hxxps://www[.]tiktok[.]com/@martafragoso7?_r=1&_t=ZG-98ijAQIyeET

Analysis

max time kernel
175s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 10:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.tiktok.com/@martafragoso7?_r=1&_t=ZG-98ijAQIyeET
Sample260809-mnwfwswdnd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1280	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307454501998317"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{BAC208AA-0F86-46C6-84AC-39FBF4CDACC0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6136	msedge.exe
6136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2972 wrote to memory of 4768	2972	msedge.exe	85
PID 2972 wrote to memory of 1280	2972	msedge.exe	86
PID 2972 wrote to memory of 3792	2972	msedge.exe	87
PID 2972 wrote to memory of 3792	2972	msedge.exe	87
PID 2972 wrote to memory of 3792	2972	msedge.exe	87
PID 2972 wrote to memory of 3120	2972	msedge.exe	88
PID 2972 wrote to memory of 3120	2972	msedge.exe	88
PID 2972 wrote to memory of 1216	2972	msedge.exe	90
PID 2972 wrote to memory of 1216	2972	msedge.exe	90
PID 2972 wrote to memory of 2124	2972	msedge.exe	91
PID 2972 wrote to memory of 1216	2972	msedge.exe	90
PID 2972 wrote to memory of 2124	2972	msedge.exe	91
PID 2972 wrote to memory of 2124	2972	msedge.exe	91
PID 2972 wrote to memory of 2492	2972	msedge.exe	92
PID 2972 wrote to memory of 2492	2972	msedge.exe	92
PID 2972 wrote to memory of 1344	2972	msedge.exe	93
PID 2972 wrote to memory of 2492	2972	msedge.exe	92
PID 2972 wrote to memory of 1344	2972	msedge.exe	93
PID 2972 wrote to memory of 1344	2972	msedge.exe	93
PID 2972 wrote to memory of 4844	2972	msedge.exe	97
PID 2972 wrote to memory of 464	2972	msedge.exe	98
PID 2972 wrote to memory of 4844	2972	msedge.exe	97
PID 2972 wrote to memory of 464	2972	msedge.exe	98
PID 2972 wrote to memory of 984	2972	msedge.exe	100
PID 2972 wrote to memory of 5332	2972	msedge.exe	115
PID 2972 wrote to memory of 5340	2972	msedge.exe	116
PID 2972 wrote to memory of 5348	2972	msedge.exe	117
PID 2972 wrote to memory of 5344	2972	msedge.exe	120
PID 2972 wrote to memory of 5344	2972	msedge.exe	120
PID 2972 wrote to memory of 6136	2972	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.tiktok.com/@martafragoso7?_r=1&_t=ZG-98ijAQIyeET
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffe38cc188,0x7fffe38cc194,0x7fffe38cc1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,14595148200121784261,5307462098858652003,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,3237381012064221686,16971182359433858528,262144 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,10375646914755924424,2059059836805537088,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,14909342118157416928,10545600699524516109,2097152 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,2362670760893000693,11040489762160936172,2097152 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,612426805037602988,13591584704650672061,2097152 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,8483958626804729918,476150102829757114,2097152 