6f40ff4401cf075928ca845561a5db6d820111a602fc181a91cf5027151c7b2c

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6f40ff4401cf075928ca845561a5db6d820111a602fc181a91cf5027151c7b2c.html
Size 6KB
Sample260913-br5cesap5v
SHA256 6f40ff4401cf075928ca845561a5db6d820111a602fc181a91cf5027151c7b2c
MD5 e349848ec69364be71fdf704c4825820
SHA1 88e2b213efc71bfa3da28d579826a13af443fd61
SHA512 81cdda768bfa8ceed2eb05223ec90a3067e210d3bf6fa4b61a8f9a25dca219c588e3f830da708a8599689a1d16a480142e0c1615259809c42094f4813ede7bbb
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69eEcE8XECgUdDhQoKDejCPJu:zWLJlxeZf80WhtKDejCxu
TLSH
T1D0E1B51A9E4C853F41000597F0A16A1CD8AF447BD702D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338200923555334"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{9D7AEE28-4872-4584-BEE8-5A2FE8AF67BC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 2420	1788	msedge.exe	83
PID 1788 wrote to memory of 3796	1788	msedge.exe	84
PID 1788 wrote to memory of 4760	1788	msedge.exe	85
PID 1788 wrote to memory of 3796	1788	msedge.exe	84
PID 1788 wrote to memory of 3796	1788	msedge.exe	84
PID 1788 wrote to memory of 4600	1788	msedge.exe	86
PID 1788 wrote to memory of 4600	1788	msedge.exe	86
PID 1788 wrote to memory of 536	1788	msedge.exe	87
PID 1788 wrote to memory of 536	1788	msedge.exe	87
PID 1788 wrote to memory of 536	1788	msedge.exe	87
PID 1788 wrote to memory of 4160	1788	msedge.exe	88
PID 1788 wrote to memory of 4160	1788	msedge.exe	88
PID 1788 wrote to memory of 4160	1788	msedge.exe	88
PID 1788 wrote to memory of 3752	1788	msedge.exe	90
PID 1788 wrote to memory of 2140	1788	msedge.exe	91
PID 1788 wrote to memory of 3752	1788	msedge.exe	90
PID 1788 wrote to memory of 3752	1788	msedge.exe	90
PID 1788 wrote to memory of 2140	1788	msedge.exe	91
PID 1788 wrote to memory of 2140	1788	msedge.exe	91
PID 1788 wrote to memory of 2356	1788	msedge.exe	95
PID 1788 wrote to memory of 2356	1788	msedge.exe	95
PID 1788 wrote to memory of 2072	1788	msedge.exe	96
PID 1788 wrote to memory of 2072	1788	msedge.exe	96
PID 1788 wrote to memory of 2736	1788	msedge.exe	98
PID 1788 wrote to memory of 2900	1788	msedge.exe	103
PID 1788 wrote to memory of 2912	1788	msedge.exe	104
PID 1788 wrote to memory of 3164	1788	msedge.exe	105
PID 1788 wrote to memory of 4180	1788	msedge.exe	106
PID 1788 wrote to memory of 4180	1788	msedge.exe	106
PID 1788 wrote to memory of 1240	1788	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6f40ff4401cf075928ca845561a5db6d820111a602fc181a91cf5027151c7b2c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffafddfc188,0x7ffafddfc194,0x7ffafddfc1a0
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,16015129380872935267,5467037165242165383,262144 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,17234113191941070810,10485555330300161778,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,3504094994682655053,602301642631250706,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2230856794144807497,2080533802614240579,2097152 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,15958714613317467198,7019418935088777019,2097152 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,1003247758394131092,14904370018901531325,2097152 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,3736855206459955111,11864225171617733771,2097152 