bc2ef3380298e2b237cf55bf3900b312b9aa1a80eeb3f6c549db03cbcc4ad5b2

Analysis

max time kernel
149s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_bc2ef3380298e2b237cf55bf3900b312b9aa1a80eeb3f6c549db03cbcc4ad5b2.html
Size 6KB
Sample260913-e2clyatwd1
SHA256 bc2ef3380298e2b237cf55bf3900b312b9aa1a80eeb3f6c549db03cbcc4ad5b2
MD5 4d4a84e33b8c030e6f83031334893534
SHA1 6325095966fdb6763b8886678d63afd22d6656ec
SHA512 fbe9dc2c9492bebcd092d1405bff6473d090e13007d00bb6365adf3276dd21cbfc518242acebeadf611d1e568cb2b8ca24a7a7909f11a79b06ad565217f164e3
SSDEEP 192:zWLv15G5WDNl7eqmngZ1nZ69LEcE8XECgUdDhQoKDejCPJu:zWLJl7esf80WhtKDejCxu
TLSH
T184E1C51A9E4C853F4100059BF0A16A1CD8EB447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338189174451692"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{2E5BE3FA-11AF-4E43-8597-D7F35D7F60E0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3176	msedge.exe
3176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 560 wrote to memory of 4576	560	msedge.exe	84
PID 560 wrote to memory of 512	560	msedge.exe	85
PID 560 wrote to memory of 1088	560	msedge.exe	86
PID 560 wrote to memory of 1088	560	msedge.exe	86
PID 560 wrote to memory of 1088	560	msedge.exe	86
PID 560 wrote to memory of 784	560	msedge.exe	87
PID 560 wrote to memory of 784	560	msedge.exe	87
PID 560 wrote to memory of 4404	560	msedge.exe	89
PID 560 wrote to memory of 4404	560	msedge.exe	89
PID 560 wrote to memory of 4404	560	msedge.exe	89
PID 560 wrote to memory of 4416	560	msedge.exe	90
PID 560 wrote to memory of 4416	560	msedge.exe	90
PID 560 wrote to memory of 4416	560	msedge.exe	90
PID 560 wrote to memory of 1280	560	msedge.exe	91
PID 560 wrote to memory of 1280	560	msedge.exe	91
PID 560 wrote to memory of 1280	560	msedge.exe	91
PID 560 wrote to memory of 1232	560	msedge.exe	92
PID 560 wrote to memory of 1232	560	msedge.exe	92
PID 560 wrote to memory of 1232	560	msedge.exe	92
PID 560 wrote to memory of 2300	560	msedge.exe	96
PID 560 wrote to memory of 652	560	msedge.exe	97
PID 560 wrote to memory of 2300	560	msedge.exe	96
PID 560 wrote to memory of 652	560	msedge.exe	97
PID 560 wrote to memory of 4896	560	msedge.exe	100
PID 560 wrote to memory of 2240	560	msedge.exe	105
PID 560 wrote to memory of 1916	560	msedge.exe	106
PID 560 wrote to memory of 3064	560	msedge.exe	107
PID 560 wrote to memory of 4524	560	msedge.exe	108
PID 560 wrote to memory of 4524	560	msedge.exe	108
PID 560 wrote to memory of 3176	560	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bc2ef3380298e2b237cf55bf3900b312b9aa1a80eeb3f6c549db03cbcc4ad5b2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffc878fc188,0x7ffc878fc194,0x7ffc878fc1a0
