3f884fbd22e0e709504f3a058679f6a5ea815e6df8a56faf76d2ea6913f4748e

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3f884fbd22e0e709504f3a058679f6a5ea815e6df8a56faf76d2ea6913f4748e.html
Size 114KB
Sample260912-km5basdp6t
SHA256 3f884fbd22e0e709504f3a058679f6a5ea815e6df8a56faf76d2ea6913f4748e
MD5 9e933ec2d249ac1751053a21d0d13d8b
SHA1 7bf39880159a4b6ca47a9b36860e97e41cfd7e2d
SHA512 52391ad802457899f15c9b568b25905d99a02fa265670ab70398c7fccf343c6fd415e926168d188377905311090130d7679f35daa61596735f9a225c0e7c1e14
SSDEEP 1536:XXxoYn+hpR+2R/w/3Bejpl/QwTtWNo9x9kLzbEaoDbEaoK5nH:HynQhNEMzdoDdo0
TLSH
T16BB3B59751204CF6EFA44DB3459B086B3D2C1437AC4390B9E3FD8F972B96C6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338179593779199"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{3284449F-8465-4869-A287-21600EB25254}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 4508	2104	msedge.exe	85
PID 2104 wrote to memory of 812	2104	msedge.exe	86
PID 2104 wrote to memory of 3764	2104	msedge.exe	87
PID 2104 wrote to memory of 3764	2104	msedge.exe	87
PID 2104 wrote to memory of 3764	2104	msedge.exe	87
PID 2104 wrote to memory of 2184	2104	msedge.exe	88
PID 2104 wrote to memory of 2184	2104	msedge.exe	88
PID 2104 wrote to memory of 2312	2104	msedge.exe	89
PID 2104 wrote to memory of 2600	2104	msedge.exe	90
PID 2104 wrote to memory of 2312	2104	msedge.exe	89
PID 2104 wrote to memory of 2312	2104	msedge.exe	89
PID 2104 wrote to memory of 2600	2104	msedge.exe	90
PID 2104 wrote to memory of 2600	2104	msedge.exe	90
PID 2104 wrote to memory of 4560	2104	msedge.exe	92
PID 2104 wrote to memory of 4560	2104	msedge.exe	92
PID 2104 wrote to memory of 4560	2104	msedge.exe	92
PID 2104 wrote to memory of 1940	2104	msedge.exe	93
PID 2104 wrote to memory of 1940	2104	msedge.exe	93
PID 2104 wrote to memory of 1940	2104	msedge.exe	93
PID 2104 wrote to memory of 1376	2104	msedge.exe	97
PID 2104 wrote to memory of 1416	2104	msedge.exe	98
PID 2104 wrote to memory of 1376	2104	msedge.exe	97
PID 2104 wrote to memory of 1416	2104	msedge.exe	98
PID 2104 wrote to memory of 3308	2104	msedge.exe	100
PID 2104 wrote to memory of 4144	2104	msedge.exe	105
PID 2104 wrote to memory of 4336	2104	msedge.exe	106
PID 2104 wrote to memory of 1428	2104	msedge.exe	107
PID 2104 wrote to memory of 4748	2104	msedge.exe	108
PID 2104 wrote to memory of 4748	2104	msedge.exe	108
PID 2104 wrote to memory of 1244	2104	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3f884fbd22e0e709504f3a058679f6a5ea815e6df8a56faf76d2ea6913f4748e.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe4499c188,0x7ffe4499c194,0x7ffe4499c1a0
