f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 23:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f.html
Size 2KB
Sample260912-26ryray1bs
SHA256 f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f
MD5 d2c8ccc0d8bfcf8fca26da2724dd24c3
SHA1 05d3be1f37c4c30bc208d7cf1634ce2940aa2d0d
SHA512 6b2759f738b830ff38229d0cc179ce3ff1196ecdd2c9b1088d61d687b87c212f8c283c4684a4d40fe47e68ec7258cd51301f4c14c6c5f5da2defc6a015182812
TLSH
T10C512F1A5E1BCA11033099BBFC13F14CFA55D24AA2589CA531E9016F3BE439D9D77ACC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2180	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338195964250008"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{316D4934-0F2A-47F5-9D36-99AB78AB706C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
412	msedge.exe
412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe
3232	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3232 wrote to memory of 872	3232	msedge.exe	85
PID 3232 wrote to memory of 2180	3232	msedge.exe	86
PID 3232 wrote to memory of 3108	3232	msedge.exe	87
PID 3232 wrote to memory of 3108	3232	msedge.exe	87
PID 3232 wrote to memory of 3108	3232	msedge.exe	87
PID 3232 wrote to memory of 4140	3232	msedge.exe	89
PID 3232 wrote to memory of 4140	3232	msedge.exe	89
PID 3232 wrote to memory of 4788	3232	msedge.exe	90
PID 3232 wrote to memory of 4788	3232	msedge.exe	90
PID 3232 wrote to memory of 1040	3232	msedge.exe	91
PID 3232 wrote to memory of 4788	3232	msedge.exe	90
PID 3232 wrote to memory of 1040	3232	msedge.exe	91
PID 3232 wrote to memory of 1040	3232	msedge.exe	91
PID 3232 wrote to memory of 2792	3232	msedge.exe	92
PID 3232 wrote to memory of 2792	3232	msedge.exe	92
PID 3232 wrote to memory of 2792	3232	msedge.exe	92
PID 3232 wrote to memory of 1704	3232	msedge.exe	93
PID 3232 wrote to memory of 1704	3232	msedge.exe	93
PID 3232 wrote to memory of 1704	3232	msedge.exe	93
PID 3232 wrote to memory of 4832	3232	msedge.exe	97
PID 3232 wrote to memory of 704	3232	msedge.exe	98
PID 3232 wrote to memory of 4832	3232	msedge.exe	97
PID 3232 wrote to memory of 704	3232	msedge.exe	98
PID 3232 wrote to memory of 3200	3232	msedge.exe	100
PID 3232 wrote to memory of 628	3232	msedge.exe	106
PID 3232 wrote to memory of 4524	3232	msedge.exe	107
PID 3232 wrote to memory of 4304	3232	msedge.exe	108
PID 3232 wrote to memory of 4756	3232	msedge.exe	109
PID 3232 wrote to memory of 4756	3232	msedge.exe	109
PID 3232 wrote to memory of 5088	3232	msedge.exe	110
PID 3232 wrote to memory of 5088	3232	msedge.exe	110
PID 3232 wrote to memory of 412	3232	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffab78ac188,0x7ffab78ac194,0x7ffab78ac1a0
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,10038080132151504363,4507355659148212741,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1597419074037114606,12078035191913403404,262144 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,18218810308167097622,2642814226934765150,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,2565868321677367438,5080051836818752048,2097152 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,5812378309849519113,6094072845747515191,2097152 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8201366062759584659,17441643177065080425,2097152 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,4060003257189112483,1652678882354912604,2097152 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,16445301598450196755,2765086336825317771,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,7239337191968863644,8801017765457641769,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,14928570256920618607,7512350506991606418,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,14928570256920618607,7512350506991606418,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,12277595502956840527,11745058857349545547,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,11856508829876517700,548683618082801672,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,9812751254108170583,18171967345326368627,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2096,i,15578706041268750681,7547375695505997305,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,11455990836197656655,8076094993796326443,524288 