7e195a4582c9997ed2acf71d00c52e858fd261e77f3405a64ab7aa57f941cca8

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_7e195a4582c9997ed2acf71d00c52e858fd261e77f3405a64ab7aa57f941cca8.html
Size 103KB
Sample260913-c69fcsbm31
SHA256 7e195a4582c9997ed2acf71d00c52e858fd261e77f3405a64ab7aa57f941cca8
MD5 e0ed1b14bac139c2083e916ebef1b3fb
SHA1 e809b1437c94711a2622890b7b4c01a6b61d517e
SHA512 ce155a58fdf3e298443143c75279dee4358871ea1534c8eacdaf3697a03e21535cd09a1be3ba134b175b8912777625e1ff267bc2d7a8d11db3b87da00f8f9d1b
SSDEEP 1536:UCZ3aeS9jWrOQbgL/OBR9/qufdk4n12c0ev3wKLaWpGu8p:UKqVAr0e/z8n
TLSH
T124A31933D62B240E3337AD0AB1D275487A19F019F31336D4F96E061C58EBEA516EA71B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338205063549220"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D6A945F9-D376-47A7-9231-64E2DCEFAAC5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2788 wrote to memory of 4012	2788	msedge.exe	84
PID 2788 wrote to memory of 4516	2788	msedge.exe	85
PID 2788 wrote to memory of 4540	2788	msedge.exe	86
PID 2788 wrote to memory of 4516	2788	msedge.exe	85
PID 2788 wrote to memory of 4516	2788	msedge.exe	85
PID 2788 wrote to memory of 4188	2788	msedge.exe	88
PID 2788 wrote to memory of 4188	2788	msedge.exe	88
PID 2788 wrote to memory of 3900	2788	msedge.exe	89
PID 2788 wrote to memory of 4288	2788	msedge.exe	90
PID 2788 wrote to memory of 3900	2788	msedge.exe	89
PID 2788 wrote to memory of 3900	2788	msedge.exe	89
PID 2788 wrote to memory of 4288	2788	msedge.exe	90
PID 2788 wrote to memory of 4288	2788	msedge.exe	90
PID 2788 wrote to memory of 452	2788	msedge.exe	91
PID 2788 wrote to memory of 452	2788	msedge.exe	91
PID 2788 wrote to memory of 452	2788	msedge.exe	91
PID 2788 wrote to memory of 2560	2788	msedge.exe	92
PID 2788 wrote to memory of 2560	2788	msedge.exe	92
PID 2788 wrote to memory of 2560	2788	msedge.exe	92
PID 2788 wrote to memory of 4668	2788	msedge.exe	96
PID 2788 wrote to memory of 4304	2788	msedge.exe	97
PID 2788 wrote to memory of 4668	2788	msedge.exe	96
PID 2788 wrote to memory of 4304	2788	msedge.exe	97
PID 2788 wrote to memory of 2932	2788	msedge.exe	99
PID 2788 wrote to memory of 4320	2788	msedge.exe	107
PID 2788 wrote to memory of 1664	2788	msedge.exe	108
PID 2788 wrote to memory of 1804	2788	msedge.exe	109
PID 2788 wrote to memory of 3924	2788	msedge.exe	110
PID 2788 wrote to memory of 3924	2788	msedge.exe	110
PID 2788 wrote to memory of 1968	2788	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7e195a4582c9997ed2acf71d00c52e858fd261e77f3405a64ab7aa57f941cca8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9ceb2c188,0x7ff9ceb2c194,0x7ff9ceb2c1a0
