6e5b605373a35ce2298f137718b3311a725f9d12e16fc6022921635d3c385079

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 13:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6e5b605373a35ce2298f137718b3311a725f9d12e16fc6022921635d3c385079.html
Size 40KB
Sample260912-qpre4szza1
SHA256 6e5b605373a35ce2298f137718b3311a725f9d12e16fc6022921635d3c385079
MD5 5fa2b8130ccbfcf9e034770063530231
SHA1 c36b51af4a57b6993b6596a3f02756cc2706293b
SHA512 1e424524c6200d6d50e554a27e160cd91d1d63203d69f4a8dd7db8175ed41cf502b69bfc78d2b3a53a089c0b4fe2c77957b710b56730ec30935e2f2083013e44
SSDEEP 384:RJ5Ukw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8+vNoSJY2:HHw8hW8VgJG8yJMfNo32
TLSH
T1D2139364B9C222230133A37D9BA79608FB74111B820553407EBC67EB1FF1954D6AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338234070094404"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{AB8A628B-D752-404F-8612-547EA5B7A896}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1276	msedge.exe
1276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe
1032	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1032 wrote to memory of 1820	1032	msedge.exe	84
PID 1032 wrote to memory of 1984	1032	msedge.exe	85
PID 1032 wrote to memory of 4300	1032	msedge.exe	86
PID 1032 wrote to memory of 4372	1032	msedge.exe	87
PID 1032 wrote to memory of 4300	1032	msedge.exe	86
PID 1032 wrote to memory of 4300	1032	msedge.exe	86
PID 1032 wrote to memory of 4372	1032	msedge.exe	87
PID 1032 wrote to memory of 2260	1032	msedge.exe	89
PID 1032 wrote to memory of 3360	1032	msedge.exe	90
PID 1032 wrote to memory of 2260	1032	msedge.exe	89
PID 1032 wrote to memory of 2260	1032	msedge.exe	89
PID 1032 wrote to memory of 3360	1032	msedge.exe	90
PID 1032 wrote to memory of 3360	1032	msedge.exe	90
PID 1032 wrote to memory of 2884	1032	msedge.exe	91
PID 1032 wrote to memory of 1560	1032	msedge.exe	92
PID 1032 wrote to memory of 2884	1032	msedge.exe	91
PID 1032 wrote to memory of 2884	1032	msedge.exe	91
PID 1032 wrote to memory of 1560	1032	msedge.exe	92
PID 1032 wrote to memory of 1560	1032	msedge.exe	92
PID 1032 wrote to memory of 1724	1032	msedge.exe	97
PID 1032 wrote to memory of 1724	1032	msedge.exe	97
PID 1032 wrote to memory of 4676	1032	msedge.exe	98
PID 1032 wrote to memory of 4676	1032	msedge.exe	98
PID 1032 wrote to memory of 4664	1032	msedge.exe	100
PID 1032 wrote to memory of 2240	1032	msedge.exe	110
PID 1032 wrote to memory of 1268	1032	msedge.exe	111
PID 1032 wrote to memory of 2328	1032	msedge.exe	112
PID 1032 wrote to memory of 4664	1032	msedge.exe	113
PID 1032 wrote to memory of 4664	1032	msedge.exe	113
PID 1032 wrote to memory of 756	1032	msedge.exe	114
PID 1032 wrote to memory of 756	1032	msedge.exe	114
PID 1032 wrote to memory of 1276	1032	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6e5b605373a35ce2298f137718b3311a725f9d12e16fc6022921635d3c385079.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffd6dcc188,0x7fffd6dcc194,0x7fffd6dcc1a0
