fe8c0e6c3a2ad19502ae991f94e5eeee68d4e45d29eca6641446fe23d843f2e1

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fe8c0e6c3a2ad19502ae991f94e5eeee68d4e45d29eca6641446fe23d843f2e1.html
Size 174KB
Sample260912-srkrfsssbs
SHA256 fe8c0e6c3a2ad19502ae991f94e5eeee68d4e45d29eca6641446fe23d843f2e1
MD5 8177881beb3b2f783e634185536e4d23
SHA1 b7007a9fc0c72cf19a206fa1851cf6337eb70f82
SHA512 f77ace7eda05ee88a9740c61eac0f19b38304e633078d593d8e2432a97255ad595d03b08c64f9c5d21426cb4ab7face31d2003a05e2b6cb4f2500531dc158812
SSDEEP 1536:iu3dA1h06mIRkvziPH/HL5gBpcOw5wCQbYnl6wJHGwKD90CvjtRrki4Y9aj+RX4H:h3dA1h+IGeHOI5PWQZOtf4Y1T4Lr
TLSH
T1B104E69661202CB6DF2255B2516B154A752E403BF84B04BCE3FCCEE23FE695E0646B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4340	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338242735167542"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D2223257-8B89-4676-AC12-54E7EC692DD7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2724 wrote to memory of 1768	2724	msedge.exe	86
PID 2724 wrote to memory of 4340	2724	msedge.exe	87
PID 2724 wrote to memory of 2244	2724	msedge.exe	88
PID 2724 wrote to memory of 2244	2724	msedge.exe	88
PID 2724 wrote to memory of 2244	2724	msedge.exe	88
PID 2724 wrote to memory of 1372	2724	msedge.exe	90
PID 2724 wrote to memory of 1372	2724	msedge.exe	90
PID 2724 wrote to memory of 3708	2724	msedge.exe	92
PID 2724 wrote to memory of 3708	2724	msedge.exe	92
PID 2724 wrote to memory of 3708	2724	msedge.exe	92
PID 2724 wrote to memory of 3648	2724	msedge.exe	91
PID 2724 wrote to memory of 3648	2724	msedge.exe	91
PID 2724 wrote to memory of 3648	2724	msedge.exe	91
PID 2724 wrote to memory of 3856	2724	msedge.exe	94
PID 2724 wrote to memory of 3856	2724	msedge.exe	94
PID 2724 wrote to memory of 3856	2724	msedge.exe	94
PID 2724 wrote to memory of 3348	2724	msedge.exe	93
PID 2724 wrote to memory of 3348	2724	msedge.exe	93
PID 2724 wrote to memory of 3348	2724	msedge.exe	93
PID 2724 wrote to memory of 436	2724	msedge.exe	98
PID 2724 wrote to memory of 3228	2724	msedge.exe	99
PID 2724 wrote to memory of 436	2724	msedge.exe	98
PID 2724 wrote to memory of 3228	2724	msedge.exe	99
PID 2724 wrote to memory of 392	2724	msedge.exe	102
PID 2724 wrote to memory of 3420	2724	msedge.exe	109
PID 2724 wrote to memory of 4720	2724	msedge.exe	110
PID 2724 wrote to memory of 5108	2724	msedge.exe	111
PID 2724 wrote to memory of 5068	2724	msedge.exe	112
PID 2724 wrote to memory of 5068	2724	msedge.exe	112
PID 2724 wrote to memory of 632	2724	msedge.exe	114
PID 2724 wrote to memory of 632	2724	msedge.exe	114
PID 2724 wrote to memory of 3712	2724	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fe8c0e6c3a2ad19502ae991f94e5eeee68d4e45d29eca6641446fe23d843f2e1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,14561545823781899515,1869358185957541519,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1828,i,14316467154239774265,15585430249821210498,262144 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,15587933417598079901,4928924320465070840,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,12990796178387877776,3435690072146193217,2097152 