e375774a4fd025147f02e58e9ede016342029293a8b527b72979d148da38b311

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e375774a4fd025147f02e58e9ede016342029293a8b527b72979d148da38b311.html
Size 6KB
Sample260913-bpg44sdc47
SHA256 e375774a4fd025147f02e58e9ede016342029293a8b527b72979d148da38b311
MD5 ae126140d085338c33348738b96e1610
SHA1 72e45bb85887fdd74ad1fa97cd5c7cbcca690a43
SHA512 5ccfee1467edbe9b8df04b3ee3f3c8ef13edfd9d3082a658d82b910c8a9636a34149c344851af94c5f2e58317aec914c643ae79f72586e52ae201050ecc440ad
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69cEcE8XECgUdDhQoKDejCPJu:zWLJlxeLf80WhtKDejCxu
TLSH
T14EE1B51A9E4C853F410005DBF0A16A1CD89B487BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4624	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338302797270788"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{4DEBA1B3-9FBF-40D7-B545-D9A5D7F4C61A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3880 wrote to memory of 4352	3880	msedge.exe	84
PID 3880 wrote to memory of 4624	3880	msedge.exe	85
PID 3880 wrote to memory of 5116	3880	msedge.exe	86
PID 3880 wrote to memory of 5116	3880	msedge.exe	86
PID 3880 wrote to memory of 5116	3880	msedge.exe	86
PID 3880 wrote to memory of 540	3880	msedge.exe	87
PID 3880 wrote to memory of 540	3880	msedge.exe	87
PID 3880 wrote to memory of 4368	3880	msedge.exe	88
PID 3880 wrote to memory of 4368	3880	msedge.exe	88
PID 3880 wrote to memory of 3956	3880	msedge.exe	89
PID 3880 wrote to memory of 4368	3880	msedge.exe	88
PID 3880 wrote to memory of 3956	3880	msedge.exe	89
PID 3880 wrote to memory of 3956	3880	msedge.exe	89
PID 3880 wrote to memory of 1472	3880	msedge.exe	90
PID 3880 wrote to memory of 1472	3880	msedge.exe	90
PID 3880 wrote to memory of 1472	3880	msedge.exe	90
PID 3880 wrote to memory of 688	3880	msedge.exe	91
PID 3880 wrote to memory of 688	3880	msedge.exe	91
PID 3880 wrote to memory of 688	3880	msedge.exe	91
PID 3880 wrote to memory of 3324	3880	msedge.exe	96
PID 3880 wrote to memory of 2728	3880	msedge.exe	97
PID 3880 wrote to memory of 3324	3880	msedge.exe	96
PID 3880 wrote to memory of 2728	3880	msedge.exe	97
PID 3880 wrote to memory of 4776	3880	msedge.exe	99
PID 3880 wrote to memory of 4176	3880	msedge.exe	105
PID 3880 wrote to memory of 4448	3880	msedge.exe	106
PID 3880 wrote to memory of 1228	3880	msedge.exe	107
PID 3880 wrote to memory of 5052	3880	msedge.exe	108
PID 3880 wrote to memory of 5052	3880	msedge.exe	108
PID 3880 wrote to memory of 4752	3880	msedge.exe	109
PID 3880 wrote to memory of 4752	3880	msedge.exe	109
PID 3880 wrote to memory of 4516	3880	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e375774a4fd025147f02e58e9ede016342029293a8b527b72979d148da38b311.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7fff12f2c188,0x7fff12f2c194,0x7fff12f2c1a0
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,771240576104123084,1634317911142021386,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,5252559240022799252,13590399659479209279,262144 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:2
