f565b1c0f49361e865943a8a11be1e927c9da7fb46896ad4bc276758f5725121

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f565b1c0f49361e865943a8a11be1e927c9da7fb46896ad4bc276758f5725121.html
Size 184KB
Sample260913-ase89acf82
SHA256 f565b1c0f49361e865943a8a11be1e927c9da7fb46896ad4bc276758f5725121
MD5 38ea2a379d0b12dc08d15f3e330a052b
SHA1 ba8407862fb66b782d3d712a739c44a93fd02e59
SHA512 2ff338843a7df769307190b98e7fbec0d3ac834e8894c4eb405f782779ca3f1aa7561f25a9943a3b1f0875a71c1166822df23cac243b7a0c6f43e9157907dff3
SSDEEP 3072:F+4Q1NxVZMrdoNrdoCZeHAjTJYjJBBYjwn:FVQ1Nn2doNdoCZeHAjGZn
TLSH
T1C80466A363508CD0FFFC2A7348E60A7F3D2B0977994560A4939EED95CEFB6190748885
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338311806052053"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{15FD6811-3250-4584-9F07-CE86CDBF2B82}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4036	msedge.exe
4036	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3452 wrote to memory of 4296	3452	msedge.exe	86
PID 3452 wrote to memory of 1064	3452	msedge.exe	88
PID 3452 wrote to memory of 3976	3452	msedge.exe	89
PID 3452 wrote to memory of 3976	3452	msedge.exe	89
PID 3452 wrote to memory of 3976	3452	msedge.exe	89
PID 3452 wrote to memory of 3744	3452	msedge.exe	90
PID 3452 wrote to memory of 3744	3452	msedge.exe	90
PID 3452 wrote to memory of 4436	3452	msedge.exe	92
PID 3452 wrote to memory of 4436	3452	msedge.exe	92
PID 3452 wrote to memory of 4436	3452	msedge.exe	92
PID 3452 wrote to memory of 4908	3452	msedge.exe	93
PID 3452 wrote to memory of 4908	3452	msedge.exe	93
PID 3452 wrote to memory of 4908	3452	msedge.exe	93
PID 3452 wrote to memory of 4592	3452	msedge.exe	94
PID 3452 wrote to memory of 4592	3452	msedge.exe	94
PID 3452 wrote to memory of 4592	3452	msedge.exe	94
PID 3452 wrote to memory of 5112	3452	msedge.exe	95
PID 3452 wrote to memory of 5112	3452	msedge.exe	95
PID 3452 wrote to memory of 5112	3452	msedge.exe	95
PID 3452 wrote to memory of 2228	3452	msedge.exe	99
PID 3452 wrote to memory of 4600	3452	msedge.exe	100
PID 3452 wrote to memory of 2228	3452	msedge.exe	99
PID 3452 wrote to memory of 4600	3452	msedge.exe	100
PID 3452 wrote to memory of 4892	3452	msedge.exe	102
PID 3452 wrote to memory of 3612	3452	msedge.exe	108
PID 3452 wrote to memory of 1340	3452	msedge.exe	109
PID 3452 wrote to memory of 2976	3452	msedge.exe	110
PID 3452 wrote to memory of 540	3452	msedge.exe	111
PID 3452 wrote to memory of 540	3452	msedge.exe	111
PID 3452 wrote to memory of 4036	3452	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f565b1c0f49361e865943a8a11be1e927c9da7fb46896ad4bc276758f5725121.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb4560c188,0x7ffb4560c194,0x7ffb4560c1a0
