91bae2d68b54305cefe7b22fada1a8d469a0f3e8f4dc00655f1eb88b6c3bfc45

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 10:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_91bae2d68b54305cefe7b22fada1a8d469a0f3e8f4dc00655f1eb88b6c3bfc45.html
Size 120KB
Sample260912-l9e6cstfmd
SHA256 91bae2d68b54305cefe7b22fada1a8d469a0f3e8f4dc00655f1eb88b6c3bfc45
MD5 04c1bde5d17bba0855dda137c20a0a97
SHA1 71bd715602d4be3606a01c7c911d22b23314f26f
SHA512 b7e9ff35ba4a351ea2a5c0d6212e6e8b5f4885b6b72f2b7603461117916f87d04d026c972750d45e0683f5193b6187db0e1a01c2ae055d498475c90e9c6cbf0c
SSDEEP 1536:++xZYn+hNa5dRNVEievBWl3OTtLNoiMqc8WSwdfbEaodbEaoljeEMU3Vz+A:7t4INRc8WSefdoddoljeEr
TLSH
T1DAC3B59752208CF5EFB81DB345DB086B3C2D0437A80390B9E3EDCE966FA796D0349569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338190642763342"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{A84F83E6-144B-43A2-A8A7-899C14C1AF38}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 760 wrote to memory of 2236	760	msedge.exe	83
PID 760 wrote to memory of 3404	760	msedge.exe	84
PID 760 wrote to memory of 4416	760	msedge.exe	85
PID 760 wrote to memory of 4416	760	msedge.exe	85
PID 760 wrote to memory of 4416	760	msedge.exe	85
PID 760 wrote to memory of 4472	760	msedge.exe	86
PID 760 wrote to memory of 4472	760	msedge.exe	86
PID 760 wrote to memory of 4816	760	msedge.exe	87
PID 760 wrote to memory of 4040	760	msedge.exe	88
PID 760 wrote to memory of 4816	760	msedge.exe	87
PID 760 wrote to memory of 4816	760	msedge.exe	87
PID 760 wrote to memory of 4040	760	msedge.exe	88
PID 760 wrote to memory of 4040	760	msedge.exe	88
PID 760 wrote to memory of 2132	760	msedge.exe	90
PID 760 wrote to memory of 2132	760	msedge.exe	90
PID 760 wrote to memory of 2132	760	msedge.exe	90
PID 760 wrote to memory of 4892	760	msedge.exe	91
PID 760 wrote to memory of 4892	760	msedge.exe	91
PID 760 wrote to memory of 4892	760	msedge.exe	91
PID 760 wrote to memory of 3584	760	msedge.exe	95
PID 760 wrote to memory of 1028	760	msedge.exe	96
PID 760 wrote to memory of 3584	760	msedge.exe	95
PID 760 wrote to memory of 1028	760	msedge.exe	96
PID 760 wrote to memory of 3132	760	msedge.exe	99
PID 760 wrote to memory of 4432	760	msedge.exe	104
PID 760 wrote to memory of 5104	760	msedge.exe	105
PID 760 wrote to memory of 1060	760	msedge.exe	106
PID 760 wrote to memory of 4200	760	msedge.exe	107
PID 760 wrote to memory of 4200	760	msedge.exe	107
PID 760 wrote to memory of 2284	760	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_91bae2d68b54305cefe7b22fada1a8d469a0f3e8f4dc00655f1eb88b6c3bfc45.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff6347c188,0x7fff6347c194,0x7fff6347c1a0
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,12400960355799418550,668176142389263983,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,12841714877709397557,15964321162399045309,262144 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,8319073170972580341,9917341905257668606,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15241151078861732910,17686033116685141315,2097152 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1408492085805208998,1017188286168455920,2097152 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,4845116985624863316,15222472431708494367,2097152 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,5226814165677041989,11949651693509200844,2097152 