f4e58da8a1fdabf796caa42a00121116993de6b8ed5845dfd444f1cf249670ae

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f4e58da8a1fdabf796caa42a00121116993de6b8ed5845dfd444f1cf249670ae.html
Size 116KB
Sample260912-slxttsbj3w
SHA256 f4e58da8a1fdabf796caa42a00121116993de6b8ed5845dfd444f1cf249670ae
MD5 2d45ea4f6af2c7bbfb7f26a54aff07ee
SHA1 979854105d58a051edb02037f531ea9895c47865
SHA512 9b6f2d0e65fa0619c7b1bd94eaf7510ed23343248712bd09f3adf515fd635f09a8f168d2f5be47b1e0ea109ed1b89195a784068445d92f70b7c62e91bba01ef7
SSDEEP 1536:COsQyYnl6IXjcIqUkbJ9kCvHtr7oWEJKXaj+RT4sgfq/6RB04OJ2HI:CrxDWGtAJKbV402HI
TLSH
T103C3D69342201CF6EF6605A2929B169A391D413BF847007DE3FCCFA63B85D6E068767D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4044	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338239429464400"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{E9B24308-9C46-467C-BEB9-3B9B50DBEB2D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4580	msedge.exe
4580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe
3432	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3432 wrote to memory of 2400	3432	msedge.exe	85
PID 3432 wrote to memory of 4044	3432	msedge.exe	86
PID 3432 wrote to memory of 3856	3432	msedge.exe	87
PID 3432 wrote to memory of 3856	3432	msedge.exe	87
PID 3432 wrote to memory of 3856	3432	msedge.exe	87
PID 3432 wrote to memory of 5032	3432	msedge.exe	88
PID 3432 wrote to memory of 5032	3432	msedge.exe	88
PID 3432 wrote to memory of 4152	3432	msedge.exe	89
PID 3432 wrote to memory of 4152	3432	msedge.exe	89
PID 3432 wrote to memory of 4152	3432	msedge.exe	89
PID 3432 wrote to memory of 4144	3432	msedge.exe	90
PID 3432 wrote to memory of 4144	3432	msedge.exe	90
PID 3432 wrote to memory of 4144	3432	msedge.exe	90
PID 3432 wrote to memory of 3236	3432	msedge.exe	92
PID 3432 wrote to memory of 3236	3432	msedge.exe	92
PID 3432 wrote to memory of 3236	3432	msedge.exe	92
PID 3432 wrote to memory of 4492	3432	msedge.exe	93
PID 3432 wrote to memory of 4492	3432	msedge.exe	93
PID 3432 wrote to memory of 4492	3432	msedge.exe	93
PID 3432 wrote to memory of 5024	3432	msedge.exe	97
PID 3432 wrote to memory of 2884	3432	msedge.exe	98
PID 3432 wrote to memory of 5024	3432	msedge.exe	97
PID 3432 wrote to memory of 2884	3432	msedge.exe	98
PID 3432 wrote to memory of 2628	3432	msedge.exe	100
PID 3432 wrote to memory of 2576	3432	msedge.exe	105
PID 3432 wrote to memory of 1892	3432	msedge.exe	106
PID 3432 wrote to memory of 2420	3432	msedge.exe	107
PID 3432 wrote to memory of 3340	3432	msedge.exe	108
PID 3432 wrote to memory of 3340	3432	msedge.exe	108
PID 3432 wrote to memory of 4580	3432	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f4e58da8a1fdabf796caa42a00121116993de6b8ed5845dfd444f1cf249670ae.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9c411c188,0x7ff9c411c194,0x7ff9c411c1a0
