a3ea9057daee552d54d0062aa661c55d33b18d888085d333e13c8489275b5939

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a3ea9057daee552d54d0062aa661c55d33b18d888085d333e13c8489275b5939.html
Size 31KB
Sample260912-2sagjsbc83
SHA256 a3ea9057daee552d54d0062aa661c55d33b18d888085d333e13c8489275b5939
MD5 6e67ea23f03d11e12ad73325d98ad2ae
SHA1 914b8625873fc4429f90cb2e7db71a5a21ac97b5
SHA512 791460e3e2f7d0d87d43e7c6e219fff8daf9b28dc2a8952e2177874a6a2890a8906fe4a4a1e91539c543362b7d7bbd9de1a8588b9399fc74f47466ac01beb640
SSDEEP 768:4IRIOITIwIgIiKZgNDfIwIGI5IpJ7SxIRIOITIwIgIiKZgNDfIwIGI5IgJ7Sr1qp:4IRIOITIwIgIiKZgNDfIwIGI5IpJ7SxI
TLSH
T17FE2E9D8FA3C6E350B3901E6E3B7AEDFF96FD525DC4298C8F2D9402912E1E90425560D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338382269454377"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{4D1A5350-5821-48D3-9037-75E4517C5192}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 772 wrote to memory of 2616	772	msedge.exe	84
PID 772 wrote to memory of 412	772	msedge.exe	85
PID 772 wrote to memory of 2596	772	msedge.exe	86
PID 772 wrote to memory of 2596	772	msedge.exe	86
PID 772 wrote to memory of 2596	772	msedge.exe	86
PID 772 wrote to memory of 5004	772	msedge.exe	88
PID 772 wrote to memory of 5004	772	msedge.exe	88
PID 772 wrote to memory of 828	772	msedge.exe	89
PID 772 wrote to memory of 828	772	msedge.exe	89
PID 772 wrote to memory of 828	772	msedge.exe	89
PID 772 wrote to memory of 4128	772	msedge.exe	90
PID 772 wrote to memory of 4128	772	msedge.exe	90
PID 772 wrote to memory of 4128	772	msedge.exe	90
PID 772 wrote to memory of 556	772	msedge.exe	91
PID 772 wrote to memory of 556	772	msedge.exe	91
PID 772 wrote to memory of 556	772	msedge.exe	91
PID 772 wrote to memory of 3332	772	msedge.exe	92
PID 772 wrote to memory of 3332	772	msedge.exe	92
PID 772 wrote to memory of 3332	772	msedge.exe	92
PID 772 wrote to memory of 4028	772	msedge.exe	96
PID 772 wrote to memory of 4796	772	msedge.exe	97
PID 772 wrote to memory of 4028	772	msedge.exe	96
PID 772 wrote to memory of 4796	772	msedge.exe	97
PID 772 wrote to memory of 2608	772	msedge.exe	99
PID 772 wrote to memory of 4924	772	msedge.exe	104
PID 772 wrote to memory of 1864	772	msedge.exe	105
PID 772 wrote to memory of 5028	772	msedge.exe	106
PID 772 wrote to memory of 3368	772	msedge.exe	107
PID 772 wrote to memory of 3368	772	msedge.exe	107
PID 772 wrote to memory of 4700	772	msedge.exe	108
PID 772 wrote to memory of 4700	772	msedge.exe	108
PID 772 wrote to memory of 4808	772	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a3ea9057daee552d54d0062aa661c55d33b18d888085d333e13c8489275b5939.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff753bc188,0x7fff753bc194,0x7fff753bc1a0
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,16722528700701179918,13885347276763685843,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - System Time Discovery
