265ecd5a6919fee895a34f30e5c677f4179f4bca7ac01dcffe1a6c7e01949f35

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_265ecd5a6919fee895a34f30e5c677f4179f4bca7ac01dcffe1a6c7e01949f35.html
Size 6KB
Sample260913-a5wf1ayfnd
SHA256 265ecd5a6919fee895a34f30e5c677f4179f4bca7ac01dcffe1a6c7e01949f35
MD5 f976e56ec66cffe923a220e124e51e40
SHA1 23ad94ac4f3e44acd51cdda7cf81433e91cf3933
SHA512 be31617a5869fa52be533c7beb436adb019f3cfb1068b0782141be8c471f0d001c35c8b7198140c52fd5f97c631b6cadd1af14e6c84fd887386fa577a0df3178
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69AEcE8XECgUdDhQoKDejCPJu:zWLJlxe/f80WhtKDejCxu
TLSH
T15CE1A55A9E4C853F4100059BF0A16A1CD89F447BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2216	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338215002543372"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{89C938BE-5858-470E-8491-E74622649A07}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 4656	2636	msedge.exe	83
PID 2636 wrote to memory of 4760	2636	msedge.exe	85
PID 2636 wrote to memory of 2216	2636	msedge.exe	84
PID 2636 wrote to memory of 4760	2636	msedge.exe	85
PID 2636 wrote to memory of 4760	2636	msedge.exe	85
PID 2636 wrote to memory of 3740	2636	msedge.exe	86
PID 2636 wrote to memory of 3740	2636	msedge.exe	86
PID 2636 wrote to memory of 2648	2636	msedge.exe	87
PID 2636 wrote to memory of 4724	2636	msedge.exe	88
PID 2636 wrote to memory of 2648	2636	msedge.exe	87
PID 2636 wrote to memory of 2648	2636	msedge.exe	87
PID 2636 wrote to memory of 4724	2636	msedge.exe	88
PID 2636 wrote to memory of 4724	2636	msedge.exe	88
PID 2636 wrote to memory of 2924	2636	msedge.exe	90
PID 2636 wrote to memory of 2924	2636	msedge.exe	90
PID 2636 wrote to memory of 2924	2636	msedge.exe	90
PID 2636 wrote to memory of 1592	2636	msedge.exe	91
PID 2636 wrote to memory of 1592	2636	msedge.exe	91
PID 2636 wrote to memory of 1592	2636	msedge.exe	91
PID 2636 wrote to memory of 2940	2636	msedge.exe	97
PID 2636 wrote to memory of 2940	2636	msedge.exe	97
PID 2636 wrote to memory of 2800	2636	msedge.exe	96
PID 2636 wrote to memory of 2800	2636	msedge.exe	96
PID 2636 wrote to memory of 1960	2636	msedge.exe	101
PID 2636 wrote to memory of 1228	2636	msedge.exe	108
PID 2636 wrote to memory of 5108	2636	msedge.exe	109
PID 2636 wrote to memory of 4512	2636	msedge.exe	110
PID 2636 wrote to memory of 3744	2636	msedge.exe	112
PID 2636 wrote to memory of 3744	2636	msedge.exe	112
PID 2636 wrote to memory of 2120	2636	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_265ecd5a6919fee895a34f30e5c677f4179f4bca7ac01dcffe1a6c7e01949f35.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdf843c188,0x7ffdf843c194,0x7ffdf843c1a0
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,9559227671979905786,3876866282131641029,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,12727918536446419083,6390823645331543114,262144 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:2