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,9474198225222254411,1991858585868247112,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,6642639110962708656,15241074059060747365,2097152 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,4040428170974305507,17131769703265261454,2097152 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,15178591434349762460,1710170283813878289,2097152 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,4273731847374606837,3738959094732214572,2097152 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,14687380477208253954,5367653545212842990,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,16245430659642649067,8341450030503981269,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,6088854867537751847,2604619696543544439,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,6088854867537751847,2604619696543544439,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,16434651814698853948,8205192255145207453,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,13942383329957441103,17740723572617072775,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,7262149926178148737,1545440628984245520,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11721812132027105936,1259931390277847114,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,9955243608566081860,5000122384739502596,524288 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,1917253454792856311,7083244846987366925,262144 --field-trial-handle=2652,i,13102729321375061284,2770869745887009290,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5346cd3c34c248d92af0cf3904e1495029fa039d71c77c15a1f5a1161df39b69
MD5 e7360fbe30b953a8d6d2e996b2c80224
SHA1 98e93518a0b7f16955f8b4a7583c6b419fa887d8
SHA512 56fd6a01d3944d0134c2b2395ab9acb4f5bcdc570af3243ed4a256a09c6fc976a7bcce707f89b47f6955b23fde292c139c92d687bc43f3fdcf8f727d392b0532
TLSH
T128615E86499885D6FB96FC32A3D900A7BF7B69C24783AF8B839CD87ED446705208419C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e55a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e55a.TMP
Size 3KB
SHA256 4f4ed00bd520b9353d7d78c8bde2c3b19d176327126126d28c25126c9bba95b2
MD5 b15eac96272958e4a18f0c805ead6fd4
SHA1 d8abfdca9de1b4e2fe28f1413a545ffe1318d275
SHA512 b01635ece19202b0d460699a69ac9d6264f0e2e525ae7b065e13cc036c8a10c43ea050aab39836753966bf171c6cce53e467f9a6867eed3771dac6054e83ba0d
TLSH
T1D3615E86499485D5FB96FC32A3D900A7BE7F69C25783AE8B839CC87ED44670520C419C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fc60169046e56f4138871ef9fcad6d42f251cce133e1726b8457702ea5c57c52
MD5 9da25e10e2d954d5699c6d8f876e7ea2
SHA1 34ef3178e709cc130dc71fde9c88266c50b84303
SHA512 5a949af98d75fd75e85d54a0d398007800a3ab2f667638f26f216c21270549ead1925d01ff11db2db973a65b60f896447cc9c43b02d44af5486b56d13b5111a4
TLSH