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,5352170560383532799,12512761059406914410,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,7633703964217592347,4414803488453798520,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,13325921057077596432,12047669451646476819,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,13325921057077596432,12047669451646476819,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,964975137562615878,18419203634764760438,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,6987602486122291512,18362339306776735484,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,10193367710997503080,5370447875010312697,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,14212710605665933275,7502481243840610486,524288 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3064,i,3224199599961925025,13211129771263495273,262144 --field-trial-handle=2240,i,3781175931170053532,15275590588898176912,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6130c8553b6b7a2db7b2e45115438707d58889218f67855fd135e735b457363a
MD5 12be8df10fec41dbf27a25c1c279b0c1
SHA1 33b90875d0895cce19bba03a50342a2ac338b0cf
SHA512 048871038871b434c649aecafc4bbbe60a8a78f34616d97c98e037db9c3622825294e8f24d0f7f5626a5b30b862451ae61f9803a791c84140586e516e5f58d6d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T136B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000dd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
Size 55KB
SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
MD5 cfd886e1ca849a7f8e2600763f236d78
SHA1 c1fc2b10d20c529c01b465a1edc0ed2fe04f0bd5
SHA512 254e37e3650b2c87b524c96f517586b690094abf7c8e0539b050ecdc4c56c2593bedab7b1a830b827ddc19f1c3e05ff4096ebdf4cc969b5bc5fd33cb34e94fd8
SSDEEP 1536:WJG/KL/shmr0SyKV2i0Qz0j72A2+0G+gSRLBeFDP3:liL/8mV2i0ac6A25G+1LBehf
TLSH
T1444302EC6A22F9ADAB11E5E847349AC2F140D6DE34156293509EDB98200F24ECDCB75D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 9a8f56410a77353d9e426ca8ee04b8c2ae0cd3ea41d527921fc0304a9d7a482e
MD5 81a3a768ad2bbf2789349d54086eaa9c
SHA1 b337d56c29560b7952aa107c1b0628904522f18f
SHA512 acad4918b8b31d080ef1341be5f4e4cff498efa4636563d889dca5a35f52f4d706eadd019c5e83e7b8a4f70111a803f381d8bfcd90bedcbf41c3020b71f0a498
SSDEEP 192:1ZbWnX9kllIoIwEfo/WOxrZy/uC0yOyUF7Iv40yMtvyre:1VWXGgTA+IrZyGdWkIvdFtvGe
TLSH
T19F021C24CF81FE58FBC4B975D8A146163121C3CF85B2FAB9B0585E3F3432396548A26A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5938c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5938c9.TMP
Size 3KB
SHA256 792c1aa097f48bddcc33cf0a55b9905010771aaad0673a8077efa403bfcde5e9
MD5 7feb8307909849b629c9579360dcafb8
SHA1 6b9aab1d6d4e0ed693bf60b131354fa101ad8c91
SHA512 48ee92a7504a242233209304ac0fea28d73c423c59e58282d32fc3d5c3ee2f0ee074585541e40c236187e80959e489dcc3ac9c2c8b064df39ff9bff1e3f819c8
TLSH
T11E611B340B526BADFBE11E72E8E147057432D36DDA73FC1C606056BD6107727602615B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 75bd957ea22377973faf3f578f45cba9f2c9b74e9706462144e1e6fba83e2e6e
MD5 afc2b58ffe58b3f70f2c37b0eb930cb7
SHA1 ed55cdea2a97ac03e4c2c8c2fe5fe59ff67cee76
SHA512 95fc4fcf7712401b4516f9a217b8dce98e5a7b1c4000caa27ff3e31dc71968f7d0d960684c370e13002c4df1265392dbbe29ca0761251d2261793279c6ca2f45
TLSH
