hxxp://farfetch-shop[.]app

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 11:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://farfetch-shop.app
Sample260716-m49nfsey9v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286733492718659"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{14B639EA-770C-4201-9E65-E4677F5A404B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3112 wrote to memory of 3984	3112	msedge.exe	84
PID 3112 wrote to memory of 3492	3112	msedge.exe	85
PID 3112 wrote to memory of 5052	3112	msedge.exe	86
PID 3112 wrote to memory of 3492	3112	msedge.exe	85
PID 3112 wrote to memory of 3492	3112	msedge.exe	85
PID 3112 wrote to memory of 5040	3112	msedge.exe	87
PID 3112 wrote to memory of 5040	3112	msedge.exe	87
PID 3112 wrote to memory of 2520	3112	msedge.exe	89
PID 3112 wrote to memory of 2520	3112	msedge.exe	89
PID 3112 wrote to memory of 2520	3112	msedge.exe	89
PID 3112 wrote to memory of 2976	3112	msedge.exe	90
PID 3112 wrote to memory of 2976	3112	msedge.exe	90
PID 3112 wrote to memory of 2976	3112	msedge.exe	90
PID 3112 wrote to memory of 4644	3112	msedge.exe	91
PID 3112 wrote to memory of 4644	3112	msedge.exe	91
PID 3112 wrote to memory of 4644	3112	msedge.exe	91
PID 3112 wrote to memory of 4392	3112	msedge.exe	92
PID 3112 wrote to memory of 4392	3112	msedge.exe	92
PID 3112 wrote to memory of 4392	3112	msedge.exe	92
PID 3112 wrote to memory of 2336	3112	msedge.exe	96
PID 3112 wrote to memory of 3988	3112	msedge.exe	97
PID 3112 wrote to memory of 2336	3112	msedge.exe	96
PID 3112 wrote to memory of 3988	3112	msedge.exe	97
PID 3112 wrote to memory of 4532	3112	msedge.exe	99
PID 3112 wrote to memory of 2192	3112	msedge.exe	100
PID 3112 wrote to memory of 2192	3112	msedge.exe	100
PID 3112 wrote to memory of 2192	3112	msedge.exe	100
PID 3112 wrote to memory of 3516	3112	msedge.exe	103
PID 3112 wrote to memory of 2860	3112	msedge.exe	104
PID 3112 wrote to memory of 4876	3112	msedge.exe	105
PID 3112 wrote to memory of 3564	3112	msedge.exe	106
PID 3112 wrote to memory of 3564	3112	msedge.exe	106
PID 3112 wrote to memory of 4912	3112	msedge.exe	112
PID 3112 wrote to memory of 4912	3112	msedge.exe	112
PID 3112 wrote to memory of 4540	3112	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://farfetch-shop.app
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe784bc188,0x7ffe784bc194,0x7ffe784bc1a0
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,169450007566412066,2892299434616179587,262144 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,14961441951350602127,15963290154400988154,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,1365330547637938278,16399059452565610644,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,15317013208847803437,3037363627435784564,2097152 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,9172406803771982033,2388892187339371197,2097152 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,11813045125765711584,4162749744710989152,2097152 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,17592762649578392179,11566770496983868314,2097152 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,4859098567803828484,15076762596816745592,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,1648710645380432560,9537743543343836966,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,10168501983120139938,5872305030721153747,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,10168501983120139938,5872305030721153747,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6232,i,18180767082714065019,8827994990659745481,2097152 