b88d38fd2f8567c5e0420f85d549a06b77a19467bf109fa542c9055a8079058a

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b88d38fd2f8567c5e0420f85d549a06b77a19467bf109fa542c9055a8079058a.html
Size 131KB
Sample260912-xt2vzagd44
SHA256 b88d38fd2f8567c5e0420f85d549a06b77a19467bf109fa542c9055a8079058a
MD5 f7e3258559d432a59328ae75b749f33f
SHA1 f24968c162bb971bb8a5f445df21049a1a0dd33a
SHA512 30882891c5ed0e622428ce6d44099e7d8c5a26f93b9986a1bd6eeba1a70b73785cc80f323e810705a7687307a0dc030eaa307fb889e735f12f7d24e4fb528765
SSDEEP 3072:u9fk6lmzEiuOciThj3GL0UVUTofk6lmJMlL9nH3P1VgkNh8TxexMzgMWqC21HGRI:OrI
TLSH
T132D3E6162114F3065EB2CE20623ABD3E819ED223D7B8D4BDF34DD5A95B8813F1BA6C54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5108	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338367634928352"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{6F972333-9E78-43E1-89E1-38D3FCC2C45A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3724 wrote to memory of 4368	3724	msedge.exe	86
PID 3724 wrote to memory of 5108	3724	msedge.exe	89
PID 3724 wrote to memory of 3104	3724	msedge.exe	88
PID 3724 wrote to memory of 3104	3724	msedge.exe	88
PID 3724 wrote to memory of 3104	3724	msedge.exe	88
PID 3724 wrote to memory of 4176	3724	msedge.exe	90
PID 3724 wrote to memory of 4176	3724	msedge.exe	90
PID 3724 wrote to memory of 400	3724	msedge.exe	91
PID 3724 wrote to memory of 400	3724	msedge.exe	91
PID 3724 wrote to memory of 400	3724	msedge.exe	91
PID 3724 wrote to memory of 512	3724	msedge.exe	92
PID 3724 wrote to memory of 512	3724	msedge.exe	92
PID 3724 wrote to memory of 512	3724	msedge.exe	92
PID 3724 wrote to memory of 1976	3724	msedge.exe	93
PID 3724 wrote to memory of 1472	3724	msedge.exe	94
PID 3724 wrote to memory of 1976	3724	msedge.exe	93
PID 3724 wrote to memory of 1976	3724	msedge.exe	93
PID 3724 wrote to memory of 1472	3724	msedge.exe	94
PID 3724 wrote to memory of 1472	3724	msedge.exe	94
PID 3724 wrote to memory of 3080	3724	msedge.exe	98
PID 3724 wrote to memory of 4536	3724	msedge.exe	99
PID 3724 wrote to memory of 3080	3724	msedge.exe	98
PID 3724 wrote to memory of 4536	3724	msedge.exe	99
PID 3724 wrote to memory of 1200	3724	msedge.exe	101
PID 3724 wrote to memory of 2016	3724	msedge.exe	106
PID 3724 wrote to memory of 4480	3724	msedge.exe	107
PID 3724 wrote to memory of 4748	3724	msedge.exe	108
PID 3724 wrote to memory of 4492	3724	msedge.exe	109
PID 3724 wrote to memory of 4492	3724	msedge.exe	109
PID 3724 wrote to memory of 4228	3724	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b88d38fd2f8567c5e0420f85d549a06b77a19467bf109fa542c9055a8079058a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff872abc188,0x7ff872abc194,0x7ff872abc1a0
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,18399160982368834820,11786347775402778824,262144 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,14547981030354561862,7837364333766704255,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,44071618841571330,15302058532548296332,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,12830869678740261175,2718110670001411014,2097152 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,11176846578434172486,10724794506209843197,2097152 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,10138506400339356471,8762243890468683890,2097152 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,9161932330624794119,2212390838367687927,2097152 