4c4153c06e81c4bce41db4af8f76d76dc2de4150c7d5a389cb84926c2c503324

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4c4153c06e81c4bce41db4af8f76d76dc2de4150c7d5a389cb84926c2c503324.html
Size 111KB
Sample260912-keklxsdn21
SHA256 4c4153c06e81c4bce41db4af8f76d76dc2de4150c7d5a389cb84926c2c503324
MD5 abcbcd3e9432a75e073080884c8c1296
SHA1 de8d0123df602be590549418559e38d65a77da8d
SHA512 290113f634ac98dbeeea8dc3dfe9ad488c42b95ac9d2ceaaa0ffb866124a9f11319cfc6c0892c997a54772f266fcbb22443e5b3ffb6416eb806e25ca6e37f4e4
SSDEEP 1536:amxhYn+hwg+PRq8j9Jk3jlsQPTtzNohxJyUfM5kbEao/bEao2ndmHkmuTEu87:D1CQNNQycM5kdo/do2ndqkmuTEu87
TLSH
T198B3C68751204CFAEFA54DB3459B086B3D2C1437AC4391B9E3FD8F972B52D9E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3068	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338178610238315"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{8AA27F41-6CA2-4B25-B1F9-C130609206B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3824 wrote to memory of 3712	3824	msedge.exe	83
PID 3824 wrote to memory of 3068	3824	msedge.exe	84
PID 3824 wrote to memory of 2464	3824	msedge.exe	85
PID 3824 wrote to memory of 2464	3824	msedge.exe	85
PID 3824 wrote to memory of 2464	3824	msedge.exe	85
PID 3824 wrote to memory of 3784	3824	msedge.exe	86
PID 3824 wrote to memory of 3784	3824	msedge.exe	86
PID 3824 wrote to memory of 3912	3824	msedge.exe	88
PID 3824 wrote to memory of 3088	3824	msedge.exe	89
PID 3824 wrote to memory of 3912	3824	msedge.exe	88
PID 3824 wrote to memory of 3912	3824	msedge.exe	88
PID 3824 wrote to memory of 3088	3824	msedge.exe	89
PID 3824 wrote to memory of 3088	3824	msedge.exe	89
PID 3824 wrote to memory of 4288	3824	msedge.exe	90
PID 3824 wrote to memory of 892	3824	msedge.exe	91
PID 3824 wrote to memory of 4288	3824	msedge.exe	90
PID 3824 wrote to memory of 4288	3824	msedge.exe	90
PID 3824 wrote to memory of 892	3824	msedge.exe	91
PID 3824 wrote to memory of 892	3824	msedge.exe	91
PID 3824 wrote to memory of 1220	3824	msedge.exe	95
PID 3824 wrote to memory of 1220	3824	msedge.exe	95
PID 3824 wrote to memory of 3280	3824	msedge.exe	96
PID 3824 wrote to memory of 3280	3824	msedge.exe	96
PID 3824 wrote to memory of 3748	3824	msedge.exe	99
PID 3824 wrote to memory of 4092	3824	msedge.exe	105
PID 3824 wrote to memory of 3304	3824	msedge.exe	106
PID 3824 wrote to memory of 3392	3824	msedge.exe	107
PID 3824 wrote to memory of 4792	3824	msedge.exe	108
PID 3824 wrote to memory of 4792	3824	msedge.exe	108
