d2b76633ee113e99817ad0a73288d653edf0e3d7f2b0df7c46542011cafb5967

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 10:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d2b76633ee113e99817ad0a73288d653edf0e3d7f2b0df7c46542011cafb5967.html
Size 386KB
Sample260912-m2eejavbrf
SHA256 d2b76633ee113e99817ad0a73288d653edf0e3d7f2b0df7c46542011cafb5967
MD5 296029964d5889023139ae2a84d41691
SHA1 cdc4503ddf70aa700cb482e7c9b5c85fbe91f41c
SHA512 65f97a9ee3b6ac524907a13e714ebc7686afdda5818be9260751ae254a39e66ae4fc0c8de675317fae1faf3aa07f69d98483e9fd7eb10435d19b1375b248be11
SSDEEP 3072:Nd2H19oC8FFrDdFZMExuMUMY01Uy1hpvTyHvYDcWaJWan3I3/qL7AYAUW+FqRNhj:Nd2H129FZME8MI4fpvTmYDMT3C/cEIFq
TLSH
T1AC848FA07602B43A8E1311DE539A360DB1297011BD514570F9FFA2B42DDBEEA13E376E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338208358205051"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{AD4492C3-0AD0-42F8-9469-CC033ECC0CD0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
436	msedge.exe
436	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4004 wrote to memory of 2124	4004	msedge.exe	82
PID 4004 wrote to memory of 3088	4004	msedge.exe	83
PID 4004 wrote to memory of 4608	4004	msedge.exe	84
PID 4004 wrote to memory of 4608	4004	msedge.exe	84
PID 4004 wrote to memory of 4608	4004	msedge.exe	84
PID 4004 wrote to memory of 2912	4004	msedge.exe	85
PID 4004 wrote to memory of 2912	4004	msedge.exe	85
PID 4004 wrote to memory of 3932	4004	msedge.exe	87
PID 4004 wrote to memory of 688	4004	msedge.exe	88
PID 4004 wrote to memory of 3932	4004	msedge.exe	87
PID 4004 wrote to memory of 3932	4004	msedge.exe	87
PID 4004 wrote to memory of 688	4004	msedge.exe	88
PID 4004 wrote to memory of 688	4004	msedge.exe	88
PID 4004 wrote to memory of 772	4004	msedge.exe	89
PID 4004 wrote to memory of 772	4004	msedge.exe	89
PID 4004 wrote to memory of 772	4004	msedge.exe	89
PID 4004 wrote to memory of 2876	4004	msedge.exe	90
PID 4004 wrote to memory of 2876	4004	msedge.exe	90
PID 4004 wrote to memory of 2876	4004	msedge.exe	90
PID 4004 wrote to memory of 4636	4004	msedge.exe	94
PID 4004 wrote to memory of 1892	4004	msedge.exe	95
PID 4004 wrote to memory of 4636	4004	msedge.exe	94
PID 4004 wrote to memory of 1892	4004	msedge.exe	95
PID 4004 wrote to memory of 1352	4004	msedge.exe	97
PID 4004 wrote to memory of 3964	4004	msedge.exe	103
PID 4004 wrote to memory of 1644	4004	msedge.exe	104
PID 4004 wrote to memory of 4352	4004	msedge.exe	105
PID 4004 wrote to memory of 3496	4004	msedge.exe	106
PID 4004 wrote to memory of 3496	4004	msedge.exe	106
PID 4004 wrote to memory of 3104	4004	msedge.exe	107
PID 4004 wrote to memory of 3104	4004	msedge.exe	107
PID 4004 wrote to memory of 436	4004	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d2b76633ee113e99817ad0a73288d653edf0e3d7f2b0df7c46542011cafb5967.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff97300c188,0x7ff97300c194,0x7ff97300c1a0
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,9333497054528102923,12723814277276067528,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,15430892823689719943,12185157634678843202,262144 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:2
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,5900608044810508089,7949158948125702771,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,9978425114931462440,16565663087338530052,2097152 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11677462004012036445,4841298119296104886,2097152 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,5220051786501422661,9983885808640532255,2097152 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17754031363191846323,2853676955652764331,2097152 