a4cfe85e17e0e02716901d81ddcf7ed47a413dd56b7ac56ab6033512747c364c

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a4cfe85e17e0e02716901d81ddcf7ed47a413dd56b7ac56ab6033512747c364c.html
Size 106KB
Sample260913-ab15dsxgpf
SHA256 a4cfe85e17e0e02716901d81ddcf7ed47a413dd56b7ac56ab6033512747c364c
MD5 e69432054853a50ab8029e4c4f959f98
SHA1 5c313c2b095ababf38612958fd7f6d04093d45b4
SHA512 afb8d26740c7cf44e643803237f91ef3096c4a4b3925c6983ea3980affe7c82946c0a46fb70bdf9d61cc714cd49b1c57c2d0b13252a9f7d7dfd80f06d0a0a709
SSDEEP 1536:gXxUYn+h4e9gRki1yBswuW2Ol7Q5TtENoXxkuuMbEao8bEaos:+mRQIN//Mdo8dos
TLSH
T195B3948701205CFAAFA14DB2415F58673D2C5837BC5791B9E3FD8FA72B41DAE034A229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338273865482216"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{0F455F4E-57C7-43D9-9856-F7BAC1285924}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 5008	2400	msedge.exe	85
PID 2400 wrote to memory of 2104	2400	msedge.exe	86
PID 2400 wrote to memory of 4336	2400	msedge.exe	87
PID 2400 wrote to memory of 4336	2400	msedge.exe	87
PID 2400 wrote to memory of 4336	2400	msedge.exe	87
PID 2400 wrote to memory of 2940	2400	msedge.exe	88
PID 2400 wrote to memory of 2940	2400	msedge.exe	88
PID 2400 wrote to memory of 3492	2400	msedge.exe	90
PID 2400 wrote to memory of 3492	2400	msedge.exe	90
PID 2400 wrote to memory of 1188	2400	msedge.exe	91
PID 2400 wrote to memory of 3492	2400	msedge.exe	90
PID 2400 wrote to memory of 1188	2400	msedge.exe	91
PID 2400 wrote to memory of 1188	2400	msedge.exe	91
PID 2400 wrote to memory of 4848	2400	msedge.exe	93
PID 2400 wrote to memory of 4136	2400	msedge.exe	92
PID 2400 wrote to memory of 4848	2400	msedge.exe	93
PID 2400 wrote to memory of 4848	2400	msedge.exe	93
PID 2400 wrote to memory of 4136	2400	msedge.exe	92
PID 2400 wrote to memory of 4136	2400	msedge.exe	92
PID 2400 wrote to memory of 4876	2400	msedge.exe	97
PID 2400 wrote to memory of 3860	2400	msedge.exe	98
PID 2400 wrote to memory of 4876	2400	msedge.exe	97
PID 2400 wrote to memory of 3860	2400	msedge.exe	98
PID 2400 wrote to memory of 2356	2400	msedge.exe	100
PID 2400 wrote to memory of 1728	2400	msedge.exe	107
PID 2400 wrote to memory of 2236	2400	msedge.exe	108
PID 2400 wrote to memory of 436	2400	msedge.exe	109
PID 2400 wrote to memory of 4596	2400	msedge.exe	111
PID 2400 wrote to memory of 4596	2400	msedge.exe	111
PID 2400 wrote to memory of 548	2400	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a4cfe85e17e0e02716901d81ddcf7ed47a413dd56b7ac56ab6033512747c364c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84068c188,0x7ff84068c194,0x7ff84068c1a0