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,12202209723038587629,17826337605084455630,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,15033143574537950829,3250564203900936547,262144 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,754514073152397869,5852818417194326425,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,4386936358456798443,17657973639498496374,2097152 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,11578764719477951011,18149345667238331534,2097152 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,7167665517535815252,5331893687083033679,2097152 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,16210988643996129796,3830249241876978223,2097152 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10436029808796081669,18316191190231385984,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,16530036329786762008,13084107557079670587,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5332938517409455147,14433302138466516388,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5332938517409455147,14433302138466516388,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,2618657151124824847,10587884678248053446,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,3399177942270402389,8332879483553937981,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,3018775596477724935,17777298513911686767,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,14135863111287715380,14686318924976493331,524288 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,14346718247894601349,14849871165227121195,262144 --field-trial-handle=2256,i,7172676240051211336,9379022787796811093,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7a40ebfbcd055df07ec83bee2e10d7e8285d572155086cd82946cdc54da15f97
MD5 71e7eef32d5a2758e21941a5f13f4d4b
SHA1 175774fabf59bc4cd1576f8e0207a479db4fc64a
SHA512 b8374eb7d15743f6915ba29fbd9bbe2115e2dc31608f773f581564286222f622798d2081d33c6ea71e0e322455f3077aeae8830c783307a35281c1a0b0102484
TLSH
T10961B4C054A3B448FBA8427481E9389F3E38258F12AF1DC29DB7E8758CCAB5C60B3204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59018d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59018d.TMP
Size 3KB
SHA256 18a2f603e4a0b6e1db9648c70acecf3d04c381612751d179e85b2a3f502be092
MD5 62b44d465f7cfe8722c68d1fd9190dab
SHA1 c7854699964d45926b108cf0634cf23563141642
SHA512 9ef339d1ef841a29107d9f0f06023a9ff7e50b2c31962eff21f56c8272b864a7c8352d0e0e33d67992b4d730f455f04b2a1b96f09922afbcad1dd4e2e8b763dd
TLSH
T15561B5C05993B448FBA8427481E9349F3E38258F11AF1DC29DB7E8758CCAB5C50F3204
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9bb538d0d394e9892ba158f7f389a617ef5d561d24923ffcfb06d04241cf20f7
MD5 7e92e5ac4dbc5da515b9fb2b6464cfe5
SHA1 6a67367fb9f4e3bb76019652bb4cae889ee089bb
SHA512 f2126fc2969f0f560a5291e1bcdd9f3c5dd0c1d207af5e757c9568db07f471344842cc23c5cd0a5d741a46c7d29661d0ead57db4c0322ee182572fd7b159b216
TLSH
T1B2416BB7C3D486BEC90156F05B286E2BCE1D0A16422C3C1689E4AF1F63E24B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c5f27fb892a278275f78a5e89fb15e13772e5f96e57cb6a8c4f09cf9fc230f07
MD5 d5f68d68809ae0c482fc85f17d1fb33c
SHA1 cb1d8b4f482529f4873c6bc98839181122975fcd
SHA512 16d6c1c0b9e881a359ef6eff43de189715cabbce51ae3979408af859d521126f19f0739cd8bb4ec73e7353d1e6e3bee5a45e7221bcb8df8aa1cdc17601c94c80