T187717BF743B6C27DAA055AF8AB06AD1B8F580520432C397786D47F2AA7F3471E10275B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 eb48fb18b3d649bee188d5815c01a81d9dae9f1d031e4876161a53d787f3ba32
MD5 1d86f5ded4ec3388ce9d9c4f5c672d4b
SHA1 b649f6e829ddc398cdf92c1ea17cb43111a00c82
SHA512 808ee8145962dace302bafa4ffcff8be4e14e37a8e03db042ef1aef8bf89c104d63d2bcbe751fb37ff1c5e41cc28667ca090ab57c9fbeef6dc72faba87c2dae5
SSDEEP 192:sxZjRQyM/jK1Ml8MkS/fisebYL0Idpu3HW6+WNS4f/YLxdjBIgrJ:sxZjyMS/fisebktAHbN/G9
TLSH
T14E52E7116E34A977CCDBD20DBA55BF93D6F40472E2900E44A9FC9A1C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e865edd351fd0512651e20fef57a327a8317e94c85e921de0cb26ee2c42b5565
MD5 212f41d9a9076c48d529a275d04a341f
SHA1 b1b3acaabb37b422f671e0e2d9be77748773440c
SHA512 16bd86799a298849594cdfee9ecf5890eb70605a13765314300ccbfb393c1e63d06ba92d5f09ede3f7df8b98846f2ffe5f9cb2c85f99534c2616d7b5b3cdbb9e
SSDEEP 192:sxZjRQyM/jK1Ml8UQ0kS/fis6bYc0Idp43HW6+WNS4f/YLQEJBIg5YJ:sxZj6qPS/fis6bvtiHbN/wm
TLSH
T16252E711AA34A977CCDBD20DB955BF93E6F40472D2900E44A9FCDA1C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9ff3ea7481b2bcad880488873039b7bf5d203e3298f40604a29fd9de2783da5b
MD5 5a3f7f02e14bdcd1afd5cf0d0eebcf77
SHA1 dd85773d1b8c2c017132aa3b44b6fb4c7820eb7b
SHA512 82c949067d72aa668f4f0ff14cc47ec8776457c5ce4ab6834f9068cc7a33421301b8f51cc92a0f0b37a8a1a490cab3d102a6da2cd4ccc2f7ddeb6e0eeee88c33
SSDEEP 192:sxZjRQyM/jK1Ml8MkS/fis6bYc0Idpu3HW6+WNS4f/YLlrjBIg5YJ:sxZj6MS/fis6bvtAHbN/Qm
TLSH
T1ED52E7116A34A977CCDBD20DBA55BF53E6F40472D2900E44AAFCDA1C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b34956dc9a47702e3d9ffccf3f41f6d4c3510d26c60d70c062c800fc18968b94
MD5 e8ce87bd10f82436a388c7f96e43b78e
SHA1 95050207c718735e452e242ce1d42ffd051a6ee7
SHA512 44664daebb133d3b4ef91935b6d39df56f227506a5c04cbe7bee4ca6b405c577265140d9c39a199c1968a668438407e501a0213397beb59cf4f3abd5b145c81b
SSDEEP 768:dls6pD1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN+roWe:dls6pD1WvxzUju1jahILIsNVWe
TLSH
T141E2FA3B680CCB7E4F841E5CEC2AAF976DD801CBAB94895447FA484C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\bee7709e-8715-4fb2-9ad9-dfe416a95fb4\index-dir\the-real-index
Size 72B
SHA256 48cfef1d4de6fe9361fe069d7a44e144c5a745375dda8c859c703ca2082f3957
MD5 a3c12f127e3d069989a5666de3bafce0
SHA1 ed25f92a4f89ecd9e3a51905ca2c8d2f917d98e7
SHA512 5fd6ad0624e4252eda0b8558e27f596273ba8376248ba1958729af807c202a9edbecf96b77e617feed9e2b6263611343efe005d55c36c881341927d0a3839ea5
TLSH
T11CA0021803882511C8BDC7B4188505507B208E204112174545DC8096FDB26944201400
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\bee7709e-8715-4fb2-9ad9-dfe416a95fb4\index-dir\the-real-index
Size 72B
SHA256 7199a10f30d543cd2c011cfc06510f0a578d6cd77a4391be816a9e4dd2f6d4d4
MD5 e469ed849533f68dd57cc7c219646481
SHA1 6f5d11cf2201514c741af00cb64b8b5e6455bee5
SHA512 5cd075ade128fc70fe2d1eebd800e92f492fc873600e151b339fd495e91d48c2e08f3a13de3aaf4aadb5694ee35fbb534aa88d08e431e6223f6c6ab0927da5d6
TLSH
T10FA002200B947551D04587B015C5914073306D5111411741A4D55179A9E27948913454
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d51e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\bee7709e-8715-4fb2-9ad9-dfe416a95fb4\index-dir\the-real-index~RFe58d51e.TMP
