55d7f71d1286171eb55c62c6228ea15e93405f9f2123112f83b40db5255b7bb9

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_55d7f71d1286171eb55c62c6228ea15e93405f9f2123112f83b40db5255b7bb9.html
Size 6KB
Sample260912-j7jdwssbpc
SHA256 55d7f71d1286171eb55c62c6228ea15e93405f9f2123112f83b40db5255b7bb9
MD5 541f411f43624314084fb33bbfaba35e
SHA1 d26d321582a9f79918b33d9d48e0a6809dff37ce
SHA512 3640e77290ff50f948898ddcd576444c3b01d5e49f74aeebc68072bbb77a4fd36afdcca3d0279de26c7ddfdda5000dab03f45700e9ae68b159d7062952b54c16
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69YEcE8XECgUdDhQoKDejCPJu:zWLJlxe/f80WhtKDejCxu
TLSH
T1CAE1B55A9E4C853F4100059BF0A16A1CD8DB487BD312D8A6FCFF416E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338178356987936"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{3691C36A-55F2-438F-8960-218715D881C8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3488 wrote to memory of 1468	3488	msedge.exe	83
PID 3488 wrote to memory of 3052	3488	msedge.exe	85
PID 3488 wrote to memory of 1720	3488	msedge.exe	86
PID 3488 wrote to memory of 1720	3488	msedge.exe	86
PID 3488 wrote to memory of 1720	3488	msedge.exe	86
PID 3488 wrote to memory of 464	3488	msedge.exe	88
PID 3488 wrote to memory of 464	3488	msedge.exe	88
PID 3488 wrote to memory of 3380	3488	msedge.exe	89
PID 3488 wrote to memory of 4964	3488	msedge.exe	90
PID 3488 wrote to memory of 3380	3488	msedge.exe	89
PID 3488 wrote to memory of 3380	3488	msedge.exe	89
PID 3488 wrote to memory of 4964	3488	msedge.exe	90
PID 3488 wrote to memory of 4964	3488	msedge.exe	90
PID 3488 wrote to memory of 4152	3488	msedge.exe	91
PID 3488 wrote to memory of 4152	3488	msedge.exe	91
PID 3488 wrote to memory of 4152	3488	msedge.exe	91
PID 3488 wrote to memory of 4056	3488	msedge.exe	92
PID 3488 wrote to memory of 4056	3488	msedge.exe	92
PID 3488 wrote to memory of 4056	3488	msedge.exe	92
PID 3488 wrote to memory of 1652	3488	msedge.exe	97
PID 3488 wrote to memory of 1652	3488	msedge.exe	97
PID 3488 wrote to memory of 4504	3488	msedge.exe	96
PID 3488 wrote to memory of 4504	3488	msedge.exe	96
PID 3488 wrote to memory of 4208	3488	msedge.exe	100
PID 3488 wrote to memory of 3112	3488	msedge.exe	105
PID 3488 wrote to memory of 812	3488	msedge.exe	106
PID 3488 wrote to memory of 1744	3488	msedge.exe	107
PID 3488 wrote to memory of 3024	3488	msedge.exe	109
PID 3488 wrote to memory of 3024	3488	msedge.exe	109
PID 3488 wrote to memory of 2220	3488	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_55d7f71d1286171eb55c62c6228ea15e93405f9f2123112f83b40db5255b7bb9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdf843c188,0x7ffdf843c194,0x7ffdf843c1a0
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,287587540644730378,16327092211577116012,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,3837241804182669013,5109989771778551670,262144 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,4553988648283261966,10281037038083246458,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,582393509911238752,10392661217024454601,2097152 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,6597856660896861966,17125165394356855284,2097152 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,7923235665567641598,3621538955904826328,2097152 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,6697960847232365811,209602351015473154,2097152 