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,17251520743910023373,3993512569644559643,262144 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2124,i,15824194907574792464,17981766070958937167,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,6155726101472745731,7231855256134364005,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,14188774590864077355,17002776613396781783,2097152 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,11362075836313632965,16825065012917535764,2097152 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,8413445209439452197,4921980052516633909,2097152 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,6895480460175975858,11812701109496435526,2097152 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,10680100559000256576,6303186435445861763,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2454569333077718499,15166921128966087098,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,95420280869091587,16953348604887656119,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,95420280869091587,16953348604887656119,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,15277148713125820723,14219899758790657557,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,18331805327566820436,9293771152843210649,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,17974174504146923147,11775346916166467681,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,14291836797532873180,8372113850359236627,524288 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=1004 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,13645454274824446797,6391298825727665812,262144 --field-trial-handle=1980,i,14809292064377062970,1240674150825760378,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1968

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d3020c588d9b8d92e8be52fc3c4d5a3beddf6c1a0d9d2ae8f147cc6275c719ae
MD5 5a464ffd0f0e203d8b2d4e64ccc5e1d1
SHA1 1b0def28cbaa89ed68d3c56dba60448291da89a7
SHA512 9ee7a0d86df2ee9201eee5f8f3f94296e8a2940e1255d6945d393aa823a41d3126bfee9647174a2c74a4953af637b96d6cccc0aca755b2b3ff8a8b2c90d7662f
TLSH
T19561B7C2965387A1FFAA90F28AC2C8CB373C4780F5C32DF1E696D7797426B953094041
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592a52.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592a52.TMP
Size 3KB
SHA256 89e720a58da462b3d4f70c732e81673941dadfd71ab41495603e222e1425cd21
MD5 b67cdfcae45ca0f9333858a195ab0d03
SHA1 c60e14a0a61a344f8c1f813fadeff8f9a9d71562
SHA512 43e9ffafeb4d808eb89d9ea471fec6c19af647543dd3a315068a8aca7f64d9223abefce34890375dbec08e96a83533cef62425d9cfa8f7b59b394e2631d83cef
TLSH
T19961B7C2965383A4FFAA90F28AC2C8CB373C4784F4C32EF2E696D77974267953084041
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cd4a33b58da3949ff2f2311277224f7f698e68a380ef63c75f12693942326152
MD5 dd098eaf988d81891ea78724586d8c35
SHA1 0c0277d32c00758ac62a6fd573ebf51e5859da57
SHA512 3fd1ee4d6a3f77720ba81d998b5053b757687910e8bb7b881337ca7ec5e70ef9705ced8953b565117c3dae08bc4e3e04c2900ec2fe58d5736816f065ea491694
TLSH
T16C315CF7C3E4867E891156F09A28AE2BCE5D0506432C3C5589E4AF2BA3F34B1E10166F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7140eff9f5bca565558e88483e794f8e45321103803d828534dfbf7e67573140