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,10259699850754583877,9344193048876030948,262144 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,15081673296791210380,17007994789481454990,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,5517092336088553266,2594515965840523016,2097152 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,3636665724904275699,7179790428675984971,2097152 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,2984391871019288995,13066172883552371379,2097152 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,14272546638902720184,933177127605857044,2097152 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,10352378515224381196,15490044110349161804,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,10502118621471120263,17069976816110788624,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12993123636101818929,13276867300861068301,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12993123636101818929,13276867300861068301,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,7540079149218984896,14099791361459366462,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,6259047732824945423,6292516221541173740,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,1143635785320383102,14055862632140741208,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16388253854442081546,449740726719206108,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,956388415652995514,13622245878405454912,524288 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6048,i,6269709612041705151,922983281706016495,262144 --field-trial-handle=2088,i,336799561713077656,11486526550893065126,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a4c3c2d3ce4cbdc8ac26540c314a418febea1ca39ed891f211d95fee99a443be
MD5 85aaa8e68c8672df80b9acd99a89a2a1
SHA1 4d640c861c59c1b115749ca221bb63854a93168d
SHA512 4a86917dd8625c2fdae790ed23bdd69042f178ba81eafe224e1e23280e04c8b9634c449db65e264295a2b2cf8c87cf41e04d29bc1fcf5de200313e5435a98d38
TLSH
T11F5173428EA1FBA0F7981731BDD21EA73BB08D4C45936F4034A4C4B99A1F71B7120C64
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590093.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590093.TMP
Size 2KB
SHA256 a020ab41f33e4f131b8cbfea730ead89ddf2b55514dd7308382293a3b81aa430
MD5 b6e1ac4ea743342bd570b2c5046a35b0
SHA1 defb04b2c134accfb47687040d0cc31495235423
SHA512 b713766f21845360ccf5e3199b99c946c263d0b0bcdf35bd24e0ca0b29bb792663eabea8c57f46a9aba39b1381a9e208c9d90b9cf37812d55c6bd3aaddae34c4
TLSH
T1C65173429EA1FBA0F7981731BDD21EA73BB08D8C45936F4130A8C4B99A1FB5B7160C64
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 90c5174d16ca0af009eae0bfcce218dd6b4e219fdb58e9802b57b4cbe2a2ea06
MD5 74094f513302d8561278d567dd7a430b
SHA1 958fd75a19dd107dc896be813d633acdd61e4993
SHA512 b0ffbeabbfb4b6de9ca056a2eff78d553150d6bf4d795c6b8a23499682a2bb8a5dd1b979be20d14483379b6cfadcc226f1b9579fe86cb95200c91eccb17fa867
TLSH
T13921D3F3C3D5856DC90516F05B28AE6BDE2E090682183C15C9D4EF6BD3E3471E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c76ae1d456085a6abbd2c35031e809d3cda11d34983f2c76706ac1d128d33321
MD5 74eba08f8b6b0888e2bd75d833cbe563
SHA1 1f68b9b75d1ceaf28317081d0e651c6ee4c26790
SHA512 467346aa45386fd05447d466444864928398979084fec7479db0b2c7af1cd9b15dd2e8f0b9ebdb3c31258827920da9347ad34a870d4fe1be29ddc0424027541c
SSDEEP 192:sxZalWg/fmswjIdpdTHW6+WNGYYBa+LIgrJ:sxZaMg/fmsw8FHbGfv9
TLSH
T1C912B8116E28657B8CCBE21DBB25BF53E5F9503261D41E58EAFCC61C04E6ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 68af2ef927243fd15533b05193c616b4d99ffd508d522fa6d82a47302159eb4c