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,10568635174218472315,14042209785893321090,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,4577043450073995715,18352956379928083842,2097152 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,2786191999902715210,8566613717187365895,2097152 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,592681316816902966,8908840125623270456,2097152 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,16014002998566484481,4112613189511196857,2097152 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,9604503003384123859,16469408468172222848,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,4500511209809575714,16959378916409078135,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,11134191787570254069,4975211155208074053,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,11134191787570254069,4975211155208074053,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7382181617623170851,11603735875096370623,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,3237312121823045087,11236600637815541100,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,13051404054764923733,8256763595915215112,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,12596008353140325970,16206584945494822872,524288 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,10305445854751104590,14281780416394520118,262144 --field-trial-handle=2980,i,2358039270188041559,8485942024864277569,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bf28e01340aef60d558b60e36300bfcc3a3eff6f291fd65023060674cf1ee2e6
MD5 b1cf8d56f7d8ec72035e281e7ba9fb5a
SHA1 ac0d9aa5c0f241d98dd4ca14c91f24995c526093
SHA512 3100e25b3621a1474e21d4d86629f77e4270ac53fcaabe11b9809081a20ec991d2c7408da6bd858b2dd1dd15e9c3e7c84ae49a57b90c79db59a015383878bbea
TLSH
T16D618280177382DDFF54A6B591C553DB3232B789899BEC8215B4DB7AF80A79CB051D0C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589fc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589fc5.TMP
Size 3KB
SHA256 071fba8d8bd3df9bf3fac60540d49930ae5a1041a72b4c3560f55563000f50cf
MD5 174c36867c2dc16228cc5cbf874df4d6
SHA1 89155224ebeaa97a595edb8d6c5bcdde33c80fbc
SHA512 2d81c0fe482ba12e14aa0fb4423d7de8f6339b63d7e3c6499d599dcb832296da7b77068979f86168501348007ae6a7a0e78aa515fa2a0ef5e2d6ea469f129ab4
TLSH
T13A6181801B7382DDFF94A2B591C513CB3232B389898BEC4205B4CB7AF80A39CB051D0C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4da668ce8bf9db68f173f6baa1d44f21b487f6668213e0f28e831e98c8c92fd1
MD5 f133296a6e98c05295438ff89776c59c
SHA1 273ca903e3e0423cca68eb645ba8a5023dc4f5c2
SHA512 4f853769e4c4005f18dc6d856779ce46f149a28c7e1410aeb77722bae9388213b6bdc9c3efbf76d3b0901ffc80c80f48aff3c6a76e4150652be96d9a33770d3d
TLSH
T11C31ACF3C3D9866EC90556F06A24AE1BDE1D0A1642283C16C9E4EF2BD7F30B1E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bfa00b6f8289f229a023ee6bde4f75b65e68f260d0a2d4468b3c30a82343e7e0
MD5 741cc9ade87e67119f0ab07133cefa07
SHA1 776278faf7b1dd3fdb70695301610a798a6855da
