde2d6c8c1482c54fae23
SSDEEP 192:iONw64BBQmiUyg0He5GBPKp/+FdG7BGc+29PWwDqmU6:iONw6efzkeOdKR+2971U6
TLSH
T15B121A35ACA8AC2B5E92B555F48737035EA8412BEAC57B90E6EC6B1C01EF75C2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 469e9efd2cb23a665d4100c2d4d67463d0bb085aa0172aa0efb2d964267d4177
MD5 6566c8a84b34b5e4d41ad57524e4caf5
SHA1 08d756d6eae1f865f407dc41d7cec53ddf5262d0
SHA512 89e6019a9adcc20fcbc40069ebb57fbfcb157701f213e070623fa81fa40b5ed2c4e831575982bde41a722b6c66681f0dd285c8d0789a6ccb7814ae406f2ca62e
SSDEEP 192:MONG64BAQmiUyY1HW5GBPKp/+FdG7BvaDRCdU6:MONG6eAbxWOdKCMdU6
TLSH
T12802EA34AC786C7B9EA2AE45F5863B175FD8113BA5C56B44EAE85B1C01D774C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 29c0c84782a539cbfcebd317002019c4842cf175a39929999c53ac24ce940a1a
MD5 350bb50e5fcf9804b0f14c7058440c96
SHA1 c0bd84349663c01a2069f8710b74d1e668b5e43c
SHA512 d26436aef7f0674c8ec766106b2e09a3ad9f63d2f5630ba268254107323d4e7f7a1289f9f267036f8664f411d986ab60ed0c294eb88340005f9eb8d3fbd1251e
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5bdfab2ad223c3cabeb8bca527b413d56d0f4578da5165868b4180e2d41dbe76
MD5 3b3942fd5bdb56a28a2a91087e58f99d
SHA1 501d244d4e5102a9b1700129a295a5a923ef0ceb
SHA512 c37e8a162c9a5adadc13f431b9c02058fd1250ef64e1007e2207dd95b7fa794b4a8c4bc93edd0341d45dd3a0a1c1d07c8b89e10f3caea040e7d2ebcd32f71e3b
TLSH
T1B4E00206930200DBC034437044A32F2177F3D0301372138B4F1001752C023000E50680
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a1a30.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a1a30.TMP
Size 392B
SHA256 af270830872d11661004847d87ccebd1fee63c968c1602c092eaa1123402b117
MD5 41d63c9253b317b7c831e43188784e5b
SHA1 301b1b7cd492e7fc66256bb4818cd16c39fb460d
SHA512 b5de1bf5c907d23e631b69fedae9f7cd961d56e536445ba45c04c03b6a192474d5db4f8d9a7916ec0044b18acd983f553fafe9f8c1b9552bc9a04736eb9638a4
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 646119b9ee4ce7a58a68f239e8bfe73ca5ba00fead038f23d270600570745b63
MD5 45f68d962f0df34e885d96896d51c330
SHA1 4b073a4962f54588985c5fb393ca0aab857eafd3
SHA512 40f5f55c2b19a2c9e5680505ed9e66fa2dd2cf35a866cc68adac1e67a68f6728301548d74d9ee50ebec2bbba7bb55af12fe0c59c720599917de78dad35fba5db
TLSH
T11841485CA6F90108B3B76F5A9FF3A96D847B7C772F0A905E10110D4F0A23A01C962737
MD5 SHA1 SHA512 TLSH

Submit Download