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,12689787863986924719,17689033318297337639,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,17074903965956778203,1201982488278509355,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16258800660126317724,18397731232360971342,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16258800660126317724,18397731232360971342,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,14337529874708792118,17201516959474061115,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,7124371232304903593,15548939263559221587,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,3968542392506066991,9665314953724306634,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,9971251386725901729,3241544600058697211,524288 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6516,i,3427851969794304746,9909553195673810145,262144 --field-trial-handle=2272,i,10267831379496742775,416534740460945662,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bd59e3c6b1368b1edaa4cfafc98c87ffb7f1de66bb50b241641f30435442fe4c
MD5 80f190b1ba8f5afb8efc339e5cef09a3
SHA1 745b777f5e5d2a65cbac18f2054fea86ef465d92
SHA512 12feec58643006ad3e7790a4a760d79f4e2a264766db3cfb0878487e876d783b946182a8f1af2f1b2e7cde059c371d62d0f7d2f985dcfe7dcfdb9f2be1e4a612
TLSH
T15B616080177382DDFF54A6B551C553DB3232B789899BEC4215B4DB7AF80A79CB051D0C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589b41.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589b41.TMP
Size 3KB
SHA256 32b66d312a463acc5615e9295693ff82cfdf8b68cb13645382f1fb5a35ca82f3
MD5 bfabb5c2e6650981eca7c51675c53504
SHA1 3492df953de4d31e91298a1bea0039ccb2fd59bb
SHA512 0f21d952570a89222cd5ef18f2fb5d706dfb514c7cd89a3bc44b9d107961550a80b03c1d54ed824f467802b743da53b1e702509f1beaa562776a774a4fffd3b1
TLSH
T1A4616F80177382DDFF54A6B595C553DB3232B689899BEC4215A4CB7AF80A79CB051D0C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a68a302970273c1afc91a5e5a9514658f446cea27e787dd9de1709dce6406b9a
MD5 28737c907903eecaf53f13426acd31ac
SHA1 77fcca907e31b72e586f8a9ececaccfe9d7f0865
SHA512 fb4b509b056f8f7c26c9a53b78acece21317632c91a9897c28d324f0ae4b9336c51f00d7b4c380e788a338f3eb1864e5481770adffa2f7158076a59410f2e1ca
TLSH
T158217DB7C3D48AAEC91156F0AB25AE2BDE1D0606422C3D1689E4AF1B93F2475D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b84fed600a039f012d16613ec67b9d49b40fefd733d32af31aa83b8cb3d72096
MD5 60df12101b58dd8437929ae4b6351f24
SHA1 0d6fc808c534738256e5044fed2a982b90efe518
SHA512 3a28f38888404c2ed1da60b06cbca26429ed18ed8549085aae0710666cb39c124f4058d33f1cec2c75750afac29087fea6089e122a301c55ae28c2300a45d993
SSDEEP 192:sxZ/RhW4/fisEsIdpdTHW6+WNGYYBa5uIgrJ:sxZ/O4/fisE1NHbGfD9
TLSH
T1B712A711AE28A57B8CCBE21DBB25BF53D6F9507291D01E58E7FC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 775c7b45f0376ab8f21d010f6a99eeec2d5a5bc73b7ca95671c70a8c2a22d843
MD5 d778e237794249a4e6bf93bcf2ada579
SHA1 b7b7871dd220a8fd8319d1bce52193948ea9a28f
SHA512 709e4928f6b74c5d4948916185a0612cae4bb7dd7cac2cdf26bf8a2ef63fe9353bf8b210bba560b04506c076776dfeadc96a3919997947aa06c6e3a05a1bda92
SSDEEP 192:sxZ/RhW4/fisLsIdpdTHW6+WNGYYBa5uIg5JJ:sxZ/O4/fisL1NHbGfDR
TLSH
T10922A711AE28A57B8CCBE20DBB55BF53D6F9507291D01E48E7FC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b5bea9a515b9b38714b399820834468f23845280f2f2c9c29fedbd5ff752c918
MD5 30732c3ab42251917b328a7085d2eb90
SHA1 44c8c9d837eecfaa41e0ad9d547bfe01fb4a791d
SHA512 e9053642ecc16446003c1275116a8327aa2cfe60c402dc3770c465d86d4450b057cd0ccb0a291eb5c65694b9f30485b13ad0008b8be6afce08ca225a026795d1
SSDEEP 192:sxZ/RhW4/fisn+IdpHTHW6+WNGYYBa5uIg5zJ:sxZ/O4/fisnvzHbGfD3
TLSH
T12B229711AE28A97B8CCBE20DBA55BF53E6F9507251911E48EBFC861C05E7ADE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6b4ca8bc79299eef9ee85591065e6c8782dcc27323d211816ad7d4d974743477
MD5 0416176fadd3dbcd9bdce953e651c01b
SHA1 ca603ec99862cee41a0c7042ae0e7e8bce40bead
SHA512 dc8d985d20f9e8ebe4eec254551a893d5c831743643a0928499e7310c6471e1dfee03580badf234b32f41da68013fb368a4f92f3e232fa2865cff4482dbf55c0
SSDEEP 192:sxZ/RhW4/fisn+IdpdTHW6+WNGYYBm5uIg5zJ:sxZ/O4/fisnvNHbGf/3
