hxxps://sashatherese[.]com/pages/contact

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 23:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sashatherese.com/pages/contact
Sample260818-3lctrssgnh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4684	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315697583771304"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{DDEA626E-0A43-4562-957F-F39DE8DFBBD1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe
2168	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2168 wrote to memory of 4952	2168	msedge.exe	87
PID 2168 wrote to memory of 4684	2168	msedge.exe	88
PID 2168 wrote to memory of 4444	2168	msedge.exe	89
PID 2168 wrote to memory of 4444	2168	msedge.exe	89
PID 2168 wrote to memory of 4444	2168	msedge.exe	89
PID 2168 wrote to memory of 1284	2168	msedge.exe	90
PID 2168 wrote to memory of 1284	2168	msedge.exe	90
PID 2168 wrote to memory of 3984	2168	msedge.exe	91
PID 2168 wrote to memory of 3984	2168	msedge.exe	91
PID 2168 wrote to memory of 4068	2168	msedge.exe	92
PID 2168 wrote to memory of 3984	2168	msedge.exe	91
PID 2168 wrote to memory of 4068	2168	msedge.exe	92
PID 2168 wrote to memory of 4068	2168	msedge.exe	92
PID 2168 wrote to memory of 548	2168	msedge.exe	94
PID 2168 wrote to memory of 548	2168	msedge.exe	94
PID 2168 wrote to memory of 548	2168	msedge.exe	94
PID 2168 wrote to memory of 2656	2168	msedge.exe	95
PID 2168 wrote to memory of 2656	2168	msedge.exe	95
PID 2168 wrote to memory of 2656	2168	msedge.exe	95
PID 2168 wrote to memory of 4880	2168	msedge.exe	99
PID 2168 wrote to memory of 4880	2168	msedge.exe	99
PID 2168 wrote to memory of 4880	2168	msedge.exe	99
PID 2168 wrote to memory of 3628	2168	msedge.exe	100
PID 2168 wrote to memory of 3628	2168	msedge.exe	100
PID 2168 wrote to memory of 228	2168	msedge.exe	101
PID 2168 wrote to memory of 228	2168	msedge.exe	101
PID 2168 wrote to memory of 3804	2168	msedge.exe	102
PID 2168 wrote to memory of 3804	2168	msedge.exe	102
PID 2168 wrote to memory of 3804	2168	msedge.exe	102
PID 2168 wrote to memory of 3824	2168	msedge.exe	104
PID 2168 wrote to memory of 3192	2168	msedge.exe	110
PID 2168 wrote to memory of 4000	2168	msedge.exe	111
PID 2168 wrote to memory of 3692	2168	msedge.exe	112
PID 2168 wrote to memory of 4992	2168	msedge.exe	117
PID 2168 wrote to memory of 4992	2168	msedge.exe	117
PID 2168 wrote to memory of 1804	2168	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sashatherese.com/pages/contact
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffaf729c188,0x7ffaf729c194,0x7ffaf729c1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,630349689751762335,615275945396903623,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1904,i,17014068666312942182,8058622386792463673,262144 