bae234f2e3c4e06746c60308810f5a102999eb28460169afb2ba8a9d39bb53d5

Analysis

max time kernel
148s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_bae234f2e3c4e06746c60308810f5a102999eb28460169afb2ba8a9d39bb53d5.html
Size 115KB
Sample260913-ca6plade87
SHA256 bae234f2e3c4e06746c60308810f5a102999eb28460169afb2ba8a9d39bb53d5
MD5 f0ec5080c77fa340ef31efb52738195e
SHA1 6fcd9640ad124b20a857aaeb23978d8ad5b9ad4a
SHA512 f8108105862a97d4decd946232f27e38dcc5edf0c2a1831d9f48b84f1f998241997d2d2e4a78f3d473baa2f5cdc450f51e8440b8e259b2a5cb2a15b23188d398
SSDEEP 1536:wmxhYn+hpa9WRCJ3QwEyml3QMTty8No9x6ihjbEaodbEaoHfhd1Hc:h53QT8NPwjdoddoH9Hc
TLSH
T196C3D69712205CF5EFA41DB3459B086B3C2C1437AC0391B9E3FD8F972B66D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338319828826573"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{048A0E44-F369-4726-B254-40B10E37DA52}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe
4312	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4312 wrote to memory of 4396	4312	msedge.exe	84
PID 4312 wrote to memory of 5088	4312	msedge.exe	85
PID 4312 wrote to memory of 3164	4312	msedge.exe	86
PID 4312 wrote to memory of 3164	4312	msedge.exe	86
PID 4312 wrote to memory of 4924	4312	msedge.exe	87
PID 4312 wrote to memory of 4924	4312	msedge.exe	87
PID 4312 wrote to memory of 4924	4312	msedge.exe	87
PID 4312 wrote to memory of 1228	4312	msedge.exe	89
PID 4312 wrote to memory of 2840	4312	msedge.exe	90
PID 4312 wrote to memory of 1228	4312	msedge.exe	89
PID 4312 wrote to memory of 1228	4312	msedge.exe	89
PID 4312 wrote to memory of 2840	4312	msedge.exe	90
PID 4312 wrote to memory of 2840	4312	msedge.exe	90
PID 4312 wrote to memory of 2436	4312	msedge.exe	91
PID 4312 wrote to memory of 2436	4312	msedge.exe	91
PID 4312 wrote to memory of 2436	4312	msedge.exe	91
PID 4312 wrote to memory of 3008	4312	msedge.exe	92
PID 4312 wrote to memory of 3008	4312	msedge.exe	92
PID 4312 wrote to memory of 3008	4312	msedge.exe	92
PID 4312 wrote to memory of 2240	4312	msedge.exe	96
PID 4312 wrote to memory of 2240	4312	msedge.exe	96
PID 4312 wrote to memory of 1916	4312	msedge.exe	97
PID 4312 wrote to memory of 1916	4312	msedge.exe	97
PID 4312 wrote to memory of 4752	4312	msedge.exe	100
PID 4312 wrote to memory of 3012	4312	msedge.exe	105
PID 4312 wrote to memory of 388	4312	msedge.exe	106
PID 4312 wrote to memory of 4948	4312	msedge.exe	107
PID 4312 wrote to memory of 2376	4312	msedge.exe	108
PID 4312 wrote to memory of 2376	4312	msedge.exe	108
PID 4312 wrote to memory of 1948	4312	msedge.exe	109
PID 4312 wrote to memory of 1948	4312	msedge.exe	109
PID 4312 wrote to memory of 4864	4312	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bae234f2e3c4e06746c60308810f5a102999eb28460169afb2ba8a9d39bb53d5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ffc878fc188,0x7ffc878fc194,0x7ffc878fc1a0