Size 48B
SHA256 43be65664cac2b861b39e472e46879c96e1234d263897bbff235a0a76cade1fe
MD5 eadb0f12580a2ae65fbdce03d4b87ffb
SHA1 1d345715cd04769693233fa92dd316aa0574d833
SHA512 5d98c1714032b2c7701f9befd512a9a6537a64c1aaaa9372b7dbd2c7015dd1f437db40ad1916a2b49ef8ff67c78cd58316e3fc0edb38a64a16f990cbf06d7da7
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\f92dfbb8-1a5a-474b-a3c2-ee74f4c21577\index-dir\the-real-index
Size 72B
SHA256 c1b52caeab417e33be4fbf9e3a52177c6d3d175a98f561501de71fc167c39627
MD5 c1788723c9deb3d4b8f65827ce3817af
SHA1 40a774158ff7891561bd1c6cbff8995a49abc5f8
SHA512 74c321b0263b35bdc5e0b006b8407de0d7ca50f032b89791ab2de09c8e1802b8694e87cdf253c89ad9531d2944d1f0e9429865462a087fa095577f110f7548b5
TLSH
T1F7A002148348410DC1018E70185136C03261FCA457134293B8D495558F5166163029A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d934.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\f92dfbb8-1a5a-474b-a3c2-ee74f4c21577\index-dir\the-real-index~RFe58d934.TMP
Size 48B
SHA256 583e5c9e7bb26a9dc8e1ac02c7e383ad397b5ceb8cfcd94b9f488b8ad26d17ab
MD5 8ad4eed99ebbef495a3a41674a46122e
SHA1 f6e96e1640cd6d66314df4b3f16c842fae601927
SHA512 354ea830eb0f7b68a6cbfaab9bed331072eaf2eb79c76642be76226d319f8584ff3e1a51fe4658f5ebd4bd84e649f0dba48229f367de5bbdf2a5326fd2edce51
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 276B
SHA256 24643bb193d088cbdd2e6a338473a60ec0ec77e1b84d02ef557578ebcfe83786
MD5 827239f13f86cc9d263a9d24f12a2466
SHA1 0dfcb05cbbde38ff509d82d7bb507fe02149055d
SHA512 a3a73baca2d4aeab2f340ddf1e286ab8801b98b84e0f65d320f1b10c68e9b253debe9a1aa4a02a0338fd7069be3d82d4ac1c7ecad3c9974ae059222a265585de
TLSH
T1D8D02B7317B59014FFB08F8479B971985D763CCADCA182DC5441319D05B5C014821F73
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 271B
SHA256 29ae2e01884b322f009802435b243a44d09c40faacbd7126819df344a6121a97
MD5 73508a82fc413e8183869bf06788cb80
SHA1 89bb2f6a5257b6e2688714777d84d6fd8fc7e89c
SHA512 398b36ef8486ba5c12158715bb4f0fb12ccaf8b72921b0214066416fbb0d0729347ed29c5a239f152e5078e1eb3911e00553bb41c7bd57aebad26b134c1a9964
TLSH
T1EAD02B7357F59014FFB0CF8439B9716C497634C9D8A186DC5841129D05B5C014C21F73
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 271B
SHA256 f30650aad3633826ffb7247ba27e97a6e8c4f4c25ca56ce5c2dec7bff245a805
MD5 f3aea061eb21b185421671d30afe51ca
SHA1 9f5aeb766bfb7e31a4d465c455a0d4fb3ba100ed
SHA512 76af4c3f6ff23cd232edab499988b87d2b787f90a43035ff96e84542d3fb170810941870eccdacb1bb0cb479de1b7caaf8c1c4b972fd82da57c2271d34d939c3
TLSH
T118D02B7357F59414FEB0CF8479B9716C497634C5D8A186DC5841129D05B5C414C31F73
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe588b14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe588b14.TMP
Size 165B
SHA256 ad5199ffd79e84d4543a3f52a9a3597ffe02a51b0069c719e2670c9ba355a233
MD5 541fc607be42ffd70a9c2487120e23a6
SHA1 8263d3f8616852c34d30fb664c22f1b7808befd6
SHA512 3ad0b5a3eafbdf0ed31870a2a4a315ea7c15aaa2b1d9f69a5e14ad58acda224ee3f6928451a4a207dab3781d5db1471b723d4b158faa58f795ae6770a43ba8d9
TLSH
T1B0C08C77537680109AB08FC8B8B862625E7B2CC4ECC147C5B84632DC19308124C60FB3
MD5 SHA1 SHA512 TLSH

Submit Download

013888a1cda32b90_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
