426d5a9e58a6c1c35b8e1818e960b5774a05c61cf81a127ee7e56d78812ba04e

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_426d5a9e58a6c1c35b8e1818e960b5774a05c61cf81a127ee7e56d78812ba04e.html
Size 40KB
Sample260913-kr3chaxsat
SHA256 426d5a9e58a6c1c35b8e1818e960b5774a05c61cf81a127ee7e56d78812ba04e
MD5 c37798fd67b0f86f8d2f51844180128a
SHA1 e1cc714909b6515bf113d32b06375b895753870a
SHA512 806b8a01034d149e5c44adeab08c75fd30739f7120672f75352cbcf0bf3a817b2409b80515184db3e2a4f93a1955d913fdb8902ad129319864cb4a64f8cab3b1
SSDEEP 384:AJ5Mkw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8PTuY2:mvw8hW8VgJG8yJMgX2
TLSH
T173039374B9C222230133A37D9BA79608FB74115B820663407EBC27E71FF1954D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1844	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338002241442155"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{C0546D14-BED4-44B8-9969-B5FC013AACDE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4152	msedge.exe
4152	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3948 wrote to memory of 5064	3948	msedge.exe	85
PID 3948 wrote to memory of 1844	3948	msedge.exe	88
PID 3948 wrote to memory of 2212	3948	msedge.exe	87
PID 3948 wrote to memory of 2212	3948	msedge.exe	87
PID 3948 wrote to memory of 2212	3948	msedge.exe	87
PID 3948 wrote to memory of 3968	3948	msedge.exe	89
PID 3948 wrote to memory of 3968	3948	msedge.exe	89
PID 3948 wrote to memory of 3484	3948	msedge.exe	90
PID 3948 wrote to memory of 3484	3948	msedge.exe	90
PID 3948 wrote to memory of 400	3948	msedge.exe	91
PID 3948 wrote to memory of 3484	3948	msedge.exe	90
PID 3948 wrote to memory of 400	3948	msedge.exe	91
PID 3948 wrote to memory of 400	3948	msedge.exe	91
PID 3948 wrote to memory of 1856	3948	msedge.exe	92
PID 3948 wrote to memory of 1856	3948	msedge.exe	92
PID 3948 wrote to memory of 1856	3948	msedge.exe	92
PID 3948 wrote to memory of 3524	3948	msedge.exe	93
PID 3948 wrote to memory of 3524	3948	msedge.exe	93
PID 3948 wrote to memory of 3524	3948	msedge.exe	93
PID 3948 wrote to memory of 4032	3948	msedge.exe	97
PID 3948 wrote to memory of 3996	3948	msedge.exe	98
PID 3948 wrote to memory of 4032	3948	msedge.exe	97
PID 3948 wrote to memory of 3996	3948	msedge.exe	98
PID 3948 wrote to memory of 1304	3948	msedge.exe	100
PID 3948 wrote to memory of 1724	3948	msedge.exe	105
PID 3948 wrote to memory of 2680	3948	msedge.exe	106
PID 3948 wrote to memory of 2064	3948	msedge.exe	107
PID 3948 wrote to memory of 2460	3948	msedge.exe	108
PID 3948 wrote to memory of 2460	3948	msedge.exe	108
PID 3948 wrote to memory of 4152	3948	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_426d5a9e58a6c1c35b8e1818e960b5774a05c61cf81a127ee7e56d78812ba04e.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff932c9c188,0x7ff932c9c194,0x7ff932c9c1a0
