d8261a29f44110ef43750807b5a95c0480b1fd338f63596c590ee6172ffaae0f

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d8261a29f44110ef43750807b5a95c0480b1fd338f63596c590ee6172ffaae0f.html
Size 40KB
Sample260912-pygrlaxcnb
SHA256 d8261a29f44110ef43750807b5a95c0480b1fd338f63596c590ee6172ffaae0f
MD5 a85c8b1d1021656132946392cb642c01
SHA1 c9771c15a4183b9dfed318828e60473492139a56
SHA512 079f8d204b97be82a0f1e48d4eb2926ba360253f1d7ea019e3317f6a268b6f45bb6ac06da571e7a34c9255553db6f88d76e58ad5b9a0b48f792c75641211fbcb
SSDEEP 384:NJ58kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8cQW6AY2:zPw8hW8VgJG8yJMJD6N2
TLSH
T17713A364B8C221230033637D9BA79608FB74516B820653407EBC27EA1FF1954D6AFEBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338228035934619"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{589D1480-ED8C-4BE4-BD9F-A917DE1A148C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3140	msedge.exe
3140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe
3064	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3064 wrote to memory of 2100	3064	msedge.exe	85
PID 3064 wrote to memory of 2304	3064	msedge.exe	87
PID 3064 wrote to memory of 2532	3064	msedge.exe	86
PID 3064 wrote to memory of 2304	3064	msedge.exe	87
PID 3064 wrote to memory of 2304	3064	msedge.exe	87
PID 3064 wrote to memory of 464	3064	msedge.exe	88
PID 3064 wrote to memory of 464	3064	msedge.exe	88
PID 3064 wrote to memory of 3828	3064	msedge.exe	89
PID 3064 wrote to memory of 3828	3064	msedge.exe	89
PID 3064 wrote to memory of 3828	3064	msedge.exe	89
PID 3064 wrote to memory of 3512	3064	msedge.exe	90
PID 3064 wrote to memory of 3512	3064	msedge.exe	90
PID 3064 wrote to memory of 3512	3064	msedge.exe	90
PID 3064 wrote to memory of 4936	3064	msedge.exe	92
PID 3064 wrote to memory of 4936	3064	msedge.exe	92
PID 3064 wrote to memory of 4936	3064	msedge.exe	92
PID 3064 wrote to memory of 1912	3064	msedge.exe	93
PID 3064 wrote to memory of 1912	3064	msedge.exe	93
PID 3064 wrote to memory of 1912	3064	msedge.exe	93
PID 3064 wrote to memory of 796	3064	msedge.exe	99
PID 3064 wrote to memory of 796	3064	msedge.exe	99
PID 3064 wrote to memory of 744	3064	msedge.exe	100
PID 3064 wrote to memory of 744	3064	msedge.exe	100
PID 3064 wrote to memory of 4768	3064	msedge.exe	103
PID 3064 wrote to memory of 4368	3064	msedge.exe	108
PID 3064 wrote to memory of 3536	3064	msedge.exe	109
PID 3064 wrote to memory of 3828	3064	msedge.exe	110
PID 3064 wrote to memory of 2952	3064	msedge.exe	113
PID 3064 wrote to memory of 2952	3064	msedge.exe	113
PID 3064 wrote to memory of 3876	3064	msedge.exe	114
PID 3064 wrote to memory of 3876	3064	msedge.exe	114
PID 3064 wrote to memory of 3140	3064	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8261a29f44110ef43750807b5a95c0480b1fd338f63596c590ee6172ffaae0f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff1e38c188,0x7fff1e38c194,0x7fff1e38c1a0
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,7496611650014862974,9373511034312967322,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,9430151511019812772,13774228209487154019,262144 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:2
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,3155626372511316731,17579480359325251098,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,17968233540783479565,7751462822558906144,2097152 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,11453182100373446771,8932531581969826917,2097152 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,16846182794006889525,5959203622156814929,2097152 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,3363871784029618129,5239809834492447970,2097152 