Size 37KB
SHA256 40f2f6114d25dd6c70177510c612b9df338852ba83d91679e09e573e0cf09ac4
MD5 6bad8ae6a23497be3fd1b638d9a48cc3
SHA1 5f80dfa107cd5eae535288a18de24cdde0294070
SHA512 f5a4d3e524a61cb37846df40d7730faa3646ed13b46919892002d9d35165e595e1deb69b2730599d02b87ef38adf98e069807dbeca6ee1ef60902341a7dede71
SSDEEP 768:9juayICwPfzrd59iwnhiNiMbK6Vtwxuv/BQo:9aayI9ilbK6Vtko
TLSH
T18C0383CEB5E4E1010B52C1BAA00EF05775777A19CA4CEE5AC11B5AD838FB5CC8376B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08b99d499107ba17_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0
Size 7KB
SHA256 085d7b237f9d2c78e84962d8e6e0926efe96716f53fe7c9b727813113146acb8
MD5 298d4ec07e025ea5b5ce433cd7fdb15a
SHA1 982cec3416e0e0def6f2f9de96c2d8a8d84edbcb
SHA512 dfab50fd5e15d3aa1ae02463db86a04b3e3a9e879bc1d8018abcf96f6d12775047ff38d5e3e4c469db83d48814782410bd29ee7236b74140cf48c6c61f461d6a
SSDEEP 192:ZvCcU7+jkWMk+jjcBJe2YdcPS4IuoFq4wcAAXb0G/LWB:Znm+jkWMk+jjcjedcvI/q800WB
TLSH
T101F1E9A937A0963253A340F556281111B33ED25C7C4A8069F27CAECB78F544BB67BF35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

297ecea5cebb5dfe_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
Size 4KB
SHA256 6252843b19dc06afc034f14c696375d964bae16b9c592e6e892a686fadf26804
MD5 be42f6e8611329f2fa5c739942e909e7
SHA1 ac7977c236c9942cfb8454a5bf902babc29056e2
SHA512 4ee2c0839e20f69158fbffcdefa40ddf39a015f687cb9b2c76e807130df24de223278b4d0b5b18b3fa4b7aac6cb0809ce067763eba72c83a96c475082dbea450
SSDEEP 96:ipOaPq+r6YP/XVsBZc3qxtKQUHBwzbQKhXPwa8378LW6EPP/41E961cbBT2hTSMp:ipO0xvVs7GOn4wz1h/wJ378LWvPP/4CQ
TLSH
T1F29199A9A171C1BE8BC6C7EA594407011307E58DF407D4DEB2589CEF2D91E87C2A5B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a0afd649b00527b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2a0afd649b00527b_0
Size 13KB
SHA256 dd89378354394f58d7eb713fabfc9bf957ae2785110cc03e1ef980001c6a32e0
MD5 c9c7f022f956cb969c023a9912bb2de6
SHA1 e9324de0ae1584afc54ef7f23ee36a943d10f213
SHA512 ce7808a83424bf1d0a45fe52c18e890622c3bdd5df26f22fee2dfaadb76e7bd7187a1320cff5cf89bc0f0bf081651eedeb8880a14ea8e757365bccdc7a6d2193
SSDEEP 384:5KdjkW6A8QQBbTQB11ufSvwC6Rc7vfB7PrFoMQuNd0L3:Ma/fK0Vc7vR2JIE
TLSH
T192523B716BEDB13A03E151A4F44D6000B666DBC8D50E840BF398465E2EB9998B6F6F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 16KB
SHA256 0edd124f1328f9461e29cb2385349dd2aef6c5e2a5256e9cc0f8718a5cc3b3a5
MD5 c7cbed3fcfb8bc9b16aafada90646ed2
SHA1 058eb8fe555591b4be806dfec7eb4dccbe13f73a
SHA512 9d68c06eafb509f5f23bc7bf2fa2852c07c2011c17d786c3e5692c6a2c45ed023fd2ecf6db74f29a3effc1b1c67d6fc10e62c378710b2e4506ea9b8c616a8c26
SSDEEP 384:t5UXCrMuZAdqOuHOyn/lTqmrr/qV/cfJF4QfjM0YC0P:t5UXCLZAdqXZn/kmrr/qV/cfJF4qnBe
TLSH
T1E272F9EAB6C2703243E291F5D47F1215F2266500B81FC499F52CDDCA2CBD64BA13AB79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6c28cea6ed9dfc1_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Size 4KB
SHA256 ed429ddc23685ac49b0b13c0b95391eb4116fca1c1ae73c33ecc90cfccbced8e
MD5 44a294d42e364c7954aff6419249714e
SHA1 af259e082bf49e4bf4ac118bac6354dc49f166d4
SHA512 141a434d8130f7e17777160f3a393cd8a16017c7d6adcd0a59d513ab63824d46200413628863e150e4802652c7225e26ddda7d47d19b922930ffd59a506ed885