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12449187521110593424,539644056636395452,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10127378796814773920,10075171930001420395,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16839813828351267496,17722145849713289582,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16839813828351267496,17722145849713289582,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,14332143093759830089,8382669533888598723,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,10433286090404226875,17042493931247543963,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,1710093180643318225,4056809476501901278,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,2656069338652653402,6459091889482549769,524288 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,16328149317554856098,17037922795164686276,262144 --field-trial-handle=2304,i,2998819528452305564,2418880704862516357,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a730b2cbc77ee8fc5adedcc02026b0cb43a346573f452241ddba9364f220bcf6
MD5 98284c4af3a44c835deeac53d5fa297d
SHA1 466195cce870424eb40952f72bd887555b80056f
SHA512 9bef37681d3044acc1f427f477c6b4a8f8178b229808408cc0b477ec50c300181a9983767db29fa9e97d75cf0c70dbc68a593f9446298e0e4dc7550bf1057235
TLSH
T1E261A5A34E40A0DDFBAAE573B7C925873E30C580A1431DE10B58D0F758C67FB228A870
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591e0d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591e0d.TMP
Size 3KB
SHA256 d7b1cc0b68f0a567918d7a5bd15bcd2c7f36f39e530a10d0c16e70c5fce9789c
MD5 02650d8ee4d4ba9f77c61d29d3d90847
SHA1 19e6c98001190d74b4b84ad5303173cd784ed2a7
SHA512 bb25a2a9017a90741a062e1268ba23ba1ff076cac884a5d2a02a43d55052f2b3e28d226b4345fd023cc549277c45f2faef1dc4affbe793f58d1ba3956ccd86a0
TLSH
T1CD61A5A35F40A0DDFBAAE573B7C925873E30C580A1431DE10A58D0F758C67FB228A870
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 89a85a78961892419997d9a73c70426f43bd41e3287bcfc1504cb6617056f480
MD5 d47efc66bb245c7679e69f035f57e0fb
SHA1 bb47cb2f186f0ed049a673a8a599c9e3bc483235
SHA512 e0ba275208bdc832252f8e48f78482effe94f9075cf8727398c2f04003b99ffe10ebae8067abb525a7f2b19f2029eebb2b4ecc80ac0f177d061747b813192c62
TLSH
T135218FB3C3D98A6ECD0156F05A24BE2BCE2D0616422C3D15C9E4EF2B93E24B5D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0db617cf714f3ba8ef3028e0195c170b44ea18a964f46de1f430eff18e943ec1
MD5 bbd7dcbecb15729f95de38f10ebe733f
SHA1 529120d4a140aaefe7689abf5af217b3a2c54161
SHA512 ef35b58d06e3a35449762790e1656ead62eab917864c7e1a2a53a81d4445c4bb517c6f80f3a42f164a0707202538fc2565b7a5ce2af1288c970ed801e3ea4a2e
SSDEEP 192:sxZvkRBWe/fjsN1i3IdpdXHW6+WNGYaQGaIg5oJ:sxZcie/fjsHiYVHbGIK
TLSH
T1EF22B855AE28697B8CCBD20DBB15BF53DAFD503291A41E48AAFC8A1C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 79d09a752b033c0299a94f565ade0211948ccfec1e7388d3aeae44bf81fd4102
MD5 35579f265f9fd03d4f6c8f729886dfbe
SHA1 5e5ada89beff53563ebf5bb467b05115179e550c
SHA512 b70322013a23b2307875d6dab4d0b7314f2d9a1925ca48c95939fa34311e477340ff22ce911fc9b2163f6c99181190d9b6caf9fe2e8efdd86d1408fb58a05d16
SSDEEP 192:sxZvkRBWe/fjsNO23IdpHXHW6+WNGYaUGaIg5KJ:sxZcie/fjs02Y3HbG8Y
TLSH
T17422D9516E28697B9CCBD20DBB15BF53EAFD503251A01E48AAFC8A1C05E77DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 719697722adfe484fa12d5bf7073d8ff064139c0625428e3e6e3fa01ed270b42
MD5 31cb0f281cd06ee8610174fffcba43c9
SHA1 4030bb9cecbf3266b8d17d226b91ed58cfcd9dfc
SHA512 08300127920426eb9461daa56290d9264a2b895f8ec879e4b5b282ae9a488107ff17f05f25f8ae7fc0e99c54b18d1f7f107c97f62fec4fb663368ce762ad9b07
SSDEEP 192:sxZvkRBWe/fjsNO23IdpdXHW6+WNGYaDGaIg5KJ:sxZcie/fjs02YVHbG9Y
TLSH
T17122C8516E28A97B9CCBD20DBB15BF53EAF9503251A41E48AAFC8A1C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f15e1e8ee85ca6009be843543374fcaacd62b08a0b77dfbd2e4bfc74c0d4c575
MD5 400b3c0c83af99e5d5f8353b02956c73
SHA1 c86f7c346b1337fadd4fcb202959551d25d9fb3e
SHA512 2e6196e8f7bdc10f193bba973587d36dce143b86344ce7760723f5af841246675f95c57016cc1f100550bdf5087f9e0bb9b0370f2232c13f126d66c10af51d18