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=784,i,2458313626087415784,15200565247720752935,262144 --field-trial-handle=2160,i,13261407967302030871,3657038867862047696,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:412

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a0cce30548b11360cedeeef79d34644280fd07f20f4edc34f29ef9a66247a8b0
MD5 835c0ed9134703b852419fd3469a9bf4
SHA1 034e3fdf68f43244c035291d4859c66e947e9616
SHA512 a6a2b861343d960de31ae1d35e41799d34d68fbb627417fe7e2321096593c8dfc26563f7216d9c8fdfea22bbf1215806ffba059e664e0eb13c339946c1c776f5
TLSH
T157615EB1344F8D57EFA851BC99F5108B3A3C7DF045832E4E89B4F8EA43BA3569040847
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bf15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bf15.TMP
Size 3KB
SHA256 19969ed64dd5d53a21d039708fbfae955b0d0ba3d16cbba23e9e0857db8887fd
MD5 3439547466cdac8ee5326b7e1b81daab
SHA1 c72459ce8cf3acfd43feb93eb5e5417a98aa8c33
SHA512 9d7ccd95cf967cc9cecc0f15b4987acd0e53bd126dc5c60057e2369f6c520bc85ddae3ec4d58ef1001a9276df3e5602ecb6b4d27ca0f881acc66717d6b1029cb
TLSH
T1BD615EB1344F8D57EFA851BC99F5108B3A3C7DF045832E4F89B4F8EA47AA3569050847
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c035789fe9eabc8eac3825d659d29668b3cd7f60aee0135f5e5867d5e63333dd
MD5 8732927ed99cd9adfe0007cb447fcf33
SHA1 ba3105aef714d27b82f4a3f76ad7305d32bd41d8
SHA512 b44d719c9e96bd05c6d9bb09ce65579e4dc177cc22514e31610dda993512d9bd08b9a6054604d30c8ba8589643da2a6c48b74a018c8d92cc0a0344dfc92f5b81
TLSH
T1A83192B6C3D5866EC91156F05A14AE2BCE1D0546422C7C1689E9FF1B53E30B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7e18365d3af96e75feb54693f885d8405536ec6d3cf7c77904d0f19a1a060396
MD5 708f0d016e10099daf91230bd1b175d6
SHA1 70fcdcbd19a451cececc2c7f345be14980cd543e
SHA512 504c9e26d3632f8985762ae8caa0140e002aba2cde9ad3c88bbe300edffab9bd1aa1c2dd0991d3488a5e4836f219419bac400ef1c8955313ce7026ace2f6daf1
SSDEEP 192:sxZZRhWf/fWsAmpIdpdIHW6+WNGYRPRWsIgrJ:sxZZWf/fWsbiSHbGmJ9
TLSH
T1B112B7526E38A97B8CCBD20DBA25BF53D6F9503291951E48EAFC961C09E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f791ce854f175f4a3e12ba0c821e894b3311e1fb8aa16fb70ec242e77e9a011b
MD5 2981741b9189996d32d50aa0f7209abd
SHA1 1ecd335846a456e70ca014ae6568e7285d1f1175
SHA512 8ade840fc3c044a9114a53f47b254340bcfd9df31a2204d7a1e409f7c75ecc0c237295ef4888d367be808d2293cc3d4afcab8c84ac57492fc82f4e12a8f835c0
SSDEEP 192:sxZZRhWf/fWsfmNIdpHIHW6+WNGYRPYWsIg5WJ:sxZZWf/fWsuuoHbGmC0
TLSH
T13522D9526E38A97B8CCBD20DBB55BF53E6F9503291911E48EAFCD61C05E76CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ae218bc3ea3602cc493732f42e879999c903a2baf29aa52685a6594227fc30ce
MD5 e97424c6c1e5df711b849699863327fc
SHA1 0c740bed8ff50478d1c98255ccd0dd9fdd45cac0
SHA512 79ad11262c4d01de573f1a4ce60c31e7f181bc18b70c9a74f80f22d4c74bd65a8389b651c8915d4af4ee807741394a69f4753a8c69c6bc8f47b9d87d6044e601
SSDEEP 192:sxZZRhWf/fWsJmpIdpdIHW6+WNGYRPRWsIg50J:sxZZWf/fWsQiSHbGmJ2
TLSH
T1EC22C752AE38A97B8CCBD20DBB55BF53D6F9503291951E48EAFC961C08E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b7a04f76de6165d1d448292d63b973128db11b63acbcb34ea1b8950744a62e1b
MD5 e4011391f22148cdc7515cd3d9e2d405
SHA1 d5f7fc2370c10f891b18695798096078c4e5d2a8
SHA512 97831922f35df1c7a920bc54acc84b9d7564af5208e53716cb94ee1654a986280e8aaa8eb36a65a62a1e01c051a2e4211165ca90f9c4dabe4b9f5d16852cfe39
SSDEEP 192:sxZZRhWf/fWsfmNIdpdIHW6+WNGYRPRWsIg5WJ:sxZZWf/fWsuuSHbGmZ0
TLSH
