67155debb37c0940cc55ad0ec13a8b854cdd188d6481cbf75fd4b8c8d98ea48d

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_67155debb37c0940cc55ad0ec13a8b854cdd188d6481cbf75fd4b8c8d98ea48d.html
Size 106KB
Sample260912-sblntadd78
SHA256 67155debb37c0940cc55ad0ec13a8b854cdd188d6481cbf75fd4b8c8d98ea48d
MD5 c8a0fc129dfc278b8002a713af921c59
SHA1 3a21c76f28be790beedf171d69138009f5f04013
SHA512 dc1e22f05798b59e2ee5d83c6c53a2a1211b505ac285064dd3f1015d0272ea913bebdeb4f292c55b01a516beb62d0ed64a099e6eed7254ca388c1042969ae4e5
SSDEEP 1536:cPxSYn+hzEvWRgeYBgvzs8V2mQUTtcNoQxFRQXOa/bEaonbEaoqKw4:yYfQ3NfRoOa/dondoqKw4
TLSH
T143B3A48701604CFAEFA049B3425F58673D2C5837BC5791B9E3FD8F972B41DAE024A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338346692106978"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{577588AE-94D3-466A-936A-29AC138AE982}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1676	msedge.exe
1676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3592 wrote to memory of 4452	3592	msedge.exe	85
PID 3592 wrote to memory of 1744	3592	msedge.exe	86
PID 3592 wrote to memory of 3876	3592	msedge.exe	87
PID 3592 wrote to memory of 3876	3592	msedge.exe	87
PID 3592 wrote to memory of 3876	3592	msedge.exe	87
PID 3592 wrote to memory of 4468	3592	msedge.exe	88
PID 3592 wrote to memory of 4468	3592	msedge.exe	88
PID 3592 wrote to memory of 3040	3592	msedge.exe	90
PID 3592 wrote to memory of 1656	3592	msedge.exe	91
PID 3592 wrote to memory of 3040	3592	msedge.exe	90
PID 3592 wrote to memory of 3040	3592	msedge.exe	90
PID 3592 wrote to memory of 1656	3592	msedge.exe	91
PID 3592 wrote to memory of 1656	3592	msedge.exe	91
PID 3592 wrote to memory of 5104	3592	msedge.exe	92
PID 3592 wrote to memory of 1948	3592	msedge.exe	93
PID 3592 wrote to memory of 5104	3592	msedge.exe	92
PID 3592 wrote to memory of 5104	3592	msedge.exe	92
PID 3592 wrote to memory of 1948	3592	msedge.exe	93
PID 3592 wrote to memory of 1948	3592	msedge.exe	93
PID 3592 wrote to memory of 1764	3592	msedge.exe	97
PID 3592 wrote to memory of 3800	3592	msedge.exe	98
PID 3592 wrote to memory of 1764	3592	msedge.exe	97
PID 3592 wrote to memory of 3800	3592	msedge.exe	98
PID 3592 wrote to memory of 4100	3592	msedge.exe	100
PID 3592 wrote to memory of 2704	3592	msedge.exe	105
PID 3592 wrote to memory of 2688	3592	msedge.exe	106
PID 3592 wrote to memory of 5096	3592	msedge.exe	107
PID 3592 wrote to memory of 1188	3592	msedge.exe	108
PID 3592 wrote to memory of 1188	3592	msedge.exe	108
PID 3592 wrote to memory of 1676	3592	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_67155debb37c0940cc55ad0ec13a8b854cdd188d6481cbf75fd4b8c8d98ea48d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe4499c188,0x7ffe4499c194,0x7ffe4499c1a0
