31e1875ae256d750b2f11d2ac3a0ed0620040da9e395fa5507219e3b7e0b866e

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_31e1875ae256d750b2f11d2ac3a0ed0620040da9e395fa5507219e3b7e0b866e.html
Size 6KB
Sample260913-b7tkvsar5v
SHA256 31e1875ae256d750b2f11d2ac3a0ed0620040da9e395fa5507219e3b7e0b866e
MD5 a7cf7e6efde7531e8b34192d365a73f6
SHA1 7f83754164f913a3a038cd7353b3530d4763c02f
SHA512 938a586faf0d81ed21094c4ddd3879e7e5dd1299a443a2082cf0886bdac68a8ca2560a2500114fa934b8c4e56e8c74ee49cd127099baf2f4932187bb45026dc5
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69BEcE8XECgUdDhQoKDejCPJu:zWLJlxeef80WhtKDejCxu
TLSH
T1BFE1B41A9E4C853F4100059BF0A16A1CD8AB447BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
992	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338210367294928"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F3FDEA4A-CC8E-41F8-B0BF-26693EFE461D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2308	msedge.exe
2308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 4424	628	msedge.exe	83
PID 628 wrote to memory of 992	628	msedge.exe	84
PID 628 wrote to memory of 3752	628	msedge.exe	85
PID 628 wrote to memory of 3752	628	msedge.exe	85
PID 628 wrote to memory of 3752	628	msedge.exe	85
PID 628 wrote to memory of 844	628	msedge.exe	86
PID 628 wrote to memory of 844	628	msedge.exe	86
PID 628 wrote to memory of 4420	628	msedge.exe	87
PID 628 wrote to memory of 1752	628	msedge.exe	88
PID 628 wrote to memory of 4420	628	msedge.exe	87
PID 628 wrote to memory of 4420	628	msedge.exe	87
PID 628 wrote to memory of 1752	628	msedge.exe	88
PID 628 wrote to memory of 1752	628	msedge.exe	88
PID 628 wrote to memory of 2120	628	msedge.exe	89
PID 628 wrote to memory of 972	628	msedge.exe	90
PID 628 wrote to memory of 2120	628	msedge.exe	89
PID 628 wrote to memory of 2120	628	msedge.exe	89
PID 628 wrote to memory of 972	628	msedge.exe	90
PID 628 wrote to memory of 972	628	msedge.exe	90
PID 628 wrote to memory of 1572	628	msedge.exe	95
PID 628 wrote to memory of 5028	628	msedge.exe	96
PID 628 wrote to memory of 1572	628	msedge.exe	95
PID 628 wrote to memory of 5028	628	msedge.exe	96
PID 628 wrote to memory of 3032	628	msedge.exe	99
PID 628 wrote to memory of 2164	628	msedge.exe	105
PID 628 wrote to memory of 716	628	msedge.exe	106
PID 628 wrote to memory of 2552	628	msedge.exe	107
PID 628 wrote to memory of 3772	628	msedge.exe	108
PID 628 wrote to memory of 3772	628	msedge.exe	108
PID 628 wrote to memory of 3660	628	msedge.exe	109
PID 628 wrote to memory of 3660	628	msedge.exe	109
PID 628 wrote to memory of 2308	628	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_31e1875ae256d750b2f11d2ac3a0ed0620040da9e395fa5507219e3b7e0b866e.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9612ac188,0x7ff9612ac194,0x7ff9612ac1a0
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,14190004089111579322,16625687752907712270,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,6521675939734609309,1554412089926918284,262144 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,10593385530858270914,11934692914037556178,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5231089964233975016,130164406305478782,2097152 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,13121145974902875693,17214482200948235960,2097152 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,6133928269250298346,1290116101842686280,2097152 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,2781681073675588736,2918629934630816631,2097152 