5fa90db8b86689bf01e3f1856f52f121ba86a219bc4c71c2a2aa16d9087579f6

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 11:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_5fa90db8b86689bf01e3f1856f52f121ba86a219bc4c71c2a2aa16d9087579f6.html
Size 125KB
Sample260912-m82teaveja
SHA256 5fa90db8b86689bf01e3f1856f52f121ba86a219bc4c71c2a2aa16d9087579f6
MD5 1d76de27f5d3ee70599bde3b045879ec
SHA1 15019c72cc69c10c99cd8d229b0caabb8815919f
SHA512 9cc5db9bd1acae64570f69fa8ebecfdd6f5693604d176151d293689994f8819d14879021787efe9ca4fd2d6f4844645cd7c51f80903c3dd13e52c540c6fa6900
SSDEEP 3072:XtyQ8NWypdopdoaN+zX3tr3tw3tch1P6uU5:XwQ8N5pdopdo7hQuU5
TLSH
T121C3D59752204CF5EFF81DB345DB086F3C2D4537A80290B9E3ED8E962FA786D034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338216492579769"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{8F5C578D-C785-4C89-8ACB-1848D63AE2A4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3316 wrote to memory of 3096	3316	msedge.exe	84
PID 3316 wrote to memory of 1004	3316	msedge.exe	85
PID 3316 wrote to memory of 3548	3316	msedge.exe	86
PID 3316 wrote to memory of 3548	3316	msedge.exe	86
PID 3316 wrote to memory of 3548	3316	msedge.exe	86
PID 3316 wrote to memory of 4892	3316	msedge.exe	87
PID 3316 wrote to memory of 4892	3316	msedge.exe	87
PID 3316 wrote to memory of 4584	3316	msedge.exe	88
PID 3316 wrote to memory of 4584	3316	msedge.exe	88
PID 3316 wrote to memory of 3012	3316	msedge.exe	89
PID 3316 wrote to memory of 4584	3316	msedge.exe	88
PID 3316 wrote to memory of 3012	3316	msedge.exe	89
PID 3316 wrote to memory of 3012	3316	msedge.exe	89
PID 3316 wrote to memory of 4144	3316	msedge.exe	91
PID 3316 wrote to memory of 4144	3316	msedge.exe	91
PID 3316 wrote to memory of 4144	3316	msedge.exe	91
PID 3316 wrote to memory of 2080	3316	msedge.exe	92
PID 3316 wrote to memory of 2080	3316	msedge.exe	92
PID 3316 wrote to memory of 2080	3316	msedge.exe	92
PID 3316 wrote to memory of 3532	3316	msedge.exe	97
PID 3316 wrote to memory of 3296	3316	msedge.exe	98
PID 3316 wrote to memory of 3532	3316	msedge.exe	97
PID 3316 wrote to memory of 3296	3316	msedge.exe	98
PID 3316 wrote to memory of 4164	3316	msedge.exe	100
PID 3316 wrote to memory of 2848	3316	msedge.exe	105
PID 3316 wrote to memory of 2796	3316	msedge.exe	106
PID 3316 wrote to memory of 688	3316	msedge.exe	107
PID 3316 wrote to memory of 2420	3316	msedge.exe	108
PID 3316 wrote to memory of 2420	3316	msedge.exe	108
PID 3316 wrote to memory of 3504	3316	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5fa90db8b86689bf01e3f1856f52f121ba86a219bc4c71c2a2aa16d9087579f6.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9e633c188,0x7ff9e633c194,0x7ff9e633c1a0