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2411759090881698888,3668346179182749672,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,2304908795202630249,9802564444206419988,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16234781329877345483,9613150162533207104,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16234781329877345483,9613150162533207104,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,2487449274334034128,13077870731492243787,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,11845904088996985048,10559626877872623449,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,2197032422402210991,9995448081001368972,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,14429730527462372837,3079160333015320744,524288 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6332,i,7485178321752987237,1606073550577285365,262144 --field-trial-handle=2448,i,2408095196798754741,5784406961492201212,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

19ba7efb-1e55-49cb-b847-f679adc590c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\19ba7efb-1e55-49cb-b847-f679adc590c4.tmp
Size 10KB
SHA256 d6d1aa33dbda0011fb0a148742b4e7243114d92439d9f061fc82cacb6289471c
MD5 a2add56e91ab1e2a56fbc36b9c1fe4b0
SHA1 4d5511c4e5da8e1264cac5f6c696f99bf4c84130
SHA512 142184483c8292d35e9fff9a9dbd5196cec072fe625b4699acc6a953657a0e7578743d13b7ef66792804413102679836140eedf49b2fa86768803c29c834e2d1
SSDEEP 192:sxZmRTWc/fes3bIdpdMHW6+WNGY36x5zIg56J:sxZmEc/fes3ECHbGXLY
TLSH
T1AC22C7156E28697B8CCBE60DBB55BF53E6F95032A0D40E58AAFCC61C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f7bdcb00bb78b6505cd7fe85674c220afd445575cff1c56b7ad173e9d5668df8
MD5 e386a2198687a8b5754b3ddfc7522cfb
SHA1 ff659e915d193573e6d3aa2490412bbd35e325fa
SHA512 40883bd506dddb44b8c7943656222a4b8a949dfe6ffc4c99e33748f4e74c86fa951c357d645b3955318a2534b06db3a15a88eacfc2f56933b96153b13d0f6e35
TLSH
T1D3618F90BFD078A1FBA87FBADFD7048336B3A7C01AA7ED40A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fbef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fbef.TMP
Size 3KB
SHA256 d97e3b3accc55fe9e4d3e8a52ac6961f989f850a4d97b5fc60b56fa5369c8f47
MD5 060a52416a06e5593715963e7462a1f5
SHA1 2c71de06ea3deb367d29fa605af4917730698495
SHA512 76e06f343aae378a3b5f6681bf72a3e535fa8eb11183de72d839aa7965a683f84fa25d80c38c9dfd0ce39fb90a8c71d8d2d8be936d858c953b0c08b8eb367878
TLSH
T125618F90BFC178A1FBA87FB9DFE7148336B3A7C01AA7ED41A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 52ffac07c591a200625763abb8fc3ae6a4ec3f25bd06df30ca69a5f01fa9dad6
MD5 1f259f962d8be0d702dd5a577db725ef
SHA1 e7a588f837410ede7a8e32e2cd3a2ad8d2b3b610
SHA512 3cccdf34cde382863b3530b27bba752588b7bb0e7a4de48e578edaa3334b80328e40d43e8ea376131b12ce6a9642aaa01c6cbdd5fcd47880eae866eb0e813353
TLSH
T1D841B0B6C3D887ADC81216F05E25BD2ACD5D095A42383C5988E4AF6BA3F2475E20166F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fcb28acf8019b48897cb0bdb981354b3fbe2359e6867eb2b57d0c66035fbfdc4
MD5 a8c92bee74622a556d80bdcf330dd154
SHA1 246ed6c89f454816a01661c35ca0849c4bcd19bb
SHA512 979a6051e1ddf828b80a138c68d4908a3d02f12535bb3953ba20113f6288d83fd24236f0a5c04e2e804cef183eb4346f5d185633e051154900c42f21979a9f50
SSDEEP 192:sxZmRTWc/fesUbIdpdMHW6+WNGY36a5zIgrJ:sxZmEc/fesUECHbGX+9
TLSH
T18512B6156E28A57B8CCBD20DBB65BF53D6F95032A1D41E58EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f8b558eb11e3d49dcac3cfa73e7dd120279e84ec727947b7e259fea21d4f3033
MD5 907bb05632d32875a8b1a8136841f809
SHA1 16a1d34d4f604239a79585b729d486fc476a2602
SHA512 789a43d39b96e287b627c0241a68a2b33eb8c1860070d262b2b4e8b7265707565d6af49a8f2291f877cb7a2a5af70fdcb4a0060ba2c5d7e8714308f171a03d1d
SSDEEP 192:sxZmRTWc/fes9bIdpdMHW6+WNGY36a5zIg5YJ:sxZmEc/fes9ECHbGX+K
TLSH
T18022B6156E38A97B8CCAD20DBB65BF53D6F95032A1D41E58AAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cf724d7aad8375f354cf448838c336dd674f0bb567f5e2b6b795ca24e8d23ebb
MD5 f08cf723ff8e8b9477d7e17718711a1b
SHA1 7eb89adba350a206e29650c2c00b7dcc900a9ca2
SHA512 e84a3acfc97ce48d4593f04ff77db9ad8958f370939869f0e5108a173598370287be80a4670c5c66a42d211e73c9ee2ea1df968a53312544b24cac23b3051d8b
SSDEEP 192:sxZmRTWc/fes3bIdpHMHW6+WNGY36a5zIg56J:sxZmEc/fes3EsHbGX+Y
