fd97cc1216a942ed677b0b23443de0f92be1c70e272ea1ffcd77c251ba92584f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fd97cc1216a942ed677b0b23443de0f92be1c70e272ea1ffcd77c251ba92584f.html
Size 121KB
Sample260913-c19h6ssvgz
SHA256 fd97cc1216a942ed677b0b23443de0f92be1c70e272ea1ffcd77c251ba92584f
MD5 e6a11d0cd64eeb9b478b15253a3ae2be
SHA1 fce5a2a50cc30b02439b009c31405d5560599d65
SHA512 37d99692c7c03b8bbf15c2f96f68c235a0f60c39fa539930bcf654564cad9547a8c076dd497b592f84d174f5e5738b190a35ebc7289e0bb66ad79bd52a1cec9f
SSDEEP 1536:GRxcYn+hJq4URFeLEkg2ypB0D0leQlTtNNoQxy9zxbEaojbEao82P6FAPxNP0O:ua9Q1N0txdojdo82P6GZNP0O
TLSH
T1C9C3C59752204CF5EFB85DB345DB086B3C2C1437AC0390B9E3FD8E962FA696D034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
956	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338201579236885"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{FBE93C6F-B032-4638-9F4B-A2C0FCBAC186}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 4316	2624	msedge.exe	83
PID 2624 wrote to memory of 2144	2624	msedge.exe	85
PID 2624 wrote to memory of 956	2624	msedge.exe	84
PID 2624 wrote to memory of 2144	2624	msedge.exe	85
PID 2624 wrote to memory of 2144	2624	msedge.exe	85
PID 2624 wrote to memory of 4792	2624	msedge.exe	86
PID 2624 wrote to memory of 4792	2624	msedge.exe	86
PID 2624 wrote to memory of 4740	2624	msedge.exe	87
PID 2624 wrote to memory of 4536	2624	msedge.exe	88
PID 2624 wrote to memory of 4740	2624	msedge.exe	87
PID 2624 wrote to memory of 4740	2624	msedge.exe	87
PID 2624 wrote to memory of 4536	2624	msedge.exe	88
PID 2624 wrote to memory of 4536	2624	msedge.exe	88
PID 2624 wrote to memory of 4284	2624	msedge.exe	90
PID 2624 wrote to memory of 2880	2624	msedge.exe	91
PID 2624 wrote to memory of 4284	2624	msedge.exe	90
PID 2624 wrote to memory of 4284	2624	msedge.exe	90
PID 2624 wrote to memory of 2880	2624	msedge.exe	91
PID 2624 wrote to memory of 2880	2624	msedge.exe	91
PID 2624 wrote to memory of 4092	2624	msedge.exe	95
PID 2624 wrote to memory of 900	2624	msedge.exe	96
PID 2624 wrote to memory of 4092	2624	msedge.exe	95
PID 2624 wrote to memory of 900	2624	msedge.exe	96
PID 2624 wrote to memory of 4288	2624	msedge.exe	99
PID 2624 wrote to memory of 4768	2624	msedge.exe	105
PID 2624 wrote to memory of 4464	2624	msedge.exe	106
PID 2624 wrote to memory of 3232	2624	msedge.exe	107
PID 2624 wrote to memory of 4136	2624	msedge.exe	108
PID 2624 wrote to memory of 4136	2624	msedge.exe	108
PID 2624 wrote to memory of 2352	2624	msedge.exe	109
PID 2624 wrote to memory of 2352	2624	msedge.exe	109
PID 2624 wrote to memory of 4024	2624	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fd97cc1216a942ed677b0b23443de0f92be1c70e272ea1ffcd77c251ba92584f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x21c,0x23c,0x240,0x220,0x25c,0x7ff83016c188,0x7ff83016c194,0x7ff83016c1a0
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,8553430305782725378,7712140440173063714,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:3
  2⤵
