2789b72b899d637f9a75ac4797dd6f1abc92a0f5c224b157c29fd19d667d5942

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 07:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2789b72b899d637f9a75ac4797dd6f1abc92a0f5c224b157c29fd19d667d5942.html
Size 127KB
Sample260912-jqa17a1grc
SHA256 2789b72b899d637f9a75ac4797dd6f1abc92a0f5c224b157c29fd19d667d5942
MD5 1cbbb123d028475ae45d869ef1c3f109
SHA1 50a99d14b6ce6d8fa63255f9b33ab28fd245da6e
SHA512 4902d4a1fedd9172abfa8e46b087ac6bf87d9abbc9ef40777c83eb8d599a6fb8743086761e4c99dd9fb3371df3126600fa49024fdaeb5037bc6c7108342bd460
SSDEEP 3072:0jDNQ3NIMhdo9doNue70yOUMYkkDJ/6R/O:0lQ3NFhdo9doNue7V68
TLSH
T18CD3B5A312604CF5FFB81DB345EA046F3C2D1437A80690B9E3EDDE969F6796E0305968
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338176272646912"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{6DF93122-9C1A-46AD-972F-CF362C7FBD35}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 2076	4288	msedge.exe	83
PID 4288 wrote to memory of 4300	4288	msedge.exe	84
PID 4288 wrote to memory of 1644	4288	msedge.exe	85
PID 4288 wrote to memory of 1644	4288	msedge.exe	85
PID 4288 wrote to memory of 1644	4288	msedge.exe	85
PID 4288 wrote to memory of 1792	4288	msedge.exe	86
PID 4288 wrote to memory of 1792	4288	msedge.exe	86
PID 4288 wrote to memory of 5040	4288	msedge.exe	87
PID 4288 wrote to memory of 3188	4288	msedge.exe	88
PID 4288 wrote to memory of 5040	4288	msedge.exe	87
PID 4288 wrote to memory of 5040	4288	msedge.exe	87
PID 4288 wrote to memory of 3188	4288	msedge.exe	88
PID 4288 wrote to memory of 3188	4288	msedge.exe	88
PID 4288 wrote to memory of 1296	4288	msedge.exe	89
PID 4288 wrote to memory of 1296	4288	msedge.exe	89
PID 4288 wrote to memory of 1296	4288	msedge.exe	89
PID 4288 wrote to memory of 1768	4288	msedge.exe	90
PID 4288 wrote to memory of 1768	4288	msedge.exe	90
PID 4288 wrote to memory of 1768	4288	msedge.exe	90
PID 4288 wrote to memory of 1840	4288	msedge.exe	95
PID 4288 wrote to memory of 4740	4288	msedge.exe	96
PID 4288 wrote to memory of 1840	4288	msedge.exe	95
PID 4288 wrote to memory of 4740	4288	msedge.exe	96
PID 4288 wrote to memory of 2256	4288	msedge.exe	99
PID 4288 wrote to memory of 4776	4288	msedge.exe	104
PID 4288 wrote to memory of 2684	4288	msedge.exe	105
PID 4288 wrote to memory of 4704	4288	msedge.exe	106
PID 4288 wrote to memory of 4380	4288	msedge.exe	107
PID 4288 wrote to memory of 4380	4288	msedge.exe	107
PID 4288 wrote to memory of 456	4288	msedge.exe	108
PID 4288 wrote to memory of 456	4288	msedge.exe	108
PID 4288 wrote to memory of 5004	4288	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2789b72b899d637f9a75ac4797dd6f1abc92a0f5c224b157c29fd19d667d5942.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff7caec188,0x7fff7caec194,0x7fff7caec1a0
