e922462c7b4ab471a47a62bf80b4c2ac51d86f2a52ed0d9729376cf9312984ba

Analysis

max time kernel
148s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e922462c7b4ab471a47a62bf80b4c2ac51d86f2a52ed0d9729376cf9312984ba.html
Size 114KB
Sample260913-d7vt2a1dja
SHA256 e922462c7b4ab471a47a62bf80b4c2ac51d86f2a52ed0d9729376cf9312984ba
MD5 7f1fd6b9a365592c56294caf4edd7c6b
SHA1 aa6928806caab05435c87295171e97f9446f3a00
SHA512 cd89aa3991a8823d988e336e23744bfb32f0ee61b752c4b6e280d6870cabbff2592f67504146a2ad4f210c0ab9bc75f014868bd3d6c0be3d9811e1bd744ddfdf
SSDEEP 1536:cCxPYn+hU+WReZoKPStF/ylxQnTtZNoqxwWoibEaoSbEaosB7w1HL:1vBQPNU1idoSdosB7SHL
TLSH
T178B3C68752204CF5EFA45DB3459B086B3D2C1437AC0390B9E3FD8F972B96D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1172	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338193194451161"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{BEF75FB8-7CD9-4F55-B3C6-0787A22B3672}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 4312	2936	msedge.exe	84
PID 2936 wrote to memory of 1172	2936	msedge.exe	85
PID 2936 wrote to memory of 1800	2936	msedge.exe	87
PID 2936 wrote to memory of 1800	2936	msedge.exe	87
PID 2936 wrote to memory of 1800	2936	msedge.exe	87
PID 2936 wrote to memory of 3840	2936	msedge.exe	88
PID 2936 wrote to memory of 3840	2936	msedge.exe	88
PID 2936 wrote to memory of 4808	2936	msedge.exe	90
PID 2936 wrote to memory of 4724	2936	msedge.exe	89
PID 2936 wrote to memory of 4808	2936	msedge.exe	90
PID 2936 wrote to memory of 4808	2936	msedge.exe	90
PID 2936 wrote to memory of 4724	2936	msedge.exe	89
PID 2936 wrote to memory of 4724	2936	msedge.exe	89
PID 2936 wrote to memory of 1472	2936	msedge.exe	91
PID 2936 wrote to memory of 1472	2936	msedge.exe	91
PID 2936 wrote to memory of 1472	2936	msedge.exe	91
PID 2936 wrote to memory of 1756	2936	msedge.exe	92
PID 2936 wrote to memory of 1756	2936	msedge.exe	92
PID 2936 wrote to memory of 1756	2936	msedge.exe	92
PID 2936 wrote to memory of 532	2936	msedge.exe	96
PID 2936 wrote to memory of 3680	2936	msedge.exe	97
PID 2936 wrote to memory of 532	2936	msedge.exe	96
PID 2936 wrote to memory of 3680	2936	msedge.exe	97
PID 2936 wrote to memory of 2756	2936	msedge.exe	100
PID 2936 wrote to memory of 2688	2936	msedge.exe	105
PID 2936 wrote to memory of 3440	2936	msedge.exe	106
PID 2936 wrote to memory of 1992	2936	msedge.exe	107
PID 2936 wrote to memory of 3064	2936	msedge.exe	108
PID 2936 wrote to memory of 3064	2936	msedge.exe	108
PID 2936 wrote to memory of 4660	2936	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e922462c7b4ab471a47a62bf80b4c2ac51d86f2a52ed0d9729376cf9312984ba.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff921b2c188,0x7ff921b2c194,0x7ff921b2c1a0
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,2107174996852906596,13001444192706874423,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,14233977284511534127,18357052757743009225,262144 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:2
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,12568270499145956088,18302413444094459065,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4184516455045508786,17536554118437644867,2097152 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,6890290404387922512,11028967762114349370,2097152 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,990295577184205544,6916226820062042982,2097152 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,18099595300160991540,7466945603547389006,2097152 