T1EE22D852AE38A97B8CCBE20DBB55BF13E6F9503291951E48EAFCD61C05E76CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b5e896964a83e4ff0f957f85aa2d992d1340bdfec89fc567a5cd1267bd2ab123
MD5 0632cfd14ce8fb5d0fbca75892a640ce
SHA1 ff6b4b03e541086d18004dbf99553c3889497cec
SHA512 a3ed72e5ec563f95b1a322cae6c15492abca63c33e6bf2146591825f8bb3ac79cd6ca18c93e3b8778cd566c4706dd3d322ca903eb11e62603f4bc9e1979e1bcc
SSDEEP 768:2gK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3droV+7i:2gK9uzYWvcQWsu1ja0HL7Q3WV+7i
TLSH
T146C20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6584D4047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce8a16bb-4276-4678-86a0-79f60655ffdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ce8a16bb-4276-4678-86a0-79f60655ffdc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f28f1665f55fb1d4b15ce1dde73fefa3495d78a334113e9394ab9365472cc16d
MD5 2222a0a2b3210573ba97fd22f859e2d4
SHA1 3abdea710648057c00863fd58565583ad1c1d353
SHA512 29c155e54ed71592e323f356a1fa6230d39a4fa210a01702bea32b2bc4b3cdccdb0e483f3e7110351efde7431c3b011f3c31816d20f13b1e8778d0277ca97cfa
SSDEEP 384:q4iFiZcI1lsNa8TUNTUlIl8wZhFCXy8tTcOjTVINOrnjfPYcsa+VYt/o5:qDFQnXwgNhM73nWO7jfAchgaW
TLSH
T158A26D739DA89C7BADBB9785F94A32038EB841A7C5C97A90D2DD6F1D00DB19C130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3b90bed431b53ac0499b03a9a4a3b92343810e623a8c3767f4ed07b948e567b2
MD5 58240ffbf21a747720c22e36b087fbac
SHA1 4fe70442bfd3b9de1cc99900d066099371c68338
SHA512 9971a138da325a9c6bb559c3eb22eab6e3647ae53664e9dbd9f76946df00aa0d7bec877ac4979cb0ae3686cf7e7d78c4c559cbbd85827a60f255ad979014f0f4
SSDEEP 192:SONu6ygpQmiUyDKtOCTVg3NOqm5zPPZuU6:SONu6lHbtOCTVINO9PEU6
TLSH
T12402D634BC683CB79DA26E45F58727139FA8116BDA562F84DAE81F1C01D775C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 47764c2a7d22d1540712aba2693e0f8d83c813392ff2d7fa5815e89f7c30db09
MD5 f8c6f81f2757f890663ed6245a38e97a
SHA1 cbbee94b5b35c56d3a1204e85505c82f1d14e90f
SHA512 680e0991e4b12eca1f9250ae0f587473978b7280208ad7dee91cac8f1ee4d365fecbc096402ec19642ce898bd09cecbc84f33998f06dc0e596f5317279e2214d
SSDEEP 384:RZcILsNCJwZhFCXy87/cOjTVINOrnjYPYcsa+VYt/o5:5L+hMV3nWO7jYAchgaW
TLSH
T1F6829E31AD786C776CB79281F98736038EB891A7D6C83B84C0DD6F1D05DA69C130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 364e5cae51f5ea5fe835310214a5753b9393314c4b48d72a64aa875bcf67e190
MD5 4a8101dcf25d4b1054795d34151274f8
SHA1 817c2a2fa5880efbb5901db124fc411f98d67c92
SHA512 957ac8bfeebf86c198a19639eab60d8eecc2c610062dc6f4139b144bcf5536689cb914490327f8b1973955e5048374e892915b5b7573ad7d30b669fcba0b7601
SSDEEP 384:VZcILsNC8wZhFCXy8tTcOjTVINOrnjbPYcsa+VYt/o5:tL1hM73nWO7jbAchgaW
TLSH
T16D828E71AD786C776CA79281F98736038EB891A7D6C83F84C1DD6F1D04DA69C130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c3aa3d54a77a1f885699f048777f03e358e947af4908e9cf5d5e574f2b2e263b
MD5 a6e1a8e1d3554e1f218b2d62f8f894ae
SHA1 13fb936311fb829c227c2eec67d6b128409f0174
SHA512 d619951e21e75d0530ebbf6b2e8b72d2d5d2bdc97b7b5960c01171de2149418e3c502220b62d192f80240ecfc44ccae2cada45a7fb324236109771f9c0101bea
SSDEEP 192:SONT6ydQmiUyjKMOCTVg3NOqmjnjOebR3UPZ/6cU6:SONT6oVMOCTVINOrnjAPYcU6
TLSH
T127122931BC786C776DA26585F48736039EA84267DA4A3F80D5DD2F1C05EF6AC230BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d6bb4be-0051-4a6a-92a5-1949efa15438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d6bb4be-0051-4a6a-92a5-1949efa15438.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b2f9c3f361f752510c4de5e6f783ee9f7ab959300605efbfcfa8ee1e99813405
MD5 fd74c8299d24d92e90fcdeea3bb47e80
SHA1 9ffadede5161225c483605a01e7c318e85adf6f1
SHA512 6dbeb7cbacadaa327ba49da5da56131546e381aae03ac167e7b5a3c69791ae5dd1c4ad0631d3dac52a1fd097531d838c26a4dc91d3e6565730572906ed91ca43
TLSH
T194410B58AAF91118B3B77F5A9FF6656D887AB8372E0AD49E10010D4E0A73B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download