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,15283490828975085411,13643852394896031223,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,13375611270316701542,9273707154007272743,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10341857830878210844,3953459747851034693,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10341857830878210844,3953459747851034693,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,11083920093303928833,4809585332123277976,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,4860112025494883094,8497336842250613520,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,5562259877254790411,3700636698009087594,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,14684522725360992257,16977104613528602195,524288 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,7045589366353262900,4433096972063642055,262144 --field-trial-handle=2040,i,2173362053331406479,17734466890095467550,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9033fb6327a4bb95fcaa8c7a084bf129f7ca78955bb436f847e318520b6fc34f
MD5 36ea13ddb0e2c2d28c2d08d90aec0fe0
SHA1 9ac0740690da3fc19b545716922a8615ac4892d5
SHA512 e0d802ce299c3c044ce29e1f259b7fd1636c050553f0f4a27ea237fe44529e7d71a451792a5a891651744e82d08757aad3bbd13648b128e7426d320fde1ab5f0
TLSH
T14951C842591D449AFBD807B1FED400CF3AF54DE0D89F1E5396A2D7B9582BBA6ED0009C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593e57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593e57.TMP
Size 2KB
SHA256 20c81598a7cef70805726e0bbf5dd11d2f426b778333b5a72f3a063f3b5531f8
MD5 9e1a8d5ed00f6f2327f96802921d3a76
SHA1 c8cd2c3c3ee5c053298d6415172a829656102880
SHA512 c5a5245dee6a8c4c9de8df0b28d0ff6a403087959b4be89003c215b10ed29db199cf356f2d4aef66f8cd7c65797a09a2e88c9eff4d2f7851ba7c6397cad8c8ed
TLSH
T15851E842691C449AFBD807B1FED400CF3AF54DE0D89F1E5396A2D7B9582BBA6ED0009C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 006aef4337a2f20f66b7ea8ca742031c0783df3abdd326e4adc5405fc4c90b93
MD5 1a260682378fa7b311d59a7a0e634f1a
SHA1 639ef642e6cfb2f02636d0b60041934be23b8af6
SHA512 0f9d935f7be0e07b51a4c597324843f3d49f497eefd010e3f681152cbffdf7d69cf7a94c8f119d15639a23f3c9c92b09b52016d3e1dd9591149d9725a0399d4c
TLSH
T14D415AF7C3D4976E890156F19A256E27CE2C0A16522C3C16C9E4AF2FA3E28B1D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d9b16e83247a7cf268f90743ec836157d237b8921fd982f9e5cc18c057dd11ad
MD5 11ece108ce5975301a0200456de9960c
SHA1 ae9d66ccc557229ad02fd97940cfb2727e788acf
SHA512 d2d1045d840bf8b8b7c0d9a5b122aca7dafc66552ae4b07108e817e7b210541d441017f1edd3d59726497a78e21f12a39484b3a3212362ffe43d559ad119d480
SSDEEP 192:sxZ5RUWP/fcsJNIdpdxHW6+WNGYYBaHDnIgrJ:sxZ5pP/fcsJuLHbGfM9
TLSH
T1A712A752AE28A57B8CCBD20DBB25BF53E6F9503251D01E58EAFC961C04E76DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d4496e79c3ee5d0dcb05ed2ed6658469c674c0d47b0dfea8363938b505c45674
MD5 8972fef702491131e16df6ae4e3e0a55
SHA1 9d5cad364ad8ca983395de58ac5efc19c1107847
SHA512 a639c3e26a40c45dea04ebaa913978a12df915a64ce9f5b45a90f290852e34b48ea67f1c62ac2ea6d35e89e28bf825bf899bf91ef717d57b817fdadb1b28865f
SSDEEP 192:sxZ5RUWP/fcswNIdpdxHW6+WNGYYBaHDnIg5LJ:sxZ5pP/fcswuLHbGfMn
TLSH
T19E22C752AE28A57B8CCBD20DBB15BF13D6F9503251D01E58EAFC9A1C04E76DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ffa7bd61944f8ae26da56b5f3b6342cda42c95134c23e33abdc69e20622eab9a
MD5 9feca433c563cbef7206d808b70285e9
SHA1 68792d057697dba8996511fec7a9c1d1a66fa15e
SHA512 d7fc75e61dd7d61ce3343ad670211885955a4215709fed9a0416f21dd6d9b1ae6772cdd90da8c13472786dd04496c4f3d88b72e8385ec1a3778b9397fcd35cfe
SSDEEP 192:sxZ5RUWP/fcsENIdpHxHW6+WNGYYBBHDnIg5pJ:sxZ5pP/fcsEuRHbGfZZ
TLSH
T13122B952AE28697B8CCBE20DBB157F53E6F9503251901E48EAFCDA1C05E76DD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 110e73b4dfd1b740f9e9b3155280d4976f417e24524d9fa3bae798910740b52c
MD5 0d6a3eef2de556a8b38d3f396c75d37a
SHA1 afa824753a9a4cc5ad147aeb9ea88a1999bd8e8a
SHA512 011336bad4094e7bb8e6ea28ddda9fd2f0dd508c84a7e2525a4cd0d496a14d292b51f3d698b6cd72c0712eb31e7d710a053042a38b5f424fef9f4954583015a1
