53a684465b5b0d3e88d267c1b6fee8e6ac6c3b7963e7a9333576a70dd6f1d8a8

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pages/reservas.html
Size 1KB
Sample260813-ppynrayxbv
SHA256 53a684465b5b0d3e88d267c1b6fee8e6ac6c3b7963e7a9333576a70dd6f1d8a8
MD5 60271d563f14391340491e4ecb812b68
SHA1 568109875f387e4b84f8662cb2413e82bebcd599
SHA512 f39859f8e592b451857e1fd1d4b660edf2fb730603d3ef5b2d27ccfbd97482b8afcd4100a0c43aa589ca57d141884c5c75169ef11be419c2bdb2f79855d1f051
TLSH
T118315345868C6E7F511B14CB54CDA60870EF8D318A706492F97B59B1DDD0E48C715C7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3748	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310979055765131"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{805EDD46-7DA4-461B-B7BF-A874DD1B2AF6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
956	msedge.exe
956	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 3412	1140	msedge.exe	85
PID 1140 wrote to memory of 3748	1140	msedge.exe	86
PID 1140 wrote to memory of 1120	1140	msedge.exe	87
PID 1140 wrote to memory of 1120	1140	msedge.exe	87
PID 1140 wrote to memory of 1120	1140	msedge.exe	87
PID 1140 wrote to memory of 4196	1140	msedge.exe	88
PID 1140 wrote to memory of 4196	1140	msedge.exe	88
PID 1140 wrote to memory of 2332	1140	msedge.exe	90
PID 1140 wrote to memory of 2332	1140	msedge.exe	90
PID 1140 wrote to memory of 2332	1140	msedge.exe	90
PID 1140 wrote to memory of 2972	1140	msedge.exe	91
PID 1140 wrote to memory of 2972	1140	msedge.exe	91
PID 1140 wrote to memory of 2972	1140	msedge.exe	91
PID 1140 wrote to memory of 3424	1140	msedge.exe	92
PID 1140 wrote to memory of 3424	1140	msedge.exe	92
PID 1140 wrote to memory of 3424	1140	msedge.exe	92
PID 1140 wrote to memory of 3848	1140	msedge.exe	93
PID 1140 wrote to memory of 3848	1140	msedge.exe	93
PID 1140 wrote to memory of 3848	1140	msedge.exe	93
PID 1140 wrote to memory of 1712	1140	msedge.exe	97
PID 1140 wrote to memory of 3496	1140	msedge.exe	98
PID 1140 wrote to memory of 1712	1140	msedge.exe	97
PID 1140 wrote to memory of 3496	1140	msedge.exe	98
PID 1140 wrote to memory of 1888	1140	msedge.exe	100
PID 1140 wrote to memory of 3940	1140	msedge.exe	104
PID 1140 wrote to memory of 1920	1140	msedge.exe	105
PID 1140 wrote to memory of 856	1140	msedge.exe	106
PID 1140 wrote to memory of 4528	1140	msedge.exe	107
PID 1140 wrote to memory of 4528	1140	msedge.exe	107
PID 1140 wrote to memory of 956	1140	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\pages\reservas.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb8646c188,0x7ffb8646c194,0x7ffb8646c1a0
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,1085025209512827748,9609378728440326503,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,9879627132225100773,3746929972226744072,262144 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,3730611503327566126,10365227941242952339,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,800707242212570095,6521285497883416470,2097152 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,15234446683390164540,9150593567984024407,2097152 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,2887108448289389637,789015185133798956,2097152 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,16907512113497227393,3059040468250420923,2097152 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,461775959682481131,8517326909968438829,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,12680854434810700461,3064181104254437221,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,117608358939510976,2259079813337788532,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,117608358939510976,2259079813337788532,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,18289004944656725183,13152202853070699751,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,5077922171480200758,6974429446308386729,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,69195987211954499,10170071164245314609,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,16485900529024941898,16633372180643138617,524288 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,11741774175543538572,15701868310920371771,262144 --field-trial-handle=2328,i,13207452773954845576,8441345468229367566,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:956

