0850f9c43d6847ef7db4cdf444cc52ba9163ff8eaecb39f12aa8202eeca39f81

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 05:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0850f9c43d6847ef7db4cdf444cc52ba9163ff8eaecb39f12aa8202eeca39f81.html
Size 361KB
Sample260913-gghcsst1ev
SHA256 0850f9c43d6847ef7db4cdf444cc52ba9163ff8eaecb39f12aa8202eeca39f81
MD5 90477d6dc2820401de07acdc469cde30
SHA1 4a11c58894467df3a34f3e26f6dcfd36cb046677
SHA512 6f4789afca7bfcfaaf8831052680c08e0c2c131f947d0e00e644806a6a1941b7f2f258043ea3a521f86801e2ae252fe868536d7e94cc73df86a98226328da53f
SSDEEP 3072:vd2H1gNC8FFrDdiMcMEcLL01Uy1hpvTyHvYDfW+7W+QTWT1qL7AYxIFDW6FqRNhY:vd2H169iMcMEM4fpvTmYD/Dk61cEzFR
TLSH
T10F749EA42605B83A4ED712EF53967A0CA13C5812FC858614F1ED5A7428E7EE903E773F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337883924263212"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{408C1180-83FE-4BE2-BF4C-10EEBF76D5E4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2932	msedge.exe
2932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 4480	3032	msedge.exe	84
PID 3032 wrote to memory of 3548	3032	msedge.exe	86
PID 3032 wrote to memory of 3808	3032	msedge.exe	85
PID 3032 wrote to memory of 3548	3032	msedge.exe	86
PID 3032 wrote to memory of 3548	3032	msedge.exe	86
PID 3032 wrote to memory of 680	3032	msedge.exe	88
PID 3032 wrote to memory of 680	3032	msedge.exe	88
PID 3032 wrote to memory of 620	3032	msedge.exe	90
PID 3032 wrote to memory of 940	3032	msedge.exe	89
PID 3032 wrote to memory of 940	3032	msedge.exe	89
PID 3032 wrote to memory of 940	3032	msedge.exe	89
PID 3032 wrote to memory of 620	3032	msedge.exe	90
PID 3032 wrote to memory of 620	3032	msedge.exe	90
PID 3032 wrote to memory of 1632	3032	msedge.exe	91
PID 3032 wrote to memory of 1632	3032	msedge.exe	91
PID 3032 wrote to memory of 1632	3032	msedge.exe	91
PID 3032 wrote to memory of 4572	3032	msedge.exe	92
PID 3032 wrote to memory of 4572	3032	msedge.exe	92
PID 3032 wrote to memory of 4572	3032	msedge.exe	92
PID 3032 wrote to memory of 3672	3032	msedge.exe	97
PID 3032 wrote to memory of 1204	3032	msedge.exe	98
PID 3032 wrote to memory of 3672	3032	msedge.exe	97
PID 3032 wrote to memory of 1204	3032	msedge.exe	98
PID 3032 wrote to memory of 4196	3032	msedge.exe	100
PID 3032 wrote to memory of 3204	3032	msedge.exe	105
PID 3032 wrote to memory of 4888	3032	msedge.exe	106
PID 3032 wrote to memory of 3076	3032	msedge.exe	107
PID 3032 wrote to memory of 1992	3032	msedge.exe	108
PID 3032 wrote to memory of 1992	3032	msedge.exe	108
PID 3032 wrote to memory of 2932	3032	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0850f9c43d6847ef7db4cdf444cc52ba9163ff8eaecb39f12aa8202eeca39f81.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff9e633c188,0x7ff9e633c194,0x7ff9e633c1a0
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,14678538650843473864,12981379640210659632,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,1891237097885875868,10127793474331336354,262144 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,17756250345971028984,12933852778883449615,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,4917466128149359825,5158775780852553561,2097152 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,15430416203449451403,4809704250340378437,2097152 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,11146506987158510464,3755050436547521246,2097152 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,17984477104477400763,8955619445977510685,2097152 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:2