SHA512 e0cb8c800a747d93d2bd9b98dc4a56c4dfd7f04f497089eca3eedaff23ccb54b387ce7eb5e113c5eeff012296ff8f398100cd0d1e83d50cd1db9ae69be11d5db
SSDEEP 192:sxZaRIWE/fRszfhIdpdcHW6+WNGYYBawIIgrJ:sxZaZE/fRszfK6HbGf69
TLSH
T1A812B6116E28A57B8CCBE219BB25BF43E6F9503261D11E48EAFCD61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e45762de2c4f85cb0be047a2e278b231041cc93d3f45b64e10e15804b6a981a1
MD5 a1d6037d0a6fe22a1d8a282a906a3ae7
SHA1 26295e706d499c8c348c0a3a123d9993ccbbdb33
SHA512 b03d872b8e9b43a4c21edb7c0fd7c81dfeacf9cea6f29c6175825e145387c1dea0b17f99ae08d314a57af158e3ec0c2e9b58148b89387ab561baaf3a7c717111
SSDEEP 192:sxZaRIWE/fRsNafZIdpdcHW6+WNGYYBNwIIg5IJ:sxZaZE/fRsNafy6HbGff2
TLSH
T16322B7116E38A97B8CCBE20DBB55BF53E6F9503251D51E48AAFCCA1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dccbfc95bc76a75ee7e1387b63c78b5b66cf6e71469501fe379d3ec43b1e2f10
MD5 32fea080a6af4bf8676c2e4942412388
SHA1 60563e17110c451a2463331a82f4d02e6e5a08be
SHA512 acb7b9d68abc55e7a3ea2b85827903b8c57843348d73e219e216b00137acc96f9e8b4afcd6160a063fda67576e2418d353c63e8ac735bce42d55843512b93553
SSDEEP 192:sxZaRIWE/fRsNafZIdpHcHW6+WNGYYBjwIIg5IJ:sxZaZE/fRsNafy8HbGft2
TLSH
T11322D8126E38A97B8CCBE20DBB55BF53E6F9503251D51E48AAFCCA1C05E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9b1b8f482c82d81d4eec2ee5dc797f6da9b50ecb3e9e44e819b310642712d542
MD5 e6ea4366b2fde61c8673d0d51fa2c817
SHA1 86c55bd6a3a92a347adc5a02c17c51ee97a93b7a
SHA512 23c1fcaa816e1476d3f9f4dbad3e98ecd6be5898e8e1b3b4d9d42a472a39fd728f03d17d618c37fe9c98c90ee7ad41c039851beedf4ba6fdc59a921ca53343c5
SSDEEP 192:sxZaRIWE/fRsNRfhIdpdcHW6+WNGYYBawIIg5iJ:sxZaZE/fRsNRfK6HbGf68
TLSH
T17D22A6116E28A57B8CCBE21DBB55BF43E6F9503261D51E48AAFCDA1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9e65ae840b8ddea9a83a6be28ce0050cf6954401bdef6d7bb49100be6e26f565
MD5 8ad09ef8c97edfadfd1812c494aba190
SHA1 2c87b31758fcad9240c875463162a7d0e21f3b89
SHA512 e654995adfb96dd5cfbb0b28cd67ae54c354f5cf119c90c4546f1f6ddd47fd33ccb428ffce52ddc143ac1520524eabe0f848820e3f41177a2003304b3f8bda65
SSDEEP 768:yLyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXdropNxQp:yLyYR7jWv3NpBu1ja/CL8OXWc
TLSH
T1B8C2E92B640DCB7E4FC01E9DDC5A6F972E9802C7A6548D4047FA994C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ee871c5-a3a4-4cb0-bc89-04534e0a3ba7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7ee871c5-a3a4-4cb0-bc89-04534e0a3ba7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 77a9787e42d641ae78c7cde81ed4263c6c0018e488d99f7d60cc7bd256b43f97
MD5 32288d1a72ec166f693ade287712f794
SHA1 1af5016e8677a49bac6edff2312c30be7e826aa0
SHA512 e04f8411e4b22b043b2a123a77894aa750e5355ac1228761bfaa8333cccc858bcbd8638051ab9ec7c112aac65bb6f13e00a2d3c46ad9c482fa1dbd6888d99ebb
SSDEEP 384:xiFiZcIaHAsNo8TUNTUlIlMt+iYv5QQX5+DtbOt1AzmJrAQPG7O6R2FeoWh7UvA8:YFQEAtwgVBzkDlOkzmhAQPG7TRVoA8
TLSH
T114A27D335DA4DC3B5DFA9A85F94A32139EF450A3D5C9AAD0E2DCAF1D009A6DC130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6b8aa591fb5ce8b0bdba49f7c23688b891e6697e468f1d579124057b185a639e