MD5 3fbb0a0692077e5aba391deeee02ec3b
SHA1 2c9b0e977428404a43c9d358acd266287ad434df
SHA512 0d1ab7477564309e3510e9f93656b2ce45fe92ce5ee343cdc92c572c029159311e100d6280c4c71775d0e3f31477d4ee9a9720e0cc3f9314a0a316e3f54c12a5
SSDEEP 192:sxZalWg/fmsJTIdpHTHW6+WNGYYBM+LIg5gJ:sxZaMg/fmsJMzHbGfhG
TLSH
T13322C8156E38697B8CCBE21DBB55BF53E6F9503261D41E48AAFCC61C04E7ACD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0fbb205bc4929df7da047045e9ef48313c2c78e8d5b6d0d8f81701d7a58966c1
MD5 e7602ebbaf8f152535505167a78cf30b
SHA1 d9edd1f74cd397bde3888266aa0884ca36c0a0e3
SHA512 79faf42224ab1406f54a7ad58b26886d04ff0aa945adcc319aec2bea670ae23798d852cd344b9b2ae4b492a41c0ca4f5f6f0d6109c271a920555d2935ad4457d
SSDEEP 192:sxZalWg/fmsMjIdpdTHW6+WNGYYBa+LIg5KJ:sxZaMg/fmsM8FHbGfvM
TLSH
T18522C7116E78657B8CCBD21DBB65BF53E6FD503261D41E88AAFC861C04E6ACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d695016e6a3b0981e3bf252963750b30da3c783b782e2967d35fc085d040894f
MD5 a6effa76aad702de9708ead8983928be
SHA1 ffedf03794e1d1e77aede08bdc89340ba8a48602
SHA512 0c08a17f009ddc8b4700d0eee4825e784c8b30a459de391909d87bef2141ac3ca5a0dddb8faf5d2061d40a3d0ec41bc552bf352ba211c5c4f395300166a804be
SSDEEP 192:sxZalWg/fmsJTIdpdTHW6+WNGYYBq+LIg5gJ:sxZaMg/fmsJMFHbGffG
TLSH
T13B22C9116E38A97B8CCBE21DBB55BF53E6F9503261D41E44AAFCC61C04E7ACD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6251766b1d477d054e1cc52314bceeb5497737a43d87ed37f4f2e808e2edb6dd
MD5 f42d067eafe15d23a3d1b23e0e2d1a3c
SHA1 13de4000996184ae42b60fc5353128edd8e1d680
SHA512 c82732d0519bc36020f553767e68ba80beb5357d7bb5e27baebc58cc00aa4d6d79a231a4cf968af518a1921646a1265697c0e02954bf5165b8ac71868ad9da8e
SSDEEP 192:sxZalWg/fmsJjIdpdTHW6+WNGYYBq+LIg5gJ:sxZaMg/fmsJ8FHbGffG
TLSH
T14222C8116E68697B8CCBE219BB15BF53E6F9503261D41E84AAFCC61C05E7ACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e5c07f0b3314bb370724d752f1a9f434eda292f1435999a8a3bfbe5419a36018
MD5 42e4dd3371dcb69bdf13ccf42d9545ce
SHA1 ab86c6dc56e51ec5164761a040564a6b492d7d92
SHA512 e39256cdb118245f38cac6fdf1df665f7704b0a04c0095be0c1aa9902a12ff88360d79c3826c5fb6282c3a24814667d28f6994d84f105b66d177e6cb24be08ea
SSDEEP 768:KfyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXZrop1sq:KfyYR7jWv3NpBu1ja/CL8OXSf
TLSH
T134C2F92B640DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EE912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 cb896d65579aa11ccf1e94811a5e63346ab14b15ef09b2dd2915cf1041d98a8d
MD5 15e33f075b2f9061095b5491b0b3a854
SHA1 ddd1fec147937f3911651928f849cdf481c734ce
SHA512 4188cba8a6e247669da3a302f425de7eca917a3894aea99aa0ee0e13044b3e4a52772de274eb5b5ffd4a75e49d5e528bf484b9ba5cf55cad48eabe4b84503338
SSDEEP 192:u8l/sNyxQPVFd6uqOnnHCs+iQmiU1O3U4bcX5hQDP1Mjzor81xXONikKPyq/5TU8:jsNyxM6cniGgrQX5+Dt8881xXcnETU8
TLSH
T118422B35A9B4AC3B4DD76191B0463223EFA52527D7C82FC0D6EC5B1C01DE6AC531A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 185fb4c001cd6dfb9e63f7a0ca002a6c873645f83c6fb48c771fd6a823611a2f
MD5 c6efa454d55322587bb3874e1870a66b
SHA1 ddbc111041ddd425b5e69456d0004e9bc54bf30c
SHA512 ff077513a6b2896fae5b14d6e3b4433c2462ffe06e66b0b7dc47c7db6621e711e0784708383675ed9db8477c72e89a081ab140d47a907b5db7df7dbe44baeb77