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,2341609398000226903,1408051233834382490,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,15956049477511597770,5731490224142823651,262144 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,12748174501180359149,209130758553785877,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,4487529086997428715,4524837315083212734,2097152 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,16144706963208834587,16185307086117755678,2097152 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,15513092554152365743,4933220934143106712,2097152 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,2539490971602409732,12298170882872102590,2097152 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,14870710289990362817,11704281260933374302,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,8700140954558817347,15454752797909174182,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,16354798041866196026,5229023220830193777,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,16354798041866196026,5229023220830193777,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,1001598833278151249,18221104516150345705,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,6125544325924371343,6501235105778140914,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6769926977537541599,16535301460746900765,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,7067194394187445678,16042011835922442043,524288 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,3719702266417703614,12382586490190870229,262144 --field-trial-handle=2268,i,12786767029856949971,17152296190065944881,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

7e033533-8fd6-456d-baa4-5f1a24768f32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e033533-8fd6-456d-baa4-5f1a24768f32.tmp
Size 9KB
SHA256 f4c2add934bc9f65deffaccb261efab27ec46a2e3caf3a068d1824ffd0c4edf0
MD5 5bee0b33a109cc071e2a9920dd1c2ed9
SHA1 dd2220893880dade23db70b1497de9341eb9a85f
SHA512 463206fb4b079caefae776b6840ac5245dc937b138ca4125aee1bb152de447e739db4617478aab5a1b62e0da06f5e03508569066581afc087bcf0f722740a6f6
SSDEEP 192:sxZGRHWs/f5sWWuwIdpduHW6+WNGYRPRACIgrJ:sxZGUs/f5s/uREHbGmF9
TLSH
T14312B7126E38A57B8CCBE20DBA29BF53D6F9503251941E48EBFC961C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fcf69ba8e9632d12f98e24c95ad978fde13ea9bd54068977069c0ff1013e50a4
MD5 358b55019f5d2052388b57a8e98c6b6a
SHA1 79069ddc504c67a35cf82124ca17bb8b85c51720
SHA512 cb14f16e97e501a195aab8fd83a50d2982b46afdfa65997a18b4d6eb933bcedd30911ebc79149aaff7de91e9e9817e419beb2c00443fe8915ce46a6ef8f95245
TLSH
T11C61A64DC5944274FF68047381D221E33D35B68A46F7AFE207A9F9BADB3A364535801C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d155.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d155.TMP
Size 3KB
SHA256 7b19e736985b3dfc8ec969866e9d63678ba57007bc623f6730312b1d768cd971
MD5 09e3325f9c7ac95ff5ac3f22725157ee
SHA1 5ef759d3e771346ba221d46d218dadf0df17f960
SHA512 e52f9983f68dcec9f464712c00abad555d3ebbfcd9ae91ff74428ec39a2c34210f666191e9f5a64371bd0d055731dcd99be4c8f22b1e310054bd0eb2afa21c0e
TLSH
T14961A64DC5944274FF68047385D221E33D35B68A46F7AFE207A9F9BADB3A364539801C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 381b6d94918d757b91b39ea81b12eb502a4b72f5e5736467c16dd69b38cf5936