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,7904544221724785625,14535627090138249764,262144 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,16443907570086793661,11566396342988906941,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,15010061551193177263,16653320411055985123,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,1352136680056801826,9697491900915934494,2097152 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,12231664409778003238,2565293674809926511,2097152 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,9066460777037295527,12114221211909390140,2097152 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,7901570128810764045,14340197770972201363,2097152 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,12701548660219982448,1563722116658690256,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,3339119119897682615,3871042686877909471,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,972084905799466000,2415755095172284295,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,972084905799466000,2415755095172284295,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,704668362513985347,17241389556463320165,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,7731319833681299557,9578991452408209604,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,10626307695762290769,14723356532266677209,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,15772909994264399682,1106897004814364253,524288 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,7883254917916184739,1389891790520007853,262144 --field-trial-handle=2280,i,943557149402669479,3688743659102800281,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4152

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 444580023097cc83233e7398060b86532661077ef4e1be77ad2b5be5d77f3149
MD5 723ec4022ff08f82750b92e4915b931a
SHA1 5f4e47426da1f7410562cfa78041d8ba18c26ef7
SHA512 eaaead70901651d97288ace2112fe0770d1c5917ea5af9f7bda22e6382fbbbdf434f13e99488b5f0157f00a3cbd1d4148bc60a93855c2fa6cf1c092680105760
TLSH
T1EA616379AA60E2B9FFA84479D5DA14CF39325D95B457BEC30EB4E86ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c52f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c52f.TMP
Size 3KB
SHA256 f249ccc31d770189c3ac4ae021e96056841ca4460dcc364238e82ed025f6e09a
MD5 ab8d663bf5df28567e86928de1757b82
SHA1 5bc00aa793fe0f08ae652e218b51a545fad6bd48
SHA512 5403297ba33ba54935fe6ba1900847b92eb9bc7d8d2ee74c29cf185ccf641339b699dc3909b906e7493328236e012b5fe404f824c716fd56ab764782f2120ec1
TLSH
T17B618479AA70E2B8FFA84479C5DA14CF38325D95B447BEC30EB4E87ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c3c5e4a2c434bc35bbb6835f4e9482bee1d84677b19f28632c983e981e799a81
MD5 35f4b7d73fb8f4ef1c82b5465599c75c
SHA1 f2e14bf4eaffcbe66ced6c0af7d6370f21fcdb25
SHA512 ef92b538f8aa6ff0bb179c1c7ebcb5253575a260611923cfe49390c01370797756065c8730124bd9e731221e0b850f68e786fc2128e76b374ec8f448ba42717d
TLSH
T170216EF3C3D5966EC90556F05A28AE1BCE1D0A06431C3D5689E4EF1B93E2475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 12e712082724c8919c189b606d83533e9b5a21a76c5e2e5c25026c4c6a90408e
MD5 bf2ca585471036667376a4159599eafc
SHA1 ec28340cd263d4ded182fd76cc481a35c95faef4