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,1092424299974478728,13938136079099766398,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,16580820701935739644,2765159748042759899,262144 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,9386636111426877848,13378455060966052973,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,9492670434712007256,8107872248132473529,2097152 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7153511272112016458,13794078488884677218,2097152 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,6784736223670798482,9081248133195944770,2097152 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,12908451835279793061,89425517357789780,2097152 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,15365030315828439087,12432725460482331487,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,6172878968837709557,12697438172338989746,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3110256987818483494,2649731023150308880,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3110256987818483494,2649731023150308880,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,8051658099529046434,7013085156445451643,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,2440277021282343149,15536718854428309010,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,1143833578970702374,1853243580655686882,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,14695635645599524655,10596409737978482483,524288 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,4916709794507825720,13271307098157550351,262144 --field-trial-handle=2228,i,13652827354551083732,5142387822776311449,262144 --variations-seed-version --mojo-platform-channel-handle=1212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a14b39641a65e113cd0c2e76ad27e2af58267a1acf8071ffb06ebf5390f6f876
MD5 44708dac4d5b87b819b864ade7856256
SHA1 067a5e029d53736ed729f9260f0ad17f82a6ba4e
SHA512 46b965edc6972c397c35dd1cdee1d26b9900eabd7de472f8e0b93a4cf5753ed0756635e5381dcb424c51dc2907a62c6fba713b6412863bf9d366801d6647b000
TLSH
T1FA61A4C055A3B448FBA8427481E9389F3E39258F55AF1DC29DB7E8758CCAB5C60B3244
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ff5a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ff5a.TMP
Size 3KB
SHA256 8d2b9d2def2204304b83de1e1f12b07c518d4accea55d4788344b2d097e6856e
MD5 d61008d663179eba2ebed091f2227044
SHA1 723391d482900c8ef0df3d0df1abb86ee8bb631f
SHA512 129937ed3a42bffe0a979b3384f1984f93c7b8e63524a9968e26fb51a5cf6978acc490e52d85d95d53e9c4699f5376a250af98bd3498499a1627ea99b5ce582e
TLSH
T1E461A5C05593B448FBA8427481E9359F3E38258F55AF1DC29DB7E8758CCAB5C50F3244
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 03e8cf8e79415c94d950e2babb2351a36ca319b13f32e70d571190b3157e3aee
MD5 0c90c80e954442b698431642dc76d945
SHA1 a723bafe27867dc891b15910a2f5cc49b53a0eac
SHA512 0d01cdf7d0e23eda72cac42c60c3e8ff91c2650d8f4e5704ffcd0bf23f151d175a4a4385636921d42d2170648cfe4d7f2dca08cbaf299e18e9119bf7af40a3b9
TLSH
T166517FF7C3D4477E891256F0AB28AE1ADE1D0A5A422C3C16C9E4EF1F57E25B0D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c2dd5bca14db1a30292a634b07aca6ff85ec877dbdc3094dd438442f46d33f3d
MD5 e2636968bd0f8d1a373beba5c26c3c71
SHA1 3130d4ab34eab63b2872818211d728a27712ade3
SHA512 d45dbf6ef1694b107694083fddb2bcaf3b83c55ee059f2bb8ca734959dee6ad0e7c1db74c1fc40350838e7c4e62156b41324dc76a13357f8d004e68989f64b15
SSDEEP 192:sxZclW0/fBsoVIdpdmHW6+WNGYYBaB7IgrJ:sxZcM0/fBsomAHbGf29
TLSH