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,3305030607325230980,14630922938453676278,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,3331172912438643260,554970721892715790,262144 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,11351967936824380244,4255411020697487561,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,13104530411813330110,14724652047333875035,2097152 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,4895721901685579283,14017615462208623935,2097152 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,2178336538335915277,8200472322981993023,2097152 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,15289179478830499232,5607175628875482039,2097152 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16525455077690103381,13662999645653078250,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5629741447890751997,3818582506190219485,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,5564841187109161642,9372046072144901639,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,5564841187109161642,9372046072144901639,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,3976712963757877781,15144071188856012035,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,8058235232261740502,3597449662914780415,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,12234773195865268497,15045008288543643520,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,7509103821511725564,5131166002886991759,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1004,i,18111160480525520440,820287389404042446,524288 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,15027665623331735507,4885628779271394542,262144 --field-trial-handle=2292,i,3870455940231655278,9433199574904675643,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2e316bb01e34fac99f18cf4e9904868c644e279df33ecad3a5b6609cb2f1b146
MD5 fca41d01bae32452007cf3135c8ab1c7
SHA1 d48de3272c60655b72bbc742ec8a35043f287dcb
SHA512 182b0dd493f7af299f5f7758d80fda991a66844cb88d01117027d3f6f2e0db1fdc8db811daa073a8b66dbc3ce93d0cb72b76ab53df8c238de5a97389acf01ebb
TLSH
T1A6613B8057B08476DB98A670D1F1D0AB3AF459F149CBEE9235E0FEFA4713F5491E4062
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c06d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c06d.TMP
Size 3KB
SHA256 6f21c6cecab2fc5c702c385e90f60a74f036b7d7034c584fb19adae23b5db700
MD5 aab91ba4f962e83d07253cf64d96910e
SHA1 7d164ea3dd127d907c5bda5573652c3083c2531f
SHA512 072f5e5c48e097dcde0f835bf90fd4b15b14749e879dda93f996f187bec20e99816c22cab88f284d9e022f6a6d36b327c03633fd7404f2f501e04bc624989c6a
TLSH
T11B613B8067B08472DB98A670D1F1D09B3AF459F149CBEE5235E0FEFA4B13F5490E4062
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5dbaa0bd8cad4e87491bdd09ec0cb6bcc50174dc92305c2c7a1cb55507e41c15
MD5 ce6f7e2981a490c1912b049de54d1c21
SHA1 be3155a0651fb3432889f134a15c072feedebb00
SHA512 873b7b1f11e90fac21b624c1806aff274ffe9ae315857436180831c869d74176fcdc2836cdc31d57671200c036029c8763e59ec6a27c3c0f31dc6efbf6c95271
TLSH