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,7315099700614540427,103001175774595256,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,11457552689637057836,4622422641685872111,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,17920305853529916510,6750097452236351175,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,17920305853529916510,6750097452236351175,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,5998540956401275767,3105562025953877767,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,15050841379656876076,12584883529486350844,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,7183619783852578099,15226676506114574181,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6443342614044229319,1149155744771008287,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,3516338115957524726,7180086039272095923,524288 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,1628330493567344960,15669515733416397008,262144 --field-trial-handle=2840,i,11374127452779926069,12658835193999799452,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1f16eff56a221f5b339707d50e135cbb92c5e7efa94dc2e532b7b30115c55545
MD5 a1f56dfaa46ca61db5f1a41a2371034e
SHA1 31579d307dff943b268bd60e096420d164d67bd5
SHA512 489f1af6dea7bf71beb8d7fa00e1796a6ffbafd27d449d410fab993ee9b8be2cc55c16d65244742fb962582f1c05449db2f4e7d756bcf01986a115c5ead09c2b
TLSH
T1D661C6CC454184AFFF9480789DDD70CB37365D827A4F0DF38198D4B6A886BD4C38A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dffb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dffb.TMP
Size 3KB
SHA256 0019f6176c76498843e6646d3736e45d66ace9bda892a5f33ce152fe88022acb
MD5 079c1cc85033b3284a5b9651a52a3085
SHA1 ab8a56e0295ec6beb9395022a4ab5294cf77f47c
SHA512 70053b9e356006fa6a0cab04f75fc44fdd973319cfde984435c5d285da21ce53819fbd80254609e9db1ec6c00020cda7997b4ffe7a34375aaf6d491342d2766f
TLSH
T1E961B5CD454180AFFF9480789DDD70CB37369D867A4B0DF38098D4B6A886BD4C289890
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d8498bedd269d4266bd3a31947f53962ae6030880d7587e26b6d3cb4be6980ee
MD5 2ec77e622d58338d9eb3dad4944b1992
SHA1 6e3d7ec092fede070d16ba3f4ef14930c626e9e4
SHA512 65fea8dc7df7912904af4f1c821b7627c5af5ba580ac6ec4cd9561a307d1db94651c6c27bcef0ebe5cd1c5eb4edbc2ca4d4c5d5a1b86e65cc67c56e6d844ab77
TLSH
T15B219EF7C3D986AE8A0156F05A24AE1BCE2D0A06421C3D1589E4EF6B93F2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2b44828f93b52449a0a57fb7417a514d1eb6d3a0ffa0b45f3005c681fbb5abd2
MD5 c202b80e633feb4d1142f52a57e19fdd
SHA1 b98c43e4ad0e254d7ab066d7ec7cc5a44046f97c
SHA512 b7debaaac48d8b23660e893d50c61486e6bfc380b8d0cc2ce8073c411aa43822f0accce1358ae6f88722b31501c8751d224dc51361df880202337c3eb6788ecd
SSDEEP 192:sxZlnkRLWOb/ff/szazIdpd6HW6+WNGYgU5+NIgrJ:sxZlkcOb/fXszasUHbGQy9
TLSH
T10112A7516E28A97B8CCBD20DBB15BF53D6FD503261951E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5e7d9b86870707eea139f31862c448581d3c50f66a3fb5d9ec7402cb53108003
MD5 90f197fd3356fec88e6e1e3cecc468b2
SHA1 93cda6859729388a40e341051962bb421f5439f2
SHA512 88f0ba2cad94a3e1aa738b86499c8aa34a8f806d5e69a0bcf8b0d9b730b2a7e7d6faa326c3aded2ef982f794d790f8a77cb88f27ee8b2afecfa869355b35d7f0
SSDEEP 192:sxZlnkRLWOb/ff/slPzIdpH6HW6+WNGYgJ5+NIg5MJ:sxZlkcOb/fXslPsaHbGZyC
TLSH
T13C22B8516E28A97BCCCBD20DBB55BF13D6F9503261951E48AAFCCA1C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b6af3de4bf9d78b98e5aa4d7996b5c040419b24d364f5d3c32a9ddd5b5be032e
MD5 7edc058e2827f1d7d75296940bffbd23
SHA1 f47da8cfd165e4f706f7c152c6a2ccb7aec31773
SHA512 1877b3591798f728b326b06efeb5bba76d7b6a8b54f82bec3a78a468a24ba9341b12dad39a5db5cf9e01d0d2dc4aa0a1a3bae83ab8e4997c653564ad69f6eaaf
SSDEEP 192:sxZlnkRLWOb/ff/slPzIdpd6HW6+WNGYgU5+NIg5MJ:sxZlkcOb/fXslPsUHbGEyC
TLSH
T18522A8516E28A97BCCCBD20DBB55BF53E6F9503261951E48AAFCCA1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a875c3d2277c4a69508adb7ebed767c531955dce613d3fae71470f55d89277c0
MD5 a235cf47a5119d5e59f76d3c54edfb26
SHA1 8981c639eb126c06075cd0b8a2677997e535b7ff
SHA512 b73bdf0e7006289248f92500a21ae63f8f59b4227fc3c9d6748e19f926516b4a71593285fd5e9367bab17c7f6b743bb2562eff0dda607dec9fcf5b3fe423ac67