TLSH
T19222D8156E28697B8CCBE60DBB55BF53E6F95032A0941E58AAFCC61C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d651177dd254ef36629aeb0727fdb87ac4c99f7d14f9bc1fa3cfdb114cdc336c
MD5 c326ee3379330834af5207a37f0dffcd
SHA1 7b76b8f3d3abdde989c03ff2c8a4c8e6788a72da
SHA512 c2cf0c00de0dc2d3f6376a204dd48c71af22418f1832f340f318e06361c77da485dc6bb2cac4af2edaa22ea88c889ea1e3bdcb7987b8ef0c1d94721ea7316af1
SSDEEP 768:GwKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Vro2I:GwKlm7QWvUYe0u1ja8/L/E/u2I
TLSH
T146C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d06ff787-062a-49bb-8c22-780e609126ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d06ff787-062a-49bb-8c22-780e609126ff.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b21b0ff22a8d5a89bc3792a36dd9e72b635739d4907121bc8e98fc1ea64329e4
MD5 3841c3a0bfad19931c67b54a63384200
SHA1 6b47e1d2cfc74b0a0ad719fbf72855cb464785cd
SHA512 cd8864f07f9dabb765afc17191c4e0dcdc19c193434d2ea9f1163c41cf0f3270fbd5f0d3490021e6db1384fcf3976641125ccde573354f5bf3e1f51c51560233
SSDEEP 384:5ZcI7sNMYLzibR0yh//z8ExUXQMPsa+VYxd7Uq3oE:R7q/a/D8QMPhgwj3H
TLSH
T1A9828D366D74AC7A59E79695F58732138EB88077E7C82FA0C6ED9F1D04DA2980307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 62f2914ca73b3a7dffd384441a6a775aa5cc09f2bd6b4c1adb03040b6c56497c
MD5 d1131c55a983baf540975f25c1c9fbe0
SHA1 22ebbc96756d1b9867a3a0e682e0184a8ff0576b
SHA512 d36ee745492957500706de7529bcb5c5b306da9717df9480ff00563db1a0ce604b2f6e4bb7fce03162590fe05ea3b3d27e50297d221996a9a6752eb735fc4998
SSDEEP 192:BONN6JUm0QmiUy4tso//jjzorB6ywxWjBCQaU6:BONN6+mEBso//z8ExHrU6
TLSH
T16502C839BC68BC7B9EF3AE49B48737139FA4107BA6951F80DAE81E1D01D725C1306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9af6366cbf1683f685a4acd8bfd255d4bd83261c2c91148d9c409c21bdf23118
MD5 41495ea50de13be9134735007262b480
SHA1 d522ffb65ef3ece479c13b2048b62370129409fe
SHA512 f5d6edb557b3e48ac559755a21d769d3ca4799adac6de3fb7f35feb534fed287d430e8a67ea0fbcb4ea4c31bc9eabbc0c35d05253f743cc582c3f098ab0b7cca
SSDEEP 384:2ZcI7sNMRLzibW0yh//z8ExUXQMPsa+VYxd7Uq3oE:k7Bea/D8QMPhgwj3H
TLSH
T1F2828D366D74AC7A59E79695F58732138EB88077E7C82FA0D6EC9F1D04DA2980307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 67baefe64ffe5d2d2653649f1bd1bd386ef4efde7f684cec0e2a86d076219b1d
MD5 a2843053892bccd931717ebca4bf239e
SHA1 2acb597d7ab46551917690b33dc9fc07f26c1a34
SHA512 1e0219bbc9189eeebd95a2efe991eb0d93d7da715f551d8f6d6914e8a94500a33070c413c90b77121070fa675ef2ef81055a68cb59c66daeca4616fb5dbeabbc
SSDEEP 384:GsiFiZcI5JsNE8TUNTUlIlRLzibW0yh//z8ExUXQxPsa+VYxd7Uq3oE:GXFQzhwgfea/D8QxPhgwj3H
TLSH
T160A25C765DA4DC7AADF79B85F54A32138EB440A7D6C8ABA0D7D89E1D00DB1980307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8c989de9a62ae6d838840b58600bda8e3444cde2d1b92281446c2de4b4416359
MD5 719ac6407023cab9a29bd9c0eb4521e9
SHA1 d4dc93cbff0c39940d22b3ebeb7f47ed9fb345b7
SHA512 a6f6f17112c34e61fc28a586f9a801ff5123abae236f43d9135c784d8ea6119e273bb4dfc333b5d3ce2dad81902949ec767b1c272da61d2b69e212c6d6f34ac9
SSDEEP 192:BON16JUqQmiUyQtuo//jjzorB6ywxW5XQfNx3/3U6:BON16+mtuo//z8ExUXQDPU6
TLSH
T1AF120B39B878AC6B5EE36585F08732139EA44127EB896F90D6EC2F1C01DF15C5346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10ce6acc-1165-4d6e-8886-a9308a1ac8c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\10ce6acc-1165-4d6e-8886-a9308a1ac8c7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b06e4e94988f4434cda85d0e6531227599ed60295bd2ebc8de5be5d0c3927e15
MD5 3e12e6b8d8e608464dfd065da7f520ec
SHA1 032428416504dbaca5502f225ca89d681d7a5f45
SHA512 718f09e9a41e4187c55c60b07ae1a58bf22fa35ba1902e2b80b52ef4709bd4958481d1c5e1ba9b8f69800845064aa2c5f8280a30dcd7a69022de7b7e862d0252
TLSH
T1EE414D58B6F90148B3736F56AFF7A86D487BB9372E06D55D10010E4F0A22B44CCA2B37
MD5 SHA1 SHA512 TLSH

Submit Download