b022eb9d7950e5d02144380812d8cf00cd4849d37a1094d4849fbfb02ec2e44d

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 05:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b022eb9d7950e5d02144380812d8cf00cd4849d37a1094d4849fbfb02ec2e44d.html
Size 112KB
Sample260913-gl2x1aff69
SHA256 b022eb9d7950e5d02144380812d8cf00cd4849d37a1094d4849fbfb02ec2e44d
MD5 3d207622ae3ae01365688597ee9b5b2a
SHA1 8f7ce3c93375465f11ed0df97587760ee62b3da1
SHA512 3795b9e124e6d49c12290305aec074aacb19787c547077af8e4318ede7db033c24c797c35b8d8b8cbea484abef85adef8c67ab8c941a37af5dab81be8251c7d9
SSDEEP 1536:wtxDYn+hz5r+1RFT83cWWD9tlN0+TtPNob0qIFObEaoAbEaoSAP2W:Azzq0eNEuOdoAdo9uW
TLSH
T1E9B3C68711204CFAEFA50DB3459B086B3C2C1437AC4791B9E3FD8F972B56D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337963593785295"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{9D6BD3EB-7BCF-4430-A6FD-C0FD1193077E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
912	msedge.exe
912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 560	4460	msedge.exe	86
PID 4460 wrote to memory of 3104	4460	msedge.exe	88
PID 4460 wrote to memory of 4188	4460	msedge.exe	89
PID 4460 wrote to memory of 5020	4460	msedge.exe	90
PID 4460 wrote to memory of 4188	4460	msedge.exe	89
PID 4460 wrote to memory of 4188	4460	msedge.exe	89
PID 4460 wrote to memory of 5020	4460	msedge.exe	90
PID 4460 wrote to memory of 5008	4460	msedge.exe	91
PID 4460 wrote to memory of 3756	4460	msedge.exe	92
PID 4460 wrote to memory of 5008	4460	msedge.exe	91
PID 4460 wrote to memory of 5008	4460	msedge.exe	91
PID 4460 wrote to memory of 3756	4460	msedge.exe	92
PID 4460 wrote to memory of 3756	4460	msedge.exe	92
PID 4460 wrote to memory of 880	4460	msedge.exe	93
PID 4460 wrote to memory of 1060	4460	msedge.exe	94
PID 4460 wrote to memory of 880	4460	msedge.exe	93
PID 4460 wrote to memory of 880	4460	msedge.exe	93
PID 4460 wrote to memory of 1060	4460	msedge.exe	94
PID 4460 wrote to memory of 1060	4460	msedge.exe	94
PID 4460 wrote to memory of 1908	4460	msedge.exe	98
PID 4460 wrote to memory of 4812	4460	msedge.exe	99
PID 4460 wrote to memory of 1908	4460	msedge.exe	98
PID 4460 wrote to memory of 4812	4460	msedge.exe	99
PID 4460 wrote to memory of 4740	4460	msedge.exe	101
PID 4460 wrote to memory of 3600	4460	msedge.exe	106
PID 4460 wrote to memory of 4316	4460	msedge.exe	107
PID 4460 wrote to memory of 1392	4460	msedge.exe	108
PID 4460 wrote to memory of 3948	4460	msedge.exe	109
PID 4460 wrote to memory of 3948	4460	msedge.exe	109
PID 4460 wrote to memory of 912	4460	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b022eb9d7950e5d02144380812d8cf00cd4849d37a1094d4849fbfb02ec2e44d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c0,0x7ff872abc188,0x7ff872abc194,0x7ff872abc1a0
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,15054602018437125912,12560951009932353849,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,10786815617079351807,6852690103548660308,262144 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:2