T1D812A6156E28A57B8CCBE60DBB25BF53E6F9503261D01E58EAFC961C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 06f2bc4acc27272e00441a982c9894272c18de1fbbeb1430d6f8a2bc4aef7f4d
MD5 9d2662181b8033aa26dba20e2de222ec
SHA1 cedd1b0b896f9f9216fc319b8186b34231ced885
SHA512 77c302e0ccc452807085428e3c435cdf708d58bab2d7bea5166da3a2b2ca621743862f0d52bf27af8f6d7b2892b0b404d511beee11e084a887ee6938d0a7b1cd
SSDEEP 192:sxZclW0/fBsmOVIdpdmHW6+WNGYYBYB7Ig5fJ:sxZcM0/fBsmOmAHbGf43
TLSH
T18A22C8156E28A57B9CCBE60DBB25BF53E6F9503261D01E58AAFC861C05F76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b2bbcbe696060ab0f9c58734ef688edc33b14dd25cca140d40ee0233ba687507
MD5 104278b1dce8cdcb5569a03b8de283f7
SHA1 dc3b268bbc19857958c09d0e91b0738d197aa6f5
SHA512 80232b653d78532adb7deb435c9053986306221fbe07957d00a1d78309c275c645b709e9c8e28357682e2bd949582120f4ca68b82fa17d1c64704108166de272
SSDEEP 192:sxZclW0/fBsmOVIdpHmHW6+WNGYYBaB7Ig5fJ:sxZcM0/fBsmOmGHbGf23
TLSH
T12A22C8156E28A57B8CCBE60DBB25BF53E6F9503261D01E48AAFC861C05F76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ffa0390f5cd09b47534ebe62e72a2afda1fa56166846b11f9869c7f45cf42e06
MD5 76348fb670f4523788be1ac7a1df34fb
SHA1 ef3106d1f685c25287e77ddd2affaaf896abc9ce
SHA512 bfc1d40e72a26181a11f7cdd137f24c60425a9c5411ead7ea68b7383fb25dcdd23bda189b0f352349eedfb3553ce2b967693279987e82ff05c04e0a76a83823a
SSDEEP 192:sxZclW0/fBsTVIdpdmHW6+WNGYYBaB7Ig51J:sxZcM0/fBsTmAHbGf2R
TLSH
T10622C7156E38A57B8CCBD60DBB65BF53E6F9503261D01E58AAFC961C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 33357ff5c4e797b12bdeb0b50d4d2c6965c91eb468fd2f0efa8d5a503aa9bd97
MD5 9e0fe8511666e8d22a7fb3a77524e933
SHA1 fa09641c5d0e7cb69f7e5dbcb2e40313125f22cc
SHA512 84a5836947d24c23b0ae51fc19d8c9b82cc89c1530b5e462f51923d8f53f7f4c6e43625968e874bb300ecc6a2cee62d60ce5e26424fc5003070fe623006c8bfd
SSDEEP 768:XcyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXgropD4F:XcyYR7jWv3NpBu1ja/CL8OXrW
TLSH
T133C2E82B640DCB7E4FC01E9DDC5A6FDB6E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f1e2a884f4e6f0a9eadf9f4da08290a8a2e35fb5b4aa5e16e2b7b7232fb3fd36
MD5 d18ea7026e7a89064e732e297674ffd9
SHA1 0baa36c64409f6b3daa6f1f3df821f7540c6f483
SHA512 af345393cf67968d8b567de8dc804f6f53fe1ba560356c1875a62a1260b7d0a380fafbe05d6c0bc213f77a229114e4cf741e933092b01f89ae54dc98a6d931f0
SSDEEP 48:KgRAthrvzMb/KXIS5MK9Z1zMxxcYKbRVyLeZ04WcMFbwX4ISQFK901GFx+VYvwsr:KAWEKXKKWdSK2gKmhmKqISeHWK08
TLSH
T169A1674071BB420539BE294D92A2971F52427573B028F67BBBBC10719E2BE490DFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599d21.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599d21.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 1c37f57db061d9ab936211181553b4070bfc2a827770bc3f5c450a758a15a2ea
MD5 cfc9fb30a7258c5943e70dde1ea47e99
SHA1 92cd8266b6a46563d38af1db5a967ef2b9e4b3bb
SHA512 1cd82b69e3cd9b73c969ee861c4955e0606eccb7e74b97d0d43d60cf61ec28b6b68bb35ce80aab855ab7e13fd494b640580acb3f3a2ef77cf613e44c6d0abe67
SSDEEP 384:gsNlzLIbi5C/uQX5+DtD8PXq+2M/h7O6R2FeoUh7UY:g9bfdkDSqlM/h7TR3N
TLSH
T19F624B35BCB4AC275DE79585F44B3213AEF9516796C92F80E6EC6F2D01CE69C130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b1a5b40b116247d0e9a7120614f63b234d0e98a967aeabe53e2a25f9d2de58bd