PID 3824 wrote to memory of 4204	3824	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4c4153c06e81c4bce41db4af8f76d76dc2de4150c7d5a389cb84926c2c503324.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,9278352798649063532,17222547564341352695,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,5960446766097001007,2155229863935597538,262144 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,593881632806193654,11121349968586431213,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,15823394228160014694,14263750530978151543,2097152 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,5238657733272241888,13698637798521732081,2097152 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,15413519989529602981,9093815509452216847,2097152 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,4028477952984150987,6214821417434351732,2097152 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,3340762851065425408,13063277213545983397,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,13160887921154473056,6441074899372235726,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10545099545775605478,16074585613038371890,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10545099545775605478,16074585613038371890,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,1343154247319068481,14348052776301940184,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,2978384314463746558,17123220667822249526,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,17873236219253922602,16946083136552320199,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,17581433311433764415,3998723509406798938,524288 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,16804570947335566749,17558505773811562422,262144 --field-trial-handle=2280,i,6327303223032404543,12808994934655481469,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 80f5d696dc6caab2d68cc8d87c6dc54c431d6b313b528f98277da20d5b64e83f
MD5 fe2e569988cfd182a6519c69fccac721
SHA1 dd5eab0089988f243c4fe662b1a1af3735a12a00
SHA512 082fe3838aa4ee0139c6071fa7ae59a4de8dc2be8f299def81dedf3cb941be1f52db5e2131c9baf4adca0a3712be196eaf43c70f6b8979a92c486a33628024bf
TLSH
T15E612E86E48E4463DBB491FD8DE12CCB3938C6F046AB1D5A0798D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595819.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595819.TMP
Size 3KB
SHA256 700a70ac0fdd8a2090d1bc0f5030e1be0cbe651cdf03618523a69f3e96a3f58b
MD5 b7637d9b2333f1e1233611327d7a1f57
SHA1 021c16d3ada4e428be75c845933c83cc13b2a74f
SHA512 d7604cd02c913757773b6789f19c4c8133d90f5eca4b709e29ae0936269a4354b9f13c722ca7b5017054fd01a04af1e69bba701f436f19160f254b5eb0d6a763
TLSH
T13D612E86E48E4463DBB491FD9EE12CCB3938C6F046AB1D5A0798D8795F27F9272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e6eae6abd753169545d3da97a9e1da9995118cee45f87276f458038d71bfe7df
MD5 b99594a1f31b02aca53d4db5a226ed7b
SHA1 85293d4421314b9688f9adcc202d1c29d27140f4
SHA512 0fcb589bb76ecc31932a215995b9e047f4a178899608dc54c90e3150b50ee2b754183cf40c52d78114d4d306eb8d631c31253a98cf56c8bc2f802a95a585e813
TLSH
T143515CB7C3D4477EC90156F09B246E1ACE2D065A422C3C1689E4EF2F63F25B4D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 021ec8e47460923512636a913c83b7b8c48f15c1239092b60cf904987adde459
MD5 48a8d0f446a820216a90d19083972e61
SHA1 dfbc876cf270dbe2007b834e3e555fa1f5e3409d
