228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d.html
Size 348KB
Sample260912-mxpppsaa93
SHA256 228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d
MD5 f37366a989d611110d4cf61f4ad3f92b
SHA1 7adcc3209cd70d5af69f5bec7688a83c8763512d
SHA512 03a61450a68cc2af492ff61ca6552b8d43f666f8c6e18417b09a9f1ff7f40608e45f38c8fd7f825c93682f0553213e4cb452104429449619b3f624994b868692
SSDEEP 6144:Cd2H1F29tMcME+i4fpvTmYDQX8GscE6Fe:Cda1Itnw8X8GnFe
TLSH
T1BE74AFA47601B03A4E5312EF53967B0C71396401FD914A64F6FDA2B029E7EE913A373E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338308266598198"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{BC316F77-4167-4FD5-B166-F5EB8B14DBE5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3968	msedge.exe
3968	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3316 wrote to memory of 4352	3316	msedge.exe	84
PID 3316 wrote to memory of 2568	3316	msedge.exe	85
PID 3316 wrote to memory of 4588	3316	msedge.exe	86
PID 3316 wrote to memory of 4588	3316	msedge.exe	86
PID 3316 wrote to memory of 4588	3316	msedge.exe	86
PID 3316 wrote to memory of 540	3316	msedge.exe	87
PID 3316 wrote to memory of 540	3316	msedge.exe	87
PID 3316 wrote to memory of 4500	3316	msedge.exe	89
PID 3316 wrote to memory of 4500	3316	msedge.exe	89
PID 3316 wrote to memory of 4500	3316	msedge.exe	89
PID 3316 wrote to memory of 3956	3316	msedge.exe	90
PID 3316 wrote to memory of 3956	3316	msedge.exe	90
PID 3316 wrote to memory of 3956	3316	msedge.exe	90
PID 3316 wrote to memory of 1224	3316	msedge.exe	91
PID 3316 wrote to memory of 2316	3316	msedge.exe	92
PID 3316 wrote to memory of 1224	3316	msedge.exe	91
PID 3316 wrote to memory of 1224	3316	msedge.exe	91
PID 3316 wrote to memory of 2316	3316	msedge.exe	92
PID 3316 wrote to memory of 2316	3316	msedge.exe	92
PID 3316 wrote to memory of 3868	3316	msedge.exe	96
PID 3316 wrote to memory of 3868	3316	msedge.exe	96
PID 3316 wrote to memory of 4668	3316	msedge.exe	97
PID 3316 wrote to memory of 4668	3316	msedge.exe	97
PID 3316 wrote to memory of 4872	3316	msedge.exe	99
PID 3316 wrote to memory of 4132	3316	msedge.exe	105
PID 3316 wrote to memory of 1796	3316	msedge.exe	106
PID 3316 wrote to memory of 816	3316	msedge.exe	107
PID 3316 wrote to memory of 2712	3316	msedge.exe	108
PID 3316 wrote to memory of 2712	3316	msedge.exe	108
PID 3316 wrote to memory of 3968	3316	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff12f2c188,0x7fff12f2c194,0x7fff12f2c1a0
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,2095997612889071804,15138663680855529550,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,10309160438463743414,10932754454194950627,262144 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,5275463788058765292,14242181617262578823,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,2900511483620515071,15980499060532761701,2097152 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,16586889695867190618,5698985986242037257,2097152 