SHA512 e0151a05bda25ebab933a4cb544af4e1ed81cf72fb08eb291c82f618f6ba41de1e6e800764f5945ac5537e5ffaf94bd519e1713548683ae5df92633a03a2a101
SSDEEP 192:sxZ4RDWU/fRsx6IdpdgHW6+WNGYgUhOIgrJ:sxZ4AU/fRsxTyHbG39
TLSH
T13612B6516E28B97B8CCBD21DBB15BF53D6F91032A1941E58EAFC861C05E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0ea862112dbef79fc657a070fe9b9f1775ad5158a76e523052451713642c6094
MD5 82594d251bc60b006e985793beacf3ae
SHA1 851002dc7163818eb86aadd5d8e2da4832d87fdf
SHA512 99dd5fd3ff34edfda59363a5c34587a10105c72d4d880a938171f9649c2c5488345915bad561c2b7c3c006ce52189f1bda16071f1228b6b7c39e88f27856760b
SSDEEP 192:sxZ4RDWU/fRsw6IdpdgHW6+WNGYgUhOIg5RJ:sxZ4AU/fRswTyHbG3h
TLSH
T1C322B6516E28B97B8CCBD21DBB15BF53D6F9103291D41E48AAFC861C05E6ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4342a3b5beb92fc71819555957c9498840a67059f36914bfd400592bde3372f6
MD5 d641e739e6c8f51562f7a9a23ef77e21
SHA1 cc49aa350bf75bcee4cfb62aaff6f5ffb102df89
SHA512 1b8c554aa12f778dcae2df758f4360d758c9dec88f8603f90ea3b557afd204e323128b4d7ed8b016a822df6b7e5e82a08ca5584d85fe7b5fb8d8760b2badd9dc
SSDEEP 192:sxZ4RDWU/fRst6IdpHgHW6+WNGYgahOIg5LJ:sxZ4AU/fRstTAHbGxH
TLSH
T1BB22C8526E28A97B8CCBD21DBB15BF53D6F9503251D11E48AAFCC61C05E7ACD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0326d12cda4c6ec576632597bd2821bdf4fb4498dcae14e95643bd99765b1817
MD5 5355e7f76fb40a1f5ee2f541ffaf04dc
SHA1 3427a6c4d1c78faca3c9bded9eb4853b125e72f2
SHA512 e21ac35ba6d5d07034211e374e22964ae0106376aa2a9ffa17db1d3209514bbc0361e542cef1d8a6eff61a08e7e19b8b80c13288cbb71cb07f1c2fcef4b1a854
SSDEEP 192:sxZ4RDWU/fRst6IdpdgHW6+WNGYg5hOIg5LJ:sxZ4AU/fRstTyHbGYH
TLSH
T13E22B7516E28A97B8CCBD21DBB15BF53E6F9503291911E48AAFCC61C05E7ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1dfd79322c0426b9d4511fa840821c5d7bdfd85ce038814187b24c7a6af1f1ff
MD5 488c850154311039995f9123dc6ac928
SHA1 9d8685ab3c55606ce176581bdae1f31c90647865
SHA512 9a9ed2934754e7060e3287a67a907424aab4e55dca3e14a80e85de6b8a2e341dc5d2d03be75fba3308838f397b1944f2822f9e5a90af739b750bb4706a516ccf
SSDEEP 768:TkichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzcroiw6:TkichfPWvPZplu1jan+LKgzHP6
TLSH
T157C2FA3B644CCB7E4FC00E9DDD5A6F9A7E9802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5479649-187d-455b-9595-3c3383481f0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d5479649-187d-455b-9595-3c3383481f0e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3363ba6c5afebefb42a6e15e2a373188e3f054c7a175081c00779d84f88008fa
MD5 bcbda920fc75a530171212b775509f9e
SHA1 219c6c8699a4b3d81e1d03fce31bc2797f2c9edb
SHA512 dd8422390aea8eff0998dba94fe2cb70e7c52dc95b8c2f01c794e4ebb9d6d8ee45dfe7feb39984ed5a90125c024f765713643304eb9a61a8b8e2b7f5f50ce1ea
SSDEEP 384:UZcIrsNaUtgRDF5tvcBGYX5E0S+YpDR8isa+VYdlso8:SrDRxHmGYu0SVpl8ihgPr
TLSH
T112827D725C78AC7B4DE793D1F8872A138EF8916797C86F5495EC6B1C00DA6D8130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 4e449b1937e3c7b339568e75bd1f366ecd9bcc7268658f4d6b1461843ac2e664