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,4280362314826583423,18345564320909291338,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,4827448550104497620,5551927438700121293,262144 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,12881770122667817720,5485247562460748756,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,1493725512003041968,12792004473955405494,2097152 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,10660251193505066977,8471313287293256752,2097152 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,7525968568212607770,18301756584234737496,2097152 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,16576975401612184256,13667978052455420968,2097152 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4025645743251685877,4152435019914525633,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,3353559894311593860,5355718169805606411,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,3315921309480800405,15655825647312546532,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,3315921309480800405,15655825647312546532,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,2067768833990407299,8595014491608129697,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,3270857497432698946,17298803006469428042,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,12430502911052764276,15579480576295113495,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,1875201208623368763,12162830670340078458,524288 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6248,i,12274643397842383561,11891343300461781476,262144 --field-trial-handle=1996,i,5265282409971571054,6159828549730884806,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9ad433fb-9357-4324-90e0-4f684ec0118b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ad433fb-9357-4324-90e0-4f684ec0118b.tmp
Size 8KB
SHA256 e7b9a5e12188591fcf560a269f4e3d730a280b044b1f89bab86013f541557086
MD5 22d6f6b88bb572d78c54fb9527c96371
SHA1 7d5a4ca17f70e2815bcebee4aa07f609e10ef48c
SHA512 13b63b030b36589a6eea66dbd14671b67aa1201052c453a0215f0520329add5db5022bda1a6f5b2c53fe7cabe92cba8bfe559c0cad7918a8547efb85790ba07f
SSDEEP 192:1ONV6wlDdQmiUyR8n4X58gZ9OK8Jxvec/FU6:1ONV6kbHn4X58E9O/JAcU6
TLSH
T1E7120931E9A8BC3B5EE2A544F48331039FA9512BE7896FD0D6DC2A1C05DF66C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b982dee1f41c1befcd36fe236e524c4465046e85f5a187cdae51e9232c2952a0
MD5 bfe03c66e037683f5e52f3d59dd55c85
SHA1 21be51fa13cbe161ddcbdcab971a36be217b623d
SHA512 7486f20eba38fde9d745c860d101f3f820ca7834e70e0c38e27accd3b6af5a9c557680561ffb127d7cdfdcdfe35d75656fb280fe43d9cc9d33dfe2a5b91e7851
TLSH
T1B961D58A89833CE9FB6011747BE109CB377618BC56B35F4A2BE4DD38B84EB084100C14
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59167c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59167c.TMP
Size 3KB
SHA256 381385a302afbdda39113de623919111dd8119bb7a2162facc1f6f7dd8130531
MD5 6791bbaa3a2fe0d839a77068e0bfc3f2
SHA1 1b5b208638717020bee0b879fb0e4e9ae173ccc0
SHA512 ca2b43900f07461918e1c64f030e52a77a8c2b44836f65e332b34bd9d54f2a364cfa65b86c709f6a95edd10f39d4499f482946f0db0038161fae592d3a3bbb19
TLSH
T19761E68A89833CE9F7A411747BE109CB377618BC56B35F4A2BE8CD38B84EB084500C54