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,15814138562099562015,10525730057849387720,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,6280936809425612598,6726959053541176132,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,5631895242902226587,207135081675927207,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,17618129640353922653,10415118725547109680,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,1160081379632417418,2503044955455105226,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5140,i,14970975416510656769,8779751815913070736,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,14658319322991739670,5043833895576433036,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,8492851812465306275,14417149792301601846,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5796,i,10927530367321876302,9970202231867158159,2097152 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,9159618412832905593,4657133071711181873,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,9159618412832905593,4657133071711181873,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,9938337760573390480,7995539480437296331,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,10006692391497306710,17025740896823299498,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,13890940681352399552,474255300887249060,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,11332364641599869506,7840054290153545723,524288 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,13758864727783398860,18374954015580301287,262144 --field-trial-handle=2348,i,14066219508137224091,2376247965485368577,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 518d372739a84424b0a925cc150974f5ea06126ec16e9fe5a0b6f1ba76f6d092
MD5 c89c9b4c7a428d0d6b032c72eacbf482
SHA1 a9408da885f2b8032d3ebce9156d721feff0859a
SHA512 0c6aee823f60c69494be388115f489089a8db6f32469740db018288354439a6765fc56f6541a7767cae14a2a4a1d4ea446d3df4e129e672275a4f8e401176150
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7c:fwUQC5VwBIiElEd2K57P7c
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 28KB
SHA256 447b2fbd76c1e4fcd5986c9a216192d8c05a729e078e83518ba6e40cfc585e61
MD5 8a8e6b66c57d7e3c54e4f8b0d532844f
SHA1 5bb2530031bab3b3d7189185d42b210f2b7e4475
SHA512 6d2b110630da2d1cb10e7634fda4b3c5e65b135f0d557403c40a94649b9a757b1ba18697bf09c9a9c067091387b3ffbf4aa6b6f33b34cf0d1ef7306e30f8659b
SSDEEP 768:XmNKsJcw8y70k1iYEpNP0twbn8ODKPKy1WwMbD:mcwz03pHPcwbn8OM51WwMbD
TLSH
T142D2E172BB2EA27F034128E139B60BE03EED7FD09C05AF1A857218B554BE53666980C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 29KB
SHA256 fc5c6f7f121b28fe64362ca868fb81244017f9eeb43b06cf1b2c3f381cf5748e
MD5 54ddab4013810d3ad303148dba134f80
SHA1 aed2ef9a1dcf3f295d6139b42e5a460f91597b72
SHA512 3f66179bb9d91e983f455274e79b0f2e13d84ca394f34c8d2768ebdc0268da7d90e13e6eda980584eceb4343dc0fe1e2b2bd6aaae6f3b368b06ee59d70dc1975
SSDEEP 768:mEWsKc4irgj+bExCkPTbRKC/bEsdSye6Xq+dGd6M7ptaUSjO1A:mHsKc9nbE0sEGE+SyeMGd3b45
TLSH
T1D8D2F1EE956F7E12C18435EF33EF90B6EF61E3E431697684082E0C2CA8E7566503294D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 194271c76cc9c7ac9b1fc1c1cd6c491eb4b6000f0a4c587a35e26fa6f7ee2ca8
MD5 5cea7ffbc3ef96547287b1b359ddcae1
SHA1 c041111db945ccda8b5be4622a93039e96c0e636