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,6781217322214415229,9718678518822556162,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,14252386835003547679,14304494807404452952,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,18023796893751729833,16920533611195918098,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,18023796893751729833,16920533611195918098,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,10548563558836314551,8325064408711367459,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,3724675707721467629,9623860599053259430,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,10891448030677480463,14916442527977812258,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,18358090152571599862,6696859479606734210,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,13359221061892788288,11863404760430327030,524288 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,7045940124385671507,3181089886469985127,262144 --field-trial-handle=2856,i,12896203800423677685,6659072189586359127,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:436

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2f7a614c2a1b0f45bf3422f2b79163f6b46abba5214fa290919f99da2b218e50
MD5 feb4a02312fa104562f7b8be542112dd
SHA1 1520805b505e52f0a705d50316b563b1d5538bb5
SHA512 872a2704ba63d46cdb97abc05a28603833795cc70d76df8ec2ab7d56c3d5273e64e3af030e2b1061cfd758468e867bdb697a72eb101483c85457958e22a3b421
TLSH
T117615E83D34342E9F7AA65B091D69DDB3A38909784433F3EC8C8DA75A407726DA1D077
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5919f7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5919f7.TMP
Size 3KB
SHA256 75786b2b39703aa0f5e34cdd71a35f1f7850b3cca5d561ae0640261f1682f6f3
MD5 283c4beadbd2850de60985dd29354416
SHA1 72c2354f43c773d265eb75a4f8515543a4538b6b
SHA512 e2620d0b17816ce5fcca0e71a522dae4b540f47e24e6cbe51f8d95799b2f8c8caec59f44be08286b907c6ee639eaaa7b332ce8144be87ed7601243993022369b
TLSH
T168615E83D24342E9F7AA65B095E299DB3A35909784433F3AC8C8CA75A407726DA1D073
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5e0658fc3cd9b7626c86366b349abe41181b72756bb9f9d111b0dbf5e2fd7087
MD5 2c92e4f6d3263ab69e13f80648d3d453
SHA1 03cdeefce4f44320e75e124e94210a8d45db406e
SHA512 363c0b7298dcaf924f713f3c8e5540c26d50f5bf44763303c0508d59dd39aca7f75cad9d7a88ab972f9ea6e0fe9299e9ea59abd43efe7adb76518f48bec1ebc2
TLSH
T130518AB6C3E4877E891152F59B256E2ACD1D055A522C3C26C9F4AF2B63F24B0E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b93c4d46-eeac-4312-a4ca-da5038b55a4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b93c4d46-eeac-4312-a4ca-da5038b55a4d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f726356659e8e4d4fc9f9eeaec5b952f41ea995631b881e2cbe5dd2c0c0c2639
MD5 9c8c6457128a77314c846082c5a7e382
SHA1 fc20ec9d375ee7296f1b0908224a196688f82a56
SHA512 a6cfb3b9e18907e7bffee73190f3ca7b6c430722ac799a991958833b74f726ae000f81ebd69de99371e7f92b07c993a9f961f524aaf52b0905696633706b77e2
SSDEEP 192:sxZTRDW1/fas9tUIdpdvHW6+WNGYaQRjLIgrJ:sxZTY1/fas9tNNHbGI9
TLSH
T1A412B7516E28A97B8CCBD30DBB15BF53E6F9547291951E48EAFC861C04E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e0331c3d3aab536e76c4d83a224c9c44911f9042c2925a78de843b5b8a8195e3
MD5 2be30ddc097a5a75a28054759e59ccfb
SHA1 c0818ebbac5c585c988319d739169886111db9a6
SHA512 573d7a98321000a4fccb6c27f1e0aa70178b7595221ef6ea93261d69247f7f7f0e9f910db47d50e235d637dae962364a0587a41e04e30729d01e78fc236d3755
SSDEEP 192:sxZTRDW1/fasFtUIdpdvHW6+WNGYacRjLIg5nJ:sxZTY1/fasFtNNHbGc3
TLSH
T16522B8516E28A97B8CCBE30DBB157F53E6F9507251951E48A6FCCA1C05E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c8ede0a4f8ce9b87e24e5f883c05abe92d21d264ba3b192e6b7a26a587e39891
MD5 b1383b3c25c8a0c01799039788124590
SHA1 d7620eb723cb33b49bd8e7e67637f432a6fa27c6
SHA512 7dcaf7511950a46b54408dbe3cb8079d173f9590115a1ac65b5f56cabbfbdcf2fd1dbc70158ff0a059dcda6d931b6657400609ea000dd3965f6db2fa743dc71a
SSDEEP 192:sxZTRDW1/fasFtUIdpHvHW6+WNGYaiRjLIg5nJ:sxZTY1/fasFtNPHbGq3
TLSH
T12222C8516E28A97B8CCBD30DBF15BF53E6F9507151951E48AAFCCA1C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ed01dfc66b8372b896db95a46ca261acce74c37dcbc36719ec1fed32e20082c2
MD5 84d8aea9ac2c7fcd28d32247bfa9a32a
SHA1 ca950f22ae5d851f6543213b5c1e35d59bead947