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,5225480669738062887,8394977668856923239,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,12998559789845116833,1470693316222235222,262144 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,5744019611184000041,16504511146915597330,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,235221717553872841,1378107125017631179,2097152 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,689713468407690324,8545948586906253148,2097152 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,5256091925352995743,1072684712029215374,2097152 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,7199190035705090599,9465513827230762686,2097152 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,10321274556636704198,8652547722087172349,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,7230987927378668344,5611782102666911175,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,29130536275299573,6186505171684692785,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,29130536275299573,6186505171684692785,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,8540548133832823433,8785637499637672600,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,15409037701131689607,17421995931466912513,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,246610718407228812,15653232574453863502,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2792,i,3095621821291090701,11007528055614489204,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,9274755738556916227,3416673387991411519,524288 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,3939263371841283028,8871361892549746627,262144 --field-trial-handle=2316,i,14442677833423895018,15123547138472389333,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 74105e08627b87e84d4388fc8ca7eda33919ed14691d5ecf2e17a84029719048
MD5 974118641978dedd09f977f2b5daec0b
SHA1 0b86f50526595f586784a101b4dbd9ece325fd32
SHA512 93560ec36b5998ebd2b47bf40525a5773382853a4461c616c74129760ec3b27a578a6ec648213c7e0c4d11941fc9ae37f9aefd3187e87e28ee4a1b7b735f8c9d
TLSH
T1C9615FC152B0486DFB68E37286FA1067B6348C728EE3ED72E454F8F95C0632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593e38.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593e38.TMP
Size 3KB
SHA256 10d70b05be696503c5d8c2cd7044620d7008bc2eb13ce73707e084a7555d82e9
MD5 cef6ff88f037601a9720c3b0937bd0a1
SHA1 c4f3c29eab2eb02224b45b1ddd9d633caa2d01c5
SHA512 798316da51fea514238b61291e2faa8d53a819aebf87051ba1d7816cdd02ecf1bf7b1eada7d1a1e152142395b7b6186d904c9a01554c1d9d690ac1c70d2edb9c
TLSH
T1F36150C156B0486DFB68E37286FA10A7B5348C728EE3ED72E454F8F95C0632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 aa2fe147479c6214b61d75776e17e27ad751c64715021dc6baddc8dfca7cff2f
MD5 d4dafff016e63326878fa5be212382fd
SHA1 a911c091cc7aa3800d428afef19b69cace427424
SHA512 51d0cb9ddd49e9d40d4d5c23c715982226cf76e32ff81c0dbc36e14a5e7ecfba3ca589d041d61cc3ca5290f15c09bf23b92f28f0e9f327e394b5b7dd14047a1e
TLSH
T19A41ABB3C3D8877EC91156F49B246E1ADE1D0A4A422C3D56C9E4AF1FA3F24B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 25b519140d830951302d36453bc03f20bbd536b802451792bf82690c55aa78d4
MD5 0bf290fddb64120e0d3b6b737be96ecf
SHA1 97469d05e96ef329531aa0091018f14c4c73860a