MD5 ee5e624d5bbc9332385cdca1290952e4
SHA1 f56264dd6a9b182d46326d7e013727a0c7c3749e
SHA512 1192e00b709483a61bcac5eec5721b7978a52de5190d261d8a0fda35a73dab4dd65d3a3f8bda0fe2ecbdab005e6948b76c587754c101cf70058ae5f8f9dd1a4a
SSDEEP 192:EONp6nnHGQmiUyKiqQYcX5hQDP1bOt1ATcMcGFU6:EONp6nCcqQNX5+DtbOt1A0uU6
TLSH
T1A902FB34BD787C778EF3AE46B48637175FA5217BE5946BC0D6E81E1C00DB65C230A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 650615af525c94e6f3bdfa651e73eba42026a109a7b17ef2a0621d491b1281f4
MD5 6839cfe24833c85e63a47db030733174
SHA1 8b9c6528cf84ea705f40f3b5d932b725a9bafe84
SHA512 15168e97ea0b5362d789bd37a2995ef39b21a5d29b260c03337ca359293bb9e55b57d91361117f2e5f0b5c93ff39b28be734d783cd248c7ef6eef281050042de
SSDEEP 192:udvAsN4yQ4LqZnHCHVQmiU1ci5f4bcX5hQDP1bOt1ATXhhSJrSPyF/5GU8:AAsN4yt+iTv5QQX5+DtbOt1AzmJrfPGN
TLSH
T174423931A964AC3B4EE7A685F0473263AFB41167D5882FC4D6EC6F1C01DF7AC630A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f8209de27c83385a61081acb3f6cc2c8233ce0de0f8733f185c0ad56eaf388d2
MD5 09eec3ad590e492ade5de4def04168ca
SHA1 5c626e69039c3fa531044be8f6984e906e9c93db
SHA512 3d89a9d22d5ed29f0957a3be10b6a39de6a7d3cc54152b7ef780b7cc8ee7bf33921da2416735a26c038aef1ae527779bda49c5170a1eff5faec2def731a03eda
SSDEEP 384:kZcIhAsN4Mt+iYv5QQX5+DtbOt1AzmJrhPG7O6R2FeoWh7UvAov:ChAvBzkDlOkzmhhPG7TRVoA8
TLSH
T15D827E315CB4AC374DFBE185F54636179EF851A396C96EC0E5ECAF2D009EAA8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6b71a468e45231d562ff9cb37c983da4279143580c368eb57e6bfa4ccdde80d5
MD5 72f682aaa6396ad93333b219fd3fd4d6
SHA1 d125927f8a0476fa79da27963a3b8b33f5e1082f
SHA512 96ab86784b91b206b40073972e5507f34ff6f494950e33479873b84952e73c4ab709a7630582216a192dfb64bd0bc3609541093f9cda9530907d1937e15976c6
SSDEEP 192:udvAsN4yQ4LqZnHCHYQmiU1ci5f4bcX5hQDP1bOt1ATXhhSJr7MPyF/5GU8:AAsN4yt+iYv5QQX5+DtbOt1AzmJrhPGN
TLSH
T14E423931A964AC3B4EE7A285F4473253AFB45167D5882FC4D6EC6F1C01DF7AC230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 55c02135f90878cde7d2f4fd1314a2cc83aafdd1ce7d04ed7bec7653dc6b39df
MD5 607dcfe289b1da3ebf6e1a186b37534e
SHA1 669ccb31a691ddbba38f08146c6678cd810cd292
SHA512 ea2ac5dde01fa2f0dbaf9d5d850febb46dcd8848221efa9281748df59e29ed4aa1cd7974cc29bda0ec38f9d2ebd778a8e4d749ccb153b1ce4fd439510b41bf3e
SSDEEP 192:EONx6nnHaQmiUyJiqQYcX5hQDP1bOt1ATXhhSJrcg3F/5GU6:EONx6n2NqQNX5+DtbOt1AzmJrXPGU6
TLSH
T1B4121A31A9A4AC774EE2A585F08732139EA55167E5897BC0D5DC3E2C01DF6AC230D822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e7e52c124bec580ebfe6674fa39d946a8df7adc34f675d212146496cd99df0e9
MD5 ed08042f15a7a2219011518364ee71bf
SHA1 5df048ec380a10a0100557e640693b3b7aca8728
SHA512 338404b9097efbd94a4a5efc299d46c195638af8d6ab2958f49155bfe0a264b06a2e5347aa1b8fa426834857fd9272be16c99bff67024036dc82aa9fc6d933b7
TLSH
T18641D94CB6EA1148B3B77F165BF6A86D487B79772E4A945D10110D4F0A22F40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download