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,3001707947247849846,9983862441994094557,2097152 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,11726735311011264847,2619335048786250302,2097152 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,10920104962046819411,9935835182088215781,2097152 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13557636337446916253,8283485146041689369,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,9664778226352713115,8210457314707625734,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,16510823918353516625,1235745859464836210,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,16510823918353516625,1235745859464836210,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,4636866368749980659,7690678800781020712,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,11510103045364427,6494355714469326754,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,16183782632732868602,13732078837576869408,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2960,i,13720604402560809726,10451274256613821897,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,4861945016085010366,6015699200900335870,524288 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,1847705889211474743,155184263749275330,262144 --field-trial-handle=2288,i,2026670645125641256,16915285791856873417,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 de755aff86f27612bf10e19ef551d8301c6f9f85323496d9730b597a86d05aa6
MD5 60d07deef5981330e68f4014524ff341
SHA1 1dcba0d023e8cb8e29ca1c939c1d73b6b7ce9a37
SHA512 c65be303c1107125d06c4f1f28979b38c19edf0fccdfeaa9629d81e0d464db7f98b1116a9987cd377e73477b3640047e05977390db1ff65da790f9a792a3f83e
TLSH
T1CA61A2CAE1E34885F7A806B047D70DC73373DC8355672E5A9568DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5891db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5891db.TMP
Size 3KB
SHA256 1968fac41a52f3c030773ca6e020c1bc7cb890f9881530d3756592cea699c1b5
MD5 029c8096148d9830df0b67596e2c69da
SHA1 ed514de1df48d0d9ac8033b5c47051326e412ed3
SHA512 cc345c8d0567394190e85c6b113bec00ee0007259835c732688bfec6f56476b328717e3420436c046eb0c204ed85514258136f397615e5c6ea29a46664fca15a
TLSH
T11661A2CAE6E34C95F7A806B047D70DCB3377CC8354672E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 857c2f66b8a0be9c153974484331e330fe9f73d53b60a6adcec5fa33c2f4edab
MD5 58ad9eeef5bb9c2c71e776cb620dabd8
SHA1 7a1d82558c393104a3cac732a13512764233bc61
SHA512 e0c0fb0ad7ce831b41d72c3ee46025bee5d71c25060a1a9d0e2951332b014ad6d99287cbf5ac4df5de4df797aafedf30d38aa39d7a8814741bd5323b282df6cd
TLSH
T1EC519CB7C3D4877E881157F09B24AE1ACD2D0A56422C3C56C9E5EF2F67E28B0E20159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 15624d5cddee624e49de67a88fdcf2a2989acd9eae6715322c887730409598d8
MD5 ed89e625f8cfc45c5dedbdcc52712e23
SHA1 71593b254acadb5562162fc4dd915b8b55b463d2
SHA512 5244c86263f620d12151f23907ed65033d2022a0f37aa4b871f29626c4804e3b237840a0b3c487f59c6702e87c2c51cf39d0f9783f43b9957bb8402b1e3def81
SSDEEP 192:sxZVR3WE/fjsDlcIdpdDHW6+WNGYRPREpIgrJ:sxZVQE/fjsxFNHbGmS9
TLSH
T1611296126E28A57B8CCBD21DBB257F53D6FD503291951E58AAFC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7f5b669d009ffd6526ed80d6009eeb66a483727da525c4da8a139333b2b46d01