SSDEEP 192:u8l/sNyxQPVFd6uqOnnHCsRQmiU1O3U4bcX5hQDP1Mjzor81xXONikKPyq/5TU8:jsNyxM6cniAgrQX5+Dt8881xXcnETU8
TLSH
T1B5422C35E9B8AC3B4ED76191B0463223EFA52527D7C82FC0D6EC5B1C01DE6AC531A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 eb0c3d70496896793ad836fcdf3b4b88a0f27b4323b02f34eda692205304b44b
MD5 012bd83db57dfb91fcc4ac17a7bb1d2e
SHA1 a1d3aab0a359ca20e9d162843953fe6b8a525e0b
SHA512 8ab423cb30c3797f43531ba59d7dfd03360477690e2df904eb25b2af36ed95b0c382ad1b435241a613eeeed79ae9f571f34eb762a08d4fc06b9c6b87989239e9
SSDEEP 384:eZcIjsNymM6cniGgrQX5+Dt8881xXcnETsa+VYsd7Uboa:cjvickD2oEThgzSd
TLSH
T165827F329DB4AC775DE76291F58632139EF86167A6CC2BC0D6EC5F1D01DD6A8030AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d03a069e4c45399b8fadd214f17dba159a127b0da59e2f8cebad38f444f17824
MD5 d0b7afc808b830319888893731bfb972
SHA1 f75268a89cba6571350d7ba4a5e2201bd856dc0b
SHA512 b68fa0919ee78612e5dabc355915b8ead9c159c2ce9d1bbdb213a25563e4170b6ef71bb3eae8b0ecc831c8535e490e7ebd5e63a2c05352a51357feef283fcb80
SSDEEP 384:XZcILdsNyfM6cniGgrQX5+Dt8881xXcaETsa+VYsd7Uboa:fhuickD2VEThgzSd
TLSH
T14B927E31ADB4AC374DE76292F58632139EFC6167A6CC6BC0D6EC9F1D00DD698130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9cb86396160207f4d2d00041e61ccc15f09ab52db72637811b18ad4d1e2cf478
MD5 480363168ca585af6eba44f6edcb06ac
SHA1 023957989225c5338e9c7c646fe7b73f6ac0dc24
SHA512 23584caeb1802d5dcc1fd7f3fb1198293b4d922f694e0a110a7ef32615fef2ac12d19234f8f78ee0a3af1e19d9bc21f150a5d4d9cccfc8e03c73185b115728b4
SSDEEP 192:EONV6nnHGQmiUyb4QYcX5hQDP1Mjzor816McThl9UU6:EONV6nCTQNX5+Dt8881i/9UU6
TLSH
T10302EB35F8747C7B8EF7AE46B08633136F952167E5942BC0DAE81E1D00D765C230A923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1ace037988cddfbfb6e2f34e786910b9fe36a3cfb2f41a2e3f75a1d9ae7a82d4
MD5 c307548cd6d9cec55b1a49e2708ef4f0
SHA1 dff26fef3dd9c56f8803d0ac3e3f56e31031cc0a
SHA512 5020298f34935c678ccec583765ead17e36a36ccad5973d0ea0fb5671827941106df81086ae051ca830faaf852d3aecd08cbdac3f2ab94cedc92d653de61d890
SSDEEP 384:vZcIjsNyfM6cniGgrQX5+Dt8881xXcnETsa+VYsd7Uboa:njuickD2oEThgzSd
TLSH
T179827F31ADB4AC774DE7A291F58632139EF86167A6CC2BC0D6EC5F1D01DD6A8030A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 49d13807330066dafb9743e9b4c99b69b4e4e235008cb61f4b0defe53f84d538
MD5 06848e43b5647d7a48a4eb9a14ec6abc
SHA1 2894f9eed06c1d524e7ee5f1f68d942eb780f93a
SHA512 ce49f007484863fc7222839bf8ca185c93facced432c258a9579a596af462943b7feedc6555000ff4bb9ef36f9e6671742c219377a840d8a2085bde348d868e3
SSDEEP 192:EONr6nnHyQmiUyZ4pYcX5hQDP1Mjzor81xXONiqg3q/5TU6:EONr6nOnpNX5+Dt8881xXcmETU6
TLSH
T17B120C35F9B4AC6B5ED36591B08731139EA56127EA887BC0D6EC1E1C01DE6AC130D927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cbd4b9a-6821-41c5-919d-39e73c793098.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4cbd4b9a-6821-41c5-919d-39e73c793098.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b05ee632b2f99449c4671567d4dfe9ec682f569091b3d2d64c8b167ca71a5d02
MD5 dbef5606c27950938f40f18cb6f9732c
SHA1 4915cda1d712572e71eb38392e67ed3f44d17878
SHA512 068960fe238718ca1d619ce5468111a48089c4657fb123db763f7493e2e188ec1b22fe663bbaf649544777636c23876bb5846a6946718ee37801c74c2620236e
TLSH
T17A411858B6E91148B3B77E56ABF6786E487FB9372E07C45E10010F4F0662A40D961737
MD5 SHA1 SHA512 TLSH

Submit Download