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,7989785059421659092,14449593062291565961,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,4806206845208047632,7359832832982006560,262144 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,880149627515546756,25362223656156069,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,6833269341267759411,14077052163908794227,2097152 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,12004745484117052881,14242290511798757107,2097152 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,12366117443674140582,11228978910675857466,2097152 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,6181927633616963900,4528707293409553516,2097152 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:2
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,3727720458549686487,3415374514085791752,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,13959192050450199034,17965896310252767495,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,15848386303646611199,7790907201474671880,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,15848386303646611199,7790907201474671880,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,12917829358039090775,12123438541108564346,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,14386689478937545076,9514682936581768527,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,14864702364085998065,3021841825971495224,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,17732860313156480993,11730710125341322210,524288 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4472,i,6140884562188981659,11829831496807172376,262144 --field-trial-handle=2264,i,16132764151552632693,4109594908727642501,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

33622e99-9f72-4841-9f78-c2b13926e43d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33622e99-9f72-4841-9f78-c2b13926e43d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 88c98632cc1a5d38d5ea640b1791661c234a58fca5d4df13e2ba1bc5ba24e08e
MD5 974cb4a6379e32ef81a6e8c89d01b791
SHA1 d49d5547b6459c8b49b70a23a0653c2864532b6a
SHA512 4aef4f280853a4219abc12adc5ddc09a46d43a6a710cc991d4a326da24a93fc9768e281c15e9c89b9637430206a6894d717e7ecea8b6bfcf572f64a6db5730f0
TLSH
T1A4511EC256916895F3A810F2D1EF138335BD85A25A477E431398C8FC48C7B1F819C25F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cee4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58cee4.TMP
Size 2KB
SHA256 3c9547f85588ebcbf10c736831167ccd4f3c1b6f4ee80ccd168f2010b48ef0c5
MD5 e3f88d97e482346b70c79b2a3d584c81
SHA1 f660cccb1f4d1fc4e7a3ce7104b46fdb69059972
SHA512 8d13c7d75d821fb3d43d8d5099619542bd8474be73856560f451081ee50c1e43b95020bce6f0831558d8570fbb7554bfb4c003992ffbc8a89e200f3c1d9a109e
TLSH
T117510DC25691A895F7A850F2D1EF138735BD85A25A477E831398C8FC48C7B1F819C25F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3b0a2d5d8232f31c9c6c0aab655c9096d1f89bc6b1c50870388accb0e09f049b
MD5 5e84e938a0ef186bf3bdc588bd975d51
SHA1 7d62c38c7603e5005bfedf07b056e3e389f82561
SHA512 a00036b2e5f56cf4b4bdbc977315779387919952252ee6e543fdec1c906057de7c2e7a505f702b567cb9ebdbf60efc20e597ea4e17cc9ae2493ae8cc476eeddb
TLSH
T137418FB3C3E4867E8D0156F45A256E16DE1C0A46522C3C16C9E4EF1F57F24B4E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bf9edb52e55c56644acadf4e46ccb046673f3c5a6ccb058edc12bf8afdfbe6e7