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,17372916370984228843,16272194735265217412,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,1260509246641396959,13302819322648811575,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,13070697548589858630,12786924205597863069,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,6179244361577223072,14878907340552125590,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=1044 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,1652890828147288223,1157407363426053683,524288 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5212,i,6027018845117610856,9199957250104789282,262144 --field-trial-handle=2360,i,5017583109582016335,4895607938896507109,262144 --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec09ba5da501666cac506a8e17a37a0b19f2d9712ad11c5ba4ad14b3ce62e7db
MD5 e1404f4875306f456785e26a92aed547
SHA1 053db7b2ab0b6a59f2b44973d8f1751505d230ac
SHA512 a6ccf97239d40b1773848dd7f6ee31e91a3f8b90e05f43c6d7b13ead4ba9896a88cb2a9ebb06880b10b5223c52e29e192ba9e6e80528cece8415c817c164e52c
TLSH
T137D09B203A88F441CB45017195049F553B2654542057DA0BE165585D5CA51D493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 426248cef68a6f21ae904c112b9bfc142860e09a9883834aac2351bde9c75a28
MD5 0c81c09cb8566dd9bd38beb5be5350a3
SHA1 ddbbd935e2e3653a91d94052066afe25e4fd3b13
SHA512 009a990bb8a005eb22dec53b65b6fc615f4c1be194cc3d8b7f67f7b3f2094b402bf5a20a7854964663f6f29804f57f49f23a4ff1cfde205cdfed596b2e71d9b9
TLSH
T1D0711DE8C0C20783E32440F0F2D11A137D328AD65A435EA72E9044BDA9D77E1F5BBCA8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594c03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594c03.TMP
Size 3KB
SHA256 31d1f4074e329f6d5434f1d8f5a3fb3d37f3959380232d3ff6415a77f0cfaaa8
MD5 f2dedd06d11f2cca1a7efaac28d0f959
SHA1 3bc46a0df7a3ea47b318c2c41dbdc88b3338ba88
SHA512 64491616a041b18de76326a636d90c7e59c8a1eee37b4572f04bef969559778325f254cdfe02980941931fcaa1911f31460f3e8cba39c798acb19da182f46e8f
TLSH
T130612CF4C1C20787E32114F1F6E006537E328AD65A439E662E6049BD98E77E1F97BC88
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 586030432bdf280d352e06e57266573320230380145db20e45aace41185eafb5
MD5 acbf9f7b0b5e7a64254fa7371145256a
SHA1 11a96bc7728a2d6265aabcad62a07194c80954eb
SHA512 ca81f905ef4b0f207f0e395eb600250c4abc1f3f9bc9df0826fc3394e7d3291b560ba4bae64d1f36eb2f4fb2f2d6bb6ba5ed4f895c0de1967e353b867e721cf3
TLSH
T17E518CF3C2E8415ED94256F06B187A3BEE2E095943283D55CAD8DF8ED3F24B1E10294E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7b7e5202435484bcd9b8c7c48894200eb44079921720bf5352cf0f07b6d62f10
MD5 d6af1ae88d511b367a473d6d12e72e1b
SHA1 40df700544f1e0652ef4939235cdcae9dbfc6b95
SHA512 c6490a6d68b6a0ed8fd48e1e2a942a68d9a0fcb463b5e23cccb538223e2fc19ac219762b49dc8cc311092478b8523d43fccf7cd9bb3a9905a9de110b36f1cb4b
SSDEEP 192:sxZARyyM/jK1Ml8Mkm/fHsBmaIdpJHL66+WNGYLlccjIgrJ:sxZA0Mm/fHsBmzJH7GA9
TLSH
T15942FA126A349977CCDBD209FA45BF53D5F91472A2940D48AAFCCA0C04E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 67e66d5d5dd00d78290d12cd79fe5a6d2f6c004a5ac703d8cdc2b51ffc14edd6
MD5 a0beeda2857ece68b2101a312fffe4b8
SHA1 ab1002cd308adcbb4a99ba981ff01a949534497b
SHA512 ec66b0365e92839d4e69cd06381a6e5fc3b7bf34dd3a99c691a88b2ff10d91a7283e38d5f6f6710e17aabf54585024c93f25a4b719d7d6fe878a685f435a84d8
SSDEEP 192:sxZCRyyM/jK1Ml8UQFkm/fHsChnIdpqv9HW6+WNPKx/YLMHcjIg5uJ:sxZCEqOm/fHsCho4HbQ/aM
TLSH
T11C52D9526A349D779CDBD219BA41BB53D6F50472A3544E48AAFCCB0C04E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 87ca05fdd092f255fc8b92d6b3012ec94a1215b1104c0f4fe7ab98731c937e24
MD5 667fcbbb2e73031dc0d44740b8c40524
SHA1 ec0d4849c0ef7c123ae7e3722c89d4973703e9c6
SHA512 00afe1d31d122892f95f566383e2b03832fc78fda5f9e4dacd1a2736855eefc42d26a1c7a0c39446b44cf53bf15d9246cfb36386cac2f6d8c6fceb6355770a47