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7511c971c7efc3110f613b6892fc78d2d9f15771568210b13590de4bae258035
MD5 65b2df5f93fa111c603ec564fc3b4002
SHA1 ecc27dc41873af0ec241ed162ac1cba96c36aa15
SHA512 43be300d9ede8ca7ce27b9148289d8ff7d60ce97634d28033103a85c276274c8c06fcac78213c6661e3edd746a4a7c73a824b181b85feb5cc5d4feb84dc4ae53
TLSH
T1C0218FF3C3D48ABE890156F05B34AE2BCE1D0606422C3D1689E4EF1B93E34B5D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7dab01d8c65f752f952c32862e9d7242d36a774ea0fae10d2304a078186991c0
MD5 e8c41a91c0d93983f71c0d713b3ac1da
SHA1 8338c37d9038c7e53d035357b2679514cdb6571f
SHA512 88cf7c70b45df94fa2e708d02fca9b3eff98580a649b0f1bc056389e45abf010371892e137c07d27109e0152fcf831f7d18f186a1cb442e984da59f15ddbd23f
SSDEEP 192:sxZPRPWv/f5sOrIdpd5HW6+WNGYrbJxmkIgrJ:sxZPUv/f5sO0zHbGe9
TLSH
T1B912A852AE28A97B8CC7D20DBB15BF53D6F9503261951E88AAFC861C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6ab5b3897e042d1409bda9becb8b3fa54216bb5ac2c54f5ca3f240c0a81f8de4
MD5 88e560a39dfee71c389e718f834ba998
SHA1 c6e161f146909da7224ebb9082a8b7d5bc9c687f
SHA512 480076ffc1e050045a61fe09efec0d43aed4ca09674f4981db443d7dea0a00e74ddc98c8d59a8c98fceea6e51a1ec178489cd086f65a9d5bf80a746293a3f4b0
SSDEEP 192:sxZPRPWv/f5sSrIdpd5HW6+WNGYrbJxmkIg5YJ:sxZPUv/f5sS0zHbGem
TLSH
T19822B952AE38A97B8CC7D20DFB15BF53D6F9503261951E88AAFC861C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a405e29edab37d9b4f370337d9a969fe8f2c41c00834160b5b6344e853f2a115
MD5 5b8be4b12a0b16505088458066fa6940
SHA1 2eeb249ed8ee9bc205d466ea4835327e6de31205
SHA512 fd8a7c767fc12fb18390270084415edfb58fc74859def89455fd6b9385d2e6e859777278630c534a8b4c23a60780badacc79dd031c5fa220017759ec6f109520
SSDEEP 192:sxZPRPWv/f5s7jIdpH5HW6+WNGYr2JxmkIg56J:sxZPUv/f5s78ZHbGvk
TLSH
T15E22D952AE38A97B8CC7E20DFB15BF53E6F9503251951E88ABFC861C05E7ADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5077a98d5c65285b561942077e2d763e1f4cbb213312292301a19059bece55b8
MD5 9e40313cbafee37b0de7d9956b1eb428
SHA1 00464ec20a68486b6cf486970758b4257422e791
SHA512 96e0a7eda2dfc90883d9b03c62e7cca88ec6259b18eb937c86b75bc0f4f73637eaddf0551177e1f244bc9d53f3fc0bef31642e80f91e6579393b02f462e8a396
SSDEEP 192:sxZPRPWv/f5s7jIdpd5HW6+WNGYr+JxmkIg56J:sxZPUv/f5s78zHbGvk
TLSH
T11722C952AE34A97B8CC7D20DFB15BF43E6F9503251951E88ABFC861C05E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3f29bea27275798371e27c93bff2b97f73902cdc5a7f12d499086759b22528c0
MD5 06c3a6f2533d3d99158d0445087efc42
SHA1 72db4f1c2b33bcd7c3377196a7daa958e1801542
SHA512 f293d47071a855551c75d641da0238e8ee30807e4aef63cc28143cb1feee7bb397047938fb7d0e8c2f3b55cbd568e15b85ecf49e69f6b21a8c224c93dc421c1c
SSDEEP 768:YBy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbLroRjQ:YBy4J/DWvbtBhu1jajiLm0b4xQ
TLSH
T189C20B3B644CCA7E4FC01A9DDD5E6FDB3E9802C79A948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f9d737e010cdec690b1e33c3901feef9ff27c399e7f9561a3a3903ba11bd6607