SHA512 8c9509d8a81bf6ff6734d9246e48612c2269fe78d4f2d6ee4a8da72e297c83166ffedcc6bdc64285290548b1cb6f99458df6c5227b9076ff9909a4994d1f2ff8
SSDEEP 192:sxZnRxWG/fNsicKIdpdSHW6+WNGYrbFYIgrJ:sxZnmG/fNsicDkHbGR9
TLSH
T15012B7526E28A97B8CC7E30DBB15BF53D6F9503251941E48EBFC961C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a576cc18597eda63b24c1f5a7691c768b87b7dc8b462db5b7314f25a778cdbe5
MD5 262790bff8f1cbbfec7bf6b6f824bc63
SHA1 fd42c60eab3feb9c8b723fafd6f297d25e93bc2d
SHA512 5fa7b20df3e1fa31b0b18e6ec74ca3f4454cf24a65fc08cd5ab5c43c84816cd72b862697671b14ed4e04c77d1a353d021f6dc50b43686959b2b01a0ff1c36bc5
SSDEEP 192:sxZnRxWG/fNsIVKIdpdSHW6+WNGYrsFYIg5AJ:sxZnmG/fNsIVDkHbGCe
TLSH
T12422B752AE28A97B8CCBE20DBB15BF53D6F9503251951E48E7FC961C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f46ac169b22a1af1ff45bb21aa14feb19a5ac4d7eb172afe106030d417c56704
MD5 58108af5a34dc53a4e1a6085e8442820
SHA1 0494d8b968b52503e5c8ac18b5b832a46f330f12
SHA512 ba7332f09a48c5e43750b26b3145270bbb5706125d8d590b2855688b2c2522b89b51779e2a701a5487ea9e143be66767c4abf763104918eb45a36d4d449acc10
SSDEEP 192:sxZnRxWG/fNsIVKIdpHSHW6+WNGYrNFYIg5AJ:sxZnmG/fNsIVDyHbG9e
TLSH
T10B22B852AE28A97B8CCBE20DBB15BF53D6F9503255941E48E7FC961C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 06180a63275bacde550223f35c907ae0325a263f15930e35aa4139ea7239b2f2
MD5 033035f30461c0a641508ffaa7028b7a
SHA1 2c0c5ffcb3a3d6fe984764a3e95896410d6b06c6
SHA512 620bfcd411f72457a477aadff167ae4f363fd2f31e675d91152ee925c319c026170a40c68b4e45b2bacea8b3225fd9b16b0f9bb33cc4964b2d3b908c345e8c5c
SSDEEP 192:sxZnRxWG/fNsIcKIdpdSHW6+WNGYrbFYIg5qJ:sxZnmG/fNsIcDkHbGR0
TLSH
T1C822B852AE28A97B8CCBD30DBB15BF53D6F9503251941E44E7FC961C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 35d7d098c832ea977cec7b299a9adb55b780c482c6893ab404b4a9a193e57f6a
MD5 f3105ee956b4ba5beabfda6b2c3952ad
SHA1 b1cfa24616df8c26b380ff8316b1cfae61765b0b
SHA512 5b91761e0ddadaae7c7c767181299c28fecae7d00d22cef1b3e9390e29a1159628407c60a77123f71ebef0c02585308fc6eecc8ae21f019052bfad6a28197a8f
SSDEEP 768:aXy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbVroRA8M:aXy4J/DWvbtBhu1jajiLm0buxM
TLSH
T15DC2FA3B644CCB7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6d4a1d763fc83064f9985c1c8457e7d444c950d0ed39c07d0a95bdce0f9ecfe3
MD5 fc2846d244d82293df5fccd41fefc992
SHA1 2ecf43fb7e4888c406ca422a3117fba55b8a3702
SHA512 2c9efdb4bb0c32a683c605ff57d8c6a0c3a8ea6458ce13fd98ae8ccff8aa0cb97722d3055549b62d63a6660b0540d1a88a0d64f775783471167a9dd5170d4fd5
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLISL6IPKrSIny7bg/b5RRurB21IU7uKhbZNul:KIDCKs0+iSl6EKrSyCIgKFWl
TLSH
T1AE91308431BA4201787D29499171C71F224376733019EA2B7FBC64A2AEABF094DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57fbe827-b63a-4cba-9af5-ef70f19b76e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\57fbe827-b63a-4cba-9af5-ef70f19b76e4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 50abf59823fa336c4999b84e6fdfec636329d4068f5b884495fc392263cc9203
