0a13a54ca8acd330c5e4e4518c1ba3f07c873d4ced081f7e4cdcda78db81065c

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 17:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0a13a54ca8acd330c5e4e4518c1ba3f07c873d4ced081f7e4cdcda78db81065c.html
Size 34KB
Sample260912-vzbvmafb37
SHA256 0a13a54ca8acd330c5e4e4518c1ba3f07c873d4ced081f7e4cdcda78db81065c
MD5 179b6c1be1e77142c1fdd71de7a6c02b
SHA1 7b941d64940249cac39d03c61edeed40202d3e61
SHA512 bbc21f15e95b5b10c422b7d7ecce52c78523508ab963b42795fac928512f5d4f60b2c0095123bdfe04a1fdf471ff443b12d2fdc79d3385456ae28ee5ecab8e1a
SSDEEP 384:jJNV8cueq7UtU/UnhMhSsRfvZ83+QtOGw2:Vj8eG8MU+L2
TLSH
T116F29764B9C221230177937C8FA7920CFB38516792051744BEAC67E61FF0954E6ABEBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1732	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338358334361580"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{3E402658-28AA-4C64-BFB5-17E1C0E94CFC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4052 wrote to memory of 4616	4052	msedge.exe	88
PID 4052 wrote to memory of 1732	4052	msedge.exe	90
PID 4052 wrote to memory of 2896	4052	msedge.exe	91
PID 4052 wrote to memory of 2896	4052	msedge.exe	91
PID 4052 wrote to memory of 2896	4052	msedge.exe	91
PID 4052 wrote to memory of 3460	4052	msedge.exe	92
PID 4052 wrote to memory of 3460	4052	msedge.exe	92
PID 4052 wrote to memory of 3756	4052	msedge.exe	94
PID 4052 wrote to memory of 1072	4052	msedge.exe	93
PID 4052 wrote to memory of 3756	4052	msedge.exe	94
PID 4052 wrote to memory of 3756	4052	msedge.exe	94
PID 4052 wrote to memory of 1072	4052	msedge.exe	93
PID 4052 wrote to memory of 1072	4052	msedge.exe	93
PID 4052 wrote to memory of 2468	4052	msedge.exe	95
PID 4052 wrote to memory of 2468	4052	msedge.exe	95
PID 4052 wrote to memory of 2468	4052	msedge.exe	95
PID 4052 wrote to memory of 3484	4052	msedge.exe	96
PID 4052 wrote to memory of 3484	4052	msedge.exe	96
PID 4052 wrote to memory of 3484	4052	msedge.exe	96
PID 4052 wrote to memory of 2108	4052	msedge.exe	98
PID 4052 wrote to memory of 5060	4052	msedge.exe	99
PID 4052 wrote to memory of 2108	4052	msedge.exe	98
PID 4052 wrote to memory of 5060	4052	msedge.exe	99
PID 4052 wrote to memory of 2864	4052	msedge.exe	101
PID 4052 wrote to memory of 1484	4052	msedge.exe	107
PID 4052 wrote to memory of 752	4052	msedge.exe	108
PID 4052 wrote to memory of 3692	4052	msedge.exe	109
PID 4052 wrote to memory of 3800	4052	msedge.exe	110
PID 4052 wrote to memory of 3800	4052	msedge.exe	110
PID 4052 wrote to memory of 1540	4052	msedge.exe	111
PID 4052 wrote to memory of 1540	4052	msedge.exe	111
PID 4052 wrote to memory of 548	4052	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0a13a54ca8acd330c5e4e4518c1ba3f07c873d4ced081f7e4cdcda78db81065c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffafdc5c188,0x7ffafdc5c194,0x7ffafdc5c1a0
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,15093060618861504070,8803808958013890051,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,13433397326360411072,265735272875004908,262144 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,5131194383391232656,7984720924123942126,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2474472011287531059,6780702856082551005,2097152 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,4884766985503644855,15653675013433053137,2097152 