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,4951799177839888642,14590708098836672652,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,12678834608234621941,3582133345420096623,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,4016263797985688776,17738270395396535493,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,4016263797985688776,17738270395396535493,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,9201319755837547891,159345311756734020,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,4158597593755868100,12816981590116302236,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,14363387751442956415,2780538506213924472,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,14311082621244823369,551895477056614761,524288 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,5165564660051833337,5221312624846086873,262144 --field-trial-handle=2424,i,4825678236866593623,3329833067661515770,262144 --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fcffac10febbf26cc460298d31f574c8946e1796ca201bff603aa6448dd574cc
MD5 7b87adcdc2b8fc7a3a0adf47ac0ad2c8
SHA1 af842ea1e1b28b09d67bfb260ba1dee8808749ff
SHA512 4f84616d6bd88aba38dc0ab3ccad6f8281827b58ef66fdc65d804eab8efeaaeb2f99089a64c2e82425df2ef7dd5795db9a7747945c4fd40d1345ac4e037f91f5
TLSH
T1DC6196808C80C1D9F3E56373A1D72CABB5BA50C11DAB0EA1597EEDFD8846F165684E34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ad42.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ad42.TMP
Size 3KB
SHA256 d7105028c9e1213f97af663746dd8554671bfb3ac84bca7f2e95afb224de3248
MD5 6ca170e9467a32d272745d4601ca99a7
SHA1 97bedaba6ad913ef90098a755a504ecfa81391ff
SHA512 0cc20c577f918e6caf181129d5014345d1a4e434ec0934873ed99b094212fd52d2552867fd022f1b8cb9059805df12206d1ecc02367f2bfe51006c76559c3f37
TLSH
T1C86196808C80C1D9F3E16373A1D72CABB5BA50C11DAB0EA1597EEDFD8846F1656C4E74
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b6780ae5bf4cb4a2c45f6f45863f7decf26a9f54d948aaeda629530252171909
MD5 69c5266b1de72673dd95cc414daee1de
SHA1 e77f5148cce698d75d70dbb8f800a334077765f6
SHA512 f93b5ff41917e34ca74d356622a9d6f28d18abb0d7e7d70e12d33dfd9f2c11905f99b9093f60e5b39cdb710541eae2dbbc3badc10865644c1fb9f6c0e787f6ba
TLSH
T1B65189B683E5877E890152F09B256E1ADD2D051A422C3D26CDF4AF5B63F35B0E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ab68d5cb-1493-4d31-91eb-55f1bfb82fe6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ab68d5cb-1493-4d31-91eb-55f1bfb82fe6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0f60e5b6746b67618550d21dfd0dacd46bda4be9a511367c0b54c7ec4670b874
MD5 d900b6eaa5a8fe8e09882a07780f7807
SHA1 fa4cb59191f92eef2079d4ccac15437247836a78
SHA512 7d9c34d646ba7cda60fbf42654e5fcab20e8b99ea896c429579241982411f53285f5dfcf0db8e95803b27aa4d05657170ac4106551aaba96057fee8e03a30ba7
SSDEEP 192:sxZsrRIWab/fTsqKIdpHyHW6+WNGY36xGmIg5mJ:sxZ6Bab/fTsqDSHbGXbA
TLSH
T18A22B7526E28A97B8CC7E20DBB26BF53E6F9507251911E54A6FCC61C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 22edb50f5ba379b57758c310330f480839966727d75dafb09da02bf47cc8811a
MD5 ccc00337ff85a4c19290a9c87f15b1fa
SHA1 1b5cb64a769c9f3f32a9a7ab0ad87fbbaf0dfdb5
SHA512 841866aa4009f66dd3178a37022917af2dea47959f5b8fc336090ae612be073be66e215e2db6b098ab3ce8100237b7edae8109aba2dc17e303626ce457ea9ca3
SSDEEP 192:sxZsrRIWab/fTsyKIdpdyHW6+WNGY36aGmIgrJ:sxZ6Bab/fTsyD0HbGXu9
TLSH
T1B812A7526E28A97B8CC7D20DBA25BF53D6F9507251941E58E6FCC61C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5703e7a31eaf20e87650fc78cdb3e1800b6091873adfc3706dbeedcb5228991c
MD5 c8dd3b685b7f086416796a4a5de8c284
SHA1 9225381edad0c85c83b0d49d42c351b5d79a74ea
SHA512 cda6583c7e69684a61040f521d0f84ac9d580180264b6756b91266c8f94c5013dc4c5fbd5efa91e6d35b03cfae6a2469e9f7a16e6ae76a54e950da27b96cf92e
SSDEEP 192:sxZsrRIWab/fTsSKIdpdyHW6+WNGY36aGmIg5EJ:sxZ6Bab/fTsSD0HbGXuC
TLSH
T1D022A6526E28A97B8CC7D20DBB26BF53D6F9507251901E58A6FCC61C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e2a6eb241a74280833f7b9cdd01b424435d926979a85b3967260bb416a26bf5d
MD5 638b1ba21f07baa96a4aba54908eef41
SHA1 e0de46ffa931015eaf079171a6aa2d3a6c84f9b0