MD5 5973698936d0015ec7244e1eafb6bdc6
SHA1 b9adbe61804caeb22d21899ca06ac355baed0194
SHA512 979f667785cd6acd42a40f76ba171af7833a6ab5d48c3188ac3de03cd558954f62338d43bd223c3342fba71e3d47b0126322f34f5ef6c4ab4c80cacdef4f36e0
SSDEEP 384:WiFiZcIsisN/8TUNTUlIlwLIbi5C/uQX5+DtD8PXq+24/h7O6R2FeoUh7UkoI:9FQBuwgBbfdkDSql4/h7TR3Fn
TLSH
T1A9A27E325CA4DC3BADFB9A85F54A32039EF95063D6C5AB90E6DC5F1D019A6DC130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 ff1bb55d087bab713b0a6f95c0da7a87c7250317502901137be702c2da41d7f2
MD5 716dbc58d23bed1ab552698fe5361a89
SHA1 68e10a38b72799b9360004737b136c0405d49b0a
SHA512 a0d88eaf3ecd85d72c768f61061867f284eebb6c966276e744148be88e24cd627dfbde3acbb1ec9c47920225ff441cd91efa62e357fbb5cb52d5f5c5b086752e
SSDEEP 384:gsNlzLIbigC/uQX5+DtD8PXq+2M/h7O6R2FeoUh7U5:g9bGdkDSqlM/h7TR38
TLSH
T1E0624B35BCB8AC275DE79585F40B3213AEF9516796C52F80E6EC6F2D01CE69C130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83a3da134121c1e847908c147dc08d7f7680200b3524e4c8a8f65653b46ab69f
MD5 210df15a42f380c86362e20d04caa1a4
SHA1 ff35c13a0d4fd2e04b6479caee99d8840d560983
SHA512 d8971a683b8a8c2f2bb4a4dcd3d95e69dd04d8621800ebbc97525a71064324349055b161a55c978544dd404498dffa4cc2179de86941c9e494aec96369d4a0ee
SSDEEP 192:EON56nnHGQmiUy+mQYcX5hQDP1Tjzor6s1mmMcrlMU6:EON56nCQQNX5+DtD8ZpMU6
TLSH
T1D102DB34BCA87C779AF7AD49B4873713AFA5216BA5942BC0DAE81A1C01D775C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b0e387507b4159f849de40a17d94f54c5923b517674ed57b249fa51eb7708d3f
MD5 3ecf9539214c197a1de5d9f6e9ab43b3
SHA1 0ddca3fcda775b17f5dfb11e29b74abf401cb158
SHA512 f0a26740d79493cd9b989d4c78f3efd2ad4ced92af5aabf8ad2345e45d862a611eaa4fb82637cdfa9ac591f5c4bab4246ab10ad22b31035bad8f1f9e3032f459
SSDEEP 192:EONw6nnHMQmiUyqmCYcX5hQDP1Tjzor6s1mkXIx+2Bg3V/5hU6:EONw6n8WCNX5+DtD8PXq+2W/hU6
TLSH
T111120C35E868AC675DE3A595B08732135FA55127DA857FC0D5EC2F1C01DF69C530AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 24ee36bf897e3b988a171650f201b4ef1849886dae7b82d2968b00811d18157a
MD5 10398dae8e0916402cec483c1b985b8d
SHA1 f0d04614fe0a4a588b49e88f8646debc1a10ecd7
SHA512 75c5ba7a544e4bbca08b0d3c319762a89cee7d472664375fabf7b84fb39b58ab0e61851b74393ff81167aaa361c3b0c826e76fd7e47cbd6382c3fbfe78c75461
SSDEEP 384:rZcIEsNlwLIbi5C/uQX5+DtD8PXq+2M/h7O6R2FeoUh7UkoI:zEGbfdkDSqlM/h7TR3Fn
TLSH
T106827C316CB4AC376DFBA585F44732039EF9506796C91B80D5ECAF2D01CAA98131AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c50f4f9a-f71e-498b-8e55-b90b0c375c8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c50f4f9a-f71e-498b-8e55-b90b0c375c8d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 81315bcf601f7e4ae7199e8aa81dfc8c04707e667a737397770a099d68aa590f
MD5 7cfba939b911163b19adc529be5b219a
SHA1 ce33370e7e12ed7009ae556285e4f67c73a0bb04
SHA512 fd90f05bb988fec269e86a90b22b811176b31e2559981d40a3edf9418f1a4c1eefafc13c4d3c2d7fec22f1bcd07d744e7b4f6221ace4bf4d2fb70eb76124e9fe
TLSH
T13441505DAAEA1148B3B7AF569BF2A46D847FBC772E06D49E10010D4F0A63B00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download