SSDEEP 96:v+fBzF4DeIbHLdWXpGRNTqmgQ0sGQ31pBrzCr8uCPjXSchTezo:v+fZF4ak0XpGR1q34FpBHCr8uCbXjIo
TLSH
T1F0810AA1B5A0B0FA87A782A5801A0506B33F999C740FC068FB745CE638B1786D373F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 13KB
SHA256 802aeba25ed7cba5c86d6a1d1acd13b391a31e909bd2d2d4e8e0d502292edfb9
MD5 f25fa7a3031cebdf74f98ff13b3c5494
SHA1 aa3ddff6b6b45611060d3112029adab303ae7810
SHA512 b69df9493f4bbdec6b6efd2447d99c3afb1e8d937d219bb6732b28e8ed1b424ea0f36ee3b0eef37c3babde7bb2633a07bcff525f7c42770ebf543f60dd56fc41
SSDEEP 192:x5iYJF2DlejSU0R4QYPhjVjtTjtAfufCueMfCwGjMujxfS0ix/Puk5Uo344q:DjK0mUrjVR3tPfZftGjMgxfS33u+bq
TLSH
T16952D87A09ACC4137A62D8FC739B65133B757201F71EA382F55DBB8407CD284621DABA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0757ff92c7cde0a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_0
Size 7KB
SHA256 b6828a131d87c9feea35999d7605f615b2e27367d4cee150751c5ed05e85f282
MD5 065fa26bd0c4dd15b3399b7ab0d975b4
SHA1 178de7198a7603dd65d558559a00bc58d8fa5be2
SHA512 6bd4d09a41f9e2612ac3bcbef4fe76f8bfac4a8e074d02d1da19c25d25c3e46cdba9127b5c63f7c2bdfeb8a4829defd9bcb0f32d1e36a45641f83a38edef02d2
SSDEEP 192:tm1vIY/Q+xCkpypY4iPpjJ697o4S+4+xRLyqaP5Eza+Enr0oVQinb2Va:gvf/ZxmpLVo4S+4+xpXDOV6Va
TLSH
T18DF196E077B9933787DD81A589283710A32AE24D785FD0E973AC1DE718461425CBDF74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 2KB
SHA256 655d12e45293fad787aa963a03c436c0a5a6357bef3b6a4cf6a86551f5071984
MD5 8fb6cd55302c9a6d494e1554e233f171
SHA1 c0b2f3a9c79dc3f42b469dc45d4462b95ff0e64e
SHA512 a4c88d86815618ba5bc6f2ff8c961d923113271c21e6aa948cccb338c3a5f79b50d2472da8e5a000f68f7782489857f0cfbbe41aff99cf2fad3ee4cf8b1f83b7
TLSH
T1E741CA7185E042BCDB5F417278480961523DC9EFF409A40EF02D24FE39E0B4682B7EB0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 288B
SHA256 ef24a2b230cf59e69e954ddbd5e41dba38f8113e75006540dcd21ce0d0ca1158
MD5 af42ae2b12937a74d50bb3696d179768
SHA1 cff670c5c18e3e9fd0d4c46a7555c2b2606578e8
SHA512 4c13178b844de6cf85613afcd70879ff6e5c293f2a8aa20c7f6caa5092344a67cfc336e1359edee21cb2b84b093b9c9018f8eee6846c39cf2af1e18fb30ca725
TLSH
T1B4D02241CD008608C42486746063A2EB733990FE890A73EA002D314A3EF10924E6B801
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d3d5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d3d5.TMP
Size 48B
SHA256 48b1b1891036f95acdc588c42b48de84b5dd04e35ab11f578a4e55d1ec25cb1c
MD5 d07806a45eaffecda4db76aebba4dc26
SHA1 09cc59d7d1779347b2e41d83ac17811503f164db
SHA512 fae09a5a8cb0e159a7889d7f9299443e65930a4af45ef0f02ecc5b32ef13154e5f3bafe6917037dca08bccb3528356c15bad6a2f66e6d53233e185379d76937d
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fd5b4db18909e33f2dc6757b8c9ff05da843c5b197dad921da32cf29b5985886
MD5 133ce2287b0638f3b827407b263eed9d
SHA1 b6439d672fa790c835a59df82693c3c452647fe9
SHA512 2928e382afec48ed411e288abd98b006fb452a33b2bf13d4f8d6078849e25c8fe287a3991f5757f431fe4475dee8a5ad5af403b2bdb9b5d85b4a04de72b01ef9
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyhoIrKVicPdIxK2cUjy4nIZKYIsO:KUAAKtePiogKVi2dqK2c6bneKYIp
TLSH