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,2133023254911350903,11528160767213880992,2097152 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,6679224453658710247,16577327984442926971,2097152 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,13057530522051025688,10176255574511475613,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11717834233080511285,9504074162871457628,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,1584494932887222210,15197783632257840133,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,1584494932887222210,15197783632257840133,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,17688675627837846947,8622866502894022448,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,14567072306592096986,2975048787779250512,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,9647190012584405789,16719175675781992996,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,14826299376233348595,17867550899553571356,524288 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6088,i,13789326540125029657,5197862499954994084,262144 --field-trial-handle=2080,i,459655051661154918,17946286475620967757,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3968

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7cd1cd6fa50b2bf7d20182111e1ed3dce6b67c8b1547c6adfee4b1a4dcd062a1
MD5 28da8a0f55ce76f8ca6207169bedb901
SHA1 4fb5fa440f16adfa630b1c1986fe27df121e14e4
SHA512 8c0d6143b2c01f6b58bc797279a9793573c0998655c8f736c368a0d52bc4248029ce2a77ab57f02f05f51802e658f3b4c8905a7c1159b036ce5ef3e101f721a2
TLSH
T19D615E87499885D5FB96FC32A3D900A7BF7F29C24783AF8B839CC87ED446705208419C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e579.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e579.TMP
Size 3KB
SHA256 ec22197f825d16e9400accf7854dba984fcdf6550364d3196f6a17908d417c2c
MD5 a1283a73fc833d8b44b929a060261494
SHA1 2f5529ded7dcf94dcaef61f75bf34e4394598c1f
SHA512 212ca5d8efe8ee68a1664f026051abeeba216e5adecc475cb379a71e3663e85d3509b1e7e1bbe810b417632e8210ad7c50043e889112219e7afa2551db341966
TLSH
T1CF615E86499885D5FB96FC72A3E900A7BE7B65C25783AE8B829CC87ED44670520C419C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9469c518bf57fd31ca1b23099b8138671684405313ad8230c2107d51c77b37e5
MD5 48756c67f1b8a772d7bae9df90a9dfaf
SHA1 5d25509dc3f0deace737ccb73a044f5433f5ca28
SHA512 4d61670dd0f1bb8bf25104c1978a9c892dc491142602fe2a8f04b81858799a4aab0cc1a0c27c69c25ec358c1ba8ccb44b7ff292b84a8947edd151bfcedee76bc
TLSH
T1C3519AB6C3E4877ECD0156F09B25AE2ACD1C055A422C3C6689E4AF1F67F24B0E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d989a77d13cabbd9ddf77f9d7c9490119f2d933cf328547643c7e2fc486a367a
MD5 800482dfca6ea6172a9d64d96ba517a8
SHA1 73add14d1e73dcff1e64b6b58a13169a38892eae
SHA512 591d50cfa38c1a689359aac0d25e851215a413925397595cb78f7710ecfd95eb34f20cf0f51a1f2bde4522446b2e1d03a3743219b8e62647fbfff59cf7fccbd4
SSDEEP 192:sxZNRVWq/fDsJYIdpdTHW6+WNGYgU1RIgrJ:sxZNuq/fDsJplHbGo9
TLSH
T13512C8566E28A97B8CCBD20DBB15BF53D6FD503261A11E48AAFCD61C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d5c3566c386d68e299f70738c5ee5785eaced1b38d8417a766f0163b025a9baa