SSDEEP 192:sxZCRyyM/jK1Ml8Mkm/fHsCmnIdpMv9HW6+WNPKx/YLrccjIg58J:sxZCEMm/fHsCmoyHbQ/ue
TLSH
T14A52DB126A349D77CCDBD219BA41BB53D6F90472A3544D48AAFCDA0C04E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 765274b60844608ac4a534dc2dc8ba0d6368220008c08ef0de1f64929b683284
MD5 26fcf53bd7d013dcfcdac16393c6680b
SHA1 c63d7267198e79a3bf21d30896cef9c026aecd8f
SHA512 36fc7599c5ecd4e0fb28e67ec3d87ab5013b0d0c8a4c638e5fad790ca63817cd734c52f74f03ff79cc6fe7225da7b48f0a6a8fcd006afe07909b9382262602b1
SSDEEP 768:MOs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNfroz6:MOs6pD1WvxzWju1jahILIsNMz6
TLSH
T1C4D2FA3B680CCB7E4F841E5CAC2A6F967DD801CBAB98899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\65385a391d342e9110c44fd55289c526b2e12cd5\a6cd4cd8-9435-40a6-ad39-4a02059d2e85\index-dir\the-real-index
Size 144B
SHA256 b7fa06be9177f55f5e97456b7c24fad3f0f8f633daed87541f6a682ac7914bae
MD5 781d9612183e9a987526abb72f5cddee
SHA1 0fb437d8f8b8dfdfa5b3a7bd211baa46e6d4ca91
SHA512 d0397e437f55b98ebcc7c5281a593e656f88b3ebe62b3f5d0532f17120c1e21cbaaf53f03bf2f070034d1b3f77c1952aea0353bc9116655d0d6c15b6dbfea98e
TLSH
T1D3C0927540650055C8655272800B86C122201810174B0A2BA6DA10A59413A8C92A201A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5937fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\65385a391d342e9110c44fd55289c526b2e12cd5\a6cd4cd8-9435-40a6-ad39-4a02059d2e85\index-dir\the-real-index~RFe5937fe.TMP
Size 48B
SHA256 b335647f7922038ee47641ff61c3da104ca3cfaeeafb9ebb95e24419b4f721fa
MD5 16ce775961360457d7f5ed48401520fb
SHA1 913a0d7267b0394caea049fc5f3c38d379452851
SHA512 e1a7c8e671ef952bbd382fc85b74e7e67f21a46ce38fef52a2fa5402eaffe081d35c9a58d4fc12d68bc1d3d50d60cbb622e3a7f62884ff56aa816762f16027dc
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\65385a391d342e9110c44fd55289c526b2e12cd5\index.txt
Size 178B
SHA256 0894178dc3ca7b5f92c55aea0fd02be80a2bd10a8c62c76617c196679c0965c0
MD5 d157b2a692718cf5a765665d03217e4c
SHA1 b8e7371f42f709b1dce7e2703928e61e64f40351
SHA512 d9ccc68bd9e0723963fd7954e75473c717db4c9673dcd8b40dd91c459a8c6eef19fedcdbe80b35f510ca269867e1c725e8a1aff36b3bbe3884889d2411287548
TLSH
T1EFC080FF48C21607B6EBCF611359763D95271DDD0A71FC888544E4FC0429552B989D44
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59382d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\65385a391d342e9110c44fd55289c526b2e12cd5\index.txt~RFe59382d.TMP
Size 183B
SHA256 5c12e03e513562eec27ee93b5d504bba663dd0a2396e8ce02268a1a5b79e9b42
MD5 25045021745dc2d2f74b2d0f77d4b9cc
SHA1 02c70000f56b9f42c05324ea2e048ee623e538a7
SHA512 4cdd3f3a0595850e332642a3091abc11beaf0c6fad96226f41429b6d8d5f428cdd002634822f3cf30753e6f377a0eb49786e761c4c1d5d5569b9699899876876
TLSH
T145C0C0FF04421607F7EACA510209312C812B0DCD0D71FC888140F4FC04394D2F989C00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 001974e4bd81a49d8d9d954fceddaf6e5ba5c631bc824c335b6cf78d40e7ac0c
MD5 ba6f94dc929f29de3886e2b05c359581
SHA1 735a457554670cb9191c237921c9b16631220da9
SHA512 8278c66cbff92a7d0bc0e12a3afe93554a44f0424cde147feea5aa2ec6f1fbc88985294be2ade0bbb4f23152e1c93cdfbff6e11f4ac2ad3af7684ac7d5a06f83
TLSH
T182A0022411CD5812C51016F01C89918F33A148954551034544B8D8BDAD93250758A1D1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593771.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593771.TMP
Size 48B
SHA256 1990925d446b23c70a3b75a04f2e5752366258bbc92d3e2fa3541a0ba2c1a524
MD5 79621f04a46640cf3cd77357251e8948
SHA1 950aca0d5e18df19b8bd5506e1124f35b094a9b4
SHA512 64c46ca2a36bd4b5cda89534d5b2044cc4f30fdcbc269943061daaf53b726ddfd460ac0308c75995057da80ff2217b898575bdb0ac8dbeb4e774b19383dd89e0
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a33da194abac1fe146113b37c28f03aa96d20670e104d9aa86a2139f4eef9db5