T173219EF3C3D986AE891116F05F24AE17CE1D0A56422C3C1589E4EF2B93F3475D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1987ff852ea755d81f402adc21daa306bc86eb8a42e63e43adedf7fe20fb3ece
MD5 aece4adffaa5434e4e32faca6f5fe757
SHA1 5729e95d5c0293a33dd7548c2fc79b46c8ec5442
SHA512 5fbd97e83619112444440c071d21009b3b31ad97b4554314a3e9b11cc1fb3614d46563edd456bda64a958efdb89ca2ed7cc1453d13c2b909ea424ff1ec001ddb
SSDEEP 192:sxZQRNW3/fPs6W2IdpdYHW6+WNGYaQOaIgrJ:sxZQm3/fPs6W3qHbGY9
TLSH
T1F412A7517E28A97B8CCBD20DBB65BF53DAF9503291D41E58E6FC861C04E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c4db5a6d4faeb58a3f11fe576cfebc5dfb8d1545075b372b65491978260991bd
MD5 1fda7780d4c65b256f0f16cdf5c7b712
SHA1 035a85b00314399002d38b46f53cf73b5f7bad18
SHA512 34680379d716b896c36003e0d20a0e08f6dea2051ff782a76360e7b73d19a3cf8b2349ecb4d8b0f0cc603fc4d155d2a1114c247802c513b78e00474b455e6c39
SSDEEP 192:sxZQRNW3/fPsMW2IdpHYHW6+WNGYakOaIg59J:sxZQm3/fPsMW34HbG8h
TLSH
T12A22C8527E28A97B8CCBD20DBB65BF53E6F9503251941E48E6FC8A1C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c8e18ddc43af8240d4593b2a2cbdf0b82c4c1c75d32963b66d64478b0fb903c4
MD5 1a05996a69394e3df0edddb6558a034d
SHA1 95600b2396086e66f84ad69124ba679c748553ab
SHA512 4f4dc0241618ed840117bd2089c0026b64c72c6c3cebd1d5577661c63e5bf7e4b05cb6388ae71ac620b8a487aba276532a9ef1935bfe89c76e5a2c9c21c6646a
SSDEEP 192:sxZQRNW3/fPsMW2IdpdYHW6+WNGYaCOaIg59J:sxZQm3/fPsMW3qHbGah
TLSH
T14122C8517E28A97B8CCBD20DBB65BF53EAF9503251941E48E6FC8A1C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b5abb20973acc80e8f6a63e3695935edc0a717915bd544fea3bf5bdb1c349889
MD5 2edae2f3b3e6eb3d618cacaf06abd7f4
SHA1 32e36cdf0a2d9fd46898b36157a96fecae3ea8ac
SHA512 4397bbd9a85b48eb2bc4cdbba341f2aa88dd54f6d2989c9a2cc44d4f25af23d8f38a4897b60e540e6aefe06a5bf31be8ec43d380f6895be6e3bc10f5d155e574
SSDEEP 192:sxZQRNW3/fPsyW2IdpdYHW6+WNGYaQOaIg5fJ:sxZQm3/fPsyW3qHbGYf
TLSH
T10F22C8517E28A97B8CCBD20DBB65BF53DAF9503251D41E88E6FC8A1C04E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fdd2d9118ba14d28255115927b288d3189fdd6b76c9b2b3cad15f74faa9834b3
MD5 db586ff31616f8af5091d2680e39582c
SHA1 ae3e91d0db08e634b5031b1acd07497723e9d4a0
SHA512 a7f1e6db0fdd454194974e5e9aad8843c7bcada81c3c0c2b339a7804b03c7bbdd496bb65e96288f4d192cdc73e9be48f3c1aae3ce5aae8c49cb08398d95ef103
SSDEEP 768:ghyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3TroHZiz:ghyQRbrWvvlpZu1jaXKLf33gHZiz
TLSH
T1C5C2FA2B740CCB7E4FC01E9DDC6A6F976E9802C7A6588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1b3fc476e4ec82426c75d010c808f236935ad4cfec8debb839bdff2b097e04f7
MD5 eb8632b7ad0d41e7e6b3033d19417a5c
SHA1 eb671471b6f4660eea0593514979278578616ba3
SHA512 56c31cf275bef844737abcc05656f1d69ea46ff9e5e9d198348567ca8886e633c2efcbaa63d3b1f7217f217f58dd09616f7d5977dfc243f3c5453030718e1845
SSDEEP 48:K0u5uIuVupuzu3uLukbu3uSuPISuBukK9uB1urukxuJu0YuyuzuJu5yLmBcBLPTM:KgBSKaEKlqoKzKpJKKyQ6Wv
TLSH
T14B91221131BB025138BE3C4C91E4876E428136A33119F52B7FB814B2DD6BE295EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5493e7eb3e2a391ed2112f878c6ed64418508471d4710c10a266eee84be3c797