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,10064390709893768853,12415150529225197894,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,6526578267752472958,2345097543900971010,2097152 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,2618722820750793049,3960347525280384628,2097152 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,11986622568212105738,9504326029180178016,2097152 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,11905096861213460320,1557877483765207525,2097152 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,71509636746912060,4833653719394198589,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,13502602844921798004,11324369677520981336,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,12235477507644055130,7929035104598721095,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,12235477507644055130,7929035104598721095,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,15467451939774438061,5754954075332914461,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,17477904133245537461,10452541257701314140,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,3215629048973109007,14122044752962972047,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,16275219055551187852,4167347667771365826,524288 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5888,i,16861428615733603043,9887459805385920528,262144 --field-trial-handle=1960,i,5185156450175506131,4317555086643766021,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9b3a70dcca09cb871e32c62c078a97e84a7dafd632bd999b9c199bef5108ba68
MD5 519cd19f89e062592db8ea7f92546aca
SHA1 d3c43ee030d88426dd041bdd522676a01b8e0952
SHA512 75a0a97fd3581d8243b496b1b578970207f24ee784ad868e5305b93686b47656e11564c0a4febdd5551a827178cdf84aaae9e3fb5011800a17ab349f340de917
TLSH
T1EC618F90BFD078A1FBA87FB9DFD7048336B7A7C01AA7ED40A080D8F95E067905060394
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fe12.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fe12.TMP
Size 3KB
SHA256 8016054e7a449f2f1a272831d64ff358cf6261d21e080aead2d905a6e2999878
MD5 e3296356abffc752e3818d7884aa5859
SHA1 0ceb30bf618315ada5ed51a57f7b0c8fdd6205b9
SHA512 0e26dff8d706775d5109059897c827782b8b9474e1f9786db72de30734ec2966898d1253e50f872308978c704f519eecc94a50aba2d65a3769093bcd3fc303da
TLSH
T101618F90BFD478A1FBA87FB9DFE7048336B3A7C11AA7ED41A080D8F95E0679050A0354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a2392a79a8fdb94bc3077b2c6cc7f661533b81b4298faa6ebf612b11d15ae1f1
MD5 662dd1bd42bd0be228a35d11071e1513
SHA1 22181b13e97d2ddd8b11c10c93d5916071955a6b
SHA512 9ba8ca6fefebf36e512e7ebbf442ccc5dae4110a7bcec3cfd6a10b7b7bd858d3e98fe710c622b565deb81b5e5e5e30d96c7d5d0ece2d93f15ec2da99a0a71c5d
TLSH
T1B1417FB7C3D4877E890156F09B286E6ACE2D0956822C3C16C9E4EF1F63E29F0D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a8b11501faf2cf9769c55573f3af995b96aa429b5e8c1f890ae6d538c46765bb
MD5 0c95781f3a2d82dede8684fc63d86987
SHA1 110ba417a80911a6499a1511077165d5554a8be1
