0a73a18bf24481a7549509902933287c85504ca9d15fa9421b855eb05f68890d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 10:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0a73a18bf24481a7549509902933287c85504ca9d15fa9421b855eb05f68890d.html
Size 114KB
Sample260912-mn5dssfk6x
SHA256 0a73a18bf24481a7549509902933287c85504ca9d15fa9421b855eb05f68890d
MD5 819578299f65028db5807872f7b3cdd4
SHA1 c39861325c983ff9afa979af2798305ad3e504ee
SHA512 b16e2c07845d67628825f351db660a26b8cfe717a50df38c46a236bf80cefafdb8698912a852f7fdf3bee081cf49b5caa8ad4ca537bed6b3bcdb491f7c4dd00c
SSDEEP 1536:sPxIYn+h25uPRVtLlJgjTPrcZQcTt18NoLxBJ5dbEaotbEaov:CmpQ28NS/ddotdov
TLSH
T147B3C68752205CF6EFB54DB345DB086B3C2C1437AC4390B9E3ED8F972B5696E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1908	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338195896910089"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{AC74E09E-815D-4557-B551-4E502C08C691}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 4688	2252	msedge.exe	83
PID 2252 wrote to memory of 1908	2252	msedge.exe	84
PID 2252 wrote to memory of 2344	2252	msedge.exe	85
PID 2252 wrote to memory of 2344	2252	msedge.exe	85
PID 2252 wrote to memory of 2344	2252	msedge.exe	85
PID 2252 wrote to memory of 4740	2252	msedge.exe	86
PID 2252 wrote to memory of 4740	2252	msedge.exe	86
PID 2252 wrote to memory of 1336	2252	msedge.exe	88
PID 2252 wrote to memory of 1336	2252	msedge.exe	88
PID 2252 wrote to memory of 1388	2252	msedge.exe	89
PID 2252 wrote to memory of 1336	2252	msedge.exe	88
PID 2252 wrote to memory of 1388	2252	msedge.exe	89
PID 2252 wrote to memory of 1388	2252	msedge.exe	89
PID 2252 wrote to memory of 3724	2252	msedge.exe	90
PID 2252 wrote to memory of 3724	2252	msedge.exe	90
PID 2252 wrote to memory of 3724	2252	msedge.exe	90
PID 2252 wrote to memory of 3760	2252	msedge.exe	91
PID 2252 wrote to memory of 3760	2252	msedge.exe	91
PID 2252 wrote to memory of 3760	2252	msedge.exe	91
PID 2252 wrote to memory of 5044	2252	msedge.exe	95
PID 2252 wrote to memory of 5044	2252	msedge.exe	95
PID 2252 wrote to memory of 3888	2252	msedge.exe	96
PID 2252 wrote to memory of 3888	2252	msedge.exe	96
PID 2252 wrote to memory of 2180	2252	msedge.exe	98
PID 2252 wrote to memory of 2516	2252	msedge.exe	110
PID 2252 wrote to memory of 4632	2252	msedge.exe	111
PID 2252 wrote to memory of 988	2252	msedge.exe	112
PID 2252 wrote to memory of 2280	2252	msedge.exe	117
PID 2252 wrote to memory of 2280	2252	msedge.exe	117
PID 2252 wrote to memory of 3420	2252	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0a73a18bf24481a7549509902933287c85504ca9d15fa9421b855eb05f68890d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffab99ac188,0x7ffab99ac194,0x7ffab99ac1a0
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,9663924874169628729,17855852614133506493,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,17750713609709961082,16363614957140557991,262144 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,11410581615104520982,4887395753268600093,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,17473249118189130712,3363170437930828578,2097152 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,229355463647956470,14270827602363148391,2097152 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,630483157718524080,9224942863244674479,2097152 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,7951351939157916733,17540793696626964900,2097152 