T1BBB1061736B602423D3E2A4C83D59BA78E8271533119A42B3BAC0471DE66E21DDFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595eef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595eef.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0cb4e11df367fc10c3d19d737f0f3f3656635926cbd9ca544346bb9694f9e3a9
MD5 6df35094788ef65266805cfa49eafc92
SHA1 d089aa90086515482062543c644069cc4de5fa74
SHA512 58480cf0abcb505b3065ba9eee60bca6c5302129c779e95431c72a11ee6e36f30cc2cf0e3d0f5063885b1c08f02618687e5bf50d3ef1753179e4eb2a15160be0
SSDEEP 384:+ZcIhsNLmf0mhVXnUa91O+MzozJrUnnTKwBODNZOCwWC:8hWm79HOZMhUnnewBKZOBWC
TLSH
T1F3928D356C385C766EE2A145F94B31138EF88073E9D52B94D5EDAF1C01EB668234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 01d0dcb832d108d3fb43d7cbfb31ff12aaa15000ad132895d5203566a98f33d1
MD5 5b4c187957bc357ce055967f272a1133
SHA1 3723ec1175f951233ea177f8e4dff9d1d128f4c8
SHA512 1356cff48baf3579832a92ba5b8359c720880c677c4ed70c2a5db9d35a7a5b3cbd3cf416f157e90e85daf1dad90b3b1e9825e68e83d4d1454df1e774faf79953
SSDEEP 384:l6iFiZcItzsNV8TUNTUlIl/f0mhVXLUa91O+MzozJr7nnTKwBODNZOCwWC:LFQVAwgWm39HOZMh7nnewBKZOBWC
TLSH
T1E9D219F258DB8876D9AE9747AB7E2D038EBCC063F4956550B3985A0CCC9A17FD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 47f0246b7ee4f7e12c5e8dda8fd986a63af3a956f64e9b1a9db11c150d1f3fb4
MD5 af0078002ae4ce29679b4ddfa5de254a
SHA1 c83cfc20d11cd4390aac69627786776926862ad0
SHA512 37df6ecc1907c100f152f315c70b72cb8cd0af58593c901a59ed6623dd1426df6af8c65c79362e4264b0d56a0f704c87bd5051f95271446c9ab8ac4f00636fa6
SSDEEP 192:qONQ6O7+3hQmiUy7tGttb0IO25h2sgGbv1U6:qONQ61KGt91O+MCD1U6
TLSH
T14D02D9346C386CB74EF3AE45B98737279FA5113BE9962F84D6E81E0C00DB65C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 2aaf952bb9353ca548ae2105064e4bc7a7be2fbf82dc72057615a3c9f7f155a0
MD5 59638d22c2cbc56b5d0d22e55a1cdf67
SHA1 905fd18bde3447d4b4d2eb2773980daa6d5f6335
SHA512 102a77eaceeb02c0e093431936d0723753d5c891ac68229af9e0db6c4ebf284346f4ac1437eaf84dc0de7f06187402f0f8de3223da6935ccb7ec226038f16d0d
SSDEEP 384:NsZcIhsNL/f0mhVXnUa91O+MzozJrUnnTKwBODNZOCwWC:Ih1m79HOZMhUnnewBKZOBWC
TLSH
T1A7928D356C389C766EE2A145F94B31138EF88073E9D52F94D5EDAF1C01EB668234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 118bcd2613b7234f9b2c2d5e373fdf6d392db577935e07f14ca04095a6ef4bf4
MD5 ae156b99c564d92bbd729f9fc65107aa
SHA1 6ef19407f2fc2b840d86b82a74f531134ff6acd9
SHA512 852bd4046f830a068006903f5c6c8b0f0fb8e666e52fd2f56da7e061c845da6581c1e8b594078fc555dfd9aa22e6c2ee086b3e7a5d9a3a66388566ad6ea6b9af
SSDEEP 192:cONm6O7+3sQmiUyJt0ttb0IO25h2zMZF0SJricNIq9PU6:cONm6Ci0t91O+MzozJrbnU6
TLSH
T1A1121B35B8289C771EE3A544F58736239EA5413BEE8A7F80D5DC2E0C01EF96C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46bf5377-6871-4833-a9ba-f108b1cad078.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46bf5377-6871-4833-a9ba-f108b1cad078.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4b24613a173f6b8ed34c3c7fbe8a5db98da730e6946165097c35d79e3bb6309a
MD5 09768611808e0905c1b0633cd9cb91b3
SHA1 f6eff5451294de6deadae7e7967b987ccb9c1ede
SHA512 5624f4fe23994e00968d5afe00dacfb862eb2b7d01c0012b20e1f02b09ed2bd7c917fa8c7b7a55999430cc3268a6ccbfc3571d8a8a96b7124123be964c31bb5d
TLSH
T126415B9CA6FA1145B3B76F166BF6A86E587F7D773E0A845D00010E4F0B62B40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download