SHA512 7dca810c833ff09b982273146e50a9a64fcbc8eed3de47616e986ff82e58919e97e523ce6d9535a06fca44e8f920369205ccababdde1ba4755e9e2aaf192fa2b
SSDEEP 192:sxZsrRIWab/fTsqKIdpdyHW6+WNGY36+GmIg5mJ:sxZ6Bab/fTsqD0HbGXqA
TLSH
T1E922A7526E28A97B8CC7E20DBB26BF53E6F9507251911E54A6FCC61C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8ad16c191470bf9c9c5ef7b23435f25970dc20298dd45b3fe0205f56fa8dd315
MD5 43d09e4214ddf840eb356435bb6f44a0
SHA1 1b1c24d45f460054baef15fa113d63d9b9dd8206
SHA512 020bcde64a36bc4b13da9edcc11512f10466c3699ab7faf3fab79ce58ae89d59bd9ff69ad5c173c9b7de69aefe29e1f0f9022d1310588297fc08dc46d8c5f6b4
SSDEEP 768:YOKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/7rowM:YOKlm7QWvUYe0u1ja8/L/E/IwM
TLSH
T12EC20A3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D404BFA994C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5948e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5948e6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a660f8f5e25f5348de24ec6af38a7a58d25d520b66a9500fd20717037118de95
MD5 d5a2db62c3e19a7f5dd6dbbef79d4d5b
SHA1 40f1eb6244d376ff829d80d9aaf17795eb42b888
SHA512 fa58c394ce321f2b01be2ca97f3ac4245d608dc06a68b3e7e9e4825a6f4bb46334cb41afa7ddf77105d6f4e44929af36a5038b322bb32738568f9c7556f87502
SSDEEP 384:siFiZcI5qXsNJ8TUNTUlIlT2bpuzh//YhahN7O6R2Feomjoz:XFQU8wgHV/Q0hN7TRfc
TLSH
T155A26B725CA8D97BADA79A85F54B36138EB440F7C7C59E90E6CDAB2D01DB0D8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d0a7e23860123827cea338f236b1c7f062281951e85f614655d7dc23205b6f5d
MD5 aeffc16f01fb92aa781d6cdaa3f43276
SHA1 8629530cb4d3546666702d4e3687cd5c555d3745
SHA512 3dd96e6e358e02fb8befafac05e24dc88dc2883a9cf62a8702e938a962b28bca3e9c92c892e3c408604331b65406de084951c8e8804fdb7fed6b43a49a861186
SSDEEP 96:KqONkrQsjpfbUmjH5ih/cIPURHl8h4otop5GaDiBKP4v+Y1xf//ojdoxTeYzqsor:BON/6JUm0QmiUybiso//YpBCK1EYU6
TLSH
T15902E839BC74BCBB8EE3AE45F48777239FA4106B96915F44DAD86A1D01D725C2303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ce68699f6b524b7afae57c843851110fb9ddbf043b6586affd691710aeae44eb
MD5 8fb2a06e938421bd5913f44a0498608c
SHA1 ecd8f944ede111a43f798baec80100a5cad48788
SHA512 ee6e9265ae38f2eb45cd2866963b8af6f583999dbe377dcb2d90ba53588af46153fcabcf8562ae55d408961f1f1e099ac3985ce6215184af093cc1e225f6d783
SSDEEP 96:KqONkCQsjpfbULH5ih/cIPURHl8h4otop5GaDiBRbP4v+Y1xf//ojdoxTeYzqso3:BONK6JU8QmiUybiho//YhHNxU/mNU6
TLSH
T10F120835B878AC775E93A590F08736138EB4416BDB856F90D6DD7B2C06DB1AC9307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0187e48bc56728115547a5abf9cd18130fc1b3f2f316e241391260b9b1ff9ce8
MD5 4412f7b84b11a776eed1c65d454d890d
SHA1 438daac0722c625a267a8bd2ac66692b8624a499
SHA512 73b0aa43f8e764e752c7e79fff9f8f2f82bf0a8ab79f2bae5dfa5c1d7e2a9a0673fb81813ea1e3ada05f29552f9ce2a02a3d2d34532b20e785783b847b124fc9
SSDEEP 384:HZcI9sN322bgbuzh//YhEhN7O6R2Feomjoz:v9mV/Q6hN7TRfc
TLSH
T1B5829D716C78AC775DA7E195F48B36138EB880A787C95F80E5DDBB2E05DA1A81307C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b94830ff4f475f1d701f40263a291ee87fb0576d6ca730bec76ead7eac146855
MD5 d4b1249fda0682c9f00e2a39038337eb
SHA1 7fa7c6dee9a467fffc9345b2875d8353d673fb0a
SHA512 43ab1150601a37a1d48412561ffc0223723ad6f5770a8f7b210ef93435202189c365907ecc456a2dbca34a282e2fc2ef69da15a828437f8bdf9c67af581a1ef8
SSDEEP 384:jZcI9sN3T2bpuzh//YhEhN7O6R2Feomjoz:79sV/QKhN7TRfc
TLSH
T14B828C712C78AC775DA7E195F48B36138EB880A787C94F80E5DDBB2E05DA5A81307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 67d791b13bb2215bca132fe3cfceec59d2f0041b433fabd9b0dc77835968a9a0
MD5 a627c52dfedf8f0c6ce4d861f0a56fc3
SHA1 b2a2319a5825b74d73b69673cbc5459860c07e3a
SHA512 ab4a841450ad6dfdebdadb7e4b3d8ff31fa90b93fc662b9f3283bee28490e4e1dcb81e4f87c65ec8f470d707c28e42f0d3efe4cf7ff3309758c44aef64e3ec7a
TLSH
T16441395CA6FD1048B373AE4AABF6A86D487BBC332E06D46E00110E4E4636B00D9B1737
MD5 SHA1 SHA512 TLSH

Submit Download