SSDEEP 192:sxZ1RgW4/fZsLgzIdpd5HW6+WNGYYBauvIgrJ:sxZ1d4/fZsLgsfHbGfn9
TLSH
T1CB12A611AE28B57B8CCBE209BB557F53E6F9503261941E58FBFC961C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d5b8734f97166107de4749673f42aea12c0fcc79c52d2c05140a5c8daee67658
MD5 543a5b987e1448ba6b792f9c9528633e
SHA1 829d5f112cd42fe864a15ebc5bbf058589008c94
SHA512 6919831ece87200015e905186ffeb31133e237479ed0d5d40a035404064ec64b18d9ee68905ee7c9db948a81fe523c155134d6aba4d7bdb03323fd0d89b2ee9a
SSDEEP 192:sxZ1RgW4/fZsi4zIdpH5HW6+WNGYYBbuvIg5NJ:sxZ1d4/fZsi4sZHbGfUF
TLSH
T1EE22C752AE28A57B8CCBE20DBB55BF53E6F9503251901E48FBFC861C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1bab85faf69da8aaf419bf38971f9dc648a27f5cc0def5503ec1554c9ad4b43a
MD5 4e0a5eeac93afa011e9f1dbc31925d81
SHA1 fc72bfd1d1cc553dfdc9311ed95926af5cfffb79
SHA512 cc16e47e42d40df033acceba304d2a45e1bac9958521f84f1dc33ea56a03bc73eeee0020feaad496b002d81ac6a16dc03fcc25427af957218f6d4123c3558153
SSDEEP 192:sxZ1RgW4/fZsi4zIdpd5HW6+WNGYYBuuvIg5NJ:sxZ1d4/fZsi4sfHbGfDF
TLSH
T15522B611AE28A57B8CCBE20DBB55BF53E6F9503251901E58FBFC861C05E7ACD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b1fc13877e3a64a35e6ab6051f88bc2a5b158afcf18f30b2f6901750c0b577df
MD5 2d9b752e555db9f3ac1ec2d8b5f96ecc
SHA1 24754fbf8b395f73e287f579aae0ace72a97fbb8
SHA512 8980065ea0665258c2bbd64c3c0eec28adf61b4f00d4d43f8ea6532dbdb33ed7366969bba58493dec5b47995fb235cd58861a899a3a12f1c5194e4e432b498ef
SSDEEP 192:sxZ1RgW4/fZsigzIdpd5HW6+WNGYYBauvIg5vJ:sxZ1d4/fZsigsfHbGfnT
TLSH
T10422A611AE28B57B8CCBD209BB55BF53E6F9503261941E58FBFC961C04E6ACD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 37b02cec36e8c836cc98f6e7d48181019fa5c5ad4c7055ea7233828cc1b00d5d
MD5 e6f5338d2fc98ee47c57eddcd86bfaca
SHA1 0df165e2a618040af8300118cf79cb311226f3c8
SHA512 11ee218a2ba12c32c1b6d03dbd2e986af861644c7e19b94c5e8df1bb6536261227a3045619f38b1b7967146af14f2725c280a5b3cab7eab8689afdaf42abb98b
SSDEEP 768:BmyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXiropHFd:BmyYR7jWv3NpBu1ja/CL8OX5t
TLSH
T16EC2F92B640DCB7E4FC01E9DDC5A6F9B7E9802C796548D4047FA984C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c0b0c9e731d3319561e69310414c1496bd8f713b2e36a5ea993146bb4687b528
MD5 06ad5bbbc57f98bee7e20e27a1269e18
SHA1 e14177fc590a919e566ecf5d25ea98fcdffdcdd2
SHA512 87a75d6cf534fe45484c06977f0d7ab1eacead99b72e16a322e5b97d1241997863e5ea68b7596b54de7f75737b50db55ed67b9b275147b4d26239c4392b9ca77
SSDEEP 48:KgRAthrvzMb/KXIS5MK9Z1zMxxcYKbRVyLeZ04WcMFbwX4ISQFK901GFx+VYvws3:KAWEKXKKWdSK2gKqI4Kxamq
TLSH
T16791525075BA020579BE294D91629B2B124131B3B46CE67BFBBD1061DE6BE084CFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

256c119a-81aa-4c7a-9c7a-f2953a5f50c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\256c119a-81aa-4c7a-9c7a-f2953a5f50c9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8af11de1b9b0e09186fcc443fba47d61fd3482a6f4c0ed4dde255724bc06f501
MD5 ef3c5b9b6c25b2502f88e9f0e27743f0