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,10013206181230236793,17921118432606650937,2097152 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,11521468983462912542,10083300829357179210,2097152 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,17526919001085151808,9457338442401491061,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,14172789498424831660,6170807903237440128,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1533101814638752243,6683440452282034143,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1533101814638752243,6683440452282034143,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,18381290830324250756,13786008170814353901,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,3270962222700678293,16891966024335470179,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,1204989181213461664,8409782845908992795,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,12936635133304408442,8558633657160879691,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,8029168739734154478,2232102146988457480,524288 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5192,i,13555285789248452410,15934824967057759840,262144 --field-trial-handle=2264,i,5047413276345409873,13049734706784880352,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b95a46855291bd194daec749386fe61780ce460419e93227b7e70f6bf3f31688
MD5 136bc0a0966a13239de3f3fb57f8c8cd
SHA1 5d2d056c24732df0b5619f25e38932c0ba381e69
SHA512 d31aad339fab6e86b2774956ccf3ef1f255de3bb4bf7bcdfa2d8d3799fb7cb5bfcc7130465d65f63ff155ffc7ecc95a8a9072f0dac6b217892f38a6f29256ddf
TLSH
T14251434C46F64177F7D84232D1F642C736309B7165832E4222A7F7B9FA86359CB46092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fc1e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fc1e.TMP
Size 2KB
SHA256 c79b3ebf34dc0e4bd0c8694758028d8722e20a55dd9bf57bc3a61ad9a5b45bb8
MD5 8cf502bd83fafeca39b34ff4d150700c
SHA1 7637b6aa8f8bdfec23fd572031624eb11eae1fac
SHA512 e26343f5551967846419938e7cfbd811110b37edd822522d9b914796dfeca61b94df4591dc10209d83ee1e1ca30b58bdb1ee5da092543c4cfaf998085c8f57a5
TLSH
T16B51634C46F64177F7D84132D0F242C736308B71A1832E4222A7FBB8FA86359CB4A092
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 967B
SHA256 bc7c9df07ce1c33a90a0e2e46eef0d7862c997e1c646be90b516c72d078b8bdc
MD5 8874a2d30bebf3310c78b287cbc654a1
SHA1 81fff32b13b97be514ee7142033dc3f801b0bba8
SHA512 7fa8674170b198d884848784cfea85e04bd3f0b5eb95aa95f7601845b21ea7a9cffa5994b4117ca9e836c231b3345fb14ae155228fdf8560690e33846f4d8160
TLSH
T12511B1F3C3D889AE891152F05B186E17CE1D0506432C3C56C9E4AF1B93F2474D10089F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

df5b3f81-efbd-4371-b9b9-25141a64b409.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\df5b3f81-efbd-4371-b9b9-25141a64b409.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 13375816f126621ac36f4de0c6e6c0ee68e168f2973286c2c049743dedee3a2e
MD5 12c812ac6b616f815a3fb9c6fe381945
SHA1 c89bd043a91ad559d22f188c0ee94b74f96418ca
SHA512 8e05fc62b41d5a876d7d122a2c8c475e829e63b6bd84ae41e354924bc8542d03244e6d8b11d074d09a67961cd14e27c00828438e4f34df7bc8a0018d5548dddb
SSDEEP 192:sxZxRoWB/fmsi4+IdpdRHW6+WNGYYBa7MsIgrJ:sxZxVB/fmsTvHHbGfVw9
TLSH
T1571296156E38A97B8CCBE209BB15BF53D6FD503261941E58AAFCC61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 03d699baf3df2b8f20959e994b313f28391e2a7951375258a0aaf66f1a69310c
MD5 64ee3ce72b800e9a21df31bde4a432e9