SHA512 4352a17158cacb0f78cdef71cecae6ac025ef5028ce932f2d828489b4a4f5131f237c103d89d46aba1a0ee8badd2e4d7602c7f8ec44f6b02cf302ea3b532fba0
SSDEEP 96:GWQkeI9Jd4OPg42leq2S2o0P7fkc+6O68:vQky1eqURDy6r8
TLSH
T19FB1AA9DF2A78802DB210D3CE3EB0943B7F24946054F6F62E305CC7D660BBED5926528
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe590565.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590565.TMP
Size 3KB
SHA256 4378bc809718a5a2a726bc19ec49a551f27952681b842b2822042d942396241a
MD5 ab292e053ae435fac676126e0c052a1a
SHA1 dbae227d7f9cdcf5978c7c0e19567a67eae9703f
SHA512 9e4f6b7d06d631640a3c3e09a0d7da09cc553502377d32ea6006f855e79340f7652f2d53b23425efed9da69e3f5b50e9d72d9aeca55d115a9f98845d1b85ade3
TLSH
T12F711BDD3322D452D3600E30F7DF0693B9F141980A8F6D56F218597D690976F467B538
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_sashatherese.com_0.indexeddb.leveldb\000003.log
Size 13KB
SHA256 419cec5e14e8b8ee079518dbbcab3581fcd2c589dfb2cba946086ae8c4ec6c9f
MD5 c1db8f51c199fbdae508974789c48079
SHA1 be4bca240088f3970fcd124d782ebaea75632b00
SHA512 1015a0e7ffa3186fe772345dc38b3f1409e887cceb767f569fc4799f8c66f71f55fc12554c55d7bfeebe7b62e78052b7e4e3c07b77f72d87037fe92157e464b1
SSDEEP 384:2zSWxSxnNP5XtEJyLh59/n0Y5rK2DgNoDTEDvLDtVsDCH:7WxSxnNP5XtEJyLh59/0Y5rK2DgNoDTW
TLSH
T1BE52DF5B6AD48E27F96E19715AA20FD817737D8ABC81C55EF0C4F3ACC971A004E32262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_sashatherese.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_sashatherese.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 b8f69b412a7355d12a7ee9b4f88954e264396a16dedf4b77724dd2196cfada03
MD5 9d4cce3af56714320619daa64fa4e62d
SHA1 5a1a63f4ae7448ac791cdf5df2f9e9329e4b7f21
SHA512 3da38a21f900b099e9919ff6bd5ec5c2f5d5035f2512be1837209c88686dccf33163e365d7d28e6ad2ba653d48eebc389131157cad635abc3bd67977b346492b
TLSH
T183E0686C88D8C62B5100229B6535BB0EC297AA0FEA8CFEC74FC2D8487442084D1AE982
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_sashatherese.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 4f165cc5cef6d57d8eb8b863f6e0c53c8dbe4a7d7c44cd8802025b071ececa4a
MD5 b05e9624a69086bf4ec8b65fa3739048
SHA1 d7c418d5f27897add04e9f0ecdf612906ef12bd3
SHA512 8ad13cc36f4c99cc0019a5a191462129f2a31dbde7cfb76b0bb654aee96132b9ee09f75a62ea9b894a65f7cf605b83e624960a4dac54cf192c76417b24c9b3a2
SSDEEP 384:DdxwpBdDRW+errReSZjoW6ceneN3Tl1/fkYVr+pv/L/XeY7iZqifAfurue4xg0gX:jleT+BMkbZyjg
TLSH
T1B1629FB7C6ECD95E992125F8FA186D27CE5E091C4738384A8DD8BE0B53F24B4D25061F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 03d71741a3b8ba75bb25d7251de6566479071bc7e4a25deefeb0660fe591d71c
MD5 86e7f7c004f2531c511a802e823bb310
SHA1 036cee67bf0ca3d488d49aacb5dce656f81f1e21
SHA512 5b4ebf6a365f00838e15b0b722d203583cc01b66187968390d97a4635895a8c734d02b5171f404305619ff2e2b24fc566911cf27b945b7bb4a117e8e0509d91c
SSDEEP 192:sxZmRzyM/jK1Ml8Mkh/fQs7KdZEdpI8lHW6+WNXTpK/YwpyQIgrJ:sxZmdMh/fQs7eSRHbs/R9
TLSH