SHA1 831c775580dde9b0bd655014657fe19acea75cd6
SHA512 087b427d6a90ecde1b8c71966e7024620565ab5b2ebe36df093f1f876d0553ce1cf982de26d9a320396c7d17bb12c2efb340fc9650ebbcec9b459c1a78d34dfd
SSDEEP 384:1iFiZcIfgsNe8TUNTUlIlhFziA5nQX5+DtD8PXq+2jiN7O6R2FeorMou:8FQYHwgZztgkDSqljiN7TRXd
TLSH
T194A26E739CA8D83B9DFB9685F54A32039FF851A7D6C5AAC0E7DD6F1D008A5D8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 655b7d6330c52cb41275714052cd05aa19ca1421b4a1a196cf81183eaa7434e0
MD5 ea4065f8001b2bf69e35a1ae13c56c83
SHA1 2bf5ec056f4111b78e520df14dae17e8459a6abc
SHA512 1cff6fb32418f15e4f0b0e42d9848dd07f7d15953df9d32b875602d84531f9c032bf0bfc7e5d9aadc9ec18f22eb52f869aa75b215abc87ef0de1a42615b6bda9
SSDEEP 192:EON56nnHGQmiUyjVQYcX5hQDP1Tjzor6s1mmMcelMU6:EON56nCiQNX5+DtD8ZUMU6
TLSH
T1FC02DB34ECA87CB78AF7AD49B48737139FA5216BA5942BC0DAE81B1C01D765C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 917cfc3482a8775675495c278619811087982815e4c41c90e42a6db6fd83a786
MD5 5ade7acb1ad439fb7b7623d88e588abc
SHA1 6bfd09121adb73657b30804ce653848abc70dbf0
SHA512 15688f1ba108e297fdb4cfa284fcc636593d19a3264a1a214f48a39263b410127f345c723a4f7df83f84ef13b213b828e2d2d248aaa5ee3f8fe95ec764d5e457
SSDEEP 384:/ZcIisNOsFziO5nQX5+DtD8PXq+2SiN7O6R2FeorMou:Xi8zbgkDSqlSiN7TRXd
TLSH
T1DF827D71A878AC3759F7D196B44A32039FF8516796C86B80E6ED6F2D00C9A94131AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8a3d74a76400828234ed29db5df491b5eb776567101a172794cc2c3bc0a3cc4c
MD5 875a1ff3bd88b037bb28a3410ff78de0
SHA1 55b9a24abca779e072b1c433c3218381fcd1f605
SHA512 002a406b112a7c1416fcd5e215571e1406ce91633c3a243457570d031a69abe9d427b6e8e0b5e5f10fa6a90e312063b775cdeffc94be956d564cca6abf0c7a29
SSDEEP 384:/ZcIisNOhFziA5nQX5+DtD8PXq+21iN7O6R2FeorMou:XiRztgkDSql1iN7TRXd
TLSH
T1AB827E71A878AC3799F7E196B44A32039FF8516796C85BC0E6ED6F1D00CDA94131AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4af3c7aac92f04a65f1ede4055ac987bb34bf5582e611c0d7021cc7b9da860f4
MD5 c263679158eabffa0037d976bd9dc77a
SHA1 c3178d2bbe8a4d82906333889eeecc2272118d36
SHA512 781071fa1bbddd1c5a2be65595f085e95348a6d10097c8ff2c49d6b4438e40b3e97d7b23c3404790ca5fa2d8b46720f15b336836831d8cc3bef5a16a9e9836d9
SSDEEP 192:EONn6nnHJQmiUy1VVYcX5hQDP1Tjzor6s1mkXIx+2eg3Q/5NU6:EONn6nHSVNX5+DtD8PXq+2piNU6
TLSH
T1A312FA35E8A8BC675DE3A585B08732139FA56127DA896FC0D6EC2F1C01DF69C6349C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87d39473-a579-44f7-9327-b14dee4e8141.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\87d39473-a579-44f7-9327-b14dee4e8141.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a7ec5fbc54da22ff17d12ba3421f1bfccc1f11f026076b52b0546a092c2f17d5
MD5 f20360cdbcdfcabc92cd6007de8f83cc
SHA1 cd51465de773b2339c404a8e6a15953bf8939e65
SHA512 14e2b457132697dd129422974b3745f746ff949641be66f6296808d1065126358a30996d7bd4c86f9175600af9bfc7de834f94958f9e2cd07a7c9feb94f5ddc2
TLSH
T1EE41D858A6FD1148B3B76F5AABF6A96E447FB8772F06C45D10110E8F0B62B44C862733
MD5 SHA1 SHA512 TLSH

Submit Download