MD5 e5fdf77c6be669077dd0c48a5a87d2c5
SHA1 11af9450a36435e0f95868393120a39dc555a082
SHA512 64099a4ac28419b673ada3c7c95dda8889dde716548ccef6447de2732188bf1f74777f5090bf18f072e7f3ff0d23ae414e7c8dfc3968923943cc3aca3d31fd1e
TLSH
T18B416DB7C3D49A7E890156F05B286E2ACE1D0A5A422C3C16C9E4EF2F93E25B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 59ba7b2ecbafa213fca3f2d1b02850739a9c44f393f4c26dfff4a5c4a073ec72
MD5 9b999342c50d32c9574093367e694093
SHA1 0f645ae0ccc989485438e77967cbd55f4748cd1f
SHA512 0d98f0778432f7d07d9b2c0613a1bb8358e5986f486e4717592dc741db9eb749d4ced62c3e0fac6cd8eff64de77fc9cbe1d0e4b39f2ee76a91a7cd4596a743f0
SSDEEP 192:sxZGRHWs/f5syWuwIdpduHW6+WNGYRPRACIg5OJ:sxZGUs/f5szuREHbGmFc
TLSH
T16E22C8166E38A57B8CCBD20DFA69BF53D6F9503251941E48ABFC961C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 aa7b9e5512df079b2a21355db48181940e8886c3101ce208ab80382af9dd3539
MD5 c599fc6954862a141539b4ae8b830b60
SHA1 f4c1e61a7ff249be88942362c37a654afe88dd0c
SHA512 121c8e565dbac809c8d712cdd011f0f1c983295e5e91cdfa19a2a2215852009147b328ff00fb695c9f9e9207ec9167a133bac6a9057adea3a0fee57bba1c7f38
SSDEEP 192:sxZGRHWs/f5sy1uwIdpHuHW6+WNGYRPHACIg5kJ:sxZGUs/f5s0uROHbGmjW
TLSH
T12A22D9566E28A9778CCBE20DFA25BF53D6F9543251941E48ABFC8A1C05E77CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a64e3fa10aa2cb307126a3f638d93871ad34732832123f93cc085b0d6c525e9c
MD5 6c9007ed993dbbdc1c3d112d45814082
SHA1 bdc14e636db48ab3c77efe113b20fe260a0782fd
SHA512 8fdef2664e5677019a40a38c0e266472b612d1d1c6df41d64db6253228af983b6624a4b41611b082860c4eddfe4bdda7726598d98b4c92d8ee82230a6d7d7b5f
SSDEEP 192:sxZGRHWs/f5sy1uwIdpduHW6+WNGYRPVACIg5kJ:sxZGUs/f5s0uREHbGmZW
TLSH
T15E22C8566E28A97B8CCBE20DBA65BF53E6F9503251941E48ABFC8A1C05E76CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 eaad2c664cd6aa6f4e540631b5f1145abbbd2812cd7c55c1bcdf904b7df49698
MD5 3f2768c4c5c0a8454e6f3b9d658ff679
SHA1 c3a9486c02f44222d2bca2aab7c8d0f448bd5776
SHA512 6a08a15c17501aa0cb73add49cb20034accafb56b13f514e3e898fec8d8edc42e428a5ec61e10e4f5234ab7f2c8e3b032d1852dc0a71ad9be2400e63cbe39b92
SSDEEP 768:wGK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k30roL2+6K:wGK9uzYWvcQWsu1ja0HL7Q3fL2+6K
TLSH
T1DAC2F93F640CCB7E4FC01A9DDC5A6F973E9802D7A6588D5047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 34d4d4efec35e056ad42884124343ebaef0af859f8ace8240688f3750a2af33a
MD5 b26d2a7980f52d9d444cf5eaf0ab0715
SHA1 e94e41910f0a1e708892760edefff13acd394e43
SHA512 656b250d379cfbc37c1e218cc7ea1706b2faf852ab5405571ad1c1e62cac8fb5a27262c2fcec6d9c51179d0588075a0ca2556cf40b7eaf859abb8c56cf247877
SSDEEP 384:2ZcI8sNcPw9MotXOjTVKjGYm68xsa+VYhl/oq:k8wlenJ64hgUF
TLSH
T1C5827E716C786CBA5CE7E242F98A32038FF891A795CD2F9096DD5F0D01DA6981307D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5be8655c60ad18133f8f5bb4f0aa041c9fc4403331d34c74fa083d9571a4a497
MD5 90dc6b3dbc5ebf7feaa801096a867a75