MD5 5e0fdaf3869dd646ab9321e815d2d88b
SHA1 639be41e04601b8ed21aeca73f3a8a11ed670e8e
SHA512 767fa8fac2bad22c2a88918fb2436c1fe628550df0a0765a2b8e32141a6ebe2ad861a1ed8b72fb560eaa0f5118289ad1b165ded96a3c9e6a1e54054108b9893b
SSDEEP 192:sxZVR3WE/fjsAlcIdpdDHW6+WNGYRPREpIg5UJ:sxZVQE/fjsKFNHbGmS2
TLSH
T15922A6126E38A57B8CCBD21DBB15BF53D6FD503291951E48AAFC862C04EB6DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f0b3aeb18956c9811d7a169d5430efd12927ee237a8f6aed227377b5b82a20e1
MD5 f379d4f9b5277b4760f71ec9dd08656f
SHA1 9dac2957a2ed12bc1bda822a33a8af29c36091ea
SHA512 6e1f02960c9c7a59b631e8fc785845ab4402e81b21bad25dcd621916d0f2fc4fc70536c1709c313eed40a3fd4ef1cf33cd4dd7792b2a15b161d199e9170d9ba2
SSDEEP 192:sxZVR3WE/fjsAZcIdpdDHW6+WNGYRPTEpIg52J:sxZVQE/fjs6FNHbGms0
TLSH
T17222B6126E28687B8CCBE21DBB157F53D6FD503291951E48AAFC8A1C05E7ADD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 34c8bb8e411c145cf0ff553d58f5a99ba66460107a6b2cf6dedae6ed54d0a217
MD5 6672d70c36410498a35d13f6f6b3de41
SHA1 4421450facd422f44d155f7892efecb79f2da89d
SHA512 6fc7d18c28ca42ed56e0362d4bea7a2ba2403c67851749b87e1e153132cc54e4770a1e9ba53b6d9cb256fba86b25b8a98f206c07cc447bd8cad62956a201a7ec
SSDEEP 192:sxZVR3WE/fjsAZcIdpHDHW6+WNGYRP+EpIg52J:sxZVQE/fjs6FjHbGmn0
TLSH
T18822B6126E38697B8CCBE21DBB157F53D6FD503291911E48AAFC8A1C05E7ADD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4d85240bc3c74a8c47721f631b64c999805e9e792d71a6708e009ed88686ca55
MD5 0af4b8b5466c6bb7d7ef2ecf6ff22234
SHA1 03a0e0f951a51d8b35c88742341b1ffa4bbc7d17
SHA512 38b8e356c191f65df0caafcf0441190cdb56b46bf1dceff4e5cf78691b3a60c4b18e2e1fb7fa3294b103ad2652e00a950dd1e4d3178487c306d509ad0508b8a5
SSDEEP 768:kSK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3vro5+/u:kSK9uzYWvcQWsu1ja0HL7Q385+/u
TLSH
T132C2093F640CCB7E4FC01A9DDC5A6F973E9802D7A6588D5047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bf89614d5e45bdfb971c77e95ec4140586f5ef70d0d2307e7f955bac6e8416d5
MD5 24268f5a9e330af5f2038ca67084147d
SHA1 b98d0d28d1037eaee4b8b656578cd63450a93935
SHA512 7a244df668a6d8bbf2bb2724bda2f2c140b946cbb605856d99fc0d578a5ab78cddb0366a309bc002a369a212b50399d37edf80ac71b197f74c4fead79397ab9f
SSDEEP 96:K0mJGQKjiOHp8r3ZHDPQrWG+fPK2e+FPSxpO7TE6oQKlyG:NbHp8r3ZHDorW3fhe+F6xpO7TEfD
TLSH
T12BA1570070BF06123DBD2614A1A09B5E474271B33158E53BBBFD10B29E6EE182CFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 4ee62385b589685e717c9d5fe4f517a35f7ed410f860fc8220bd84f4c3bee380
MD5 531d85efbc38fc2d227efc0b783f3488
SHA1 c37973a37d6776bb9924c5a1b90f2c48123654d4
SHA512 72666840ccc580f04e439aa2fc747971295f7115b648b8eb35eec13138bbdf7c8a31d22478083e7c7b128f99cd3825beddf8e1daadaf1c2edd07fe2260c26e46
SSDEEP 384:GsNkzhwSwOQiOfo0MOjTVHglhBLH7O6R2Feo5:GLw7/FHnOFLH7TRu
TLSH
T1BB624A327C786C765EE7D516F84A31039FFC9197D6892B80E5EC5F1D01DB6A8230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 97b2eb400adfe266da327892a90bda39f6079f7813c3f54dbbaee7cc285b08b3
MD5 6fa856d1519f30e420f0dd2fbc0ffcfb
SHA1 16a2a5218db919a9877d92377e5603e483b0a2d6
SHA512 6d387ad0769ba92dd55567609057e70f86953b727b839432bf48e0749e2ce85255281b78598dcd8c336eac647d1b2a769cb961028d5f4cf25c0deaa08a153f94