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,261876708298504186,10819751943189029732,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,2964419458955860715,5597140755329565014,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16193612434431415994,15709978294147167899,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16193612434431415994,15709978294147167899,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,9924015248810601352,6029430794191447261,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,11146475171449729930,11518062987695656976,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,15029688350550512634,2588958652823742572,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,10492238220886714375,8317908803736555618,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11865948834155363830,13651913610544218821,524288 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5804,i,9192512747428174787,1124666628082729016,262144 --field-trial-handle=2272,i,9031875173904900999,14736202951240380988,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3c16a3865766805c8f4d0ac84b959fa92438e53c7cd785a5c2e7542405efbab5
MD5 d67f5ab4eb299ed897f2ffdfad7336b6
SHA1 448d396068b6b6c9080bc2c6da97d6b401c097c3
SHA512 80503ddf92710573b00aaf46cb1dd6aebc77d9cb5e18c6623c72af5ab879f595f920dcdf8d89227820f990fcde2998c8143d39976c61d8a2083398fa4b89e509
TLSH
T1BB51FA8654638BD4FBED61FC8DD211CF373CAD8086830E72A195DE797827794B12C051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591b9c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591b9c.TMP
Size 2KB
SHA256 e8a0d1ef5bbdce478ce0a4cd8d4daf5f6ccd27bf1d72cd7d11f5906a22a13285
MD5 576d0016db482f82b5ae5a39fb624e0e
SHA1 4802119c0ddbb2fd7c1e9c133206fa86be51f770
SHA512 be5f1d80c156703322dbd967d8cc4ca767867841e91e9570858723b43e6cb74c9ae8bd401c4008ceb7dc9a09d403e0edc58b58c9531e6b56d9eca0f6f148211e
TLSH
T19F51D48658A38BD4FBED61FC8DD212CF3B3CAD8086830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 21dda0059bd994cb06ab2af59f298927db37f940d911de654eb845915eeb0542
MD5 fb490e47fceffda28d37781148ee7eed
SHA1 bce588052ad75fc1b837484de5672fc88cec7bbd
SHA512 98ab66c2cd8ee438d8e9b511c69063be832e13e6c3c619bc2d4365b0ddb4616d0ba0d983812275ee712205d778da676d4b4189cda7f1d2dc3298af41ba6a0a4d
TLSH
T13F318EF7C3D586AE890156F06B24AE6BDE1D0A4682283C15C9E4EF2BD7E24B1E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5226ec21794b6a448ce88f2950b8662754e1eae857b80af99a0b6c63ae44e05b
MD5 d4eb34011c7a6c174b16ea071141a594
SHA1 6201fba7cb13291449d2c69f82e321a8396a5ea7
SHA512 bd6e71be201be00f6eb7da676c6b25d06652e2faf3a2263e516830b3afb1f09c8d0a83224ef0710f2845ae31ba1e29c7e41c885b69b6b6fa4bcdfd2e4024db36
SSDEEP 192:sxZhRJW6/fJsASrIdpdwHW6+WNGY36av5IgrJ:sxZhC6/fJsN0mHbGXO9
TLSH
T18412C8116E28A97B8CCBD21EBB25BF13D6F9507291D11E58E6FC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 026a3e650185bd2a40802f25495002427db358e7316d51e45e52864970e02cd5
MD5 81b570ce164166be568f141d4a60dd55
SHA1 7c1710140bc890b19890e16bca0647c16a2ee909
SHA512 f24f0d90168ca240f88adfc8e5a2a03a0248e473629ebcfd1a31341fc0edf9fc201fe67e1528556942c2fe2c64597688558d128fd3772d90bb549fbea5d9eeea
SSDEEP 192:sxZhRJW6/fJscSrIdpdwHW6+WNGY36av5Ig5AJ:sxZhC6/fJsh0mHbGXOu
TLSH
T1A322C8116E28A97B8CCBD21ABB25BF13D6FD507291D11E58E6FC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ce7b1e7f64849153e35a24bbf897eef172be7589832a13238454dd73f6fdc873
MD5 b3b2a1c8dbaa8d58df58eb98f8cc03fe
SHA1 b02ef2d7c83a288549e20d564c56861f1f9ebb41
SHA512 2a66f8092e41aaf53aa3cf8d5396bf2d26e991c43c6786337f8d62c219a3d2e608753c8dd8a8bd174a97712e490a60a8b3477b2f7a2c4508afd65cd0e6cbda36
SSDEEP 192:sxZhRJW6/fJsISnIdpdwHW6+WNGY36dKv5Ig5yJ:sxZhC6/fJsFomHbGXdec
TLSH
T17722C8516E28A97B8CCBD20EBB55BF13E6F9507291911E48E6FC8A1C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cac70ae71d1e6671974933e3078da97c7b953dd242f835ad96dc5d1cfd03b036
MD5 92c452889bf836065c7cabe6d72d16e9