T152218FF7C3D4867ECD0156F0AA24AE27CE1D0646426C3C1699E4EF1B97F24B5D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8bed721a57a8c128421fcfa53431658a40746abcb30d8005c147467c408f70a8
MD5 fbf5e94659585058571aefdad41ca234
SHA1 4281d11448987538b6ff9620e06f3de84c058bb7
SHA512 7f312227e3a5c9961ed6cf6fde34b0f042c9f33ec8e8cd623b39cb1f3a10c3cdb4f6f6638ad7eadfe684c717c1bbb3a59dd431c4364d5d79dfac566305f54941
SSDEEP 192:sxZPRoW2/fbsR6dVIdpdfHW6+WNGYgUuRIgrJ:sxZPl2/fbsR6dm1HbGB9
TLSH
T16212C8556E28A97B8CCBE21DBB15BF53D5F95032A1D01E48EAFCD61C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c36235f9f0b0d435117193a6e9451cbb7a0ff0a015a8c8736e4132234d346e5d
MD5 5c33cb20a621a5ff797701cf5b85ce1f
SHA1 bea05cc6a1300926457683968e1e921cf31ba2ad
SHA512 1215c828c040d26bbf3a017f71b29f27c37e8b994b11bbf49e288f720d1bf713cb4493a48948393a955911b72da15a2b685a2335b34084d17ec092bd765942c3
SSDEEP 192:sxZPRoW2/fbsc6dVIdpdfHW6+WNGYgUuRIg50J:sxZPl2/fbsc6dm1HbGB6
TLSH
T1AC22D8556E28A97B8CCBD21DBB15BF43D6F95032A1D01E48AAFCD61C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 042fa60695dd50fec3a5c29b3014c6e72a4aa506af69e0ce48090f54d3109504
MD5 68ff96463d5ffb0a429fc685d3a53e0f
SHA1 f5aa2e42ebc9eee0d2dd4320eb16e69079c036b0
SHA512 ac439c549b8a03612ee33f34160424f5af5b46f5898951dee601a751b6097afb14a4ace145603201b331ef192cbdb6477737d11a8ef5b629e9d794a08b2673ee
SSDEEP 192:sxZPRoW2/fbscmdnIdpHfHW6+WNGYgQuRIg5WJ:sxZPl2/fbscmdo/HbGJI
TLSH
T16522C7556E28A97B8CCBE21DBB15BF53E6F95032A1901E48A6FCD61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5227e0ce5df967355c3cc9a44df5ac726c49a038a7131f3d35d2247a38abacd1
MD5 b993bc42bd88c84e32b9d2ee7dfd2ed1
SHA1 c5be46b23a5c28ed3a9f34bd3909b11543469a14
SHA512 d34b7972ed6aae22b1d6b3a93a967649db9900216cf4139a074faf03482afec302098a7e6440d78161704eabc31da0ec9bad0954ab6ea8a55662692277b6e830
SSDEEP 192:sxZPRoW2/fbscmdnIdpdfHW6+WNGYg+uRIg5WJ:sxZPl2/fbscmdo1HbGzI
TLSH
T12722C8556E28A97B8CCBE21DBB15BF53E6F95032A1901E48A6FCD61C05E7BCD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 91871b1566ab6319ad3626c4e52b67dbfa1289a772eb9cc57c16d73bc8750e13
MD5 a02f1e387a8c341d239d186ce6037b82
SHA1 3910da2fce076e901a2c9881349f31c745641dbc
SHA512 ea4b65bbee4b0fdaf7ec6431b6595295ecebc9def2ce740e56886aeaec019395758f1ff48049e789940ab2c4c9b0a2f374f088ac3d0a4961cfa4b6a7a1de9379
SSDEEP 768:g9ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz/rowKQ:g9ichfPWvPZplu1jan+LKgzsrQ
TLSH
T193C2FA3B644CCB7E4FC01A5DDD1A6F9A7EA802C7A6688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a880ea5803e7be3e683998815bc44abfb5db6c8454d55a0e268a98871b951a30
MD5 28d3d9799714b40c9e04f4fefb08caf6
SHA1 d99c78e202cc499666f33c0ead180edfcd4bbfdc
SHA512 88d8f97b220d410953e7e33952f2ed12f1b40028b9a7abfb1ec5182fcda19a79a4d068df791f6f59ef57536443dcb7ed325227e9805b27eb389f0361465525ec
SSDEEP 192:uIzTsNNM7QPF3FpcphvLVMQmiU12pU4BGYX59eznCi7h89njkH1V/5LU8:xsNNe0Xw5+OrBGYX5EWuh89w/U8
TLSH