T15E42F811AA34997BCCCBD209FA41BF53D6F9457292940E44AEFC9A1C05E7AEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ed900bdbb81ea5f4d9a751d63c6426fee3ddb39e6b786fe629ee6ec52bdeed17
MD5 0c1bdbeed7fc4e655403785a22504248
SHA1 13c7429862d2c4d7da757a9074871a4fb54eaa93
SHA512 e9cc8e3519ed169f66a13d9cb14dd7750171fd32509c504932c3448d5ef338503883b32bc0734f581e122e758c8a9f228b625200afa2fef2529512b05b43d9ab
SSDEEP 192:sxZmRzyM/jK1Ml8UQrkh/fQssOdZIdpm8lHW6+WNXTpK/YwW5qSQIg5SJ:sxZmdqAh/fQssSyLHbs/cEs
TLSH
T10152D651AA34997B8CDBE209F945BF53D6F9447292900E44AAFCDA0C01E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d042292855d0d34e4d2a4776fc6968417ff08f0e04ad02fffde8e0e3a76ec26c
MD5 8de69dd44b87188b601783da488b19ee
SHA1 be26d5f5229ab716b9672b1b70b453b3ac7262da
SHA512 c3a1932aed8336de546979e1ca44a6815fc7f0277df1a3d8bbeb4ab751f933d9a96745f0a98603d5018bccee06c87530e4a3cf76235d7642648c279a4852f0aa
SSDEEP 768:li4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dGrohocgaX:li4jeXmWvmKLEu1jacPLZQd9lr
TLSH
T1BCD2093B280CCF7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\8ec65839-8c92-4674-8132-f08e5c7c93f3\index-dir\the-real-index
Size 72B
SHA256 2ab4b80623588e40611d2764cb8352cdb460a8ae5260d9632ff487cd0c723395
MD5 9300a7d3e7ad6c2b2c7f81f84b25c8af
SHA1 68e90ab6fe7e2f78e413e21d2c2e2d45ac6e97a9
SHA512 9e36c03689f31c2699610241dbb9aa831189b48bfec5558ce657b9d28d52763448d4652cc055deaf55d339a7788c44e801074a9d8b19c926d037975edc5c5781
TLSH
T123A0022415810117D15433B8A0C785407778996A87831B0646A18079CC507405151050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e441.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\8ec65839-8c92-4674-8132-f08e5c7c93f3\index-dir\the-real-index~RFe58e441.TMP
Size 48B
SHA256 67d1883330e2687fe383a9dc5e5d72177d9e6d3955e37f9615ba47c7f0b51593
MD5 b0663a6bdf95c3227b4417b4eb83137d
SHA1 16c37960837247ac82112347b80392b1898b321f
SHA512 66dba1f7a683f80d7e1c390fd8f605534d8773184dd46b5538e7625c5622e0e6af2774ec6b7c8c004e1fe39f855e7fd6f1c876745b0979efc6764d68c3919dfb
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\d1590a63-6a2b-4705-bd4f-6b5e186fe08d\index-dir\the-real-index
Size 72B
SHA256 73e58c0953787736f1f0b672c12f090a7970f9aaa802806ff84dc1e016f862ff
MD5 ec11535fdfaf5e802d70a1f1d20be658
SHA1 ac8ab229e1be99fa14f4c65dc89fe5d0493f1493
SHA512 4c592cd482f10562a5987afe180bff11fba725c8a09d3efdb8006a4bd9d27de5b9f4ea9c651ecfc2486b409d53f44e11ea9ad76f12d69792267443b6f19dda95
TLSH
T1DFA002254DC84A12C9200374A489414173554F246152B72775A0505D8C561C86156424
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dee2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\d1590a63-6a2b-4705-bd4f-6b5e186fe08d\index-dir\the-real-index~RFe58dee2.TMP
Size 48B
SHA256 0eeaa13693bfd1fce9636560e890bfdeec144c657c4d73d25507a688522f78c9
MD5 1cd3223954a4cc771cf416fd975d9943
SHA1 9389c2e6a7118b6b60c2735e118db05edfb7c19f
SHA512 703a3045fc49dd604fde4fbe05e4170fd6b7e659c2d4d3e2a12735dd7426e2a80ba328f9de6e0a4566ac91329f1614c6e23090a913965231dc0ed27393be66cd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\df770c94-bb7e-4626-bb34-f66f07db78a6\index-dir\the-real-index