SSDEEP 192:sxZ5RUWP/fcsENIdpdxHW6+WNGYYBXHDnIg5pJ:sxZ5pP/fcsEuLHbGfrZ
TLSH
T10322B851AE28697B8CCBE20DBB157F13E6F9503251901E58EAFCDA1C05E76DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 67bbe86ea4ad47ae073922873bd94bfa239b321df212a82628d4e86071bad3f9
MD5 9940f0275cfc9396dea19f538fc4b995
SHA1 88277fde922ef370a7d09f13f8a5f200c8484436
SHA512 141f789448243f00b07c1f0b396a890dcb1d0e0be1b8c084e10c8d1223f533363c13343f146d9876038c0cc8bbce2ab83767f041fef2ec73b811ed9759c5ac96
SSDEEP 768:evyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXpropRr2K:evyYR7jWv3NpBu1ja/CL8OXCnd
TLSH
T169C2F93B640DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65b47fc4-86a3-49e3-b41a-f4e5b057d5a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\65b47fc4-86a3-49e3-b41a-f4e5b057d5a4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4fbc569e653195aa5abaf4355c3f5acb31edc58ffd0e90d6476fe9fe0a6f07fd
MD5 6f8c073cfb9e6b881dc0de9de0cc808e
SHA1 363383a190db232a38578bdf3bc0e44ab12f52a7
SHA512 8c3023e66b384f295e00ded6625f5b4ea2c5e63a96f4be50426db15dba46286ec216c901ac494d7729cc2c6a9b25f11407c7833b51b2682ec713c266a95d7fc5
SSDEEP 384:fZcIjsNP1PPi9o+QX5+Dt3OI45eU8mVDTsa+VYId7UCoX:3jStVkDlOI4oDmVDThgvjc
TLSH
T183827D31ADB4AC775DFBD295F98636138FB8506791C86BC0D5ED6F0C01DA6E81307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9cf1e4b5ec864d3c3b510fc72e93ad9cb71c3068af64ac9192c5a559158494d2
MD5 e96133647e9ccc78188c114eaa6fcf37
SHA1 3ca79b107ec8c6bd5ce04481c48438d22d9adcc0
SHA512 0b499302a92f916501b28afcc231eb9ce0510f40dbe3d6b827c224ea4313930532fdfdc9f2cd1be89b52277417299046bb844cefd5d885cc2025054315a3fff9
SSDEEP 192:EONp6nnHGQmiUyLdQYcX5hQDP13OHo45oMc2iU6:EONp6nCuQNX5+Dt3OI45sVU6
TLSH
T1B102DA34ADB87C7B8EF79E46B48637139F94217BE5842B80DAE85E1C01DB65C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 435250fcc43adfe5b3156c8176606e5859de4dd8bb9cdbbe1e95a74c37c8193d
MD5 f57a146d7656a8d63c2490bbe3daae6f
SHA1 41b637f78ed5eb396de9200b024aa844aa0bbe1e
SHA512 87d9e370d33c4ddb37c5a5584b464836d815b21962a06c927db6fd874f481eb5546414911c6e2b500d0dd75b85ff60b067901a28cb16853705b10caec4abaab2
SSDEEP 384:tiFiZcIElsNx8TUNTUlIlUPPiJo+QX5+Dt3OI45eU8zVDTsa+VYId7UCoX:kFQOgwgyVVkDlOI4oDzVDThgvjc
TLSH
T18CA26D339DA4DC7B9DFB9B95F94632138EF850A7C5C8AAC0E2D96E0C009A6DC1307C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9fecc5f7993f6457771b27f7905da60f26f7d8f6383f08d027c56710207e319e
MD5 600c4ecc0515d35b6b7d6b8f52e6d112
SHA1 6fde75bf09aa8fbbbdabde7287091e6d47190045
SHA512 2f09a93fb20a5d608d5b307f0f2fb66253605a91dddbd42407f1c10c4c769fafb9fcb8b4c8644340517fcaf6d8b7f0fc6ccb38583bd6e5fa326ef0130672f913
SSDEEP 192:EONq6nnHqQmiUyJd6YcX5hQDP13OHo45ewFfEug3r/5DTU6:EONq6nGq6NX5+Dt3OI45eU85VDTU6
TLSH
T1A8120B31BCB8AC775EE2A595B48732539FA51127D9487FC0D5EC2E1C01DF6AC230AC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 15b256ec7d8cd123fabce2adf80124b1f1e2870c2f31bec5f9d50bbd435ec669
MD5 5cc89063ec3dff7bebadc950f83aac51
SHA1 307b506b2fcb7038df2b3495880ef750671f1835
SHA512 0e616fffdab13ccc57aa363d07f1929e27328b98ae7bee6b91f9731985eebd8a209507b2c50f215a09d4f0267cea651838ceabdc74758b813eacdda9a0388247
SSDEEP 384:PZcIjsNPUPPiJo+QX5+Dt3OI45eU8RVDTsa+VYId7UCoX:HjxVVkDlOI4oDRVDThgvjc
TLSH
T1C5827D31ADB8AC774DEBD2D6F98636139EB8506791C82FC095ED6F0C01DA6E81306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 db5d1a4e1b21d0bf39a9ffb4acd4a708351ba4c195904124e739adaea36d4bf7
MD5 be22b66b073166ee78dc3008d89ec0f1
SHA1 07b345ebda68f0d11859997097a7b6f11072c453
SHA512 1952c3ebf219826106c8d1f698917b7bb4f7a045ee42ea5f20fa6e1c9ab8865c4ac9537b36f6c937954375a0175bd628372668ffe8fb0bada37b766769dc5c52
TLSH
T1D241295CA6F91148B3776E5A6BF6A42D883BBD372F06946D11120E4F0A23B40C972737
MD5 SHA1 SHA512 TLSH

Submit Download