MD5 fd15a09e7614029b3f5889699f1fda7d
SHA1 8c9744514cb17e74bba8442552c91f01d1ac25c2
SHA512 230aa5504c54a027a94bcbeeab62bcb05c5d214dd1e0e928ca7fd197bd8fd1e3753e3967e8cf5fed52612507939e87a7eb5c9f96c246eff34ea261d0f1277789
SSDEEP 192:sxZNRVWq/fDsEYIdpHTHW6+WNGYgQ1RIg5/J:sxZNuq/fDsEpzHbGIr
TLSH
T18722B7566E28697B8CCBD20DBE15BF53E6FD503261A11E48AAFCD61C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 79eeb78cc095e4e8db0530aee2981fa86f6dae42f262d6b6f730629c6ef127a6
MD5 fd8edade209cc53795fa933f26aee69d
SHA1 1fc76704bbc7d55eee1d55a523a1525464c24feb
SHA512 37c864f4ab7811ba479e5a16041e4cae1e72477aa07c456a057af11e8257f875abe62957a2f891b6c4dbe1e83731d93011e27fe779277f8e2d959a3fe02c7237
SSDEEP 192:sxZNRVWq/fDsEYIdpdTHW6+WNGYgS1RIg5/J:sxZNuq/fDsEplHbGmr
TLSH
T1F122B7556E28697B8CCBD20DBB15BF53E6FD503261A11E48AAFCD61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 be501f89d1f42ac148571cb71bb1b975bbb55827f0b315a063eb2428633d0252
MD5 7588f3fa6586533da292d893c778644b
SHA1 85192a0ac0f7aceb35841b6a36eb27c812c7968b
SHA512 677b97047264e7e24b2abe379f953138791e4c8ad3e13343272f45e73982c60e3b17e2e38d1c770a361de09b6f98b298ffdb1c4310e86926f715ce09b28801d4
SSDEEP 192:sxZNRVWq/fDsiYIdpdTHW6+WNGYgU1RIg5VJ:sxZNuq/fDsiplHbGoF
TLSH
T18122C8566E28697B8CCBD20DBF15BF53D6FD503261A11E48AAFC961C05E67CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 05b714de4088add81cf27a09d2bfd80e454dbfee45cb46d3267449c2429a1118
MD5 5506d929b524603f97538dd7e6c013e9
SHA1 c7f4b874601d7d5ea6fa6988c21b7150e805ca54
SHA512 cd4aa5db03d01e2571a9cb13371af39bd8d994dfd4c94176aaa6f955aeae716210e144f6c2d910fade5a651f1f86a12211a880ca3117d3a39d8976543c1edc31
SSDEEP 768:LEichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzEroojZ:LEichfPWvPZplu1jan+LKgzPKZ
TLSH
T1F0C2FA7B640CCA7E4FC01E5DDD5A6F9B7EA802C7A6688D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 6ad560bf359264c127d6c64e605aca5ad5713a7ab9709deca5b5b1d7e5e82254
MD5 98b1105a7fc3077adb79d3c4d74e0472
SHA1 c5f95fce44314d81f21182768ad50c87dc637be5
SHA512 a60ab4909f4c8306fadaf58d5feced427f4098fc7951cb5376332d57286da51aadbe3ad6202adc3862170ce4e95119a3ebf73a05f8ca3308868a8de425d7c97a
TLSH
T12381051132BA4210397E668C8565973E1243F6777014EE3BFBB910B5EE6AE084DFD8C9
MD5 SHA1 SHA512 TLSH

Submit Download

e18f8fc0-2dea-4d73-9290-c69f3326fb7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e18f8fc0-2dea-4d73-9290-c69f3326fb7d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 28ec62161be94eb223ea7f43bdafe3536ea0a9fd247cc7b5d329c5c17e887287
MD5 38af51f996b30051aa21b9bddafa4cb9
SHA1 7305d38dda4ae1600e3b9003ab3483f7a7ee61fb
SHA512 42f030a919fff249d52d55c24ca93a865d7706bf03d4b3d4d793f9a1053f6e3297ab77adde3fb97dacade3d85758eb32e43f08042df3fd7deeeb9f30dc3662d8
SSDEEP 384:+ZcI2sNO+H5stuBGYX5EWuh89Cbesa+VY+lIoY:82sA4GYuWsICKhgAf
TLSH
T185826D71A878AC7B4CE7A291F84736138EF8912767D87F9485EC6F0D01DE698130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 24ab5d8b44047897d3474c6499317b9e00d0e48970a973e26a2fe2dcc7d642bd