Size 72B
SHA256 6126e11ae48ea1a19c536ffd7e7766ca19b3062679ea6cf0c70a01cd15f3bc5c
MD5 d8c3f04eac9891f196d0ee4fd985ddce
SHA1 cbb7ec6eef27b742c9db7fe9a314c2a8b07ce35c
SHA512 ee96cc1fda05fb50242531b39e7cf0794323755b22297bd231ebe6c1ed383f0e46c1692ca3d1104d238d27d66662363f69f057fdd2828b303e605484905f0888
TLSH
T15EA002B446608003C5C0737854C9128073784D9003D31341A89540759E603684911540
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e52b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\df770c94-bb7e-4626-bb34-f66f07db78a6\index-dir\the-real-index~RFe58e52b.TMP
Size 48B
SHA256 9cafd3626fafa93096a1143f1d8a8bac3ba3b7e642fd4a2b7092a8dd99d2a19e
MD5 14f1bd090f07fa6a4b0a418c456576ee
SHA1 099aa4eed376160ca18ead1820b5a4db98714449
SHA512 448b6ccd170b406b524e267bd574e20b4d4b92b3a11d224a82191d813886c002bae04dd42f6b4900090c65c5eae27a4c39af9fa39df3b4326e9cdd9249370b20
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\f7ad90cd-c3df-4ae2-bfb9-f4dcc8386d8b\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\f7ad90cd-c3df-4ae2-bfb9-f4dcc8386d8b\index-dir\the-real-index
Size 72B
SHA256 6dfd441b6d3c5d13ffa38ab33d5beee599a474fb6cd6e1c5fe9f24c2c9e45088
MD5 e6f99ea9ea577f31933571154fdff6ad
SHA1 f450fe1f485fd2f5425db638b31e31db8c90b980
SHA512 609bb355bca69989da1c9f0248c632cf13f0ba23126d1426d08490471f5b3e26497beffb76ffad3010b6f640e161178d625238f2733c3b77a281d4bd37f76e8c
TLSH
T171A0027896C10C11D83046B5E14242852B9C9D131515D71780D151479C532C0C101048
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e039.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\f7ad90cd-c3df-4ae2-bfb9-f4dcc8386d8b\index-dir\the-real-index~RFe58e039.TMP
Size 48B
SHA256 7e6f7eda7e923d8e5d749ae40cf565c863eafc4ca9857742c370b47736ccb9c8
MD5 446751ef12a14d21c6e7dee8bd3a704a
SHA1 dd59e08d5d9d0c238672906cbdf5544a598df705
SHA512 889799fe556637bed1125a64813746c0dcb0a4ffd031dbba91fed31d172398800adc882a21268ea470bd7f33118352bf44d7257ca647479171f7ea3e304b3bc9
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\f846fd03-ba00-40c1-97f6-d4dd4aa7cee5\index-dir\the-real-index
Size 72B
SHA256 32549d63add0b83f6451aa2990e7ea8550453d423fa70a36b7548eb4378a1ab3
MD5 e9695962422d99f473f8b0e7e47c3cb0
SHA1 6b5b8a7d5eabf1a15dc0e438dc2d6bc950f47612
SHA512 2a72534706fb70c1538ec78d8dfdb2a2d1723c3580d98961c4bbcf694bd26b6ed8e8985b0ddc08a2cc0d76d1247d91cbb94899e6a6355e727bb4ba4348e3abe8
TLSH
T131A0026401805113C904037869C2428533385F125717035144AA4475CC957409111510
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e450.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\f846fd03-ba00-40c1-97f6-d4dd4aa7cee5\index-dir\the-real-index~RFe58e450.TMP
Size 48B
SHA256 d479e2b3dd836a8086bd116530022383c6a6abf0cc6eb101c4632dd59c37fd52
MD5 663279608b65f49db55f20f22b47a348
SHA1 9ba4fa651d7ad052595d03ccb5f4419f4870f873
SHA512 9f712e60267394c54f6c77c150e808c423dea731f94f025f28b9708de6b688f2861c89b7d5e2051bd94b0ec7977e304ff329f1c6ff59c154433ee146f325a293
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 277B