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,7480468526662447731,5973248140823297870,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,3483949413905528392,3303906794298013733,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,10614154348525767389,8533683809394543656,262144 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,13677308713720239614,8929354486975759609,2097152 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,5075706739822460327,17858093118969805354,2097152 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,5908849987471239625,17245829816964380365,2097152 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,11235430247923998062,2635999652705650325,2097152 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9152619453747611971,10398840127179650542,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14424743914489885295,2203646900045469894,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,16416417283680819045,6411630637208465297,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,16416417283680819045,6411630637208465297,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,7225293375471838036,18101557650874040161,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,15821053202233377066,14558372993001691182,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,3884247441783663551,2775013147862512820,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,10756856922343185457,6135908748526149432,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,12796508554773324093,13220623730050103752,524288 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5212,i,4993312228900902050,9408957467823185207,262144 --field-trial-handle=1900,i,3660325792586790105,3670748660541652627,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bec949a809ce29b980b5477ce41f22e71e6ccc9729f7390e12a7ae4d90bfe64a
MD5 9fe29c3fdaa2de70133bd31895cdaa22
SHA1 4ded654583f2732b5a815da9589855d8edee51bb
SHA512 21696f8a245b6a545edf46454650522d5f06680e5350a5a73ae1e0dcd0247ee99c11f63767702c7e6d16179d611eef91a741e715bc48368286e4e6a2970b68e5
TLSH
T11561E68A89833CE9FBA011747BE109CB377A18BC56B35F4A2BE4DD38B84EB084100C54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5915c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5915c0.TMP
Size 3KB
SHA256 7b0a53f28c7c4191369b48378e6a39dfa6fb7c547363f02dab5787fd72793232
MD5 6fc05fe953371fcde9219e79f4e60f41
SHA1 72eb43fb5dcb8ac4dc2b6bff19e59f8350d527f9
SHA512 0acb3ebb38364b298900f720375b34ea215afe0219fc06e92e9c31959941cf5e26d9390953c86b5f31208c22bfc627cf49f73998a37708bae61fb09f01ec6eb8
TLSH
T1DA61E68A89833CE9F76011747BE109CB337619BC56B35F4A2BE8CD38B84EF084500C54
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a4d9c03e4a2848cb3dcb5db5b045fc2ec11d2b0649d4926b079b69f9fa6174ed
MD5 ba3a130df8259f88cda1044e81b9f80b
SHA1 bd5a27ed2bc8747b57860f0be9e169433ea4c6c6
SHA512 ecead7f602a494a9317e2f7d8666680e2c897b34d8283b57cf2f117f5f3148650b6303206efa6f1fb6c8390b93880f718fc42c23e640d39a5fe59acda232c73d
TLSH
T1F3416DB7C3D4967E890156F09A246E2BDE1C0A56422C3C5789E4EF2F57F25B0D20299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 eff58addb22666ca2f0f92b5e8774c4c9b77101c656c06a9d735f32ec2208ab1