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dd93834da96bc48df415033553eedf80bf463830fefe71342451e6e1b32c7df4
MD5 4c06f574572eee1673951f747ca76821
SHA1 df69bd0102f053e4561f41f282f3f7737318c3e2
SHA512 c1877b6b3b78a0b4cfbfb13ce0642e895f7d5d2c05e2baa9946f294b3c71b3059f0ab80b410a2b047739a8cd8e0e70440e81f617957ffac4b11ed7e9d358fed4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Q:fwUQC5VwBIiElEd2K57P7Q
TLSH
T1C3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 907b7367a6447f7f0fc4dbcd8886344d03c63467fb68b82730c204250094a1b0
MD5 bc19ba0b8e95a6e8b7791731bb5b804c
SHA1 896cb4c0dd63ed8b15c09ac9500b8b133d6abbb0
SHA512 9b3cbd060e58b0a4dedcd119aaa556fc543b5caedc6de1c4c9615472a38085969c4aa55cd66b1fd80e2732c2776386def9fa74dc895d198830b68b5b51ffe8f3
TLSH
T10471F80503954991EF9ED6F3FEE91005F663D6892D0BFD65228068FC1C16760A92ECFB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585d4e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585d4e.TMP
Size 3KB
SHA256 aff9c710f9f736b711267acf60683d09341e9e4575ab4d5e59074bf82020abd1
MD5 45454db13e390b9cec99a9a9d78fb332
SHA1 212bf3dcec7dc8fe68b4e998c8d1c02560ecdc1c
SHA512 867a3f2bcfbf4e6cfd78f23162e7f023b12c64c30211c21084dd2713403c00889109644f3a9747d536f3a8463889c5583e05e37fb73e3287ab485ea6daa4d00f
TLSH
T18771E80503954991EF9ED2F3FEE91105F663D6892D0BFD65228068FC1C16760A92ECFB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e8e7f08a03ad1eeebb4696c441fc81512f6a1cb7573bbd7cac4e765f4157152e
MD5 1b1e90279725689368ecc7deac9831c1
SHA1 dc34b884d85d6a57956a76271bc7e1f46625b882
SHA512 85f5bc5ef6ad6820f2d0b8d764f4975f2834adddf8fc390ab88b814cf594ba8b3ca8f9b868b9b293952e969339539938dc092f3958ce4eb3692a80522328b77e
TLSH
T12A117AF3C3D5856ECE4556F09A24AE2BCE2D0606422C7C19C9D4EF6B93E3075E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9fc9ca3b6e3531d6f7d406153dcdbaf8aa75205a7be025fbc84719e2298ea97d
MD5 d6abc1eeff9d30cb3c86299aa7baa56d
SHA1 ac9c3eeef03482f69dea487b0e4882e438e590af
SHA512 f233d32efa90ca96959b49a33ed89d127ccf9582b14f0437ad722d0776502de11f0eb42f3f924b8dd339e4b796061d2e2582be98ac0fb05864cc2c4faf1c208d
SSDEEP 192:sxZeJd7bRX2yM/jK1Ml8Mkn7Z/fHRs20wyTeI7MIdpdewHW6+WNGYLzeaTbAgTk9:sxZsbkM7Z/fxsV/HV/HbGL9
TLSH
T1FD42F8126B346977CCCBD209B955BF53D7F91432A2900E44AAFCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6e410d23a482f8443634d1a9ccf2e6ea3cdcadf1349a6a872f456fce2c222c9a
MD5 b7e71c6996ef5165dddbe39f8d04d42e
SHA1 40beeab48cd8c8bacd472c5e90ada245ea29a164
SHA512 d1ee30306d9308fcd3891b1421c615daec2c37360ac24ea3f65bad45e69fbe4e63b3fd3918e3fcd51fb68a67db02710a58782938889ee712d5a7f3fb63a8dfcb
SSDEEP 192:sxZeJd7bRX2yM/jK1Ml8UQGkn7Z/fHRso01yTeI7MIdpHewHW6+WNGYLfvepTFAb:sxZsbkqt7Z/fxsrcHVJHbGAZb
TLSH
T1DF52F8166A345977CCDBE209B955BF53E7F9547292900E44AAFCCA1C00E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 539731fcc5b6170006eaf00db83d690be68a684bf8519edd6ee0f7e397abe94c
MD5 2ba7e8e2c87a013039d4215a7634973c
SHA1 4534dcb9da8a8e6c4f4f5167b70ad632fa1f2a77
SHA512 72444fb8edecf0a932131fcbc6f6d09bfd46ed016de53faa1f5ee4a28d92b1224c00e8e2ad66be2ebb40a5c29ed13a6cd5d7b7b2c2e466b08668031fd06a758d
SSDEEP 768:qAs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNRroUF:qAs6pD1WvxzWju1jahILIsNqUF