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,5985667479153039497,16569219977812631908,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10502057921297294894,13342434235527454651,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15729247120094164655,7767262805396693950,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15729247120094164655,7767262805396693950,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,1482816232804576820,1275133305020667862,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,201923039002856896,14700639275745003543,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,9984723494176730669,5102104901421352648,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,17365768162150035961,13995925359167788207,524288 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,5024454812030727057,5617699506019819165,262144 --field-trial-handle=2520,i,6803803678900193204,11730234582319227477,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2288

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b159f00abaa9c49170585f3055df7895a91a476401cf7ae1fcc7105921f301fe
MD5 1bea6310722d9c04dd4f4ad6966f4df9
SHA1 0e909527784542399f3f6598ab3f3efe4f248779
SHA512 e6c37c235ef37fcd9205b0bacf745585f4ea985f4f36cca7632c48d4163e56093404230b0aabcea221ae65321c0fafd6eed76f5dd411982d1bd4765e008fbf52
TLSH
T14661C8456E5A34F5FBD86C7095E618C73AB2AA70EF472E5E0CB7E679442B7A0D1010C3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d387.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d387.TMP
Size 3KB
SHA256 0ec286d986bee7968e7db744c3b446a3ecc4ced3c48fe0012b9f0359f2db7169
MD5 0696f9d4a42af89cbfccf67c872b0532
SHA1 58a6d77ced85765feb7e5cd0ad2f49cde46a8fd5
SHA512 63baf6822f80d3df5fdb0bb5f028047eede380d98a164c33f985148ea483a5e597d04dc588df1af9172924752bb3e6a627eb9379cb4f61ed8ae393ec602fb468
TLSH
T12E61C8446E5A34F5FBD86C7095E618C73AB2AA74EF472E5E0CB7D679482B7A0D1010C3
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 710b79627add916c27ba7a949fd7977f56714f97a5738d7a43b6cd379bc98ed6
MD5 2cba1e8bee0f4490e420971a401b38c1
SHA1 b077c30be75aa652eb79c02b45219376793e401d
SHA512 8980455878a55e465810f11f4228e55be3ecabb6fd13a188dc50b0126deed8158d2fb832b54da08407882f2df68dd37a090a70ce52c3c9e26f6bc7855bbe1bc8
TLSH
T1AA416BF7C3D4866E8D0156F49B246E16CE1D0A16422C3D1689E4EF2FA7E29B0D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 15d8eaf811097533ab9ea2daffd53cf3475e47fc401131d1be4ddcd4acbe7692
MD5 6fa04253f4a0a6292958b8fc827b8040
SHA1 d2236b8628fcc947d5337ef6ef832b27805acdba
SHA512 52a8f8c11fef3adbb6275605b400f65feb8f961174d23b5763cd0bed5b94af314344006939295225b9ec3e43c8b8f06bf8812956c434ae51b745905365afc3c8
SSDEEP 192:sxZcRuWQ/fLs5MRIdpdCHW6+WNGYrbofIg5OJ:sxZcrQ/fLsKaUHbG1c
TLSH
T13E22C852AE28A93B8CCBD30DBB19BF13E6F9543251D41E54AAFC961C05E76CD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 be8b9d797083461d9643547da90933ce12e8ff32aae54cdcf6cf443735f922e8
MD5 e7ec0d253800f3ef1ca2be0258b3beb8
SHA1 75a692bb197a81afc02f151af8e39debf6faa0a6
SHA512 fced487a4a4ed304d81921b29100275faceefa127f35b9a563ac75ceb4ec7fd0d9eeb7371a6eca16ccc9a23866cc72a3611ddf0dd3c982bd2a7491aa063654a5
SSDEEP 192:sxZcRuWQ/fLsFMRIdpdCHW6+WNGYrbofIgrJ:sxZcrQ/fLsWaUHbG19
TLSH
T11F12B752AE28A93B8CCBD30DBB15BF13D6F9543251D41E54AAFC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 064ee55897377030b6551fc30a42762400b1a45d110ae2e9f3022fb5091d263b
MD5 7ecf548ed0d8253e89c34ab2298e11bf
SHA1 9707d1874f3ae9bf2503362763b6020ab9afef1b
SHA512 43e57553f2be090a4fad99157193d80669af9379be778a75781bf9f3a203d0704c760e0dbae002b9214f6f6626ad0d4f2638e22b4a6612f2c44d4d0132790abf
SSDEEP 192:sxZcRuWQ/fLs5yRIdpHCHW6+WNGYr0ofIg5kJ:sxZcrQ/fLs0aiHbGGW
TLSH
T12522B752AE28A97B8CCBD20DBB19BF13E6F9543251D41E44AAFCD61C05E7ACD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4d2d5ad8897a68d21fb3912d60635506a02a5ef259bc3feba8205e89f60cbd02
MD5 37f468b5f103b8ee299ebb28e32ce32b
SHA1 d924f2c38cb986d019e52259bc4ac6afc2a945f4