  - System Time Discovery
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,13321890059154721230,6743697447917697654,262144 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:2
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,3261473914541682389,17153241725388799697,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,1402628260919510360,17866356796944422342,2097152 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,11923456560098822025,4407249311403065650,2097152 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,13925170221845804700,13102672125936903776,2097152 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,12422857984854732506,8883270825898440589,2097152 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17896058364579480347,10455302103155891886,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7004650407108279560,12054211047857498506,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15687538887663014516,10061789155004944597,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15687538887663014516,10061789155004944597,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,303962459852679500,2937751698474674150,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,9254595278107396231,15023065949655920939,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,2292543096956068082,4861812473936537413,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,15293412619547507451,14120669132405205847,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,1822630956322865410,1773516295709215142,524288 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5160,i,16119090580264936741,10420161184317614028,262144 --field-trial-handle=2692,i,3991897503740338381,17401319296394577177,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b08bf54838c69cc12e463e921bdb9b34888d7653b25c053133934872a36b8458
MD5 3a4fe89ce51c93f5313a97d88b7b3369
SHA1 122ed48e0ac62abab5a0cfdda904c4f9085436ec
SHA512 db280edcd830f6a59e7b16c92bb95291d9589158d8d33a00900062584ac88d395985e85cc743597770f47e9b5aa3e8d8fc25ecf5722dc7e0bbeb93e655678841
TLSH
T11C51A5829FE303E5FFDA98F68FE529EB373E45C091836E72C598D6B8C9477548095088
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59528b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59528b.TMP
Size 2KB
SHA256 484124eead16eab5552bfbfc76b86f2c6ee6f6d47a91f4c1e5c8c9a04140f964
MD5 02f24608e8978d0923bac2895df28167
SHA1 1f8409186a4313d826ae595c8ddb152311db1a65
SHA512 efb1c20653f104ae62f242f56a1afbd89cc5a2d26915637ff74e44c1b5047752a3acf89e00fe03826a27ede410afff79d85929fa482683d64bcfb8d7a5624ba1
TLSH
T1185183829FE303E5FFDA98F68FE429EB373E85C091836E72C598C6B8D9467548095048
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 70a7fefac1fdbfdf95697b95a6e23bf287c8a1e87332375a6b04011632320d1b
MD5 5588cc6e86affbf9704d5dd32dc971b2
SHA1 e30f17a0441aad7be523d6bcac61115649d28b54
SHA512 464d40249c3e13b9ff7bceac3f0253de8ed506a966031d052c124e6c4c5facb11e40a541f18becf2c478a600aef7bbde3cd2008fd76f3c77173965104b94235c
TLSH