MD5 fa935000895d4e5e45fea9169d89aaff
SHA1 1aa45d3f2760ee13fb73283981f0a65815771b26
SHA512 ddd1441c8e917b825e9f52a5b524886941a1c96e7e57e895054277903bd511c879a70bb1871a6c26a0389cd76736a79f158f9ec737e6a028395a4b8bcf0a8905
SSDEEP 192:sxZeR5QWF5/f0sDt4dKIdpdJHW6+WNGYrbu3IgrJ:sxZe/n/f0sGhrHbGH9
TLSH
T1EB12A7526E28A97B8CCBE20DFA157F53D6F9503261941E58EAFC961C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bdb5638ef962bdc95ae6e3546431070bab37dcbd277869f126008fb483a2c6a9
MD5 26e58fb907f193f19cd5de7e51f85ca1
SHA1 b54310754f0f19cd59352c5d943c015844970a1a
SHA512 bf61b90b15de8ac756017f2b5122c241f6728d7db522409e2c30a70d7f14a2895210a4431c4cc0d853733829213dd60c71f701d1860b2ccc4dfca2e928c2cf97
SSDEEP 192:sxZeR5QWF5/f0sxt4dKIdpdJHW6+WNGYrbu3Ig5UJ:sxZe/n/f0sUhrHbGHS
TLSH
T1D422B7566E28A97B8CCBE20DFB15BF53D6F9503261941E48EAFC961C04E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ad54e345af0f9d24cab34cd5511f5cc23193454dc19f8e94e54b06691402ddb7
MD5 1d48772c70aadbc7421f8dac3e57d406
SHA1 3b54dc4537efb59602cbb7f7d27d8e8320e0ed92
SHA512 21969e5b60a55dc1cd50ac1c2c95b462f19dec8d1483e1d50486875e41d8486c1e7d2d37b82c5ed578ff60f55eca5c7824c44f4edadff52ddf6e3e3786e5c405
SSDEEP 192:sxZeR5QWF5/f0sxtOdKIdpHJHW6+WNGYrzu3Ig52J:sxZe/n/f0s6hpHbGZQ
TLSH
T15322D9566E28A97B8CCBE20DFB15BF53E6F9503261941E48E6FC961C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a6d3da477c9cc11f1b2dc200918ed609d7d84dc48a0fc3ebdfb82fa620e8e853
MD5 8da4e4484261a856567e9b95dddd369a
SHA1 bde28d8c50fdff37f6b632d619a90d8a37b2acd8
SHA512 72fdea913dcb34865d35cf12af8c5f17ffc022da57ce8be2358319967c163449c9b3657bf4a1e1e4fd7fddd3c7313b6c9ab2f5675dcdf5b173dfda1eb267f4d9
SSDEEP 192:sxZeR5QWF5/f0sxtOdKIdpdJHW6+WNGYrnu3Ig52J:sxZe/n/f0s6hrHbGRQ
TLSH
T1B922D8526E28A97B8CCBE20DFB157F53E6F9503261951E48EAFC961C04E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 758d01dd7ee8f33fd050fc6c4f45883f58436bef6f6b5977b30f71175a98df55
MD5 eaa95e4c72c0c56a061c969014aaa82d
SHA1 db50fbd48baf63943e95e65e058173c86ad400be
SHA512 0301e06c6a34a9f5abb7458a5c0fc2a4e60314f5cb5691e7c90c6c4c62bb0f6b00d28f940cf0b4df97805c9e712a87a6d1f78e4ce08bc8edcf87f5897c126509
SSDEEP 768:vQy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbwroRiN:vQy4J/DWvbtBhu1jajiLm0bbEN
TLSH
T1AAC20B3F640CCA7E4FC01A9DED5E6F973E9802C7A6948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 72d816525853c4a421164cb7b544ea5705a1fee4589144f8917a670438d72c01
MD5 c2ea31192f8149cf52d234947aca5151
SHA1 e48068cdd47de5aa9226f229d5349961f88bfbb1
SHA512 b636e07b9e51bbaf10740967eea78489b93d90215eb6ac64a8a2dea9eb46098de8ded7bb1d00e5f055f0932bfc79eb053822705a2aa239b620f5ea61ee6bc4d8
SSDEEP 96:KIDCKs0+1+Pco+sMxdINsnwxKf4nexjGuVwMS6KkKza+:E51+Pco+sMjINcw64neFGuVwMSHh
TLSH
T16A91754A31FB1641387D694C80B19B2E024276B3741CF56B3BF89079AE67E080EFC8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

631cf4cc-db51-4b67-a004-d004d0f4a412.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\631cf4cc-db51-4b67-a004-d004d0f4a412.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 390aa23e71f24d3c5285f297e29489ed089dff765fd055a79e6e297a90efa266