MD5 6e563b7bc5dbc1ab18ba9e2bde8a2b8d
SHA1 6979ffc1920ba7de8b20fb09c351d0a4816bd105
SHA512 702bdcc77ce8730aba757a15b24ca6fad6b340da2d7e63884f99b444a8a0bdb4862e02a4871f40939452e835a363617b92e034349985e2fce12c460cbb7d997b
SSDEEP 192:sxZ3RrWl/fKsKBVIdpdcHW6+WNGYYBa9MIgrJ:sxZ3Ql/fKs+m6HbGf59
TLSH
T1C712A7526E28A57B8CCBE20DBB55BF53E6F95032A1D01E58AAFCC61C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 320eb0db1e77bb7ac3d2ced4cebdc90cd1caabe1a332b19e2214bdf1375687d6
MD5 825e3ccc8fbf26a3877bfbae1d8eeeef
SHA1 28675ed51fbb1a2e395de0bcc39a07a16a26f257
SHA512 483cd86e273d79bf24becd95863651f67661998d14ccd91aebde1dd90f054bea1f17c1d505864bc49c1bd411fe345fff39453ac85e7503962892d751955d2725
SSDEEP 192:sxZ3RrWl/fKsUgVIdpdcHW6+WNGYYB39MIg50J:sxZ3Ql/fKstm6HbGf+C
TLSH
T17F22B7566E28657B8CCBE209BB55BF83E6F95032A1D01F54AAFCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 519198d93689aa5327960ff16fecfcb185bede9079b2433ca4b2d0d346369e7f
MD5 51e52b5d75315058515fed21726885b7
SHA1 aca1df4bdc28b80bcde0937dcac544307be9bf59
SHA512 2d98d626757c42508fc6b25df4870abc27d06f15c644448c0f88ed4d10ed346b9bdd944ab2ae3568df01ea0505a6be32cae15f838654f76a7688d3f04620de6c
SSDEEP 192:sxZ3RrWl/fKsUgVIdpHcHW6+WNGYYBe9MIg50J:sxZ3Ql/fKstm8HbGfVC
TLSH
T1C522B7566E28697B8CCBE20DBB55BF93E6F95032A1901F44AAFCC61C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 21e37c1c31ddd3f5b989ffbd8b6ae4b9c275bc289836e4badc1925aec018f43f
MD5 d438b5acf517cf5e1f9b9a1daf1a848e
SHA1 e8802583e069293e6ecd3033df1fccdb01634d51
SHA512 dc60f3254c4e04df2dd4a8a6a77943e180170c53b1431cef5d6e9fc983f973676b551439a21d917894b9d7705b87cef602b8e319ce8ebf7edf3552af9a706803
SSDEEP 192:sxZ3RrWl/fKsUBVIdpdcHW6+WNGYYBa9MIg5eJ:sxZ3Ql/fKskm6HbGf5Y
TLSH
T10C22B7566E38657B8CCBE209BB55BF83E6F95032A1D01E58AAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 60529df91e148e1387c2a46eb9b5a8cba47bf70ec55c52bcdcd72c2e5f41510e
MD5 07a44fa8d7e90043c8fe14dd7ea643cb
SHA1 db48d1a52eb105b124be34cfe265f221af6bec27
SHA512 9db4897a71172c88b52159ce40780b5cec4b0f6068d82826c5971aad8571b0ca69c5e4cbefe7f823b04160ab52512c232bc9f3d6fa1ed4e4de324da7263994a7
SSDEEP 768:mDyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXFropw9F:mDyYR7jWv3NpBu1ja/CL8OX+U
TLSH
T1B8C2E82B640DCB7E4FC01E9DDC5A6FDB6E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a428428495f7a2286a11d8a76507e7c7d9b0c10d3bcebea99c32ab95463bf1a7
MD5 6bc9d55e9fa88ad58a2224ba4cf5bff8
SHA1 0e5e75dd4b1a4810736617e85150f6d3e27cb622
SHA512 e021c5b4bf3fb8b5ec7aa42bab661ccd41add1644f40394448dd2e15460222f34aca0a27c0dc86bba6fa923a70058dd99b9cf0c4fa6466be8623c5edefe86d4d
SSDEEP 48:KgFk51Hznob7+7ISNoK9t1foxt4Yuf1lyLuJkomscVbgnoISAVK9k12VxOFYfgcY:KY+4K/K6ud2K2U6uTyK4og
TLSH
T1B191AE1335BB020039BE254890B497AA064231F37014EA2EBFBD09E58D6FE185EFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596d27.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596d27.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 51959104c6d192a5128627d20e2ea807efca92c5a8b0432883b42095d7e9ed4e