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,6143056927088831813,1848250962538096722,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1048,i,12630469236381195815,3528925680523381141,262144 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,4751243997302748081,15419397333488114593,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5636894516411719194,7153089900767420103,2097152 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,9235147203920379531,12575159157593885658,2097152 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,8721383090806127783,14392568947595334151,2097152 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,11830408722362648405,6530898871153227755,2097152 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,1390660160577359514,10791004979369745497,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18263914264584193578,2296080300787117856,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7388307108043345231,6024920236431142477,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7388307108043345231,6024920236431142477,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,15592197666342240980,6704156788817178826,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,6948819678300503139,7891877460768333357,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,16265193539727261526,5373133525000366621,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7867553514031343029,2811204907673308754,524288 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6220,i,13991338025115701090,4992454245567347132,262144 --field-trial-handle=2224,i,5749238040336084921,1724219472059566333,262144 --variations-seed-version --mojo-platform-channel-handle=780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 75f9265b403750ff51eafeefd34c54ff7352143a3e55be51a764dfa98a9bf844
MD5 ce316a70b72e7c4f71c83c897a24d032
SHA1 f78aec6c09eb47eb61a4d6a1bbdeca62c7251160
SHA512 ea284601d1e93e229a6011578571b70280cd2d0975d817f8ca1793909f4f0e83478bd6de564efc25c31845cb205f58e4259bbec39cd0b47d90dbd71b305bbbb9
TLSH
T1D761A6808C80C1D9F3E06373A1D72CABB1BE50C11DAB0EA1597EEDFD8846F165684E34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b050.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b050.TMP
Size 3KB
SHA256 ea7fc9b7aadf76cdab129d696acb7a76dda39955212c51bf5157741c30a8457e
MD5 6eeaef55a72c61a6ed13da501cf8a240
SHA1 2f9c09936bb33871e1b0a130a3993fc9ad56f446
SHA512 d74e850f8e29a1e9ba67d44b5f405543a666522c193aa8b891e3b357698cde40e93a163b96e79262026c43eec0f4b7ac529e01e4dc4380d751a9a5769097d80b
TLSH
T18B6196808C80C1D9F3E163B3A1D72CABB5BA50C11DAB0EA1597EEDFD8846F1656C4E74
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cd335918449b7134d6cfbed18c710b9b2e8204c47f50cc6cce248b398bdf8cc1
MD5 0bdb9fa623cff2ecf0e2358eee6b9c61
SHA1 9ad40fd2badc1909ac50a0c1ec15750752101402
SHA512 f586d1284a6845bd6ca55ff12ac970e508e7ea34603c4a27398bd749cce6dd3de76c57e1149a4322158a18bb435371de7f56e8b5b15827497cc01f7573ef9bc3
TLSH
T19F41BCB7C3D88B7E891256F09B24AE1ADE2C0A06423C3C16C8E5AF1F63F24B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b80d7281f4eaca94abcdc47b2978e34f0851964f01af912c114041b292af4667
MD5 3bde691e39a2c197e664b9f6a5bccab7
SHA1 cf406070048d6a769352c85acd23b0d9b82ae1a8