SSDEEP 192:sxZlnkRLWOb/ff/slazIdpd6HW6+WNGYgU5+NIg5mJ:sxZlkcOb/fXslasUHbGQyY
TLSH
T14F22A6116E28A97B8CCBD20DBB15BF53D6FD503261951E48AAFC8A1C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a2e20639b7d1bac7bd82cdd6780715931e0beeef87f2d65bdcc6b979e454890e
MD5 d511a9a3f51d5135c35e3568f54766ba
SHA1 efeaafc1067bcb6bf7e94d0111452e18629c4c20
SHA512 f6c5fbffcd5e0b886a0349be3af048dd30768d6b19b47f662b88621157ce024815f313a1b7c9818ebd0e59932dad39e40f822aecb22b4b98cb1964864819a136
SSDEEP 768:b4ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzYroVYU:b4ichfPWvPZplu1jan+LKgzj+U
TLSH
T1F2C2FA3B640CCB7E4FC01A9DDD1A6F9B7E9802C7A6588D4047FA984C02C77EE61264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597c5a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597c5a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 966e40c453fe617b07c9fad390c5c539f0be4faabe9de4b5b580032f617a1e0e
MD5 0b30ef79081215704c08c7c0abb6ee5e
SHA1 735241c301f15d319ecd8ce2292ffd7ef61a1481
SHA512 1ae1271ca7b200bdae019d13d17f998fcac4c5a9a302b6c102e3ee9f9bd01e4d04d2a02ac776fd090fe3a84f6083c2ebca32419ea5279c0fb8d3c55128f2d311
SSDEEP 192:LJONk6DphmqQmiUyM3kq8wGYX59ezbCMmIXkk7TsUU6:lONk6190RwGYX5ECm/TtU6
TLSH
T1BD02FA35A8787C7B9DF3AE45F4872B135FD8112BAA906F84D6D81A1D00C769C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 93ee2cb60084012a8e6ce55c0a96a4aa541feebc88497a4060a9d93dde47d22a
MD5 91dabc9a4fd59a3c72ec1756683fbcde
SHA1 3ed66ce52e51282cc0868edd5d1b28580555437f
SHA512 b8cb5130690512e212a641301859175f5b2f8919028c3de9ffceaeac1d009cd84f555b2e67279287ff720b0dc303b1ddc167c96e18192cca49fb6d98f365bc0f
SSDEEP 384:cZcI/sN4UrFE5y0iBGYX5ECm9TDpTWsa+VYalYob:K/bbMGYuCwHpTWhgc8
TLSH
T163825C719CB8AC7B9CE79281F94736038EF8916797C87F9495EC6F1D00DA298130791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 66e3922c949bb5785994cfb4dd9738d3bd78a38c42f78f371d382e13a1c9e7b4
MD5 d34453fb77095feff39787f838155616
SHA1 d9fea1c758c2896375c5a398eafa5b576871a476
SHA512 7de8013ca01f0ef9359568c3ba222865f6187e591afd4e8a6d2f379d97af28000d62576fa52f8306a36f42e9930b1e1dbf9b9bfc8507fadba62210cc5f05531b
SSDEEP 384:hiFiZcIlVsN58TUNTUlIlrFE5y0iBGYX5ECm9TDuTWsa+VYalYob:IFQrcwg0bMGYuCwHuTWhgc8
TLSH
T102A26B729CA8DC7FADFB9A81F94A36038EF89167C6C4BA9496DC5E0D00DA1DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17454e444725f065b190684bb7ca7bdf8d07a0e68de1dd58c4ee9458994e4ada
MD5 9e4c537b14feee8e2f22f392fe29a46f
SHA1 b7889e494058ce882ac132260f59617d3f1b0a3c
SHA512 f38f664072fdba08d34004cf203bfcc3f9d48bb141502bc1a384addb0c2d072a0ac67173003043c57e671ab63fd38eed30942288532602eeeb69ed55cb591268
SSDEEP 384:iZcI/sN4UwFE5j0iBGYX5ECm9TDpTWsa+VYalYob:Q/AWMGYuCwHpTWhgc8
TLSH
T122825C719CB8AC7B9CE79281F94736038EF8916797C87F9495DC6F1D00DA298130792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3b41d9c4471c52923da064f6b5a66d39f568ee6c536e65720a9e749c7743fd96
MD5 8deb489c678ac8beeff9b9d771da1775
SHA1 e08fc7e897139d29fde0bd5a31629bf857cd9f68
SHA512 01f417fc852aa35df4288c23c8ac8cad44e99a2d07b6cc0ea9dc8d5d466efdce4be05a257c66b57332fb7b5b08c104e21b4985aae4afdff5193be40cb21aaedd
SSDEEP 192:LJONC6DphFqQmiUyMWk+wGYX59ezbCMmI9TDr5kIITN/5yU6:lONC61St+wGYX5ECm9TDeTWU6
TLSH
T11212E835A8B8BC6B5DE3A591F48736034FE8522BEB847F94D5DC1A1C01DF69C230A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0bdd5e6-20af-4521-82e8-002ac480123d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c0bdd5e6-20af-4521-82e8-002ac480123d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c453ea6ddf51ffb7a1aee394e5b23d73fbf35befcff95870697e1dd16799383a
MD5 2cc62e9675361f2c3f5e28f74d8d9c87
SHA1 02dd58e67bcdac0437574d5670e5b92e28448e00
SHA512 566f2b96e8d088d5fbc45f3952e915a897798a69d13ba7f5d9b24ecf4c62191bcfdf2a5e91799443df8f000a9e41235b17ffcfa50b1c71bbca531e22c5d06298
TLSH
T1C641F499A6FD1148B3B76E5AABF2687E487E78372E06D09E10110E4F0B62B44CC71737
MD5 SHA1 SHA512 TLSH

Submit Download