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2857459153971032209,7479951273952287893,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1306169800693615449,170712427736349525,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7604737305540736665,14369370805773688967,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7604737305540736665,14369370805773688967,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,13881187749272335548,11323818610866304347,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,13551500498201773154,7753616735340480236,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,7291038679617012701,5938503063263460153,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,443910439926718156,3870060674609137087,524288 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,9837644225065411058,10348983911388909497,262144 --field-trial-handle=2124,i,7243469546950137982,5669775438766378073,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1482da798a651f952b7527db7d5a9653deeb8bd73b76f9d38f5b34d1ec9c0bcf
MD5 00904d9e9d57f3a7f192e160ab8218ea
SHA1 4f3d9b58494337ac05298078c3e32cc11b685c38
SHA512 d2f8f8f5fca9031fbdca49c25c4a87c66f6a7ba3d7236c6173950bcc40c2f36486f5e2ae63b3f3d09f4edb3de23086277a21d3b836c02c2cbac9be1f292be979
TLSH
T17F614F8F46D9C867FBF896B296F5938336F8A6825B431DC131E4D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59524c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59524c.TMP
Size 3KB
SHA256 28f6539c14bab0776aa95883b5669019e486c718d0dc2d81f1134c834b0184a4
MD5 ea1ab6ed8275f8a37504dc78625a003c
SHA1 109f50e731524695105db1f1bbe3434d3c2d2b60
SHA512 4f33fadd371f118ef0392c3c60d3e5f78e2ee4a02bae523a0373d2c7d0baa9609af77a023daae0dc3c8df31193f84dcd8dc13e38d9bf8723d090dbff3e4dca91
TLSH
T1F461418F46D9C867FBF895B296F5938336F8A6815B435DC130E4D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 569420bc02620c9a3d33a9c86cd598cb60247856b840a36b2d6fc32786a27c86
MD5 24e1d3f6a629cfdaa691e29f65f1fd58
SHA1 d2b3ec596e348bba40d8f1443e43bb584d2c0579
SHA512 cf2b2fba18500be06da04b0b144e99bac280945774f8cfa85494a4fd4325624be65b8cd0125a22d24537824a647b8aa4b0b5d88c35fa2ff7a8dfff64ad07db92
TLSH
T1A3418CB7C3D8867E890156F19B256E16DD2C0A06422C3C56C9E5AF1F63F24B0E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 38b0006998c48fd090cc6efd4673bd2586d6b32f65299de988afb0b54903c29f
MD5 680072cc9dd704ee0dc4a4bf791f1b94
SHA1 d9a1f5b446de1596b1ea9218f56fa4b40c17fe37
SHA512 9a149c6159c1122fc82b14405d96782207f5cf63cdf604f3d73199c89190b747f03e054e86542a424d365cc69d160efcc4e8d67657ad3b9814ca0adebd0903fe
SSDEEP 192:sxZGRkWU/fhssNwIdpdgHW6+WNGY3Rd+IIgrJ:sxZGFU/fhssNRWHbGuj9
TLSH
T10A12B712AE38A57B8CCBD21DBA25BF53E6F9503251D01E58EAFD961C04E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8762eaf620f1c67a8be7de9c5c1be797a96ec293d32fa31d913338fc90aa5e54
MD5 a86937407f78a214fd779498961a5251
SHA1 9c2b816cbdf9701ca646bbee113b612ab5f39b60
SHA512 751e65fb53a5ce05bb9ecd919f511abd2ea6cd40e801aa25b235e6faa80aebb0db88cb301167e8d7c1cb5e2ce5839d4bd1bb383ce79bb75680da8e15d5e86b6f
SSDEEP 192:sxZGRkWU/fhsRfwIdpdgHW6+WNGY3Ld+IIg5rJ:sxZGFU/fhsRfRWHbGaj7
TLSH
T10C22C751AE38697B8CCBE20DBA15BF53E6F9503251D01E54AAFDD61C04E7ACD121780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 295c5ad33e3b50ec46edafe2262bb92d532d2d145cfb3789491964ead9555c09
MD5 cf9befee6eb9005458a2a68281e8ed10
SHA1 7c94a214958b3662e4533a975fbee43095809f24
SHA512 2ed960395e14d9fe4d6e5916d502099fee301edf4edc96a65ff6c175b66871e2b4926681fa8aed02300eada6e2faca0dc969871cd7a19f63e036faba7d1da444
SSDEEP 192:sxZGRkWU/fhsRfwIdpHgHW6+WNGY3bd+IIg5rJ:sxZGFU/fhsRfRAHbGej7
TLSH
T15D22D852AE38697B8CCBE21DBA15BF53E6F9503251D01E48AAFDD61C04E7ACD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f6c5f460cfa070efc203263f034b53c06225b551a5fb7e5d74a35f2a06eaa716
MD5 1cb621bd2725fd3ebbb56f5982ec3ae3
SHA1 726a1ac531f1bab49e14f6673051705749b32afe
SHA512 352b624939af32b7657977a6c24c1d8cca0cbc8c9f81edcd2296218a8eeabfae7f8632768a74bb5f1253e5dd8557c8e62dae0b509a920d3c780da3a11be14a4f
SSDEEP 192:sxZGRkWU/fhsRNwIdpdgHW6+WNGY3Rd+IIg5xJ:sxZGFU/fhsRNRWHbGujV
TLSH