SHA512 b46f195823bc63071e6254a3afc2422dd27426d7cce741ae42e383102a7b2b1e21d2ab56a54e966c190ce5cb56b20da1ef6b3b3ec3c6b8178c32f37cf76564f9
SSDEEP 192:sxZcRuWQ/fLs5yRIdpdCHW6+WNGYrYofIg5kJ:sxZcrQ/fLs0aUHbGyW
TLSH
T19E22C752AE28A93B8CCBD20DBB15BF13E6F9543251D41E44AAFCD61C05E7ACD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 35c7202f618a47d3a15a0c4fadf6d6c273835a4f3507e4652641aae381c57d06
MD5 c14ef186c82976ad2c352a0605137052
SHA1 d1b11bb487ccf285e18b1ebac1d772c6d918b809
SHA512 9c5053b3a891b27e7f0fefe7850eee6ef4dcbc2a8c34c99963b0e003e98fa3ab69e87342447c2d1a5f4eba087b39ad4bffd9d6f3beecc5c4db568ee4c56b2309
SSDEEP 768:hKy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbOroRyp:hKy4J/DWvbtBhu1jajiLm0bFQp
TLSH
T148C20B3B644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596efc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596efc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a0cfca380c180d48b1d5026b11bc054afd2b982c5a9b40077748e75277052fc0
MD5 b6ccc457c74e326af06d00be8fc6acf3
SHA1 81201d18fe4a909cbc60810c47f7f09ebc77890f
SHA512 be1eeb1c01769c69bc7bb65fae55a68a678f4cbd104b05efcc7195912d7955c7a043b78abc9803c514bfb79a43cd19f11e0352ed83a001a1aed5f339a88085f4
SSDEEP 384:HZcIDsN98QgRZNL0uHX58E0uwsa+VYId7UXoV:vDeyDJafuwhgjm6
TLSH
T12C827D31A974AD3B9CF79245F84732035EB890A7A6CC7F9091EDAB1D00EA6AC0307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 22b08093f58342c67a467c808ee5faa5aba4a53ca8a0ad6e40fdb371f0cbb922
MD5 09a7b6eb43898dcd8951c7ab136444c4
SHA1 5e3e2c6743c1dbdf40d8b9e97b4d11fcf7312cb1
SHA512 5b6a4da32261d7e2ec6a24acd648b66b9741ba581936294a3c0a5b9ccd022ecdce656c7fe39b983196df859ebcc7ff8568212a86a9c0960cd4c6be67747a840f
SSDEEP 384:MiFiZcIJVsNH8TUNTUlIldQgRZxd0uHX58E0rwsa+VYId7UXoV:3FQ72wg4ydJafrwhgjm6
TLSH
T1C7A25C3399A49D3B9DFB9785F94A32038EF450A7D5C9BB90E3DD9A1D00AA29C0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 164dc295106e1a46a966054371bc5314e12e2c3e012abcf0d249e35b790d7c8f
MD5 618bb99444005870a04019ebc7e46d1e
SHA1 5e0d20fe97efc722ee375199431ef00d42ce3246
SHA512 ed800503074f9c429c7d0e807dd45de3c502df177229e12a4d9b0267c7be4f83e60cb1a20d0e6d3b4f34bcc51d087540ca75e4affef549e7ad3cace1a5ab2659
SSDEEP 192:1ONo6wlD2QmiUyQ3f4X58gZH+FDGmn1zveT/cU6:1ONo6kS5f4X58E0+wU6
TLSH
T107120B31A878AC3B8DE3A544F48731139FB45117EA897FD1D2ED2A1C01EF66C531AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6808596d24deada66825a281db481d97e017b3c78e6415cdd73c0b90733244a1
MD5 3e08ad4db232c780fc2085e09de5e191
SHA1 115b44399a1c3b5c7362b7ee52136af77ac14c7f
SHA512 4b6092674300b6da1cdb54f45d42fed01eb2c62de1e14885676ed77a75d44c315ce26306fb0e43828664597867a66ac2f414a45a8e698577045187819386259c
SSDEEP 384:dZcIDsN9dQgRZxd0uHX58E0Ywsa+VYId7UXoV:FDBydJafYwhgjm6
TLSH
T1E1826D3199746D3B8CE7D245F84732039EF890A7A6CC7F9492EDAB1D00EA6AC0317D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9b71e821b1c9156b32c71bfde60676cf331695513316e1aee0d941e1f3f610b2
MD5 f6ed606b936c9a713983b8597c75841d
SHA1 3c17cc2e775f651dac9a9fd3da3d8183970ce9e8
SHA512 1b8d7287b1ca75760e9568b1c8ac640d5f3ed830651924e85cdeb74bb88aed0ed4e2380461843eae6b8dce6562fdf340b735a953579c6427f374f1b63cf02a14
SSDEEP 192:1ONR6wlDgQmiUyg3W4X58gZH+FDfDlVaU6:1ONR6kgfW4X58E0F4U6
TLSH
T12502E835BD687C7B8EF3AE49F48726139FE4202BE6952F84D6E81A1D00D765C2306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 852bba12cc50d38820e4cde37bc1e5a49590ab8b7c52045b09e42135117b38ba
MD5 771f4c86419e7ac314186038ef4535fb
SHA1 f2f6cf1babaac07c17103ba9cb9ca68fcd7edde4
SHA512 72730c89ee11037e3da00fda52cdf7468d0cd26b7757ec4fce8ef5b9b2e48d8cf21d0ffb177ef8709330e121387b41f5cb9ae7a7c8422cadff657aa9d9490e38
TLSH
T1DB410758B6E91148B3B7AF1AAFF2A8AD447E7C372E1AD45D10210E4E0A62B40D871737
MD5 SHA1 SHA512 TLSH

Submit Download