MD5 9ca35a1efc9b01be8a3dfa77560a1883
SHA1 b5951d50a87c57e7c987f39d2d120d37f646cc94
SHA512 9ded687ddbe2b964983e1d04b3c304e83ed0e6d5d2aedc3ad02d4b08023398f1796d0f5a5884c261f79d893127df9f3ee3bd4d9b2aeaf78c9ec9bfae17f2e574
SSDEEP 48:KIDI1Ks04jyLLuvL1tXPI1Kc8QXyFDIJKcAU9:KIDCKs0+dPWKc86+DuKcA0
TLSH
T1F491129530BA5610787D3848B0B1A72E124173B77018E66B7FB950B69E2BF081DFC4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d590179-e84b-49ec-ba35-1e4e7808717c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5d590179-e84b-49ec-ba35-1e4e7808717c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8dbd937bdc9fee2675fccc847eaa2ebdc810b1fcf47476ce921142d1d7a7b38d
MD5 8e4dc7db8ee27cbf0b4fae7caabe2601
SHA1 0dc14f3a05850e20ebeeb3f9f201ac5a3ddf0aec
SHA512 18c8019273cf1f8dbb8dab8e38c20f7cc0072c3ac325dcc6c59a67d11f863c586deee6542b84bef71b09fb89d585c587efef1fc487be633b6d85355f92c4c618
SSDEEP 384:KciFiZcIK8sNk8TUNTUlIl+oGZE5VHX58E9O/JdEc7O6R2FeomkoY:4FQR1wgpGoBa6O/JKc7TREX
TLSH
T1F9A26D729CA4DD3BADFB9645F94631039FF940A7D685AB90E2DCAE1D009A5D8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c918133fd77a4e1b9026fa584b52ad992dce6e1c0d25b501725d1652af78ac22
MD5 52931550b1808b728ed8be50bf59a5ad
SHA1 98256eadc1b91bb7e3473867b8453832126fde7a
SHA512 74fd5ffbdbfb267a4a9900ff59abdcd50eff780e83998cc5e0d979b003412b760d02fd56e91be7c032f1a5b7c076bdad35e98b9daa03dea861a40475424e0a5c
SSDEEP 384:SSZcIasNs+oGZE5VHX58E9O/J6c7O6R2FeomkoY:haLGoBa6O/J6c7TREX
TLSH
T11D827C71ACB8AD375DFBA145F94731039FB89067E3896F80D1DCAB1E049AA98130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 de547be6780a0cc7fb3b5562b0d6d44451f6e51f8334fc3b27dc305c67774e56
MD5 2ddba5ea43a278a937b5e4b309bafb06
SHA1 5f939d7d4a760904c1ec3144e78194eda7d99019
SHA512 cdc71451860544c167245e45b82b167b1695a88e29e578c73559627db2ccb105b19e78f3088551f457a66243ad2f561ebf37f55ee06d3c93ada0f3cf92f69e02
SSDEEP 192:1ONr6wlDgQmiUyV8W4X58gZ9OK8tDlEXhU6:1ONr6kgZW4X58E9O/jsU6
TLSH
T19402F934E9A87C7B9EF7AE09F58727139FA5206BE6852F80C6E81A1D01D765C1307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f30018209925cfa0fa8ddefcfa227e45095a0a478b53d4b42691253f7c6bdc27
MD5 567b04ac2c89aea4b4243b1055f78fb6
SHA1 80d14c09de55892bd33d6ac973476cd4019edfc4
SHA512 ca95077bd0bd695180a5348fd813f2a5a17ec4867e4b6e3060ca49d8a6ad79fec5f097441c5f62cf3f677798724bdb5dcc343e4fd7e138c7e14697d214db67da
SSDEEP 384:uZcIasNsdoGZnTVHX58E9O/Jjc7O6R2FeomkoY:MauGpBa6O/Jjc7TREX
TLSH
T114827C71ACB8AD375DFBA145F84735039FB89067E2896F80D5DCBB1E049A698130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8043d1a014b03136a67967bddbbb7ec9e94c483d4a8893bf0b0fc9e5716207e1
MD5 d449d9742281b7f7178eb06ab23d0fad
SHA1 0a94fddcc7c0a0a74e7da09bef84d633b3ffec5f
SHA512 3d20e5edad51aa10c98cedc18f1d827dffde8b8fc65ca4c5f49835d5a117a16887cb36a53be7ea0f0f73c390ec54ad9eb4151185e2e0caa1ed5ae9590aa738bd
TLSH
T13F410958A6E9115873777E56AFF2A86D447EBD772F06D05D10010E4E0626F00C872777
MD5 SHA1 SHA512 TLSH

Submit Download