T11422C712AE38A57B8CCBD21DBA15BF53E6F9503251D01E58EAFD961C04E76CD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3638cc584a0bf4f6369f5e5e7344c4e0220d1919e5220e0769b39c8e239f7ac4
MD5 689396ecf6bf0e1c61fe1a93c46181e5
SHA1 ca1287a8b19c177b2d1fc38fed0aecec97482333
SHA512 8dfa555489b9a753a1a762bc7750d73089db461f9f5d251fdf43e91793c5b65ebed7cfe79c447f7c240304a52b3ec9df537839a75136e0cfc83174b9a319fff7
SSDEEP 768:e230AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72NrolZMKm:e230AbSWvS2l9u1jaLmLZ12mFm
TLSH
T1A1C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0f09a3f727c2f94ab18e5725e0104e509e6f021e7d46fa6b728ad2d831ed944b
MD5 2992803111f43d4c185a2264921af26d
SHA1 cc8e25dcf0b4106ef043601ed67d1af5e024e8bb
SHA512 0c4b9d6814f61b7efc185322a616b1dc2755ff1cc2f135ad157990ccea6128785a75d8437a7cf7590bede2a5b450b35f5233b429875138063873542e2c503a06
SSDEEP 384:pZcIgsNQUgD/HpuRQV9iX5F71sFq7JJsa+VY5d7UIoX:hgfHB7a8OJhgMt0
TLSH
T194829E32ADB46C7B4DE3A251F44736139EF891A7D7C87F80C9ED6B1D05DA298030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5482134561844596dc2a704af34de99a42aa51cf620850ade2c5f7cdd2eb1de5
MD5 84888414cba0b2432b0aee855b9eebad
SHA1 3af91604cb55a575e094c4ca4a61125d93c92c8e
SHA512 e4585868b6df0e97827665fd20f7e485721b92388ec733495ab68f2a5c9a56989f4899df0afe3a3808719bd712a596c2d55d2c29bdc4b6b9092887a5a734f5b0
SSDEEP 384:RZcIgsNQUlD/HpuRQV9iX5F71sFq7JJsa+VY5d7UIoX:5gYHB7a8OJhgMt0
TLSH
T1FA82AE72ADB46C7B4DE3A251F44736039EF891A7D7C87F80C9ED6B1D05DA298030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a322897db0f3677caf5a9209e090dcbb9564ba9fd4e4ff9a2f367117c2b9b91b
MD5 36b9eecaa7ec6950210fde5278ec1a55
SHA1 902297fb2af690bd4c70ae85b530503e1575d30f
SHA512 76425515c6eb8b939c89fe4c9c1c90b4426a7d55908307b535099ec725307f9eefe3756ac882a5b952d39f46397614ab3dd0807b1c1a0be77f54f1b117490a11
SSDEEP 384:aqZcIiqsNQUlD/HpuRQV9iX5F71sFq74Jsa+VY5d7UIoX:N3YHB7a8hJhgMt0
TLSH
T1B7929E72ADB46C7B4DE3A251F44736039EB85167C7C87F84C9ED6B1D05DA298030782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a46cccc5ae412bf2ffd92c93562cb89ae0d69176cc43b60010ea60ae02c1ae65
MD5 93927728f96207dafdb6c20f68121ffe
SHA1 fc928f6249f542b95caf330d74b47651c4c1e5a7
SHA512 9ae8ec5445130930d8be7cbb068e2e0f9f2df4d2542b60ea02773b52269449c09af396b9d0021d33132d3b1e7404fbeb0f02dc13c1b3dc7e3708ead982e2d66e
SSDEEP 192:LON/6AmwprQmiUykA6siX5F7wksF+JiZpU6:LON/6ipdU6siX5F71sFrDU6
TLSH
T16F02F935BD786C7B8EF2AE55B08B37135FA5116BEA902F84CAE81B2C01D765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 49dee02ce3fb71131e38345a705bdfefe0c0849625e60ef841f77f7010e7c310
MD5 fef6bb3974403defb7d4afd9127e8cf1
SHA1 266368d60d0a14ad55d7f9e206f3aa7de438910b
SHA512 9fd2bdf1d7ee8507a611696eae6e715928ca74a1c8d521eae8cf4292fac75fd092a5125635a11f0807a349698a7d2dd3dce8b17fe491ca6515a57703525de04a
SSDEEP 384:NsNQUgD/HpuGQV9iX5F71sFq7SJsa+VY5d7UR:NfHs7a8LJhgMk
TLSH
T187625C32B9B46C3B4DE3A651F44B36139EB452A7D6C83F94CAED1B1C05DA29C530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e127b05c733342379b663f40bfe45ea40a86746ad77f6c9db69fc2f7c4e335ea
MD5 c9f4f39f56287fe706572026394ff72e
SHA1 df63636aee94f8a329974b2dba53e78fabb1e2be
SHA512 e80c6a23b6ff5ae6b48f5161925d91e7fc5cb2af1335614bf69b570418d96b1cd88cdab7b48c496a85f0bbed5f7a6cf35178a7b12a5837b5fc9ee2260d80d94a
SSDEEP 192:LONS6AmwpoQmiUyAMAnsiX5F7wksFqwKPetlRq/eU6:LONS6ipIfnsiX5F71sFq7UJU6
TLSH
T165123B32A8B86C7B4ED3A554F08735139EB54227DB887F80D9ED2B2C06DB59C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e500a4892160230ca41daad780142af2d81655a13c063ebcc9dabb68586efe41
MD5 75020335d2a1cfd8928e8234fb319e4f
SHA1 7eebe7c652815d9ddeb0fa3d436b58182469856c
SHA512 a0e8565918309320be06226fba44c2836774a4e4e73c21d06341e85c3e95a1048a0ecc75746df49d7c3d87e0de8f4c5630317d608ed41396db7e15633c2ce1ce
TLSH
T16A411A5DA6EA1148F3B72F5AABF6A86E847AB9371E0AD56D00110E4F0673A00C871737
MD5 SHA1 SHA512 TLSH

Submit Download