T170416BB7C3D4877EC91196F4AA246E2BCE1D0A56422C3C5AC9E4EF1F63E24B0E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 db27ac36e255d26ff77dc7fb5fffeea1af47ae7e4e3619a8c7cd6edcb358572c
MD5 a53d726f40e1f223ab2d64dd3bdac635
SHA1 9a29839f797824b7c703575afaf2dbd163acf08c
SHA512 35c54d984756b84862a05c3af957dd77f4d2c9be2a2ad7d4d14c25ef299b5d5e07bae4ddf9064ba2c6bb8426a5b1c5199b512e8019971b0c1307e2db4571342a
SSDEEP 192:sxZtRlW9/flsqqIdpd2HW6+WNGY36aZ9zIgrJ:sxZta9/flsqjYHbGXE9
TLSH
T1FE12C9526E28A53B8CCBD20DBA25BF53E6F95032A1D11E58E6FCC61C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 94708cdc3f5f244894f9c3a846db9cbd3cfa601a525af34d0e2ac84ac039dc78
MD5 95725d66cba17a889958f8c705c51e08
SHA1 4e281d1d48be44964b10c05981d56b67bdf3a659
SHA512 543a24cc59d7224b4e9121bde699071941166dffccdb22f8024b8bb47f3646f1856540b116004cc8ea4492c8df52243607855fba4f348d929cfa59db3f08f834
SSDEEP 192:sxZtRlW9/flsaqqIdpd2HW6+WNGY365Z9zIg5zJ:sxZta9/flsPjYHbGXRb
TLSH
T1DC22B8526E28697B8CCBE20DBA55BF53E6F9503291D11E58E6FCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e1ac8c38d1a3b1a88666a1e0cea96a8d2b9240725eb35e30e86219b1c24b2cba
MD5 33d3835848d6c06df4f0cefb14cc239f
SHA1 e9aaf7daa953826e8f9b41715f4bdf0e66671745
SHA512 6ad66eab7eb820d239c8edf1aadb8471393f7d8cc08f8d481a85aafbb83c58c22df6edfe6701ae75c7ada1b73f0cca7a7d58aec84271dc42a4c61f0443602ac2
SSDEEP 192:sxZtRlW9/flsaqqIdpH2HW6+WNGY36EZ9zIg5zJ:sxZta9/flsPjWHbGXyb
TLSH
T17122C9526E28697B8CCBD20DBA55BF53E6F9503291D11E58E6FCCA1C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 04ff8a6c21423e3d9f2410c8a8a46b92d37007439b2690c787cbb1a7b1274baf
MD5 f41acf0d468c27c4eb0cc2e9e4e1fe6d
SHA1 f70a5df7d352944070596ba23ab5c2d04c09cb59
SHA512 8aa3b627810f4a3bcaa4418e7b0616b3498cc4f9121a6c815b24cd00fdd833bfeb956bc31841daac6499d216f042147f3757270273dbbf12ad0861c285339b6d
SSDEEP 192:sxZtRlW9/fls4qIdpd2HW6+WNGY36aZ9zIg5JJ:sxZta9/fls4jYHbGXE1
TLSH
T1DC22C9526E38657B8CCBD20DBA65BF53E6F9503291D11E58E6FC8A1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 314e1aaf66733c3fe04a0fbe9dbb99812f0f38a000fc2917f78479f28312ea1d
MD5 7476f293712bc7c83c64558e65939c82
SHA1 799bc8cb96272e70cf000099f45a99ecc872533d
SHA512 d1e35dea18e0baf649dd603a1a072d89944d43fad45c14b8785780b20bf90c717485c4a8e0a36508cdebe02db9b493533b5d0dbf8a30999e08e733b495c7b8d5
SSDEEP 768:hFKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs//rok9:hFKlm7QWvUYe0u1ja8/L/E/sk9
TLSH
T131C20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e487a533-8f6b-4f61-963d-2b75c51d1e16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e487a533-8f6b-4f61-963d-2b75c51d1e16.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 2348d921a2da4c61cc993cb540784551350aefdb47316e407e82f8eeb5b8dd58
MD5 90a63e86c850c56504c13ddd9747136c
SHA1 5f36a9d5518cdf430756e2a3f3f44fa059e6beaf
SHA512 a6ab7a5744542041bc67a115f851d956d1080ef59d3d4359eea7892192bf19acf60b21a2f7e64659660526781f7adc7d01db909b31c1b96669132e21aeeb51dd
SSDEEP 192:ulSsN05Qw4EtNngUbURQmiU19D74h//OywtvC7OezfdaoS/Tqva+4LcYLWAdmd7q:LsN05YEzhbi7kh//at67v8sa+VYmd7UL