MD5 a8814565eb2e3e7fa98c2805feb7c8a2
SHA1 5dc4d9a3f51d154688fc93ddcb9ba98f63d785ee
SHA512 5d85ebaf6c21661dc5e877f42dff3e231f07262e9395e929b0aff6dd378124a777395de617e9ce1658f695a4e41407bc5e6b6995ab910b8eabee563bee769bd3
SSDEEP 192:sxZ3RPWs/f7stFIdpHcHW6+WNGYRPseZiIg5qJ:sxZ3gs/f7st28HbGm0vM
TLSH
T1E822C9526E38697B8CCBD20DBB55BF53EAF9503251A11E48A6FC861C05E76CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7e5ba47bf964fc734149fbd086ff80c30b5addefb2c6b6df47b87934ade4e984
MD5 c1e8665f96afb5d1df772b18d55cb179
SHA1 ce1ad3182261c530a0804c231a230f2b86858d71
SHA512 f416f68389991172598040e7a4088682d2e2ae8fb1b422812db0c3cf64456a1b607d1047c0d2ae3b1fbb91f34acd283c13c00f76a5f275fee91640d9c7581ef7
SSDEEP 192:sxZ3RPWs/f7sOFIdpdcHW6+WNGYRPRZiIgrJ:sxZ3gs/f7sO26HbGm+9
TLSH
T16312A6526E38A57B8CCBD20DBB25BF53EAF9503291951E48AAFC861C05E66CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 269a6d1d3f441b646796a49512d5df3edbcac88a25ddf57a168a4a46efc35bc9
MD5 11d75c6d5330adfc4419174fbea6975d
SHA1 ad3530c684e4811b15653560ae22dabc3a0d6e8f
SHA512 8cd4711f912790b0268bd668ab9e87298a38a61da494d59ce67fb90fb8931dc1c148eefafa37e8b52c73858dd7dbc562f722a66b3aaa3262d952d1f4d6365a86
SSDEEP 192:sxZ3RPWs/f7sKFIdpdcHW6+WNGYRPRZiIg5IJ:sxZ3gs/f7sK26HbGm+e
TLSH
T1F222C8526E38A57B8CCBD20DBB65BF53DAF9503291A51E48AAFC861C05E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 16f156c7164e7b681c6c68e40934ea7efe17049ec0c7ef060dddcbd14e783489
MD5 66d1146137c2c156626f964d4ce47c9d
SHA1 b01b95d093d8d5f6ef717196055266d7e4042287
SHA512 401261a2e83eca6bcc2f9318d4994f32d9c442cbcbb4b8addc54e7e5c083d01bc6ac9aab6990f0f77e358c2f85c6cb5d25e1af3701e5f2078d6ae38641bc7bdc
SSDEEP 192:sxZ3RPWs/f7stFIdpdcHW6+WNGYRPWZiIg5qJ:sxZ3gs/f7st26HbGmPM
TLSH
T18A22B8526E28697B8CCBE20DBB65BF53EAF9503251951E48A6FC8B1C05E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7e3df49ab097227a2d736c526fe945c549c9b3151a67ef19d0e5e80a7348a5d1
MD5 1578d508b9f4dafadd455db23e0dcb9d
SHA1 a6a73fdc35f7af49b4e2d675c88673c82ff1fe79
SHA512 21e48351852724955dc7c445eca78016ecc815ba2306efc461682a0f0e8b9892597c0d927a0ce00a319e6c9ce3c76c67446ece8a387fa33899a0eb0e0bde0f98
SSDEEP 768:6kK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3proE+Toj:6kK9uzYWvcQWsu1ja0HL7Q3CE+cj
TLSH
T176C20A3F640DCB7E4FC01A9DDC5A6F973E9802D7A6688D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 20832a863a42c1a2c17d53f995f5681316901bdd7b8e25b273ecb1bce6604fcf
MD5 679ef8e3fc6f7b58acf643ceb09355e2
SHA1 30e5c11dd2aa079140a4eb485470ac4ec22e9608
SHA512 171567869547fbc73a515c7c026729ca810f693f9504b7d3b16def0caedd26a13f9dc0e9e37e2736e0f5d78b5c5ccf6c6acfa14dc5310feca221942e21fae9f4
SSDEEP 48:K0mImOpEIGM81bAHIISg1K9E1W1xulY/A8OyLuqu1uYuEuWLIRK8I8XyPfKj/d1t:K0mdtaKu4iJL2K8ImK+
TLSH
T156911151B2BB4240397E284891A49B6F124131A33418FA2B7FB85475EE6FF484DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 22f0b098a9719b22396d2697f08ec8ead6fd7d3b7939782c596525dc6f4054cf