MD5 fae1067b013ddec089389319b1f6b4da
SHA1 9e9815371da8f30b9a246675353402ad86464a25
SHA512 3469186e11eab4270c9803060e48a511c87356e024170c76d2d368551c66c169338fa1db5027fa358e33f0cf59dd0ce8459a673a1ff7315775504d6eb109a54f
SSDEEP 192:SON86iDCQmiUyGsHq5u88PLuhLSqUroU6:SON86/UHq5u8iqvVU6
TLSH
T10F020939AC683C7BAEF3AD05B5477B135FA4013FE6942B84D9E81A1C41E729C2307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b13e64d51a17551d68e77c636831960ec0c3162c124cf40b00ebc3cab197c235
MD5 99a7b061b748cfc881eef6f7484deaa6
SHA1 4970fc1907b20aff3b11954dc5ff5fead2fe2cb9
SHA512 3f3524f2a018caea082e0a73b844dc288bf38db4dc9aa788ad1fb8f60b50a28810d6e45e8b31909fcbb9c68bed073e8932cc37b6f83ae6cdf297001003ad0bd8
SSDEEP 384:+ZcIisNewXDw9vGp5u8iqHtGBBkwc0a0Bob:8iM0ZUkqEBBkua0B4
TLSH
T147928E725C746C76A9F7E451B9473A038EBC816BD3C82B8495DC6B1D01DB6E82307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b0734df2158060f46b08a1e7237f965ece7f55756d0a3bbba4b5a17d5c2e763e
MD5 afecd68fa3201d586d9720dea7d98150
SHA1 cdb0ee3314bf331ec0123b2deb3d2c8e37f2305c
SHA512 eda4ed339c4115fd0a7f15726a3e3470bce8987c41fcbbd46a63cc07a742b2c781ce994b42cc6c8897471c030226e45646f21c6af7fff44446446b3380fc5271
SSDEEP 384:PZcIisNehXDwHvGp5u8iqHtGBBkwc0a0Bob:Hi70PUkqEBBkua0B4
TLSH
T188828D725CB46C76A9F7E451B9473A038EB8816BD3C82B8495DC6B1D01EB6E82307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f86ac1a531c61f6f0fbe53560931289ae85a4ee46cfe393b6464a1346f8977ab
MD5 353d71be261ef6cd39dfb3570d366c6b
SHA1 ff7e9a8cd64aff532b7751486d1efc5c83197661
SHA512 8b7c4074f69ef14e23c3907724207835003ebe5ae33740cd74e472237824eae0b405559136877965e05332f7a8bddd5ef57221ede7b547c31e89ee443c2b469e
SSDEEP 192:SON/6iDBMQmiUyysSq5u88PLuh1tetG1uZV/nU6:SON/6ocWSq5u8iqHtMBU6
TLSH
T178121B36A8687C3B6EE3E861B58736135EA5422BD7C87F84D9DC1A1C41EF69C230B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 86624f7ced1b75aec45556e416c261e4d59c6d57e2e82419a26a4a82e465a545
MD5 5e5d0e3eee841c47c99c42b4e7f7d026
SHA1 3d150a0001253f994d1ffc5bf33b777408bc7c33
SHA512 0592d845b247750bb902f55b3cb4f1398b2a3ead6597dfe7877926d5ea9d0225aa58560c2f7e1c2db52d290691152835229fe12f6c533d3be2d68768f9cfb69f
SSDEEP 384:bFiZcIzwsNu8TUNTUlIlwXDw9vGp5u8iqHtRHBBkwc0a0Bob:bFQcDwgo0ZUkqHBBkua0B4
TLSH
T194A26E734CA4987ABDF7DA51FA4636038EB88167C6D8AB94E6DC5A1D00DB1DC230BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53f2bba2-9e8d-415e-b38c-be35bafaaabd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\53f2bba2-9e8d-415e-b38c-be35bafaaabd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9d2474cb43bbcccdf816fb380cedf0ad64b2e8ea54ce4c168e9c8afb7052772f
MD5 dc8e6e1c31126c64f65990e45cf42560
SHA1 0cb4bf99502d24d528c4ac4e4d9664d165d97986
SHA512 31ddb1fbc614262fafb3ee7119403f549ba9333421425cd10584605c523b4f9b5578617ebb630bdcced5f969adf99c1ece0bd243f5d8cd5c3bc03228b606cd64
TLSH
T179412B5CA6F91148B7B7AF169BF2A86E487EBD772E07C45D10110E4F0A22B40D8B2737
MD5 SHA1 SHA512 TLSH

Submit Download