SSDEEP 768:9uyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3XrolZlK:9uyQRbrWvvlpZu1jaXKLf33ElZlK
TLSH
T183C2FA2B640CCB7E5FC01E9DDC6A6F976E9802C756688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eec7cb91-09e6-4d17-85c7-2915b3d0eec7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eec7cb91-09e6-4d17-85c7-2915b3d0eec7.tmp
Size 9KB
SHA256 c59bd0c8ac1ee5212bf07e845f269ad6880534c857b173f475b32beb0ff21f6b
MD5 211fb8f07da1a3a008fc0f7d7b596c99
SHA1 9d909ad32c02d9e01dc26f2716fb03e01882567e
SHA512 95e3c475ad3ea6d7017ee4d26ae6556681be9f33499a02ccea17f504191849ab141dbc8e75cf1a1c20cc5a0537f32bf177ff0709f23cb6596197e7afa3099a07
SSDEEP 192:sxZvkRBWe/fjsr1i3IdpdXHW6+WNGYaQGaIgrJ:sxZcie/fjsxiYVHbGI9
TLSH
T12A12A8516E28A57B8CCBD20DBB257F53DAFD503291941E58AAFC8A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 608e3e17e8a015e087b337878542d5762ecc71b1d047519f40fc94954bffbee0
MD5 c6277a4ae522495bcc8d4f9ca92732dd
SHA1 c8b55ce45d29f6c86641e22c5ce892bf59f70be7
SHA512 1163f86808ceb6df0abd161b98801966c151c87f0a9ad1966f18a908fd9e48cbeb9c481254a29680a8984281059561eb3637801f41b4fe10c47de62c781a9daf
SSDEEP 384:AZcIzFsN6oKSXbCvp5u8iRwKHYoglBkwc0aZmo/:+xbNnkRN4lBkuagg
TLSH
T1F9929E755CB4AC77A8E6E051F54737038EBC806BD7986F80E5DCA71E05DA6D82303A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 46e9b74d41d034d2e722fbddbed335cfa4525bdd598159cc4ccacc92aa893ced
MD5 a6b2b1ac491e4cfd0622c7ba7ced5c3d
SHA1 5d3fccb49862ab01c255930b2ccbb48cfe219b3e
SHA512 ce868e84cb14207cd14a1f3158ce202643f6ad94fb93ad92beb96604f5b5afb63c9250e44d689aac46c55f1809c86c9a118d1956f45d87bb677143217541c822
SSDEEP 384:eZcIPsN6oKSXbCvp5u8iRwKHYoJlBkwc0aZmo/:cPbNnkRNxlBkuagg
TLSH
T112928E751CB4AC77A8E6E451F54737038EBC806BD7986F80E5DCA71E05DA6E81303A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3cd362ff22935ecd978a710fe79c372a72c5b4b07ca08e8ce70439bed4a8c214
MD5 2c11b2a121cfc096e27d0d94ad8d813e
SHA1 1542835338796514b90c960953e13b37ec0d59cf
SHA512 bdff120951dd44c253fc42331b52d3491a913d4a30e80d39e616c810464f774281a82c7a306c28c67508f0826c1c3a65929190c1775e5bfd87816cfbf4035550
SSDEEP 96:PqONkgQsjpfwDISp5ih/cIPURHl8h4otop5MmD7BfPGxvw45RxmJm78lFdx0Y++3:SONI6iDCQmiUyPFHq5u88PRw7Sq3oxU6
TLSH
T14302F9386C787C7BADE2AE15B5473B179FA5113FE6942F84C9E8162C01D768C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3f4da8c67163edbd13aa5a40c3e44805433441ee3506c18e7788426cc09976ee
MD5 49879fc091aab1327181344d59644d8c
SHA1 f0e62445259533c8f70b1605a12db7c1a64fa045
SHA512 082d6f0ac5a6a10c9e8524ba7a1037b7e0c7978afa37cee0e828100e36c59f41a0848405bc81d9b2fba5a11182929e1b1717677f3ec2363db2af0dc87fd108c5
SSDEEP 384:qZcIPsN6FKSXqbCvp5u8iRwKHYoMlBkwc0aZmo/:IPKgnkRNElBkuagg
TLSH
T1FC829D751CB4AC77A8E6E451F44737038EBC806BD7986F80E5DCA71E06DA6E81303A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3f95670ab063423e7a8b783bc2ce7ed5fa33f8b560056447fa149fa2470ab341
MD5 0c8b67b204d128954858559a2132a515
SHA1 5f0235a95823e53b768eaf75a5b0fb0306335863
SHA512 c77b4fbe75951124df4f2dfad664f4d7e2b1b8d37a29db563c40d551ec388e8616d0974f2516c31843f9aa99cd78eabe8a82f675d2c032584723be1f241bd85c
SSDEEP 192:SONb6iDxQmiUyggFtq5u88PRwKHPwocEuZg/QU6:SONb6aWtq5u8iRwKHYoilU6
TLSH
T16C123B356878BC7B6DD2A861F44736138EA9412BDB886F85C5DC2B2C06EF2DC5307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 24912bf09c457c2d97b463bce6ad8a5c3d340cc2d55fbfc8b380dc28d0e0e12e
MD5 93a4ca0d54c73cb096fbe630c8927cf1
SHA1 c23addef1127fa379d807a116489baaadfb9686e
SHA512 82aaee9a7077e182b22f4aa94cfc1815e8b7c300ef7416b0684257825469561cb8369f07ab0635bf2f356b2c6cfd5a0c3b9506a62c25c189f15db9f2332d8a4c
TLSH
T15A413658A6F91148B3B77E16ABF7A46E587BBD232E07D0AD10010E4E4A63B40DC71733
MD5 SHA1 SHA512 TLSH

Submit Download