MD5 4ca5e049d9a361510f943437b6ce8a1f
SHA1 b1af3324c1d3803795b76ebff5211c8a96db4a9b
SHA512 38b57a4224014bf59a52e6b3d2ffde2399dd284d8494897e8caf2fea0dc4f78b4eefe30d9ea348cc903aa51153840cc4d292096b6af55d4ea6cd6e543c69a1fa
SSDEEP 384:WviFiZcIPGsNj8TUNTUlIl7xoOiOiwQX5+Dt68xXu8Jvysa+VYTd7U6o7:W6FQu2wgbVwTkDH3JahgGLk
TLSH
T1CCA25C329D98DC7BADFBAB85F54A32139EF41077D5C8AB90E7DC5F1D009A198030AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 92cef7a7bd950f55fdb416b48c26d3b7d10470d5f91e1423856c3ac743ae73b7
MD5 ac25ebac98b66afbd0910a8741b5cfc6
SHA1 71853fdf80102c18afead2e87f1d69e7961ba937
SHA512 906964e4d9fb6842c0d70da4e19f3c9e522ae02deebe652e79bfde1b5fe7c0a5dbb1c7dfa2d98ec1c6c9e116a6703b7825d3cabae157dc0a43a5c7f8588d0afd
SSDEEP 192:EONs6nnHGQmiUydbQYcX5hQDP12jzor21mfMcq0U6:EONs6nC6QNX5+Dt68DXU6
TLSH
T1E502DB35ACA87C7B9EF3AD49B4462713AF95213BA5942BC4DAE81A1D00D765C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2674a711f143ee2c04bc6ae3171871b488a8f5a28f6cefc7aeec9972327168f5
MD5 afb3ae293c310bfe0921cba37758b54d
SHA1 a046d4d83facad032a1d2582c5b41e9570b10186
SHA512 f0e230d64986be19012c4810642affcf913d9cce35ac2fa1434bd7e0660bc4eadc683d248efc6918778864cc6a87bb3bb1aa71af15cee665b76475f929e88375
SSDEEP 384:0ZcIosNRexoOi0iwQX5+Dt68xXujJvysa+VYTd7U6o7:yoFVuTkDH0JahgGLk
TLSH
T1CF827D319DB8AC7B59F7A691B54B36139EF85077A6C82FC096EC5F1D00DA698030AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02ac28f26ff6a821442e3f6009977673309c1dc03f028fee40d0270d9c5093d2
MD5 c9b74dbee1a6b0d931179499293b5f6a
SHA1 e04ce15aff8c6ef7ad88fa6bba8616eaebbe0c65
SHA512 b849c315682f40f9965ab8e655d43bb9bb67785ea5727b54e224f2ba46b56170f9aca91d96fe886d3ea3ad8fdbc0ef2a0dbb32fa21f4059c3abf94c630196757
SSDEEP 192:EONM6nnH6QmiUy8bwYcX5hQDP12jzor21mxXu3g3f/5vyU6:EONM6nWFwNX5+Dt68xXucJvyU6
TLSH
T1DA121B35A8A8AC6B5EE3A585B0873553AFA51137E6487FC0D6EC1F2D01DF66C1309D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a0510f9f0b8af110c148d188c8e906743bdeee4f8b74038daeb99795f2ec7443
MD5 b839b99b7e615f340d49e19a30ad9626
SHA1 b1253ba64e92fd351325acc209e6160044c353c3
SHA512 0a1b62f7fc3b9a947974e15e6bbe451f8e38f414d36715bf04871abbc57d946ea03c97fa58156801efd5e9704bcbcacc475d3ff95dd22407c690ad5a1576a8be
SSDEEP 384:ZZcIosNR7xoOiOiwQX5+Dt68xXujJvysa+VYTd7U6o7:xogVwTkDH0JahgGLk
TLSH
T140828D319DA8AC7B59F7A681B54736139EF85077A6CC2FC096EC5F1E00DA698030AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2d51d44-5e32-44ed-9e19-c4ea8ffc828c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d2d51d44-5e32-44ed-9e19-c4ea8ffc828c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9eeb30d10c8bc836287377e9caa6ec42836df4883cef2783769712241c216887
MD5 df94f801d641980a5c1c0152bccf5202
SHA1 c9e47f102a2f2b56921794745c21f162c03cc845
SHA512 fbb70ac2fbc1bb2b780fea80f6ffce617cca747b4a9733825c7632fbb166bef839e6b5a9ef8ad02c0f5ad1e2093b16e35a265c1f4f80065048b40fcc45ac7f8f
TLSH
T16441FC5CBAFA1118B3B76E5A5BF6A86D447BB8332E0AD55D00120D4F0A26B40C9A1B37
MD5 SHA1 SHA512 TLSH

Submit Download