TLSH
T153D2EA3B680CCB7E4F841E5CAC2A6F967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 c359bd988e33a05684991ca6b07aac971c41a213ce55c5cfa345f3531cc784c6
MD5 1f11a33786a5050c8530530d49b72d91
SHA1 7a182244b2aad12343ed3478bca77683518db5b9
SHA512 3cb842266d8985e158af167e1134a900c609bb951a0d0f4f6d74f1568addff284f088e5ea52cb13b8838c480703a89be8d50aa46da020631b7b70cda56869aa5
SSDEEP 96:KUAAKtePevCKoUOKhCKqkRgIKZumioQKV+E:iihpFpPzD
TLSH
T1DCE1E12276B703512C7E2A0C92D5C7278E43B563741DA42B3BEE40B68DA6E205DBCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58f930.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58f930.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 210cdee4e2bcf1fd7040ad9be7ca2d3e97083f4e4462361fa0f63438e012d5f2
MD5 4cd14892e96b76571715a13e2ae13c73
SHA1 e258fe15807294afd1ddc3775229b0f5990fe50e
SHA512 2d81a90f028e9d31ee6e81c6e2ee9e63ed14a15a987f93327d38580fd2b9a2f9f7de2ddf2c81d573e4c92f32972401bf617220fac3ce3a2eff35e372cef3566e
SSDEEP 384:yZcIhsN4agh4Fa9HON8P+zhgOOPrXLpe8C/Tyt:AhuI9ON8PkhgOi9PMyt
TLSH
T1C1928D3169786C676DF6E582F99626038FBC8133F6C52B84E5ECDB0D01DB5AC130AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 cc77fb06fea6762795d54dedfd11a014fc978b5d87aff8e8645e8d563ecda782
MD5 6cd97777fc9e292e5458ff2e4161ff4a
SHA1 515e1d9f8fc5da726d0bc1e174b8a4ea3515f4d5
SHA512 20fa6db49f369a52a696426cabead2280e803ae8a05b0a7c6a7578ceadb2723cfd292a94dafd886a9ffc8919e3a3b000c93119a56f0c02de7e65791b6eebc754
SSDEEP 384:kiFiZcItsNo8TUNTUlIlPgh4Fa9HON8P+ihgOOPrXLpe8C/Tyt:/FQtxwg9I9ON8P3hgOi9PMyt
TLSH
T157A28E3359689D7BAEF6EA81F99632038FF84073E5C16B94E6E8DA0D00DB19C130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8ce8253d85f897b728432b3a18d866fcbb93edd04c54de1a1c5421d1651db42a
MD5 f08782f3dad92fcd9db2f81ca5c11f98
SHA1 cd098a38af350eb27a55ab59ed1dd5487425650f
SHA512 338b4f2a3a1d6232484485f88c8498e86f2a26c37e532b8df11dcbd28f9c26403d011ba321eb9acb21d1b6b2bb8decabb4bdfe7fbd3280f5eae7e5fe95c2f53c
SSDEEP 384:AZcIhsN4Pgh4Fa9HON8P+zhgOOPrXLpe8C/Tyt:+hjI9ON8PkhgOi9PMyt
TLSH
T12D927C3169786C666DF6E582F99626039FBC8033F6C52F84A5ECDB0D01DB5AC130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9e47cd4839f292644968ab36f16405a03a7f1acafb997a8bb9307ad435720b4e
MD5 582524de8e3fef109293211166c68dd3
SHA1 56436b0ab59039f2b7fafb5ab7b04f67eb52e6b7
SHA512 2c00869def94cd57cff7b7d2725d487068f5abd62841480c1db394aa6df1743ff0fea7676058fb37a5b8df2c83e141fac4a1f684a0e3495d1a47ba916f05edea
SSDEEP 192:qONF6O7+3hQmiUyeVe3Gttb0qO2bo81gGNz8SU6:qONF61EGt9HON8FhjU6
TLSH
T1FD02FA356D686CB75EF2AE49F98727179FA8103BE9922F40D6E85E0C00DB65C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30f1560558f696124c27199d857c6204893dbd1bedc741159f4744a61c54e34a
MD5 27898ba0be6a0e44048d92d002ed79e4
SHA1 ac55c1fe21d31e8e0273a52789deb055e6c7fc3f
SHA512 a5c4b09c84f598ddde864015a6acddd3cffdcf0567b2bfae27f0f189ae5294225abed4e51a6f809f622575e74e5409becc57976a2580fa27de70a6c204a07dd5
SSDEEP 192:EHkONAo6O7+3vH3QmiUyeNe3EHcttb0qO2bo8P+fcNNzjqGaVU6:3ONJ6rw3t9HON8P+chgU6
TLSH
T1A71218367928AC775EF2A141F88735138FA9413BEE866F80D5EC5E0C01EF66C234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aca6673d-54e3-4689-8110-0ccade1112c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aca6673d-54e3-4689-8110-0ccade1112c7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c815101d48d0f54376b29683d1bf60cd6eca3b1152ce2b2f65a2094c7bdc84be
MD5 f4c7f9f3afb6abc354a3654498908c67
SHA1 f8bd55801e266476fc81d5e981d4b391f94096ef
SHA512 004fff9bc52a0697ff5026ac1d3808d49de9338b09066f4da6278ab694fdf7b01732d0e6e43546c9e6b858b6b6552a922b8b0374194efadb9ddbb3897da4a455
TLSH
T12D412759B6FA5154B3B76F169BF6A46E487FBC372E0AD45D00110E4F0A62B40D861B33
MD5 SHA1 SHA512 TLSH

Submit Download