MD5 ca0443c228da787e9b4a5954f2bc3e77
SHA1 c568d3bdb131fa3aa50553484433580c10d258f4
SHA512 4f8dae8581687b9a71a914d09dc40dd4a2bfc3cf0eb578726253258fbc0edbdac94d8f52d76ea748ce9230f8eb5d4de3f7b6c1c61c3c0c39f36da9efc3de899f
SSDEEP 192:LJONQ6DphmqQmiUyIjq8wGYX59eznCi7bkk76HFiU6:lONQ619HRwGYX5EWuzLU6
TLSH
T17E02D939A8787C7B4DE7AE45B44B27235FD8112BAA506B44D6E81E1D01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3eea1cd992fe1fab9003a2cbe76e4673dd0421ab4e2ad21743da20ec566e5800
MD5 2a945edcb54756434c1c9609e3ff3efe
SHA1 691a3173128d288f589d0fd9b7b8f1cf2552b7ef
SHA512 87f3d63145afcc794d87b45807562f9348ece7f3fbed8e20c02b50874f135a564c8fd99bfc1046eb0fa25df00d294089a024be928b02d42b49d28758dffd5ac7
SSDEEP 384:gZcI2sNOLH5stuBGYX5EWuh89Cbesa+VY+lIoY:e2pA4GYuWsICKhgAf
TLSH
T17F827D71A878AC7B4CE7A291F94736138EFC912767D87F9485EC6F0D01DE698130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e36013a47644c687659cc6572747b5d5f659dad6b2c7684bf4ed44c2d996c63f
MD5 754889cf5cee67e714ed497d31ae16d0
SHA1 dbbcb46fb2f5e656db3ef0e64543ecf57e380d4e
SHA512 f941d7aac8d8d2c4c62f95fd709083730b5a6c7b662c1722f8f439d679ffd638a4389ad1a4d67f3978a15657bc0de17d97d1f22c0175940e61b39c5dfa3e4c97
SSDEEP 384:jiFiZcIB0sNe8TUNTUlIlLH5stuBGYX5EWuh89/besa+VY+lIoY:OFQmfwgpA4GYuWsI/KhgAf
TLSH
T1C4A26C729CA8DC7F9CE79B91F94A36038EF8416796D4BBA496DC6E0D00DA1DC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 747921fef0570b4f64cca9fc338ad39ee5b322da124e609a7431b6ed576626a2
MD5 83a941c8de6151732faeebf606b99893
SHA1 8ed91e13edf13884ee19400b90903e8dcfaf2ddf
SHA512 780313619db837298eda563d79fd3480da164c46c69fef276acee64fa1d0a5386f12a97a4e131b70152f4bbb3a4aa985a672d44863b27d4d41ab457fbcb5d87b
SSDEEP 384:CZcI2sNO+H5utuBGYX5EWuh89Cbesa+VY+lIoY:w2sS4GYuWsICKhgAf
TLSH
T11D826D71A978AC7B4CE7A291F84736138EFC9127A7D87F9485DC6F0D01DA698130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a4395eec774f5ef9a97a1373dc8f88bd6e901106fff63f57780e757ab8719c0a
MD5 c9b659fc7b76c45f5b30bf6dd264fa1f
SHA1 08791758249fae72d90d972eb6163086eab018ab
SHA512 43ef5f9c4c35d891fbcd7ff157b004960dddb1914dd91dce8e3061c3a92721add7f0eb8e5ec7f2f58000a274e82fcf72ba1fd1caa7d988dc0a4c13307aae3198
SSDEEP 192:LJONP6DphiqQmiUyZjKwGYX59eznCi7h89nQkII+/5OeU6:lONP61xcKwGYX5EWuh89ZbeU6
TLSH
T119120A35E8B8AC3B4DD3A591F48736135EE8522BEB847F90D5DC2A1C01DF69C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f948e8c7-f872-4bf2-be8b-49e224311de5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f948e8c7-f872-4bf2-be8b-49e224311de5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c348259fec9b4a829841b5a9cafc1f9729421d2ac3caaf6b9c5c83d43ee8653
MD5 ee951218bfc14288bed20cafca1051e5
SHA1 c8791410e548d6061bdcd4dc82282c6cb2ecba7b
SHA512 ccce3c0efd5a1551c53d4ab9c9b43b79c5db6007be814028f6f9daad4d7d49b0f2f10014ab89863c9cf22dcd85208eeeb2a6e6462d5b8f0dbd616caea624f835
TLSH
T118412858A6F92148B3B77E5AABF6986D447EBC772F06C49D10110E4F0A26B44C871737
MD5 SHA1 SHA512 TLSH

Submit Download