SHA256 b9163e9de915434c080d97b1dbac2c79ea819255565d98050b7af6334a8e03e3
MD5 65bb1de2bd082b3c0decb9e1cd72704c
SHA1 fb95faa1c2a99fd8c6c8d4e0f9ac1047d930ff32
SHA512 f5bc15906b98a0bdf2db180294f652d138cbb03389684a12c510f958be1c48afdf3463a5aa090e7551fc6143c03c01e025d98ce7d0dba1d837bf85a8faf1c1cf
TLSH
T102D02BC326D062A427164BD0A573918D46067DCEEC94DADD982434064830953031E6B3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 418B
SHA256 697c875f8d71fa2caa4668b0cedfc2a0405b6c7edd162e790384408c3ac05807
MD5 50974c6061bcc7db1dcc8b64c60836ec
SHA1 1ab5dd898b3c21813c0e9b82718c2b3acb4b9286
SHA512 6cac47f6a04eee4d00c02969a23bcec0954c2f3b71ffd68bebf2f372c8104bf57352c415e9fb3904b5f486692d9aaebbf978afe029efbf7c6374206f970a1307
TLSH
T12FE0ABD336E026A8320D8F8064B340CE864A7CCBBC84DFCC5824B0045C309434229BB3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 499B
SHA256 4d3871eccd1404f7f25efe6bf8003a6e790829782abf54be0ab673b61426e14b
MD5 d12deeeccb8046944141690175d8e3ae
SHA1 0d0645d87cb8ada8beba26cd7dd02aa431bbb95f
SHA512 4f968bc6421b6f39a8ea4f58046a09c0756098ec2f6a63c5206860b67c21bd85e91dd9da289335c11c0cdf6a5ec9b47e385120f2ed479966bd91deb66712fa48
TLSH
T127F0979236D06AA8765E8BA164B7618E46567CDFADD0DECC687470094C70E43822ABF3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 622B
SHA256 b2cd00dd46a2d45b24e3da4cbb9e1e4b589ef0a4f42b665abf7339a424bb6391
MD5 5cd7ddd8b628a7d54461b3c9937f32f7
SHA1 25bc8a9343646460fcabce684a8a55e1e1d60651
SHA512 6ff56d9c69f089225400e1f5a6361e88cf538a2b84e92eb71ca8c9767b22273082c163973937314b54193fa3ca36663899e04b75aa5d7bd3065d976f6874acc5
TLSH
T1DFF0AC9123D15B74766ACF9160F6218B06463CCF6C90CFDC187174089C70B4782297F3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 690B
SHA256 5fc4b4ea264dcb2ca33b9bbc8414df236c8218f3a1a5b3b01cbc2e8cd5200c5b
MD5 22bb329d6fc9ec18a8795b6b202ca9ff
SHA1 9ae629d94ee2683cca5b366282171022d836d08e
SHA512 f905f591be9d5ee4d147b3aa378efcc77353dab55956d9cb7b4e8f1735f673e11cf20d821b7c5782d30192849d8f5c1bb44c78aaf040a8f1d36c99e139b807b3
TLSH
T10A01F99033D25B70B26ECFA124F6648A4701BCDB6CA0CE9C187470099CB0A87821A7F3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 786B
SHA256 f999bfd5d2feb918a72a41719104611437e1b451857c72b902a9a95da96417d4
MD5 29016086b208ff42a7cd436033796141
SHA1 7648427e01c2485ecde57bad233d5ef91e3f6fa6
SHA512 fcbdba5dc453d6b280974a58c21becc017b4ad7e091c67557bf5a12b1693db2e184c32003b755c7e021163df0192185f3a35a7793367fdef2a8e61bc64951c4b
TLSH
T17E01D08163D25FA472AE8BD024F6658A47417CDB6C60CE9C58B870095CB0A47421AAF3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 857B
SHA256 f6333620af4da53907844010188f11743e4a449a88e16396edb683070634ae69
MD5 52fce165baf292263701e5ee03eaba50
SHA1 e0de76d81359e12ca14f1142b5c36ff07969e403
SHA512 797285f2ca9fac5534186676f53eea1b16b1ecd5b80db2d8d71724643696049c2e18cff334bf5d7369e0587c87503d017f54cee42f492821a5529dc233943d49
TLSH
T1C111C28133D55FA472BE8FD028B5358B46417DDB6D60CE9C586D701D5CB0A4741067F3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 935B