TLSH
T1BF22A811AE28A97B8CCBE20DBB55BF53E6F9507251911E48E7FC861C05E7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 35fe7cc58f894f8b4901a2b9a6a0038e85fc26b0b4e4f681c1af601fed0d4e38
MD5 5d51102bff67199c0373d94ebed568a2
SHA1 fa7d0a6113f99fd6d11810e0b8badb94dc884e62
SHA512 43023357285ba2fd4cce6812a7032eb4a7de22e1ce2009e44fa123c58b0bbadb495d37a1e79c7cc6bbdb174aae3795d7833163056e781d36a1b7896bebe3c918
SSDEEP 768:c5yYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXbropcCy:c5yYR7jWv3NpBu1ja/CL8OXoG
TLSH
T1A2C2E92B640DCB7E4FC01A9DDC5A6F973E9802C7A6548D4047FA944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 59b890eccfcc98dfde1db3f963cb4943bcd224c8c8c0cda474f0aa098290665b
MD5 ffe4c3f9519b63ef61e5b392afa895e2
SHA1 4a2ee607f9c8759292a148bf0e2e5edf4ba7be5b
SHA512 5f888395222c2d13937fcba25ee76153ea7e98a39cb3906b863c3d41abe874d6f42b257a1b794908256f39a9fa693946b8444af5df98eebbee13e8af0c62c946
SSDEEP 384:zZcIesNxAR0iiBjQX5+DtbOt1AzmJro3f7O6R2FeozMo/:reIHkkDlOkzmho3f7TRT0
TLSH
T131828E31AC749C3759FB9299F44B32139EF890A796C86AC0D2DD7F2D00D9AA8131EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c64ae977e6a236a5e09afd028e3a4398f14a47ff7c290c984e7b254948f64fd5
MD5 de6c20069d9c5357df8eeed1eefe41a0
SHA1 9b36a11a41638c35eb39738f3bd44a11b1994600
SHA512 57a1db802086b92979b79e2728abc741b9ce4e27dc793d2aca5c23934206a55b2c6f34eaaf1f5a7f71ab4b122890a7f5bd21243f8b54063c772c38bf3c13ae5b
SSDEEP 384:mZcInosNx9R0idBjQX5+DtbOt1AzmJrE3f7O6R2FeozMo/:0o7IkkDlOkzmhE3f7TRT0
TLSH
T18B928E31AC749C3759EBA15AF44A32139EF8509796C96EC0D2DD7F2D00D9AAC130EC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 25757340ea151de7dda85b26cb9c8901813091faece910f649c4ad0ba6389016
MD5 4d7740cb8d3c29f93ef38dd007a23561
SHA1 09a547465834e174c7f483b7b9a5f68c1ea5892a
SHA512 0e67e295e3e8bf92eec3901958be9f1097d089ec77a6a158236a0d734da0ce9ca85b457a78dcffc4ac26f2cf0387c2a06a54b904792d6999231ec0683e824d80
SSDEEP 192:EONp6nnHGQmiUyfAQYcX5hQDP1bOt1ATcMcuFU6:EONp6nCrQNX5+DtbOt1A0WU6
TLSH
T1DD02EB34FD687C778EF3AE46B48637175FA5217BE5942BC0D6E81E1C01DB65C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2eed50467325e0d47f4526fe225aadf3c16125783e4aeb519cf9bd88e1563105
MD5 ecd5b4a202527f00e96f948d2d35b771
SHA1 3ed8232e17689410b7d9810aef647e866e8fb587
SHA512 b86d4bae1a3bd6a8f6c092ec3cd053bb04b02b2ddbece8309b86620311e9a805baa09c80a2796f07911035ee8a7f3fbc1d16b187e03975cf0aa004fe4cb906a4
SSDEEP 384:kZcIesNx9R0idBjQX5+DtbOt1AzmJro3f7O6R2FeozMo/:Ce7IkkDlOkzmho3f7TRT0
TLSH
T177828E31AC749C3759FBA199F44A32139EF890A796C96EC0D2DD7F2D00D9AA8131EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af7be30ee0e00ef6cdc0c9136dfee35b5944eb22cde4e01c69b4b17321533349
MD5 d00ece940f9005fcadd941671b3eace1
SHA1 3a6658376fe96ccd9ca53caf2dc18d9a3984bddf
SHA512 ecd430cc9a39a043fd246748aae66bc91450389730e51205bb385c835617e3aaf6860b3479b36d00665ca981bfa0784f5fc8dbe615f7bad78bd4113d73965f69
SSDEEP 192:EONU6nnH5QmiUyAAxYcX5hQDP1bOt1ATXhhSJrZg39/5fU6:EONU6n3SxNX5+DtbOt1AzmJre3fU6
TLSH
T167121B31B9A4AC375EE36595F08732139EA56167E5887FC0D6DC2E1C01EEAAC630DC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2db1bfdc-5fd9-4ea0-b0e8-c2fd9d7df271.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2db1bfdc-5fd9-4ea0-b0e8-c2fd9d7df271.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 65a2a570f2b6ddd678983f53c3e4b6cc9ee3ba5ea57d0d217f406e535c54f364
MD5 8376dbca2f6c1ed0118b3f4915d20bef
SHA1 b0b3d190462fbae69c61acdd0ea9ee04c1c6fa59
SHA512 2bbc14ad803805b299d3b757b167645cf78ee4eb5eb36ee112757898d2891254bf1405fb6fd6a28539096b7404d3bf566dc28217abcab3b1ae93411af3aa6953
TLSH
T1B741F858BAFA1148B3776F56ABF6A86D487FB8772F0A945D00100E4F0772A40D961B37
MD5 SHA1 SHA512 TLSH

Submit Download