MD5 2e9dfc1230cb2e9a38e542762c47e546
SHA1 987140a91eca46457ad8c65e982308d17244108a
SHA512 cb8631c2ac93029cce7eb7fcdb8e3c337f73e3bfea21a92c7d00aed0324a946ad5baf6abe7f02db680a4e375dc68a02870f4bbf92e29bf88f739d7e3ecac23e2
SSDEEP 192:1ONO6wlDgQmiUylPW4X58gZejzorxJlDldhFU6:1ONO6kgyW4X58EC8xJLJU6
TLSH
T1F602F934F8687C6B8EF3AE0AB48627139FE5112BE6552F44DAE81A1D00D765C230AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b6d2ade53b3c45f8c9ea61444b9922efa821a685b08a4960a0236859231ce085
MD5 169a56943c0ded02e4736dd9a95d14b2
SHA1 b5b337ebfd9c75acd0894c614690cb070665d4f9
SHA512 ebabf14b1e1d991e309327b703a7efca2f74a817b0764b9789e533a9c19baff14713f30dd23030ed5b228aae2428c27cd0bf939610e39298fdc4a0a7100c8ac0
SSDEEP 384:cZcI5sNw6YZ+IfHX58EC8xJgXw+2AOsa+VYNd7UdoF:K5FbPaHwlAOhgkE2
TLSH
T120827D32A978AC3659F7D285F94632039FF8916796C86F90C7ED5F1D00DAA98030BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3466ffe099fcf2b9e2e29ce4b18197ae32e709eb67bad024ab10f23de779c2f8
MD5 6b2337a93a6733712d4c5aad663cf08f
SHA1 2fc3e27ec794332fd0a311e83c2d9049832e0a01
SHA512 977ff3a1fda1f7b2f6a047cc2af65244ed236ff27d32a90f7c09bed21b0517c3c409e65040b1e03b767200445ffdad92835585e452dfda02d517d89bcfb42f9e
SSDEEP 384:siFiZcIGrsNw8TUNTUlIl6YZ+IfHX58EC8xJgXw+2iOsa+VYNd7UdoF:XFQ25wgHbPaHwliOhgkE2
TLSH
T1C8A27C3399A8DD3B9DF69785F94A32038EF851A3C6C9AA90D7DD5E1D00DA698030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e0e87e36a2e46d1ee698c2cc4488f749b637a5b0b197cc584473f66a2680ba79
MD5 b737c6a90218c4fceaf5845ef0b3b693
SHA1 4ddaf4d7a9d40c2700cc1ce34e7371e5d9ed2c11
SHA512 878288dc6e7c045bc771af5a2ff38c3bb4146fc5a84104b9dee21e350d9327d09f003b19bc5238445b25483da9cd0bb0991e0e9992e315ca55c6bbe37ee8aaaa
SSDEEP 192:1ON56wlDZQmiUylP94X58gZejzorxJgXA7R+2uvedg/pU6:1ON56k3c94X58EC8xJgXw+2BOU6
TLSH
T180121835F868AC2B5DE2A545B08731039FE9522BDB896F90D6EC2A1C01DF65C534ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7707bc78fd122537e3236b2295e0b099b45dd797491b0e38fa5bd5c542fa0d20
MD5 6a30ef15f012f2dba5a1b1c131db50fc
SHA1 ffb9f6af2a5e64d707aacc68ae0e684587640d71
SHA512 64c803745c7e4c1080ff6a0e9ae0231fd462db8388d41cd123a00838c2f135ce6aa8b381ad54aeb1c025b5dea33b0980e0bbcf49252f6bf14936df435a81d694
SSDEEP 384:DZcI5sNwdYZcIfHX58EC8xJgXw+2AOsa+VYNd7UdoF:b5eBPaHwlAOhgkE2
TLSH
T116827D32A978AC3659F79285F94B32038FF8516796C86F90C7ED5F1D01DAA98030BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6c0d2d84ed6b2edf96bfc90f068836275fafa5f68c7925ba274a7d028153ab41
MD5 c9f2ccd6ba8a6aec5adee9031e846acd
SHA1 674f1d89dede013859970230c9ddd3161033b5c8
SHA512 e96d789b0889c47f75131773ad303d1fa6776be74ca50069ce9e3f1ba1384e4295fde7971a08005a43c2bea00d97388d45b10695b272f11dcc463f7e6870af33
TLSH
T19B413B58A6EE1008F3B77E5A9BF6A56E447EB8772F0BD05E00110D4F0A26B01C871B37
MD5 SHA1 SHA512 TLSH

Submit Download