SHA512 aaac026782cc24c3659aa6c8380a929cc0919721fa4ee3e6ac5c291c7e2c545438ec0bab333db0ff1b67d65fd8275ca0952997cc9554216831184082b6e92418
SSDEEP 192:sxZKR/Wj/f+sIKIdpdwHW6+WNGYrbUaIgrJ:sxZKMj/f+sIDGHbGo9
TLSH
T11212A652AE28A97B8CC7D209BB15BF03D6F9503291D51E58EBFC861C05E7ADD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8df97aa81b3719bab5f607cd0ad7462c2ab8524b16810a2d4579694ebbffd8ae
MD5 97e8b6cc36035002c95ef69de6cbaffc
SHA1 2917115aae47168ec9aa3ca5703fa739b489ff48
SHA512 bdba116073a637ff035a3b53d6564a6d0520100598857a1b712f0f066f82458cfdc070fa0321721daa5f2d03415d617a111573c39ca432aa2616c4a401baf14d
SSDEEP 192:sxZKR/Wj/f+s3KIdpdwHW6+WNGYrbUaIg5kJ:sxZKMj/f+s3DGHbGoO
TLSH
T19922A652AE28A97B8CCBD209BB15BF03D6F9503291D51E48E7FC861C05E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c816820a859ea89f88053271271848e9bf3d899397d77b82a84f40e41e87f944
MD5 b96bec8afa52740dc95bb8a694eb510a
SHA1 a7fb6c2371a188f30e0eb7a1089e83a56a5c612e
SHA512 ce26f7f4a7b4520bf1da36ebdbb78c11c8bacf5bedb7351fd53282f9fe2bdf8705ca4e85e2622c7377596351fccf1d1dd7122e45e95425e37e508d223adee85f
SSDEEP 192:sxZKR/Wj/f+sIKIdpHwHW6+WNGYrhUaIg5GJ:sxZKMj/f+sIDQHbGe8
TLSH
T127229552AE28A97B8CCBE209BB15BF13D6F9503291D51E44E7FCC61C05E7ADD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dd5c8fe6a9cdd09804ffc1181503929d7217265230aef3aed722292334e24144
MD5 32c48b46935c9785581a7dd64efe8d6e
SHA1 098409c637c850f089217370168c214aa4001827
SHA512 01dfbb00dd1b0cb664a7db70e96c65cd77d3a31dbe4e9cee160f0d89fd73e254aa81393947e3f6c93b69f71b8bb83c64f3086c8b33bb3a429a560db92d376a0b
SSDEEP 192:sxZKR/Wj/f+sIKIdpdwHW6+WNGYr8UaIg5GJ:sxZKMj/f+sIDGHbG58
TLSH
T1CF22A652AE28A97B8CCBE209BB15BF03D6F9503291D51E44E7FCC61C05E7ACD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 63c549cc73c817398c5ed9a1d7f0fda1809c4061a9327dbc3dde6dedfffbd465
MD5 7a731e31fab2b8cc6d2aae35eb004d54
SHA1 7e83b00de5d7b09b57b3469cd296a74709f3412b
SHA512 e79f9d4de7bf3d34df3500d95996b24337510f0285dc3f49ffe818ef8401bdb32207c9524ad2e8c26faff9b68519aa06653843e38b5fd18c596f65c5b417ab4f
SSDEEP 768:2ry4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbRroROa:2ry4J/DWvbtBhu1jajiLm0bqca
TLSH
T18AC2FA3B644CCA7E4FC00A9DED5E6FD73E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4fd36044-9e40-457b-a5ea-e973d0436416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4fd36044-9e40-457b-a5ea-e973d0436416.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d830a83e3a59657bf096fae25ce324fc9e764dd4ee138fa5a68888448fc5f98c
MD5 e19cd253fe51d8d826ea82c630e2b0b0
SHA1 d8ba3c15912b0f7a85f07efcce1c50314d012336
SHA512 60d9d5d648767ad76a2b32e4f6b208ea32b1c40d06cc4ff24aeb326165d113671e74e4f011d609112589e42fe5f2109b255ae98c65489aad2c38160e2986b7e1
SSDEEP 384:2ZcIfsNZdVFaQpZbbSPHX58EA8xJjXo18sa+VYZd7UEoa:kfiY/aqoqhg4pR
TLSH
T140826D31AA78BD775DF7A156B58736038EF8906392C82F50C7ED9B1D009E2A8530BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 259a27de62b4c63bfc495f233547939194437b689770dc3e3fcc881acef97d42
MD5 bc8777a69ae622b3319bb01b0dc3d358
SHA1 2ba581e5118ca61eee7cbca863ae69367a83a75c