SHA256 fadadbe13f9c5c4122ed889e9fea1b46117c9c4333c3f83a949406a06d592e75
MD5 5f6948e01d6775e5b78f5ce4c33681d7
SHA1 e099536e809dd791f71171d9ae987ace72b8ba15
SHA512 54b27a944e97223a8c60ea364aed457ccc6b7d4350eb3ab05162aeaeda2e63b0cb8d2018b023e1d1d6afbe10882721d71808e905b98bcea7a7fc15f562f7cc7f
TLSH
T1FE11DC8133E15FA4766E8BD028F6659A46553DDB6D70C9AC186830295CB0A4242166F3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt
Size 929B
SHA256 2a0f896d2b53cbdfed9b2edfab29daa6f8cfb90c29ac2061a29e941f7f5b9201
MD5 73d7200ed87e7870397c840e25863552
SHA1 60eec9e85429d07429ae9cb09ccfbbd68c04495e
SHA512 40e1aa9fde257034de184895ecbb63919d09f258f420972e5bd856d697f807b18a042df5a32ddb799f2028267a8f738cd345a2ab05c74d2b028375abccce4291
TLSH
T1ED11008133D59FA4766E8FD028F665AA46453DDF6D74CE9C0868242D5CB0A4242177F3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe588eae.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8616d55751cbece8c4c7c39a9215797a93c27e44\index.txt~RFe588eae.TMP
Size 197B
SHA256 4911d13db3a99bbbd4d585e25ae52dccb0a5625aa36c32e12f9f6be9c9f1cf53
MD5 3f88d01d78ed54c510473338ed46b210
SHA1 90918281e7446c2e0ddad5159bba313b4ace745e
SHA512 2ffde418d5cf97f54d86b179f2ac8a0d4c17cb243441451be19f5213217e38970ef772d515272d1c5622406e5a3186da31bd033170963591323be1771e6cfbb4
TLSH
T1CED022D369E022A82B010B81E8B3048E8A0A7CCFFC84CEEC8C2430410830953421DAB2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 3KB
SHA256 dd2436b155b581839840b82f4d29fdc177b8a255454de74458c324a0abc71ba1
MD5 e3af145cad0dcf0310461f567be8933e
SHA1 2338bbb83a8cc7951776d5adb23fd58ee4371ce1
SHA512 7c5d721ef534554223e348f1237798ca19ead5706d0c9ea078884150692c386181d26896c755afa26d425d122f2e35f28c24dc4f64071404f52a8311b428dce4
TLSH
T1B351FB8E4897D9BFC58845F5C4F542513234006EE607861B00ADF5B43A57F189A272AC
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 30ae3ca3c0be4ceb461a0387d7d9aca525db2d6d7b025a9b119043a958fb0262
MD5 d38816c8aed774315f860e476d0878df
SHA1 5d44242b755a1c31adf97c171e154243600c887f
SHA512 dad72e541105376389b66bb82cd7b70925d2238d99ee67f0c0b17c6d7fb14e219f5f56f8b1cd8c7e3fe1551a2c63fbe52016754fd0564d2c4fdb76ecd5b6b33f
SSDEEP 24:Kd9f4LiandPrD4bf+4fP8tayd6qm4a2+NIjQmKilhaum1EY2SmsM18w3yXYlfQD3:K0CFI9K+IgXyp6IfKP6AbiI/KLygv
TLSH
T108911E4271BB52413C7F280CA664971A1B8271633518B86B7BA840B71F77F684DFE8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b401e810-d257-4f6a-b11a-16c23758d8f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b401e810-d257-4f6a-b11a-16c23758d8f2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 f4738366678c2c2334130aca8bf0c4f2877840b636eb7f256ef31e41dd665659
MD5 740249a2c2ff59596764d0982c54998f
SHA1 58066be0be5abf3e1fd1b4b765ea0e48e948d329
SHA512 ea557e54384bee91a3cf90156b127bbef4d7e0b5ceec8cf26d782929ae826272a0dcff84b2c1eaa3fcad99f0ea90a16fef7c338d22e6764a51be994b89d66e42
SSDEEP 192:KLsN6PQk1L5ZEW+QmiU1DM/t4H/+jV0jzorWYWX25cFTZq+c8Fib:osN6PXINEif+G8WYWX5FzBM
TLSH
T1C6421B75A868AC6B5DD3B646F04B32134FF8412BDAC56F94DADC2B1D00DF2ED130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b7e3d353de48bae1f5e106fe1b9287bb0e02c357570b3d3e3b9c0eaedf7d3faf