MD5 108b06efc08b1f776acdfa6e1f09d5b6
SHA1 7210d49095b4b6f4d47f957c6824638fcca9ee5b
SHA512 c63eb141eb400b11a1549104eec23d814f7ba83bfd39d97d5bda9a29ebef8b6bb2770dc60b170777b457521286f02b088e82f61df9f00d010ff86702ee37652a
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyqwF0AO6egaCbzInogKA1oGgk4whLmQtQ:KUAAKtePubCKs8e+nCKQULz
TLSH
T19F91E413327B03022C7E6D0CD75597678A42B5A37068A42B3BED40B65EA7E204EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2cf634a-0d2e-4caf-bfb9-effc868b5b5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c2cf634a-0d2e-4caf-bfb9-effc868b5b5a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6a595575a07c9c5b4a0a722df4f2fff7cd867a85af893dfa929539bba0dccc4a
MD5 6d7315916764c076ca606221a5674019
SHA1 22c7a5dc0f9342977c55f67b8749fd94fba43092
SHA512 4056a884640a9252e28012f5ae841f5c46decc33e496618e8925e3aa1069cbcfc150ee8e5f1762d980c718fc21f3c73f2ef57de19250b4bcdf4e407c3bb790c0
SSDEEP 384:ftNn/s3n9SfsN8f8XSzA4Ua99dFMsOMp9OObjI9G6w7QG:fj+9Uqwl9DZ929Mb
TLSH
T197928C31AC289D3359E39655F58B3A179FF4817B9B892E88EAEC5F0D01DF6BC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f3b12a02551570d8e02856ba78cba08b52539a6924f850c7c75973afc88279a0
MD5 780d9cfad208bab4a1002eb4c2c90b28
SHA1 a77e3931c588ac93547cc7ef289e2b711d580192
SHA512 321e6cc8f47f592159d5b9040d4c483f7779ab1614ed43f7996cdea8070ec72a0bb47b3d86e4685c30c8fca5a8faff8286fdeb89c6fcf19b240a4da97a5044ff
SSDEEP 384:MiF1tNn/s3n9SCzsN08TUNTUlIlK8XSzALUa99dFMsOM49OObjI9G6w7QG:3F1j+9BpwgNwu9Do929Mb
TLSH
T126C229F258D78D36D9AE4B43B77E2D038EBCC167B5856A44B7984A0CCC9A1BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5d5681228930e584e66afe6582e66672103246635b750cb22c3c5e456a611e1b
MD5 ece449fd51739e88059e10a8ad9a5f36
SHA1 a89417daad4c8eb6b0832cd1efdcb08b53877281
SHA512 cad2386a783c95a5ef0cf14cdd81921ae915a0eefc15dee6aba6debbfe0ec3ea4884b5e35c6bfecaa8ce03ba8f9fd0544fdf808dd2ee35e474caec82698901be
SSDEEP 192:qONC6O7+3hQmiUy/hGttb0b+FdFh2SgG1PU6:qONC61yGt99dFMEtU6
TLSH
T13E02D9356C786CB79AF2AE09F68737135FA5112BADA52F44DAE81F0C00DB65C2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 030179f12029adcd532d004d67f37c3a1397c1a5a287af951dd06150a7de72be
MD5 614394ac59d5bd7b80136a48cc27164a
SHA1 7eb0cfc3b25b712926379db1c1efc0132ff78eb6
SHA512 a44f67575a9816ade2597b4899d2e103214758c3a8026adfe8277cc95f8da4e3f0d94b679933873788ceafc010c9c620d837ad4e54afaada0507555e9bf9cb65
SSDEEP 192:XONV6O7+30QmiUy2h0ttb0b+FdFh2lSOh2lycNFqPQU6:XONV6G50t99dFMsOM19U6
TLSH
T11212F9316878AC675DE3A545F58736139FA5422BEE8A6F80D6EC1F0C00EFA7C134AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 52e9367508c8f5eb0fafcac3ac9a2871cd5bae8719475b8fd66b69117e70b658
MD5 658cd5a47cd91149e227a9224faa9429
SHA1 df5f7a26ef95caf058a76c3789c38fbb9ade3a29
SHA512 71ac8e609e7f2a4602ac9fa5b03df212ab6d266ea367cb36d5924c3cbe582cf42027cd68e184421b791b31d9fbf90aa34a3c3abaf4f8ca1be30ea6881804869a
SSDEEP 384:StNn/s3n9SfsN8K8XSzA4Ua99dFMsOMp9OObjI9G6w7QG:Sj+9UDwl9DZ929Mb
TLSH
T11A928C31AC289D3359E39555F5873A179FF4817B9B892E48EAEC5F0D01DF6BC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da34b499-a8aa-4ae4-a8db-10e9d0d67ee6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\da34b499-a8aa-4ae4-a8db-10e9d0d67ee6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6d62bf02d238cf6220c9a5a6ad189bfddf940b08a021e45707bf5d33447b5e8c
MD5 0be77f7e5488be6703418b7cde4fdd87
SHA1 e891b2df0faaf6baaa1a548bd1bd599596cab439
SHA512 ae9b291abf794d03c06fbf2ce93bc24591361b234188cd5ca96becfcaed3ab862038f1495dffb7b9a35873e1df4fea2db1a2aa899cee48c6668006a6fa0f36fe
TLSH
T1B741C899BAFA1148B3B76F56ABF6A46D487EBC772F06955D00010D4F0A63B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download