SHA512 0ead6438ec0628c5990adbe41577f342bbf990b912abbcddd755ffb94f3011e8d828a910d3a9d29b63ca85dd89c982fa737715baa5b3c5baacacb95b40b320d9
SSDEEP 192:1ONT6wlDgQmiUymWW4X58gZYjzorxJiDlN5U6:1ONT6kgwW4X58EA8xJi7U6
TLSH
T163020934F9787C6B8EF2AE0AF58A26139FE5102BE6952F44C7E81B1D00D765C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a23b5a74f68fb77a3e0949e013abd7d0468004a65edbd4de5e1ad29b8a284a37
MD5 4fec1927353d71be30a17052ac4cf001
SHA1 b0a45d89ee4e282fd9773508e66743ca9659bef2
SHA512 af79e3e6915d5abda60353ff6e5048a4b11c6fdc779d4a0545af4cf591613c743cba813780512e604f79a0b3e7fde97825f4eef355508ff8155db4facae6742f
SSDEEP 384:HsNZhVFaQpZdSPHX58EA8xJjXT18sa+VYZd7UA:HWC/aqTqhg4d
TLSH
T1D6623931EA68AD274DE39256B54732139EF451A792882F94C7EC8F1C00DE2AC530B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bd78e2ab5639f2127e02ad85281d40ce439fe384fb6e6676a7f87e1763add40d
MD5 eaebace2ee49bc4a77c477691e380e92
SHA1 38e5800ce2efad0adba81f73b8445042700c24fc
SHA512 378e182fd39e160443ff7c3d4b156b1683db4511ba869185702016d0cdd911b8643b106b12de769c18b902966ff25328e79c4f9148b82f06e8ad55d752eee669
SSDEEP 384:kwZcIfsNZUVFaQpZbbSPHX58EA8xJjXo18sa+VYZd7UEoa:zf1Y/aqoqhg4pR
TLSH
T17A826C31AA78BD775DF7A146B58736038EF8906392C82F50C7EC9B1D009E2A8530BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9267c402c5fd535995ebc6f5c46a56246b440425838d7fd646f68ec244645836
MD5 ce5c1731b0442f3a9b23d669bd09589b
SHA1 adad2ba7a8abe24a772425743b3c62355ee6e2a0
SHA512 b44bf77309487cccf66ebfaf0adcad24489145d6507e616ca1a092ae0ab54c853bcb0125a49a104bac0a310160eea1b2442af1408f5dfcf6d3ef2d463afd2500
SSDEEP 192:1ONM6wlDsQmiUyQWN4X58gZYjzorxJjX/vel/z8U6:1ONM6k8sN4X58EA8xJjXe18U6
TLSH
T1D912F835E5B8BC2B5EE2A445B08731139FE95127E7896F90C7EC1A2C01EF2AC531AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbc3d6f2-c70a-4cbe-a41b-ae77f57406aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbc3d6f2-c70a-4cbe-a41b-ae77f57406aa.tmp
Size 21KB
SHA256 3c56323aa87e819cae7d8f65a08cf677b04c82f112819e753f468f8e34d01ee5
MD5 ed8cf76e9bdc417ab82ddde0a3f4bc21
SHA1 08b39004ac52ea1f9ee40069b5c96b22b6f7a2f9
SHA512 5e67b5c82fb7ac4eecd1fb1d2e7e75e64500c69c1856b6d780d8effacfb1e0c9d48b9090def32af64b0d44b2e0eea344c75d7b5b376a6103573fad81bc2af188
SSDEEP 384:cziFiZcIaBsN78TUNTUlIlUVFaQpZbbSPHX58EA8xJjXL18sa+VYZd7UEoa:tFQouwgMY/aqLqhg4pR
TLSH
T15DA25C3299A8ED7B9DF79645F94A32038EF44063D2C8AB90D3DC9E1D009A1DC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfab0d95-856a-47df-86af-6adc0d74a5e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dfab0d95-856a-47df-86af-6adc0d74a5e7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6908a0cf8fbe93aefbff1d5bfc0377ee72e0e79d69850649335fbfddd04ad72e
MD5 e18328f2c7d9279b724e56cd3e9a62b4
SHA1 84c68b6bacf3d6824b1883e8ff51112c7f5ca780
SHA512 59b5f81373264d54262314adeedc0b4965f2ce5e749507e0230c8718353e0cf6096b76a2b1600dc0cd9785d1ea21ca949c06c9a22057cc6471035d3040b6c89f
TLSH
T14041E698AAEE1148B3B77F5AABF6686D44BBBC372F06D45E10110D4F0622B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download