T1C1422B75A878BC3B4DD76550B44B36139FF8512BAB847F9485EC1A1C01DF69C230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6a4e47ac8eb9c42e4c2ad72934e8e41655958d080fbf3bdbad0378b457fef047
MD5 0627f9e7a390edbbbc77deee8b0d6a49
SHA1 3fedf3a6ed7c3907f4552c73b1202ff4ecd5fa3d
SHA512 9b54f16d473fb65f1ee2ea67f5002c6422f8ef385ea05c7d0208150e1f377f094c48f7623a4e77a2f615b3810883168c3f0e84907405f740e02bc6c1f5db20fe
SSDEEP 192:uIzTsNNM7QPF3FpcphvLVvQmiU12pU4BGYX59eznCi7h89njkH1V/5LU8:xsNNe0Xw5zOrBGYX5EWuh89w/U8
TLSH
T163421A75A878BC3B4DD76590B44B36139FB8512BAB847F9486DC1A1C01DF69C230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e1420132c924f970dbe342bdf10fa60a321289ca46d0bf910fd23ae08dd47e4e
MD5 c5a245c0bcf82f123c2afeb1d6a8c921
SHA1 acc05a82cc100b35f908708ab24090acf9f4b13d
SHA512 7383aa9e5503d3ec651e98b02d11190dfd2b35476afc852a5f935cb1919223c78992effa5f8bebe23ba1ac428604fee198208d2b2b0be485578d85d58f79b947
SSDEEP 384:RqZcIdLsNNb0Xw5+OrBGYX5EWuh89v/sa+VY+d7Uxoj:yFfXwJFGYuWsIv/hgFwQ
TLSH
T1BD927E75ACB4BC7B4CE7A691F94B36038EF85127A7C86F5485DC6B0E01DA6C8130792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 939c590f3c4d5cccc1915c18eeab9a2319ade78dbe904be11ab0ab55b7bd58c2
MD5 1e80f27310c063d0345a8653c9c8f7a8
SHA1 a2e27cfd8837374e596591fce08e96786dd50ad0
SHA512 6848103b21723dec1b617a88bac271e342b2c27ceb198776d3a6df585b4d60a526675f97cbc852f79a2a7c1bc4a9891aed74721ae460ac0a3a2ed0c99d2ab158
SSDEEP 384:KZcIRsNNb0Xw5+OrBGYX5EWuh89w/sa+VY+d7Uxoj:oRfXwJFGYuWsIw/hgFwQ
TLSH
T1F0827E719CB4AC7B4CE7A691F94736138EF89127B7C86F5485EC6B0D01DA6C8130792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c1355e1e66602c401d673f6bbd97d870625ead116a5e5c79f86af78c12a621b6
MD5 a5ae4c9de1a22e5c857b661678f5fe2f
SHA1 db7ae06b121f998a9819c50654b6a475576e2776
SHA512 640b65ff031633d8e0e623081cc86d55a3198064323bf2c66cb3a0ba3b39e014707c517fe32556b9de0237dbf3f4b7f53bc1da620dfa6ad0d6e215d659e64e84
SSDEEP 192:LJONQ6DphmqQmiUy2Vq8wGYX59eznCi7bkk7xHFiU6:lONQ619DRwGYX5EWuzaU6
TLSH
T1C302FA39E8787C7B4DE3AE55B44B27135FE8212BAA506F44D6E81E1D01D768C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e809720bb934c6ee4375d7f580a849009971c013e105958fc2281ac51882f032
MD5 24d4178eb3eea524fbf48ca706624da4
SHA1 b0857d7bf7498d9f7b5bc8fe9d4a7dc6df63c673
SHA512 ee64cae0f4fd03c25a76705cf6bcf5a5fcf336bffe227b3d841f8fe84b55c30c4e5385e776c72b67933252f6ee1c1787e2baf5cee65d4d7a5ea52e21294c59b6
SSDEEP 192:LJONo6DphXqQmiUyjVpwGYX59eznCi7h89nJkIIV/5LU6:lONo61sgpwGYX5EWuh896/U6
TLSH
T1EA120A35E8B8BC3B0DD36991F44B36139EE8522BEB847F9495DC1A1D01DF69C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ec8c3274b65ccebcbc9d9b219402bdc7e1d20beba9eac570f87bc596edef2949
MD5 b6602aa043e499ecd2b06f128a66f8bf
SHA1 74235185f0def18b2eb10a28412c6641a2a7b63f
SHA512 d4b0fea71cbcdd8c78fd583d8e8d836124882c52c2310297b8133ae6759072b4e70801fd76d176f2f68d7375d16de4ae9becaa0daffcd608ca6fccd10f6dd3c1
TLSH
T1CD412858B6E91148B3B36F169BF6B96E447F7D732F06C4AD10110E4E0667A41C871733
MD5 SHA1 SHA512 TLSH

Submit Download