SHA512 7eeb02da66196c68e07173d9f5a39d21eb32af06e657fa26f4234bf46ba3fd6264a42d7f21fb68ee145167dd6b5d25d17ad1b13570a9e321cd14dfd839189bbb
SSDEEP 192:sxZbRzWL/frspXIdpdRHW6+WNGY36aCmIgrJ:sxZbYL/frsp4zHbGXW9
TLSH
T1E112C8516E38697B8CCBD20DBA65BF53D6F9503291D10E58EAFC8A1C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f22262ca928d4f0db7a6cd44b28c7115ff1eb0136a9886153c8b38d736a609fe
MD5 f962900a9d95cbd71a179267a8ab4973
SHA1 91162d9319a3601523f2218baef554e4f572f5c9
SHA512 62bc304dcbf115b30d8cc0ff25762872920e3e75d24ab23ff72dd40f06c387b8223d012c59b21232fa56287af42fa760255a2d46461c559d108171d65a7e3ce1
SSDEEP 192:sxZbRzWL/frsaXIdpHRHW6+WNGY36bCmIg5fJ:sxZbYL/frsa4xHbGXNb
TLSH
T11A22D9526E38697B8CCBE20DBB65BF53E6F9503251D11E48AAFC8A1C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8f386ececbb3dc8cb45b3b052fc719d0264d6b16267d34bfe64ac04b6c6a1225
MD5 1fbe14ff35b09267e2f4aa44f085c7f0
SHA1 192b9727b0543cae82ff7650870690cf028e619a
SHA512 2c2dc67e28cedd446efb5e030180f1592eb1adfcf19d6adc579c2ce675811823af6446778b643bed67598cdf493d5ac614db35aa44e358814b01f12e297d8da7
SSDEEP 192:sxZbRzWL/frsrXIdpdRHW6+WNGY36aCmIg51J:sxZbYL/frsr4zHbGXW1
TLSH
T16522D8526E38697B8CCBD20DBB65BF53E6F9503291D10E58AAFC8A1C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7de2553a6aed4182cf85cc069343c971b6ce98c765388fcb1b8be40ba1c94a63
MD5 c9e4a7f470de899aacebfa5d67f000cf
SHA1 a574aa66b935b23a014e1aef069d960ce4e2c932
SHA512 a772c443cbeccbc7018faa537f32b6d334c2380e2954dec2a970b668ce4b68c994de1fdd52c29631e913473f49d80dbde4cdecdde5918f002a3139d94b9747bc
SSDEEP 192:sxZbRzWL/frsaXIdpdRHW6+WNGY36LCmIg5fJ:sxZbYL/frsa4zHbGXdb
TLSH
T12122C8516E38697B8CCBE20DBB65BF53E6F9503291D11E58A6FC8A1C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2f832ac041323631a99d518a6fd3bc3e4e0bc3ff59c5392ff54727e6c1100414
MD5 c11b303ebc7ca271ec88854e2280ae89
SHA1 15cc18d23748eb36acf7761225bf704165922643
SHA512 4687d94bc9cbf3accfed64de118be661a1e108e4a789d7821cb1cd2455e374717f55d8031e050dd43607a0b9112ce00a0c930922009b3867fb64848a55703531
SSDEEP 768:xZKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/+roeS:xZKlm7QWvUYe0u1ja8/L/E/VeS
TLSH
T1EBC2FA3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4410135-389e-4ba2-8f43-78ac301a3bf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d4410135-389e-4ba2-8f43-78ac301a3bf6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 41db909c35f69944bce7beb4a9a24247eaf330f00c92b1bad5f75219a3b4e477
MD5 1e27b8b0419c6bf60f83cf51b40d58a6
SHA1 289c51faca0ac5314f3fc2d8c718b118d43796b7
SHA512 3b3ad529386ee30bd398f8f3b1e63fae022e672d5e08ebaa18f3965bd4087cf734c43e185a06b69908b9f0b3af1b3b7cfe7c4e88d721831b9c74eb08db72da8d
SSDEEP 384:PZcIosNzXDYlb7hIh//YhnEsa+VYIl4ob:HobzU/QlEhguY
TLSH
T1AD828C716D74AC779CB7D281F88736038EB881A797C96F54D6ECAF1C05DA2A81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8624221aeadefe2281987a4d4b9eb2ca76e0dce609daff9f703d21ba84d7de36
MD5 c90742c499bee4bcdd87da6b5d8bb749