SHA1 a1f3c922204fd6a285c9901007e4f61bbd9f072b
SHA512 0c0cb67772003231cc3123f9e5101323d4a914d3853c0c1a3c0248073d74f641ec89a20fcf252ec08063764f3d5df33513e9f3e4c0bc90bbfad154ce2d650c45
SSDEEP 384:CFiZcI5esNU8TUNTUlIl2w9MotXOjTVKjGYmM8xsa+VYhl/oq:CFQkZwgzlenJM4hgUF
TLSH
T189A26D725C649C7AACF7D782F94A32038FF890A7C589AA90A7DC5F1D01DA2DC1307D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11b8dfeaba88684f232e14279022922a28e797d8c520363b5d86f2c497b905ff
MD5 8a1467573bd63eb6e4cab8594bf1f7f2
SHA1 f589d2ad4e835db1fd422ba899cd80300412c981
SHA512 41d880e44a88178c03d95330b285098809b36810fbf3154a1c20d9022ffc3e9909fa80ef23d5811158743f2daea2652a33b5b143af0530c8db095c6f53c0b2f6
SSDEEP 192:SONF6ygpQmiUyE/tOCTVgVHDR0pqzPGAU6:SONF6lHRtOCTVKjGWzU6
TLSH
T13402E735AC682CBB9DF3AE06F48B32135FE4116BD9552B84DAE81E1C01D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 2d5cc553670fdc8a22f06c48c646d446ea170401eb10347569b68effe9b9579e
MD5 4e6aa208ab31a2ee61022c19a5294be8
SHA1 e64be5fed646e2efd0766c7042a2903559439a95
SHA512 69ce6f894e33cbc99c1ec8f4f8ef0201213fc3ade2baeab69a645ed8a7efedd20622a499e516767675226acc11c1cb19429108d1cc55e647338910ac20d8e9b7
SSDEEP 192:u8GsNczrQ/9T3w/LQmiU1r/o4OjTVgVHDR0p+L9ERtsZ8i/+qva+4LcYLWAdhl4:EsNcPw9M11XOjTVKjGYmU8xsa+VYhl4
TLSH
T121623C31B8746CBB5DA7E242F44B32139FF891A795892F9496DD1F0D01DE29C130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f95dd92af1a34041e6af5396e71841a3f50179f832063fdd9de11aa743af0fa1
MD5 01da9e40b74698f7d53c68aff699686e
SHA1 eccea28ca06c72d4a0a61556c6e5338ee8cb210d
SHA512 e1d74ba129b9db031205cb9dc1bcb3d8147584d72ad32ad88f2d7ef44d8c75f4e80c78798bf03b106958884d4a077cd7df0ef7b050c686e3245cc039b1d2da27
SSDEEP 384:rZcI8sNc2w9MotXOjTVKjGYm68xsa+VYhl/oq:z8hlenJ64hgUF
TLSH
T10A827E716C786CBA5CE7E242F98A32038FF891A795CD2F5096ED5F0D01DA69C1307D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc2410a17ae16efa41be3fc5bf0580f26532749f2cc356f4f1edea2aa116bc7e
MD5 5740ad74fab1bd64aa5ff478b6661151
SHA1 22a8907808e358c1b8ea2715a35b396dd7c2dc73
SHA512 7112ac15651a9b42e6e5ac74b7e3abfb0ceb28dd32cf923aa44baf4056fceb292098406acdbea41265132276d12c03df6b4d921629dd7921a8694b2f0b7857dd
SSDEEP 192:SON16yQQmiUy2/lOCTVgVHDR0p+L9ERo3U8i/+U6:SON16fVlOCTVKjGYmn8xU6
TLSH
T1B1121B36B8686C7B5DE3A501F48B32139FA8515BDA497F80D6EC1E1C01DF6AC630B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7633d331-807f-49f2-bffe-22151b6519eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7633d331-807f-49f2-bffe-22151b6519eb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fef064e9402db8aa3e89dcd0d3f6392a889b2ac5d76f7fc0d8e5f796163d3391
MD5 9e5606822d1f4b933ee62d1bf9379c38
SHA1 951abf4aba047294690f5d90dd8fb4c0579eacfd
SHA512 13748ddf9e65d88b2cd8bf7c5b22a897b6f66bc12cb00c628c8692c1a7e5ec8f8234437e46226c18469ab8f3f5cf3d5ae57d261530a188bd31225de3e522294c
TLSH
T1EB414E58A6FE1148B3B76E166BF6A86D487B7D772E0AD45E00110E4F4A23E00CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download