MD5 b8757c566e80122f0434d997559cdd79
SHA1 8a9bd3ddd5e654291349ce55df1487a77bbc623f
SHA512 5391a890649742f0aefa5e473902463ad987881b1552d3eec5cbee5ba8483b19ceb37c1676720f1fe44b9e896bb2e2b9f164526c452dd10ebf9ab7d7b3eda2a5
SSDEEP 384:ZsNaitgRDF5ObvcBGYX5E0S+YpDR8isa+VYdlG:ZVRxemGYu0SVpl8ihgp
TLSH
T141623A726874AC7B8DA796E1F8473A139EB4516797C82F9496ED5F1C00CF2DC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c7faa40579b152a83a1431e2daad255d464734a9f6eb5e0e93fbe8790882407d
MD5 2c21d0f91a99828d5a8c6a0dcfd1b6b3
SHA1 afee3bc83ed8d08aa611cea3572c61661ebc6925
SHA512 2810dafc1d3973e75ae12c03621ae7865e04a416627ad0a5d15cd65bb1c5c0da7784b448ed86a9fccef79a8756ba32afbb07ce3296d5644acfd4a44360961efb
SSDEEP 384:oiFiZcI8hsNi8TUNTUlIlZtgRDF5tvcBGYX5E0S+YpDg8isa+VYdlso8:zFQKfwgqRxHmGYu0SVpU8ihgPr
TLSH
T191A25C725CA4DC7F9DEB9BD1F94B36138EF84167C6C8AA5496DC5A1C00DB2D81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 018aaaa079b364c316497734bed549b4819837f3bf783e8dfcff6f48c8d703a1
MD5 a6d4f5d6b1c6f73a1063b07a83427b44
SHA1 e57c2a46b827f9156f8fe5c88c5a43fd48c87dcd
SHA512 df50fd15edd0031f435d72c78fcca6886c0f87dc073736a2a798f48ea5b7180a82921ceb4add1b68efa688156f20e21f922757f25335f92db9eb80a7e802ddd5
SSDEEP 192:LJONc6DphmqQmiUyLIq8wGYX59ezVCNY+Yjkk78Dr/U6:lONc6193RwGYX5E0S+Yb8/U6
TLSH
T11902E935E878AC7B8DE36E55B48B2A235FD8112BAA942F84D6E81E1C01D768C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 634b16ee1b8b3f68568b937aeec179e2486ddc36dbfcb6573cb0c642ad451bab
MD5 cc6b0fc613e4e507708ce08b1fdc3b83
SHA1 70918e9e0075e10400b9e596daa9e7478a4e26fd
SHA512 e6677c26a779b116494c9f5003ea7599724464108e140331185a53cef78811a2c96f2b3bf86aa9a62cd6e9352c863d2cbe9f829fe5b57016cea59635fa471d81
SSDEEP 384:9ZcIrsNaZtgRDF5tvcBGYX5E0S+YpDR8isa+VYdlso8:lrqRxHmGYu0SVpl8ihgPr
TLSH
T121827D715C78AC7B4DE7A2D1F8873A138EF8916797C86F5496EC6B1C00DA6D8130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3d690044f43f8403fd2c17acfdada0849c5757804ca57f64abc381ccc3cc0c3
MD5 da0cfb9e0fb9bfae11ed0cdaea388287
SHA1 821499ebae07b0c2fb226b4e005c93aab9061739
SHA512 d27a03e18495238bbb13c075ea60a8c334d33f2c4e065b68d03a4072811951ad33c5915f7d97a6424821982500e0c95d3be15ddf9d509a17e1a58c3475c0c669
SSDEEP 192:LJONb6Dph0qQmiUynIMwGYX59ezVCNY+YpDyefkII82/5rU6:lONb61vJMwGYX5E0S+YpDC8iU6
TLSH
T1F1120B35A878AC7B4DD3A991F4873A135FA8522BEB847F90D5DC1A1C01DF69C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5159392c-b3a1-4abe-a7d3-7feafc81379c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5159392c-b3a1-4abe-a7d3-7feafc81379c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 37df0e4d597398c49fa53240bef054884ff3ade211a32e3dfd71eb8e032f3457
MD5 5fb7b2d68e04bce5a6985a8096aa8b68
SHA1 83b7e8e2407201987a34d1c89641e9df28d31c7d
SHA512 8d825a138b17dc784bd320a88db5bf943fc513268f7ba9b6c827c4535e8c54a55f7d17a68508796ee36fdf6cd678ee1359d63d3b86178c5e53583f57d9cbaee0
TLSH
T16C41FA5CBAFD1148B3B77E5AABF6A96D487AB8372E07D49D00110E4F0A66A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download