SHA512 2cb0c383f5fb684d13d249bfab5aba6dabfea0fa1011a52f282f61369c9c40c265a46f432dc4e138bec4ed5c4af1cbe585fe30c7cfbb45a06eee531e3696668e
SSDEEP 192:sxZZR3WU/ffsNdIdpdHHW6+WNGY36afOIgrJ:sxZZMU/ffsNexHbGXB9
TLSH
T12612B6116E28A97B8CD7E209BB25BF03D6F9507261D11E58AAFCC61C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8ab439b05884a6a15575aba2ad4b71da4e965e9a6afd001875507dfe9a5e75b5
MD5 a625e6cb5a479313ac2500f266daa055
SHA1 7ea14aaea27efa33809c3e2de7354fd626eb83d6
SHA512 c322d73da719ac52f641169fad27f4bf48bf2e5d2068b26a30db102d864584a16853d0d94240354b886a69c353ba9620d799c0355440cc98199a443f997dfb89
SSDEEP 192:sxZZR3WU/ffsSdIdpdHHW6+WNGY36IfOIg5VJ:sxZZMU/ffsSexHbGXzd
TLSH
T13F22B6516E28A97B8CDBE20DBB25BF43E6F9507264D11E58A6FCC61C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bc8faf8417e9898828697b5d34be7b5dc2d142d3585c83ef570dde48b220ed42
MD5 ae29fe3b115feca082d6d96bff684742
SHA1 8a09af9971ca128b6c3193cca7f1d05c738845bc
SHA512 4341ed75101f87af9b13787526cddbc224815f4cef889909c810eab196f05879850a4d0281f3c9409f22a5d9a721d8757871cda4142c110c98ff3f0efcaaf395
SSDEEP 192:sxZZR3WU/ffsSdIdpHHHW6+WNGY36ufOIg5VJ:sxZZMU/ffsSenHbGXtd
TLSH
T1CA22D8526E28A97B8CDBE20DBB25BF03D6F9507264D11E58A6FCC61C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ba419895ffe6c4369ba98d52750bf64a13e823f8d2d4f93f5e468f7abfdd7f82
MD5 3f4239d70f96a32f86ea1cbebe8df5c6
SHA1 39632f2bf72a784e9910393827ed6cfbdc353f7c
SHA512 a779b46024ae8654152fc064dce43b854bed9f7dd669feebb05dae7cc35793839765428c1ed494aefed2afe63518e476e75974124bdaa49cb276905b8e53317a
SSDEEP 192:sxZZR3WU/ffsYdIdpdHHW6+WNGY36afOIg5HJ:sxZZMU/ffsYexHbGXBb
TLSH
T16422B6126E28A97B8CDBD209BB25BF03D6F9507261D11E58AAFCC61C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f0bae4bb2241f62b43f8fd7844b90311955ea07328f11e388a94dc85c7d438a0
MD5 686a30574f4b6ffcb3c7ce2f449d91fd
SHA1 4e7919963da58f4e1f2f32ce8eb369c82e694c95
SHA512 d8ff2d4366d8d0eddd5fdc18daa54370bee55bfe4b4905c96214b538eab69f26c6f447c250199ee6588e069984b38437f2a777f6f56262f0606aad3c6a51a681
SSDEEP 768:gSKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/HroN0:gSKlm7QWvUYe0u1ja8/L/E/UN0
TLSH
T1ADC2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 9881aa84bfedc85d561e730f929519d9c557b099ebf4d76838e31e31997549ab
MD5 c3fe632dd6fcc465a8d516177e781e83
SHA1 781f930e69307bba28e7ae6d3fe94ab5e080a96b
SHA512 be4764d0ebdfeb06bd7155c05740b3cd295de6ac7e8a83e934c8b4de22792df635746b5ee1fa25cb224e185a574e3d60e962366c575f3018175f51ef75e98310
SSDEEP 192:u9wsN2F0QOyUbK7BQmiU1kmu4h//jjzorB6ywxW5XQiao9/ejqCUY:RsN2KFLbKrLxh//z8ExUXQsg3H
TLSH
T196522936B875AC3759E39189B1063613DEB480B7EBC41FA4D6ED9B2D01CA298530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 b1418dc6c0ecd8f5e3ac1890708d03b9003e10045b05210ce20855eb42aec49b
MD5 417887bce3b7239649ebcd6569be7681
SHA1 1e537c360ff192f6411d5b420bfbc7741ee2c52f
SHA512 3b96d054d7b037aa82a892291bf268a759f6b42ab2b8cdf7440a622a85cfd67ac40df13f71a3176c662f6dfedffd003a676025bf2fa2be70576a0127d435ee8b
SSDEEP 192:uRZsS4sN2S0QOyUbK7BQmiU1kmu4h//jjzorB6ywxW5XQ+Go9/ejqCUn:yn4sN23FLbKrLxh//z8ExUXQcg34