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,8534974119423268619,16447771548842883363,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,3985550416401850813,14425562796831340328,262144 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,13263297848170521832,15344434451751106113,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,15172419020963924618,4977217886466588899,2097152 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,9101552530602519695,5615416410644337837,2097152 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,7778337769011728889,13694928705204740729,2097152 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,4070670077655714480,17475989895843844243,2097152 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,10026638115810818072,9904670147541137687,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5107609083747343827,538420319754968166,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5611365805170719090,3610858524192303380,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5611365805170719090,3610858524192303380,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,2504939656289621807,8047939562234388050,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,9222795884094635172,13963830477562149530,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,2589704046493288132,12650234198205076058,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,8871462200132227194,4818959030851811364,524288 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,10318872224937140932,9083745010229500412,262144 --field-trial-handle=2168,i,3555535401930182588,15695667910685279531,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4580

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 27d5796c43996500c21014bd919892daaf242f51d6c7841c55f32c30649469e9
MD5 62062b871acb4c179495acf43442817a
SHA1 a31cf7199669b218f1f27ecdb2598a19ab55fbbe
SHA512 9e9d99c6e336a1e514bd5d6f76aa4e0d7fa55a3ad9c8447e2c06e60eb90fd6fb680b8ad38f53506f319fbe965379c79e91f445ff3a9a041298859a9d21c8f3b9
TLSH
T13C415442CA5028A6FF9485BDC9D41D8B3B709C91ADC3CE1703A7C4BEEE76F724604258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590a28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590a28.TMP
Size 2KB
SHA256 6fc3cd53f2677f105448b7af9263a3bce0a8d5d77c532c0c59a280798a601620
MD5 4a693bc5b46c3c996c449ced42e3aa36
SHA1 131cb913c324acc02ae73a47eb38a12903b4cfca
SHA512 d5049dfc30549f7c6fabbd0321d636b3c1c8b082080f5c56b58e39f251332c58175f4d6f49c32a5ef7b76cfa0b3c51736aaaa3b4b3dc5110a86530fe00eeb3c2
TLSH
T121414342CA5028A6FF9485BDC9D41E8B3B709C91ADC3CE1B03A7C4BDEE76F725604258
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ac19ae194e447e080e3bb5bde4797616019ccd9f1bc03c01d97e839a9e4f49fe
MD5 15c7086fbb6086cfd44fa53e09d47768
SHA1 823bf4437e893e8281b88de84b57a89eb4671f7b
SHA512 e3819ccbb620b6d3ccb4daca2ada55ca2b403d210c4372ab17043531c3834c187cd1436a0eee5d4e7e56b02ffc90ae7123e80f21881da4d258c1ccb462ab7824
TLSH
T1E45177F7C3D487BE891156F09B256E2ACD2D0A46422C3C1AC9E5EF6F63E24B1D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2a3805df42317f33c700d5fb17439c16f8affc34f5cd4c7aefaebbcb5f003a88
MD5 844babaa3be005eed2943c965d4d87c3