SSDEEP 192:SONk6ygpQmiUyrgtOCTVgcSMosSPzPgoU6:SONk6lH1tOCTVHglbNU6
TLSH
T15402E835BC687CBB8EF3AE06F88622139FA8117BDA552B40D5E85A1C01D766C2307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f6e3318026c587bb5a7e5e848ecba1f8ea6d76b4ddb3b5242eb39934340e2e21
MD5 836b33f29a289f42f96711465e441a7d
SHA1 50e87c1762b9e5e2d4f36c294a5e810bd3089fcf
SHA512 a1183c6cee4b155b3b70c98f2a0359c013d46e25c6aa08ac22273d5f003873c4c26ebeb0c0abc2e36817e6f16d7d01b3d9b29a38012e6162c66712280ba22f6c
SSDEEP 384:yZcIuXsNkwwSwOQiOfo0MOjTVHglhBBH7O6R2FeoioZ:Amcw7/FHnOFBH7TRpq
TLSH
T13D927D713C786C765DFBD102B94A35039FFC9097D6896A40D5ECAF1E01DB668130B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 74fed314b1897dd7799bb009ef7101e7d401dbe63b437bf94879c8af4783a59f
MD5 e0675fbd3087e4f3cde33719edf322d3
SHA1 f556076f0986fb92f80eb78cd48cdbe2fa7afd9e
SHA512 233ce9163ba7c886606539bcbd94d66e9f5ad182d6fdc2849bcaae80a98bf5bb9696c4c030d7aaf0bb583fea34da9566fed779f5d988cee22b9dd0e961956f25
SSDEEP 384:GsNkzhwSwOQiOVAMOjTVHglhBqH7O6R2Feo5:GLw7iHnOFqH7TRu
TLSH
T185624A317C786C765EEB9516F84A31039FFC5197C6892B80E5EC5F1D01DB6A8230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 b78cc93575b9e9b6218055b20a08957dfe3cd06ff66f250b6532601b4b225685
MD5 cf85740eddefb2a27053f180f8696607
SHA1 e4b23e231e84cf439a172828736ec0d8c03e7edd
SHA512 85a0937fb79e2efec37cbfbb401da0755e9a67c62d4b461ca6be60cee6297e83e747a1f51a6e8191a784f3030727899cbb653540f7150bb67afcc81a47633fa2
SSDEEP 384:/sNk8hwSwOQiOfo0MOjTVHglhBLH7O6R2Feo5:/Uw7/FHnOFLH7TRu
TLSH
T13B624A3278786C765EEBD516F94A31039FFC5197D6892F80E5EC5F1D01CB6A8230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f07aa1ebbc835e580c0ba8e41054a5d01328785377c8fc7810e24ccf91c3c514
MD5 763ca98095c6906977f7e215a791a080
SHA1 cecd6bd3d04682ce36d4f403e86de2b0b0827c4c
SHA512 c8bd97dc98d2da65827d7a99544b4771339581f7a0ab0cf19700f8b71e42dbeeae0eb8635d17d2ad61215bd9723627312a397bfae4bcc9d2a43687ef6af6eab9
SSDEEP 384:UZcIVsNkwwSwOQiOfo0MOjTVHglhBLH7O6R2FeoioZ:SVcw7/FHnOFLH7TRpq
TLSH
T1C4827D713C786C765DEBE112F94A25039FFC9097D6896A40D5ECAF1E019A6A8130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e9d03cd8e5b42dfbc4cab3cd95e3708c8cfec534b83f72c67e3deae8c159e6a1
MD5 03b747718917d85bcda7c9c3274efccc
SHA1 4528921ab1c55cfee90b7d5210ee2fe89be9939f
SHA512 81c0fdce388901844a64603a9adaf5101a0a8cbc911d73651c3a5aa630a65a77f80e2e51f0045e89cbe775d3aa1f60a0434e3796550bfcb82a467149de048a4c
SSDEEP 192:SONd6ywQmiUyRgcOCTVgcSMosSh2BEw/3UM/aU6:SONd6PxcOCTVHglhBPHU6
TLSH
T10A120B35BC786CBB5EE3A541F48731139FA852A7DA497B40D5EC1E1C01EF6AC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52ad4b31-ebe1-4358-88f9-605f361f915f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\52ad4b31-ebe1-4358-88f9-605f361f915f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f962557296cbfd8c07df3fdc4068434ed4da189a95d64174a40613cdd266770
MD5 da6bc5459c7186d58a667b992e067bf3
SHA1 ee0c756a78d944588a5aed713897f09e94df213b
SHA512 c131f394560cedb1217b241ece2da57a683952e40a9a087722ea93e5ed2837d2fb8f08aa9d92a438df3f848b888b3ee3ff6d1ddb2fb07ed630efa6e27ba743fd
TLSH
T1D0413768A6F91148B3B76E5AABF7696D847B7C272E06D49D10010E4F0633B40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download