SHA1 27417c87e6febcacdc9fa484a706eebc677d1c32
SHA512 3cef60480ddfd2fec5f6d2ab6dd29ec4c9dbdefc2ea1d03098967dd336bc99e844552b99a8d6e9cf85262f30d37175dd98a6072100cb644101e219ea798915d8
SSDEEP 192:sxZhRJW6/fJsISnIdpHwHW6+WNGY36ktv5Ig5yJ:sxZhC6/fJsFoQHbGXkPc
TLSH
T15422E9526E28A97B8CCBD20EBB15BF13D6F9507291911E48E6FC8A1C05E77DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 69919505489d9bfc955456c8ff868ccd2e1485f1142431ae0bd8524a28ff80f7
MD5 5837b63b5dfc0f049fae5ee7d1aaf153
SHA1 24f3c7ecd8caa1b53942b25e3d7e8b1e2a9c1b70
SHA512 ade0f20646d8e0857ce28803e727c244175a0733436eee7dee7ef1fb848b88f72849cb66e5613d77a9694b20d89d48a0b26e82190fe1f122c5c98f36461d8042
SSDEEP 768:VlKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Jro81:VlKlm7QWvUYe0u1ja8/L/E/i81
TLSH
T1E7C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 96197d725b35cf43a8249fc9c714e495a7c9d1898ba24c46377389d14b8b60dc
MD5 146ba809b9a8f55d6d1dbbe4e0722333
SHA1 3433eeb9e6a6b7ff0c3f59445b17f7623367ce54
SHA512 cf4d50ccb85d49a90f7700de384badaad6c90756ef86e5f950010f1fa33828bb4cd979514ee56f9d24eff1f4bc1ed9830d9c1ed8915ed913a414427b16dc046b
SSDEEP 384:nZcIHsNmFHubfB3h//F+oVbI7O6R2FeofXo5:PHCx/tx9I7TRMy
TLSH
T1D7827D716C78AC775DE7D286F40736178EB8809797C96F90D5DCAB2E04DA6A81307C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 eae64ded2e2d6a302365d9220345ad389f5ae09d83062ac5b11c2cf6e70db7e6
MD5 5d9fea9d24446dd73a61b83663b46531
SHA1 45b3dca8dd7811c84e77d768da5632a3f6b53bb6
SHA512 2934d639dfaf783db3c9a2273a1b9c44fc9d14989258e25bb11c60b473277fb0ad6d994bbe81a95a0f7d8cc6b1c88a7352c9eaf185a5cec4cdc182e6ec6769b7
SSDEEP 384:wqZcINhsNmwHubcB3h//F+oVeI7O6R2FeofXo5:Tjsx/tx8I7TRMy
TLSH
T1D9927C716C78AC7B5DEBD246B40736138EB8809797CA5F94D5DCAB2E00DA6A81307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b44e25784e899308ee4130ac5ee139cef6c463d84b2a6423d145038d4a04ea9d
MD5 cb8af02f252853ff2cae0dc4a827efd2
SHA1 2f1f672cccf52e8069632554790f0c0b12c25069
SHA512 8ffdc72fab4e7c6823fa1184d8f0e3bbdcf1fe6c3831829be1939d52187cd079d99d67e81840bc0caa283bbe6da55dedf5cfabe4666054700d7b76d0bea0c3ca
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5SaDkBKP4v+Y1xf//ojdAxXRtIorOh:BONp6JUm0QmiUy/Iso//F+o6BCf0U6
TLSH
T17802D839BC787C7B8EF39E45B0477B239FA4106BA6916F94DAD81E1D01D725C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6f216b32603d5c7c7a708a7b3a2e7446bad84fca9aa93f10f1f7daa84e49f8c1
MD5 5ac51ba8bcaa141422c5136ab943b15b
SHA1 5d1b78360fadd6788bc7851bc96de0aa0642ea5e
SHA512 47a443667658d27cf4b17f3f12e965fbb8fff43bd5be546d899bfb2fce0b35f67e1ad7984f25d65f8c49de7ca76938b0dbe072fa68ea614252933f53468e3651
SSDEEP 384:jZcIHsNmwHubcB3h//F+oVbI7O6R2FeofXo5:7Hsx/tx9I7TRMy
TLSH
T138826C716C78AC7B5DEBD286F40736178EB8809797CA5F90D5DCAB2E04DA6A81307C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 600d2b17032b1db673174d00fc6aae7cbdb34560a4a2a78376bf01ca27afd935
MD5 b79b669b150d6bf54db8be6fd14f1e39
SHA1 93495823c29751395e56578e10a37886d729801e
SHA512 5df88b14d1924c0a93173fe81bb00fc48a8ecf1abef9efe49f1a8dee7bd2839c0f438909c310ff92ed985480b9d8803d4b4f1b3fb4e1f79b36151446105e3944
SSDEEP 96:KqONkuuQsjpfbUYH5ih/cIPURHl8h4otop5SgDkBlP4v+Y1xf//ojdAxXRtIoreW:BON/6JUnQmiUyJIFo//F+oV43NxT/8U6
TLSH
T101120835AC78A87B5EA39A91F04736238EA44167DBC96F94D6DC2E1C05DF26C630B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f75b47789f0f5e7f32d063171a0fe6507026b3db8b6359819c79fc1d48e480ec
MD5 e9c39dc3ce50ffdedceb43f5f4ca053b
SHA1 8bc2c5e32c32ed9d37ac0029f1a28a7e534a4c87
SHA512 94697a9419351555dae33f0355de67e227fa0f85b177c72aeffada48c24b9fed564425af482eb468a11b1a08763193128789a597307c1efb56676000fb0fbc5c
TLSH
T1A9410C58AAEA1148F3B77E5A5BF2646E887BB8732F07909D40110E4E0A66740C961737
MD5 SHA1 SHA512 TLSH

Submit Download