SHA1 4db245b2179ffe547fe539c3a5c3fc20f8c3b075
SHA512 aa859919c6c15f404f02248944c883368173bc0f6f5821ebccdb18bbc1239aea857a675421eddd4b84942c355a31f6cb1cbb9e63a3fc88fd28fab949290a853f
SSDEEP 192:sxZZRBW0/f8sGWIdpdKHW6+WNGYYBaXgIgrJ:sxZZ20/f8sGXwHbGfb9
TLSH
T1F412B8516E28A57B8CCBE21DBB65BF53E6F9503251D01E48EAFCC61C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c4a3abc4c95271bb55d568a45fcb8544379bbc4ce0863eb269c98ab0e333b16d
MD5 2a38ce7a3fcbebcb9d33c1fa91971e46
SHA1 faf8f3fa7a344d5c763a90401113b8b307f21f2f
SHA512 0ff0870c20537005caf1df3fd549c9c7d8dfaf216d8908357308b571e548f97395f2c2b2b79186b9ae3653d964507df56c2b382f21dd6a1c62f9823240f0b54f
SSDEEP 192:sxZZRBW0/f8siWIdpdKHW6+WNGYYBaXgIg5vJ:sxZZ20/f8siXwHbGfb7
TLSH
T1EE22B8516E38A57B8CCBE21DBB65BF53E6F9503251D01E48AAFC8A1C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6e34771aa102905a7324f67fd153389076896f43331d8713fd2ce1d7f686cc53
MD5 a5cc8c3eb4099138e8f7aea2b628664e
SHA1 c363a8e1e533dde0c74446986333a5f9dc76948e
SHA512 b935e296756428ff4c543da451e6b5d70b35ccc0a471bc8d240aada61ec436fad17c0130901e55ec27e218d8bdd04376dec209d4f4b467e722d50003794c3014
SSDEEP 192:sxZZRBW0/f8sWWIdpHKHW6+WNGYYBVXgIg5NJ:sxZZ20/f8sWXqHbGfW9
TLSH
T1FE22C9516E38697B8CCBE31DBB65BF53E6F9503251901E48AAFCCA1C05E6ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f694f9fce65a050c4f6e4e3498103ac266f850685e692284e31dcf3d06a3a757
MD5 73bab94dc532f7e236abd794c8a8fe14
SHA1 8e3cefd032b70afdf2740f39836b562b7c60ec8a
SHA512 b0342b4c26b9f794987bef820c75db9fb1d0239fdbc106aaffd509ecb736c100373038afa441b36169cee2ea55b161ac907392f106503e87903f33d61bd4b13f
SSDEEP 192:sxZZRBW0/f8sWWIdpdKHW6+WNGYYBwXgIg5NJ:sxZZ20/f8sWXwHbGfl9
TLSH
T16522B9516E38697B8CCBE21DBB557F53E6F9503251941E44AAFCCA1C05E6ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ec319ded0034ef4ec94bc919126cc2e62f66b9aacc9966284c07d3080ea064b1
MD5 71898d349ab8cd218476b9cab440b520
SHA1 beed1f070f344f7ca8fbe4ee009fcf481237eaf7
SHA512 2602266735467acc671542cfda34b95d947cf23506190417c55b9ed1a3fda8bdb6ac2ee30aa74980405ff0a7a6b5c201a6f025af941f552716127bda56d32983
SSDEEP 768:eXyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXhropmsz5:eXyYR7jWv3NpBu1ja/CL8OXad
TLSH
T16BC2F92F644DCB7E4FC01A9DDC5A6F9B3EA802C796548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8605ed1d4a06b93bce51d675deded3756a1888d4b779f69f8ddc1827f4b4ab86
MD5 be250b325e3256783555d604c07918c7
SHA1 20011e57bcfed907374963b98d739c4ef092990f
SHA512 f50c1bbc3fe4677ea6e56e69e87b303d4a28abbe2e4925249e81e9ae43fd7923ed93247243eb3d9a8a3489f67834b63dd74c7fea0e7130205bf466de9c856420
SSDEEP 48:KgjGnDtFVWbFIdISDWK9z1hWxrGYQxjHyLxgNBLPTsbfq3ISZsK95NzinztFFuDU:KoUYKxayaSwKrjYwKFOq2jSKq
TLSH
T1D091250033BB4205397E298895A48B1F934535773218E72B7FB810A6DD2BE1C5DFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31c3f699-cb5c-4df6-b34d-1f3889ed98c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\31c3f699-cb5c-4df6-b34d-1f3889ed98c3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f9ba5d515aa0a65bdeff3251682b9dfc05ddcc2d35442874655633761c5f2e3c