TLSH
T143521976B874AC3B59F39185B5063613DEB440BBDAC42F64D6ED9B2D01CB29C530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 78f07b98c558b907c1b5e1e5a3a9b0f8f56d3a572ab69de0a2745bbef8436dea
MD5 b826b8b004f8c718a116659f5dde0781
SHA1 c189cb4cf2f6c8c268a83a05de31e5ce941139e9
SHA512 4e28a17d54cdf228537e3daf63d0fb47530e959033726175746b6549837e8ee5b9166e37d9b6bbb79741a4b99de30ff4177ebeb17d32f460af7c20059893fa30
SSDEEP 192:BONN6JUm0QmiUylvso//jjzorB6ywxWjBCuaU6:BONN6+mE2so//z8ExHtU6
TLSH
T11902C739B8687C7B9AF3AE45B44737139FA4107BAA951F40DAE81E2D01D725C1306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 7d1eef67f337a7498bb8cd32ea8739c05060f01f6328bd3cef8898b48537d51f
MD5 776fb1c49091ab8baedffc7b5604818f
SHA1 95ebdbc21bac33522788f291f32053b02fc3afb1
SHA512 f777fbc5c116de244d8106b27f4e4aad5c7eafac4010dbeeb6cec804179dc321a7bd9fc2979a164b1d7004101f500f7f537b703cd0ed0f77a6c79b0ea179cc75
SSDEEP 192:u9wsN2F0QOyUbK7BQmiU1kmu4h//jjzorB6ywxW5XQTBao9/ejqCUY:RsN2KFLbKrLxh//z8ExUXQBg3H
TLSH
T1D6522936B875AC375DA39189F1063613DEB480B7E7C41FA4D6ED9B1D05CA29C530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a20e1ab68cb3b4017b12432a4f68b06f0da4e0860d5ec06a990ffe26e172aaf
MD5 a2dba02cd32377a902072f5d8c3cf1ca
SHA1 072a78901cf514e3c1053b3719c1757176dd756c
SHA512 6c2f2230fd42d9b2f54689d4bd8b017d1e6f494245b43495339aff2c968aec64e065d30eb29aab0d59b09db9c6a519bdb37f26eb045eab8184d426a8ecac6760
SSDEEP 192:BONv6JUUQmiUy/vDo//jjzorB6ywxW5XQyNx9/eU6:BONv6+kiDo//z8ExUXQYgU6
TLSH
T117120935B878BC6B5EE36585F04732139EA0407BEB896F90D6EC2F2C02DB15C530AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 993ca96982da466f187ab075787280aeae17e59129a8b332167b4c43a704fdb5
MD5 0bf5b6277df3fd69b73bf9f4cedb4565
SHA1 7f875f346a0ba235aa6d8a2af8bebaaafc88fd2f
SHA512 340d05ff8b0ae8a774cec0ca5e787f62c2bee34944b355a4aafafc3f807a8a1b339a7a81b8d65ac1aaccc490792db07e2d0006a2fb419443e3ab232f70626a6b
SSDEEP 192:ukwsN2S0QOyUbK7BQmiU1kmu4h//jjzorB6ywxW5XQiao9/ejqCUn:SsN23FLbKrLxh//z8ExUXQsg34
TLSH
T1E5522935B875AC3759E39189B1063613DEB480BBEBC41F64D6ED9B2D01CB29C530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 0f6424b73e82bb268f7ed41fb4103a66ea71ca00851df05600d475253702ed81
MD5 7cad5d7cedee0a0e924336ec8e9a4429
SHA1 377a27e21ba263650e3bbedd66034a52fbe739f1
SHA512 4d1c6c4589e3c3f94bb971e466ad42f7cdfa75dcebf260d0bd93a7a470d8df4499a33183ec9c91927d4415f0e3babb97fb893fd3ea51bab86b44c7588b4e72d0
SSDEEP 192:uRZsS4sNrS0QOyUbK7BQmiU1kmu4h//jjzorB6ywxW5XQSto9/ejqCUn:yn4sNr3FLbKrLxh//z8ExUXQPg34
TLSH
T1A3522976B874AC3B59F39185B5063613DEB480BBE6C42F64D6ED9B1D01CB19C530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6b1aaa0b6c336e7413f4481b5a7b74a3dd48fd326fbc39ae72953bcb3c471efc
MD5 19f56a36beb200a39ed62ee31daafa90
SHA1 a62420d5bfac1a49d43f6c2f8bfbe54d913a033a
SHA512 c20858560029eee690504c7a641db6b698adc16184e21de5112e486402e29a6bb0b30b58948e2290a67f20c3e5748b4f07d85b42cdaeba13c10be234fa85941c
TLSH
T14B411768A6E95144B3B37F566BF7B86E487BB9372E0AD45D10110F4E0A72E40C861737
MD5 SHA1 SHA512 TLSH

Submit Download