SHA1 104dcd34f7c08679949107c890bc7e9f5477b61e
SHA512 d9b9c47784599e5a91eb8680fe976164a74f19cc43129ce1ee00717895c34f5d470662f73b39051aebc9f20d90ad1bc1866936a2c8cccd20bf8b68ee80cffb2b
SSDEEP 384:YiFiZcIpesNN8TUNTUlIlGDYlb7hIh//YhFEsa+VYIl4ob:jFQwowgzzU/Q3EhguY
TLSH
T10AA26C726DA4DC7BADBBCB81F98636038EB441A786C5AA54E7DCAF0D00DA1DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 274bec4244c9993d57bf28b79d61303ad1698e433ba807c39ae8ea06ba2e3d57
MD5 f25ea649c34332803c0e8241ec823fd2
SHA1 d1f5bb3e502f12d36d71af777793a849afb23f72
SHA512 52f35f293676ccb167958cdf0995b4757c422900f3840474d82585bc6cc147ef91f3b543ee1419cd7086ce717ec5010cf6dc447bcadd2dc8cbb54dbdbe6d3ebc
SSDEEP 96:KqONkrQsjpfbUmjH5ih/cIPURHl8h4otop5EAaDzBKP4v+Y1xf//ojdoxTeYzqs3:BON/6JUm0QmiUyStso//YpBCh1EYU6
TLSH
T19402D739BC74ACBB9EE3AE45F48777239FA4106BA6915F44DAD82E2D01D725C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 3b1d8a350469544ecf6a3996be6a4193ffd5c74ddf0a270cb26966119265a786
MD5 340f98e7e843aa3a602623db7228cf94
SHA1 40c088f6b0f369dbde9745fd08c040341ab83bb9
SHA512 e5598002983a0a198fa6b869234a8bc7753be0fb3aa7e730788dc7d5483be0cb0744e843fcb57d8ea9b4ccf63b079bd35aa7f49d34145f7116e1e49e4d9793cf
SSDEEP 192:udWsNzXDQoO/cUbASQmiU1X7X4h//Yh6aoZ/1Uqva+4LcYLWAdIln:DsNzXDYlb7hIh//YhkEsa+VYIln
TLSH
T1C76249757C64EC778DA78681F48736138EB481AB97C92F58DADCAF0C05DA2AC2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 28a3d9dd4328ad89527b1b3c9171cfb3d74bb81bbd54754459ef1a2dae0fedf6
MD5 f17643eb24331cde3fb107b85be1850c
SHA1 5b27ac3043e858b96bda6857dfe0f6c97a9c7c78
SHA512 8b331bd8f40d52591cda80c378989efc1de387e40efb660fded5fdc9898a2b647f064e6b955f0553267a1949e5562229283898f6aefb9ca607f97ee05df19fd6
SSDEEP 384:dZcIosNzGDYlb7hIh//YhnEsa+VYIl4ob:FoIzU/QlEhguY
TLSH
T112828C716C74AC779CB7D281F88736038EB881A797C96F54D6ECAF0D04DA2A81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3aff92294372538842962e3ee5afa5f3ee85d906eea4ecb5b6f41aadbd2d283c
MD5 a0c60e11b52e1b75737be3d18f2de176
SHA1 c395dbbec60cc12e5feb0b3155c9ba64e1f77b66
SHA512 b07a57757d25e8ffc520ca1f2f0bf51176c56cb46d1d631c32b86e0e7045f529943dc22664ead054c6e5ef5885322466dec73d4faa820cd59dbae90d84979f5c
SSDEEP 96:KqONkuQsjpfbUgH5ih/cIPURHl8h4otop5EAaDzBeP4v+Y1xf//ojdoxTeYzqsoe:BONe6JUvQmiUyut4o//YhJNxZ/1UU6
TLSH
T13412F735A864FC775DA3A591F08736139EA4416BEB856F90D6DC2F2C06EB1AC9307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53d04fe6-c46c-4139-af99-ba7b80ced8f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\53d04fe6-c46c-4139-af99-ba7b80ced8f8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a3722a6b8f2b69635b394dbc6d54c4f091446148eeded27b1d64db03018f2898
MD5 4a28fd293f0c333eff92a9dbb99a4381
SHA1 8cc955d2a879f6fae0907d6c821698de5af2d6b2
SHA512 37ccd35a779efa5a1930a112438fc8d847e751ddfe1f62987bf664bc3a0b2cbe697e9251b70fbd9ca942cc1cd98db82ed3c33795a774ee4b9ec05c2da907c6a8
TLSH
T1F141285CAAE91148B7B77E1AABF3B86E487FB9372F07D45D10110E4E0623A00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download