SHA512 37d475bd2da833ba670ea84f4fee819b5e61372db97ca2e590a012db2647a8bc3a8bd821b2d6b8471c587b36124461954e9885435c7d8991cf06de3eef40140d
SSDEEP 192:sxZTRDW1/fasItUIdpdvHW6+WNGYaQRjLIg5NJ:sxZTY1/fasItNNHbGIR
TLSH
T12122B6516E28A97B8CCBD30DBB15BF53E6F9547291951E48AAFC8A1C04E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b589cdc298a1d34158ad99c9bbf0e1b488474b9289ad4dd1e03bb1609e4abe16
MD5 35e4d1a16ec6ef2b04dc2fc9866ed10e
SHA1 f346b58324b229ab5c90e86f52508bc245e6567d
SHA512 323177df88d13e97ed53d15cec7cfb5bc8366de6bb06d9288ce60d0a4180c7d13b8afbcd9bdb187efaae777934f02acff02efefdd3810bebcedb4399c7608b28
SSDEEP 768:CzyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3mroeZ6sa:CzyQRbrWvvlpZu1jaXKLf33deZ6p
TLSH
T161C2EA2B640CCB7E4FC01E9DDC666F976EA802C766588D4047FA994C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb90aff4-501e-4944-862a-90f6d365d1b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eb90aff4-501e-4944-862a-90f6d365d1b8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dd34c4f675f985a02397e60255581a4cb5d24e03552a869ba5deb9e304875ed7
MD5 636d9552889e144eda1dee27d22c683e
SHA1 5baaa687ac3c08934405e18268583f25868f9c66
SHA512 fca37b71fbff81a1ef2e974f44c9e84b0e4990f1d3c6636b948164684d8b01be327b4c969670bbb456710ebe32b466231791e08f2da56ea2863c2b175a053b4a
SSDEEP 384:CiFiZcIcDsNP8TUNTUlIl1lckdq0kp5u8ipaiNakvka+NpajA4ol:JFQ4SwgvLOkpUkvka+baE4S
TLSH
T1B3A27D735CA89C7FACF79B51F90B3213CEB841ABD698AE90E6DD9A1D00975D80306D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5fa4ecbb0eb59b95e201f8096cd70081bf108b4b4bdebeabf19f98ab3cc2b06a
MD5 ed9eb45335f435af8a7cdaac993030fc
SHA1 a17794e7d1812b66005ea5ea417ee8bb459b5ee2
SHA512 4e4e3576a2fe59e0ed35c11fcafd79eba35fc9e372e812370db1a6aa2afa33801c01c748e2e95d318599b3382da5f4789843b67812b0fe32f16cb64028587e3b
SSDEEP 192:SONH6iDCQmiUy3IHq5u88PpPCPSqMicU6:SONH6/5Hq5u8ipaNeU6
TLSH
T1F002E8396C787C7B9DE3AE15B54B7B139FE9116FE6941F84DAE81A1C00E768C1303522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 68af8e8042a3b1afcfd0af6403b41d9b645485082556ad0c24e06233480d0825
MD5 5552c287ef7330c383c198d698b2327f
SHA1 c65798993cc0e2b3cc064a14b7728040cd0d0242
SHA512 529caa12f7f92cc544501eb6c9b6807aece1ae2389fde42cc4c423e7931a974c33d266b933d07b85e8a2e631205f867179944d0215209f3ee1d4639fb21d3c36
SSDEEP 384:aZcI9sN11lckdq0kp5u8ipaiNaovka+NpajA4ol:Y9iLOkpUovka+baE4S
TLSH
T1E4929E755C785C7A9CE7D251F90737138EB885ABE3D81F80D8DDAB1D01EAAE80702927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 87d2064544f8ceefe178dae6a191a0558e92c6e573602bd61ba41f1257a13b3d
MD5 e80edd2bc57617198ccceadd354fecd6
SHA1 58dadc60fbd4d2ca12aaf9b356a2e6d43f9fb57e
SHA512 ff9d7e6c3eae8b15d53a467d67a3b0bd4772bc4a679cee1f14ea8ae680e6776f3099152bf970789ea4d04e62c0e009c6addc756402bfebe8aeea1e078439b345
SSDEEP 384:XZcI9sN10lckdg0kp5u8ipaiNaovka+NpajA4ol:f9V1OkpUovka+baE4S
TLSH
T193828E755C785C7A5CE7D251F90737138EB881ABE3981F80D8DDAB1D01E66D80706927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f28821325f266edb3b1bc3c378804973fe0b083edc800bce2833313a87bbed19
MD5 bfec770a6928954ad76dd97f8d7584ae
SHA1 09748f1f94b1d43fc60c4afdf5f990ccfadc5748
SHA512 82dc693b552ec717f7e878cc05dec1015a6472dbecbd341a937e7a76dcf876e3bbcc209f21d08bab618e2e74fe5ec0743b885ad3f484e5840853e3b81b85e025
SSDEEP 192:SONo6iDIQmiUyIIkq5u88PpPCi3daTuZK/6JU6:SONo6ZCkq5u8ipaiNaOvU6
TLSH
T154122A3678787C7BADD3A961F44736239EA4426BE7886F80D9DC262C02EF5DC5307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e5fc16e-1c58-4faa-a4bb-a00b00af255c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8e5fc16e-1c58-4faa-a4bb-a00b00af255c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cbba07d8adc88e1ee583909c3eaf742be2f29ef77f799c3eb99d1c986af1ff71
MD5 8c19355d3473806248e29d3593400a42
SHA1 167f88c92c3e6221e6067adb53d532fa11c47e24
SHA512 27209d8578431bc1a153ef6eeb67ce5550a0f8e9e915408afe0f4171202e4db88450b21e4e8e63de8a0b953f2788d52452105fcfa22c4b97a78f7fc26b3d7f98
TLSH
T13B410659B7ED1148B3B37E5A9BF6A86D447EBC732E06945D00110D8F0A62B00C871737
MD5 SHA1 SHA512 TLSH

Submit Download