TLSH
T1896249356878BC7B8DA79691F44B36239FB440A79AC82F94C7DD6F1C06DE29C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 47c4752ec5f0309e6fa648c5d83b0b9135ccdd0c8e8a2851bd12b8f757a57a63
MD5 511f045bc022b044b388e34be3efc22e
SHA1 d0ee8feb9cbd14c93538494349115bb97ef0b6fa
SHA512 284359273822109306b8e2e0663b80d7d4640c37efa9947f2e47dc9be592e19cae549dc0fc9930f9da27ed086fd43a11b882f73c1f94655ac883b37a1537b8e4
SSDEEP 192:ulSsN05Qw4EtNngUbUUQmiU19D74h//OywtvC7OezfdaoS/Tqva+4LcYLWAdmd7q:LsN05YEzhb57kh//at67v8sa+VYmd7UL
TLSH
T15A6249356878BC7B8DA79691F44B36239FB440A79AC82F94C7DD6F1C06DE29C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 22feab54652e30b657d9ff1c8868b237fc3ff8553f5fe66a4d8199f93c5b94a4
MD5 17a21bfd818f17c74dff7938ce3e5907
SHA1 fde2104978efcd8a2a37707a8d913057795465d7
SHA512 3ac5ac45321a777db695ff4f21ded333fb26cd41d5aca646074341da3d58b8f563de05cbed4d5c533629d5dc7d9d88b5a413179d06c97166db5d0bf19eb3adf7
SSDEEP 384:DiFiZcIv6sN88TUNTUlIlpYEzhbi7kh//at67N8sa+VYmd7UioO:uFQS1wgYEzmo/h8hgNPx
TLSH
T119A26C725DA4E87B9DEA9B91F94B3213CEB440A3CAD8AE90D7DD9F1D01DA1D80307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 162b787ec19088abcf20ed9559c4aa37ce166c3e113f3a7da381d2110ca2968c
MD5 e1cc9b8306c2e84f3543c1bd96442c43
SHA1 b07a281103005f5c5225e22bf28834bfda56fd39
SHA512 7cbae798a73c45e81963f2179a95a9c292872cd49c1f2ec5d3a597e3fab440040198785621e368364de8adf3c00cf5e50fa04b5600d9875c5364368589eab58e
SSDEEP 192:BONO6JUm0QmiUynbso//OywtvCxBC62U6:BONO6+mEsso//at6WVU6
TLSH
T19F02D839BC68BC7B8EF3AE45B48777239FA4107B9A911F84DAD92E2D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 79774bde4c78419e002fee4e82806f40600adc8f47334d9649d5946e91ccdd14
MD5 cb250d276a04db6906c8b9948cbe74d7
SHA1 52a23739b64ae9edeeac8f641dbb8f07bdddbee7
SHA512 84ce9c01105617edd9777722439e29024020df7b0514b97cf1c4776aaa511058c83529a4334c7868e937472bb11f94503231211e528d48b37019652c8ea33788
SSDEEP 384:nZcI0sN0pYEzhbi7kh//at67v8sa+VYmd7UioO:P0uEzmo/b8hgNPx
TLSH
T1D5828D716D74AC7B4CEBE291F48736138FB840A796C82F54C6EDAF1D05DA2980307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 38bd5d8fb4b4ff390a94d5c82615781312a01349e861f1dc916eddec095aba93
MD5 f16e0d3574f4fa7fdba4e532bc74a63b
SHA1 d47328aad33c567b1d54d4f370070036b8e1a652
SHA512 ddbbc70a4fd7467786272842b9bbe097f6ce848947fef6e73959a40447af4507dfe89ef2bb34310faf2b443e1320421fcc6e60c0180fff7be943f5ef4248629a
SSDEEP 192:BONl6JUNQmiUyubko//OywtvC7OezfMNxS/TU6:BONl6+Ltko//at6788U6
TLSH
T1CA120935B864BC7B5DE3A595F08336239E644167DA896F80D6DC2F2C02EB1AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d360c0b4ed4c35c895d38af44d61b85e01f61e92a0b392fdb1191f6a442be717
MD5 9a38b9726e5a1b4d2cd0ea1333f6f81d
SHA1 5eba9f1d241366932015727ea51677abbd9c8d88
SHA512 9c6cb53816f08191ec62f426cf4ae92b8762901aeeb1911cb01f8f2965a9a36bb12280a596e6c107104da78279251365576cad402ed703786cbc03f152f92005
TLSH
T14041E958B6E91148B3B77F5AABF7A86E447EB8732E4B945D10110E4E0A22B41C861737
MD5 SHA1 SHA512 TLSH

Submit Download