MD5 efdfa10a7021ecd394aaef80ff03ec9f
SHA1 56ddfcd11a1ea5d095c36c4b9b6656f8c8a1881a
SHA512 1cfdc4647a40dfba287bcf64b8a09ee42e43eddc34463e17b43010758575bf688a507df252377c94e9acdc66a22ef3c65e169df12c1461c8ae8c3be795a14b06
SSDEEP 384:rZcIcjsNRywAedvVrwOjTViDOV2Jj0Bfsa+VYMd7UhoI:zUWHrDneOAj0Bfhgzor
TLSH
T19E927D716D78ACBB8DE6D281F94B32038EBC50A7D5896E9091EC5F0D05DA6EC1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0388e644b59181a9d0e226b817ab0cab54f471979a2b5ac73c9a3f82f02f3fef
MD5 88387288bb1b39fad6cedf6a54e52767
SHA1 599ff6718b9189c6493a0c6d90c8234bd3b58686
SHA512 400f5f061d7eb99991d882747a0b5b37c20660320d53259c09300037ac9be691bfef2d12fa3ffcf7249b4275edc521f8856e826c0a646ea94ed33e7dc32fef42
SSDEEP 192:SONK6ygpQmiUy2b3tOCTVghDOVSzPmnU6:SONK6lH73tOCTViDOVsgU6
TLSH
T12B02E835BC682CBB8EF26E45F58B27179FA4107BE9512B80D9E85E1C00D769C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 374e87b0c322d651a5fcb38cbca9974162da2ab40e6bf42242164a42de5a08b7
MD5 341006c6e8f7da6cfdc0a18a4d173a82
SHA1 a90e95a04eab14def5d924f07b27f42a4878e3d8
SHA512 af312a45e3546a9ca24c682b76e9a5723e3daf985f3fd9f7e8e103b4b317072f4573581ffc2bf5934b7185fd5b81919951d181e2c0d9526ea8f9826fa702ea34
SSDEEP 384:rZcItsNRjwAedvVrwOjTViDOV2Jj0Dfsa+VYMd7UhoI:ztVzrDneOAj0Dfhgzor
TLSH
T176828E716D786CBB9DA69681F94B32038EFC50A7D5896B9090EC9F0D05DA6EC1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 29e4a76383fc3083fb922f02ad64f8f3fb727b7927de2b66ee81cd37a86d5959
MD5 a526b23d22af4d75b7632354e024a796
SHA1 f61ee34b4e15fbe2c33c18341327d4690ed5e48c
SHA512 bee1764e53ed59d449513388cdd1fb651c51c950b5a8e4d6b7b36fbdf6fb3f45d35f32be20919c4baa233a16a3bc8915d1c8d3de28efed0bcd1bf10e52542f78
SSDEEP 384:7ZcItsNRywAedvVrwOjTViDOV2Jj0Jfsa+VYMd7UhoI:jtWHrDneOAj0Jfhgzor
TLSH
T1EE827D716D786CBB9DE6D281F94B32039EFC50A7D5892A9091EC9F0D05DA6EC1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c7ecebdbc3d91896bbccb4e9cc58297189842586f4ebaf0422848e5b119f09f3
MD5 c95fa048045e3364cfa7aaa6d267de35
SHA1 08583e091429ba6ba8d836ffdd900392dde21a5a
SHA512 263c97676db9839292cd20dc7f6ad86d2538a51ebf2b7da3e1fbc6ef38889766799e2c2095578804ce57768751921f0405a9c076645bf11a1ac611adb1daf00b
SSDEEP 192:SONE6yQQmiUySb3wOCTVghDOV2JjXE93Uf/vU6:SONE6HJ3wOCTViDOV2Jj0OfU6
TLSH
T1D412093578786C7B5EE2A545F48B32179EA841A7DA467F80D4EC1F1C01DF6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

518553ac-5d0a-49e0-b63a-b248c7a4a6e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\518553ac-5d0a-49e0-b63a-b248c7a4a6e8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 95bd1df95e86247fd48c23aa37b1597bd5314934ac5d9520692b755cff93a129
MD5 6760de8fc5e110b4e011ff2084dad584
SHA1 1662fc13ec5f61599a7ae114e79c721bf0767cf5
SHA512 26c9574670d5163b00be8a3168e3b697bbae5a7d9984b826b1a0deb484016be1a0f6d20cff899a30d3e92d2768ab2d53870e0028a78e0e06f15e892ea4dde744
TLSH
T1A4412B58BAF91148F3B76F599BF7796D487ABD372E0AD55D10110E4E0A23A00C8B2B33
MD5 SHA1 SHA512 TLSH

Submit Download