MD5 0f6d2c9a1a70830b00acee421956ffdc
SHA1 49370f704b715b725ebfa9015a503afa4f626073
SHA512 909fc33177b56da1bcf3e6f4aa28e254697c36982d3f21ff0233d28e157ae7fbf09e67648c1a0e84f9dfcd30de3bc9e8a76cd11243cb459eaf9ea5b2c5259993
SSDEEP 384:yZcISsN7ZYi79IfsQX5+Dtv8XLFXPJrBckQ7O6R2FeoAh7UqoP:ASBh/kDuRPhBckQ7TRnrM
TLSH
T13A82A0316DB4AC771DE7E196B44A32139EFC506396C96B80E5FC6F1D01CAAA4130AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f0d046388e425fbbf170cb31c20f5cf1ebe63b02bdf48b156381af2359669021
MD5 5bfc4539039a2836fbe18da1587e73f1
SHA1 c7780f97db53ed34518d9102b58307dc030399cb
SHA512 72d35529a5c9322783cccc574f140cacd444710452040f0c79fcf51c9a6da1f335f89f6c27d39c05cd665fa8ab2e37db4d04f3b41365b3452820ced4f44226b4
SSDEEP 384:8iFiZcI8ksNF8TUNTUlIl8Yi78IfsQX5+Dtv8XLFXPJrbckQ7O6R2FeoAh7UqoP:nFQXQwgxk/kDuRPhbckQ7TRnrM
TLSH
T11AA27D335DA4DC7B5DEBD686F55A3213DEF850B385C5AA80E7EC9F1D009A9E8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7da142252ec106557899edb087528cb93f810e4f8adb33945242883a419bb179
MD5 d572f340ea161fd06d8ef0e7657cddbc
SHA1 13553d560e221f47c7e888bae47d31788f89dff4
SHA512 6b5633f5b49e96853744565548599017deb5141402afc6beef35642000b22032afd31a190a9fcb667d157377addca66d1da6c93b5c5d4d6a0df62b0ec4e3ec20
SSDEEP 192:EONw6nnHGQmiUyLMQYcX5hQDP1HjzorMoLCMcWzU6:EONw6nCnQNX5+Dtv8XL6oU6
TLSH
T12502DA34BCB87C7B8EF3AE56748632139F952167D5952B80DAF81E1C00D765C2306933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e66d5f8340bae5f36676da069136349422c97ed54daf469df533d521d852d176
MD5 dc5a9bb7cadbab1d4e0809026fdcd1dd
SHA1 3a915885502bfa75b6dace9315415456d06d0871
SHA512 822a7749825678374178aa7b8bb3bb75f1fd60c3553d6940c570ed92025cf7c3e04a9b8c28ab2f66ba9e7d26c8cfc278425c03c7b87968dfcea853d2b167c8c7
SSDEEP 384:dZcISsN78Yi78IfsQX5+Dtv8XLFXPJrBckQ7O6R2FeoAh7UqoP:FSuk/kDuRPhBckQ7TRnrM
TLSH
T1F9829F316DB4AC775DEBE196B44A32139EFC506796C96B80E5FC6F1D01CAAA8130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3264b1acc89c49ccd70ce4e95d5651202ded3f469df969c26f492d89b0b3558e
MD5 985b2641c6f0e28ba0eb729bed5a86f2
SHA1 2d6ff0beb60e1a28a43a74ef7e2655ee88f69285
SHA512 1d88952859fa38a958efe9a92c35e590931ffa1c85797fc9b687551a28469f891e6e83912a904db982e9e07f9b1b3f1f7f7d55ef3518cdeb55e16e64a82d6d70
SSDEEP 192:EONm6nnHpUQmiUy0Mf8YcX5hQDP1HjzorMoLFX4SJrIg3yr/5kQU6:EONm6nJkyf8NX5+Dtv8XLFXPJrzckQU6
TLSH
T10A121B31B9A4AC6B5EE3A595B08731139EA51127DA897BC0D6FC2E1C01DEA6C530AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6854e185-148b-4072-9197-471e436fa12f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6854e185-148b-4072-9197-471e436fa12f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6e405f38cd12e2b33686701571f394f7b0fba093eecf6bdae4a3a94da0cff52c
MD5 845379128fe3f2ce471559d72c1f5df1
SHA1 6325bf5dac4d758db5ea16216126758d1fe21d8f
SHA512 c41ddee7d78c2ab3b287da880136ef4a1a9f0ddb529e3b4d471f7fa2fd08e1f5c33af992692615b0431600911da555bc00d674c87a83573b346fd34ed8e2bbc0
TLSH
T1A1414A58A6EE1048B3B76E4A9BF6A86D487BB8372E07D55D00010E4F4A32F40CDB1B37
MD5 SHA1 SHA512 TLSH

Submit Download