MD5 21ee8663534a1e61e4ffdeeb8cf32260
SHA1 69cb05e5949099d4ad392796391959cbcf3c35a2
SHA512 4f919f793f5d3e6fbf705a54eee030a85fa39f402fc064095991dcfc3e3179bf9e63879c273b727e104e7879a110f507e2c0130ba4214dee24d9531cf02c2ed5
SSDEEP 384:AZcI+sNfH1bZkB6HX58E9O/JcG57O6R2FeoWh7Uyoh:++obc8a6O/JcG57TR1DC
TLSH
T106827D32A8B8AD764DFAE145F44632039FF890A7E7C95F80C1DCAF2E049A658131BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b25f856ee5eb6e98b6fbff34e5db039ec29814a9e3684ace9f520de6c1174e8e
MD5 76acd44f682e7b9805e8d549945827cc
SHA1 ce878857e4e839cb4d168aacac4fecc04da1395e
SHA512 198605da75c22f363fa7725d4fc28adc81a8a232697f00993967d601d4b8e1821573bd32866fd31462aed3fa1e21b2d02d17293812bac62169f03d4a51cb561f
SSDEEP 384:lZcI+sNfu1bZHB6HX58E9O/JcG57O6R2FeoWh7Uyoh:d+lbD8a6O/JcG57TR1DC
TLSH
T10D828C72A8B8AC364DFAE145F54632039FF89067E7C95F80C1ECAF2E049A658131BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2136316807cc7203498bb7542d5c8e3791f54e874dc93f35ed002288b9feb654
MD5 bab03890c663c92647129d6a0794eee6
SHA1 e3fefc636b7165c20d81775df436725017a5250b
SHA512 ff66fb78114f2bb5682e15cbce251162d4e2ce1714ff1822134d4ce5d71772da3de359cd98a35501b464788fa21f2a6875c2bce7bb8432fd5143decee51ca8c4
SSDEEP 192:1ONr6wlDgQmiUyQQW4X58gZ9OK8tDlGLXhU6:1ONr6kgkW4X58E9O/jGdU6
TLSH
T15E02E834F9687C7B9EF6AE09F58727139FA5206BE6852F80C6E82A1D01D765C1307D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dfe666ef0f52f9bb3bca53b00c568f138aff8c627ce2f23a06d9c39ebcb17e26
MD5 48989290d14badf483698bb681ef1968
SHA1 53bbd42692bb89a71cfb44de78f97eedfe3a26f1
SHA512 461bfb2b483df5ad9491b6b7661bffd6ef37c8054e9bf4da9e9871a2df32cb105807c69b195dd9ed355a0b32392daa2cb37a8c6d0e0b5d54976fa643e64ba52d
SSDEEP 384:liFiZcIy0sNB8TUNTUlIlu1bZHB6HX58E9O/J8aG57O6R2FeoWh7Uyoh:sFQ5swgsbD8a6O/JxG57TR1DC
TLSH
T1D0A26D7358A4DD7B9DFAA645F94A3203DFF940A7D6C5AF90D2DCAE1D009A69C030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4658ce67bb276878537661ac9f8f4353c13b039366d4a3a5a02b369044ebddb2
MD5 1c93bd6a8c599906446df3b7f94aa231
SHA1 ed7a7f7d371c70aeae978b702535d5b2cf9c452f
SHA512 819356c1de9c67c5fc0b29f7b88b449770fc02b7327a03593dc03cb851b8cddc4c0a3da1a8e0f1322ac8ef1b7ffb2a92a8a56a7e04907862a0166ae9f61bdc5a
SSDEEP 192:1ONy6wlD0QmiUyAQm4X58gZ9OK8JKveGP/ZU6:1ONy6kECm4X58E9O/JdG5U6
TLSH
T14312F935B968BC6B5EE2A544F48731039FA9512BEB896F90C6DC3A2C01EF65C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20d4530f-a5c4-48e3-92d3-701a3ffcb818.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20d4530f-a5c4-48e3-92d3-701a3ffcb818.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 67177dca206ea74ac4c34a71d9277c8702a395e83c28a66eefc73ed3a6f323ba
MD5 50ed97a8f0546ae3fba66ea1d38bc30f
SHA1 df33c12099807a6330c53bbe473662b64027c292
SHA512 c32db841a9aed6ba8814774437527a098d7786325c38d04a48b5b0df2242cea9790d25554793dbc30009793b01e7bb0b0e00c2283ff9bdbac102daa87d737e02
TLSH
T13F41275DB6EA1149B3B76F4A9BF7A86D487EBD372F06D05E00110D8E0B62B40D861B37
MD5 SHA1 SHA512 TLSH

Submit Download