MD5 afbd66b737e9cf8c953b3dfd2125c933
SHA1 aa88138dd4078381390b0bafeefe4642a4505550
SHA512 e0c82ad6ebb05fd6af9dc3f78a684450177714ba854ffcd6e197205f256b5dfe597dc457463a6cc3cfb9433312667d950276a1be8eaa6ca25034c250867eb14b
SSDEEP 384:LjiFiZcIjsNC8TUNTUlIlLXINIif+G8WYWXbFzMsRnlYrBS:qFQjXwgtzqxJzhn2NS
TLSH
T1E5A27D738C64997BADF6AB42F44A32138EF49077D9C1AF94E6DCAB0D009B5DC030AC65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3fdc3d39170d8d15f16c11ec1c41c8b0d0d6bd8f0dcaff26c449f1e9b51cc990
MD5 92bc21ac6291413289ed5be94b0683a8
SHA1 2d4edfa6c07825944c19d59bf1f0b12086dedcaa
SHA512 0e06e408fe52e3f78198139c7a5876753da9e40010a5ae1726476346751dffdbc20ff41b2a13b0fe9fd6f57fdb88d34250a118d3628aac3072b525772f8009b8
SSDEEP 192:EONC6hZ0QmiUyKM9pc/+jV0jzorWYt5wOZOiU6:EONC6oapu+G8WYc2lU6
TLSH
T17402E935A8686C7B8EE2AF45F48737235FE5112BA9956F84DAEC1B1C00C779C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9cedd52a09d6796c6dafb3b378f451d34af3a99628bbeb06efdc1d8c377c8e6e
MD5 ede767619ac01923face9dce1ce5b7f8
SHA1 c6eccbd445b0cc3da3f6952afd2b1877b958ddb0
SHA512 3043ca725971e0cb0813a2641475e7a5fc45bfb91c78939d4dfb0461e190ee2401a10dbb0fabf9265678ed6443842be57dc3756df8139756bc32c3069fb18760
SSDEEP 384:FZcIhsN6mXINIif+G8WYWX5FzMsRnlYrBS:9h4zqxTzhn2NS
TLSH
T16C928E729C746C7B5DF6E642F48A32134FF8903BEAC56F84A5ECA71D009E5AD1309C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ffb605ef317070f451ecbd9c938ba459476d356e0f2df9acd54b2504ba2c8fa2
MD5 76855955b0f51331fe9097afc8d50839
SHA1 78b4edd4c0453f65f50ddd71dae150093b84bb9b
SHA512 1ed5d272b29d684c26e16030ba3eb4c7aab0ea6073728b5518fc577477bdd5a8638ad9357a765621c674c3489e6e54cbbae59c25d48a559f8d2432810339b624
SSDEEP 384:TSZcIhsN6LXINIif+G8WYWX5FzMsRnlYrBS:0hVzqxTzhn2NS
TLSH
T1A8928E729C746C7B5CF6F642F48A32134FF8903BEAC56F84A5ECA71D009A5AD1309C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8668a6ed3f2283b2328ab21b894f1b5d908c77d17da36fb3e2a4433d7d9bc36d
MD5 cb6fcc3d468bcb6a5f85eb8d3cc039e8
SHA1 9779f297b653ddbab7e329f23960337b56e789d6
SHA512 e8fded396e259eb0e866a08f81097403e83b745b6968e0e41878aa190f69fdc1ded101a3dadfe2aa6a268088cc6e4fd8fd5d03d5835c99cb5a9fc7b32ca2260d
SSDEEP 192:oONj6hZ+QmiUyGM9+c/+jV0jzorWYWX/5cOqZq+U6:oONj62k+u+G8WYWXy9zU6
TLSH
T10112FB35A868AC6B5DD2B645F48732134FE5512BEEC57F94DAEC2B1C00DF69C234AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84bae49e-08ed-4a0c-9907-10604f5b7e87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\84bae49e-08ed-4a0c-9907-10604f5b7e87.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3ca0da153d47d42658f73d6d97b7805c67f442c921355beb2094ed3f473480f5
MD5 3217331bc08c3551f0b6d5dfc0bed46e
SHA1 12aeb8d9e600518373a4e88605109df5fd322e7b
SHA512 5c7668dc1250f09e404770deb2b1bbac57ec724cb71e81f732427b75447c956cb655c5013ab888d0c8a3eae000649ef8da6b5cc62b53fb724297a19a487af536
TLSH
T1D8410958B6EA1148B3B37F569BF6A86D847BB8372E0AA45E00010E4F0627B41C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download