SHA1 0b787c87ca460a9d9abb60a76013d94e972446d7
SHA512 a5d255eea7ff821f6ecdf3ae5c895b77462b29f487c8ec4b2425708e69f2644beae2041934b4575214a9c44c140aab9fcfaf9fda931a8a3e130b9672dd7533ca
SSDEEP 192:sxZxRoWB/fms/4+IdpdRHW6+WNGYYBa7MsIg5QAJ:sxZxVB/fmsQvHHbGfVwL
TLSH
T14022B6156E38A97B8CCBE209BB55BF53D6FD5032A1D01E48AAFCC61C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 86da714720bc3d7ce03d4ab1dd80f44f3a643f690c83740682f6911c5b02a8c7
MD5 0a9d0c67900926aafe6d9bc4c540e28c
SHA1 3e51003ece6e1598939f615c9daa3c17ee203a93
SHA512 90c96aca07dc3f5cc62556b2fc4274922c5fa9a2931a0b061ad48e0990d2ac71e9de99d7f126b560af99af4d140748e35506646154d88cf708f5cdb35c3531ff
SSDEEP 192:sxZxRoWB/fms/t+IdpdRHW6+WNGYYBb7MsIg5QyJ:sxZxVB/fmslvHHbGfEwN
TLSH
T1E522B6556E38A97B8CCBE209BB557F53E6FD503261901E48AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d51f13c2ccf49796fb262d414b30522198b30a3d143496fd054b22812435c49c
MD5 250ee798057445bc746a00663986e3b9
SHA1 0f26e786bb31c274bdaa1e09ede8b942776cb11e
SHA512 44465da167b2aa965ee5f103898c08b9448b5254ce59b83908619f0d84b0093fdbdb427e8bc9d44fb3c204b30a312270d23df839760c3684b8911746705f5f12
SSDEEP 192:sxZxRoWB/fms/t+IdpHRHW6+WNGYYBz7MsIg5QyJ:sxZxVB/fmslvxHbGfcwN
TLSH
T1BA22B7556E38697B8CCBE209BB557F53E6FD503261901E48AAFCC61C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 184c4abe4b7dde71c287899f301bd20be0f5a19403e127ae7e1b2142f9a8f7b3
MD5 2ed70cc801539f25c79600ff87d7d0f2
SHA1 a34ef5becb41824ab3890555b0ec15f773f3c6fc
SHA512 197d5608a19c2b49777b5ec70df4ca4922e67ffd53ea38a216acc9773b7984e6f57e066b3d27eaeaa14a5ccbadaa3384899d2fd4637a8e85872c5dd2cc1f6296
SSDEEP 768:yHyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXRropPGq:yHyYR7jWv3NpBu1ja/CL8OXq/
TLSH
T1F1C2E93B640DCB7E4FC01A9DDC5A6FDB2E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30d9bdb3-d66a-4572-936d-a36201986695.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\30d9bdb3-d66a-4572-936d-a36201986695.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a0e72378bb9db600df6d979c29e4e7653bfde14a2cbab4adb657b7e0fcdbc075
MD5 0f2d13be45b0d1012808d760108d2f85
SHA1 e800dc5a41159a2024004f1ce6a964052c615971
SHA512 8387ae12f15a6325bb371b6be50b9c32e4092f1f3f61c26d941eff5be90c54101452cdf0a5be54d2da94d36f509428c0f50376e0b531a8a978dd88a6dc0c9a1d
SSDEEP 384:GiFiZcI2jsNq8TUNTUlIlpNiUbxQX5+DtI81KwXiJr8+Uw7O6R2FeoZh7UvoO:tFQSrwg53mkDVDih8+Uw7TRIW9
TLSH
T1B7A27D7358A4DC7B6EFB9685F54A3213DEF850A3D685ABC0E7DC5F1D009A698130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a12aa6f4cb726ae0699aa5e5cf5eb539f70c64b6364a87314e4d67a0431f6695
MD5 b0d5b195e149391d3b33000dc94076d8
SHA1 2cadca5992bdf9b3514a1ae828840e3a2e32d991
SHA512 c85588825edaa6b564fc933d15096ab436d021fca733000fd51cf8474905211fc7d3d43a5ed6b77e81983c9a1f27485ecb91aa8f6734dc27a98853a693ce2f09
SSDEEP 384:nZcI9sNSgNio9xQX5+DtI81KwXiJr8zUw7O6R2FeoZh7UvoO:P9UBmkDVDih8zUw7TRIW9
TLSH
T135827D3168B4AC7B19E7A185B44A32239DFD506397C96FC0E9ED5F2D01DABA81306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e883dd82bc70204ffd63bec1667411bd05cb8974560aed6ed51efe36b6835432
MD5 54dc702961e945fd3181ef8e16d47962
SHA1 8a9ff062e205e72a52b4078058f54e4d449b075f
SHA512 e5c7d2ffc3af266155d1a5a04141ed171ead7629c2767113efe8e6d4938a4f96f6be206ecbbf31c8359fa3564b5d44659dc116b9c20e98b2549251c9a2780214
SSDEEP 384:CZcI9sNSpNiUbxQX5+DtI81KwXiJr86Uw7O6R2FeoZh7UvoO:w9l3mkDVDih86Uw7TRIW9
TLSH
T116827D7168B4AC7759E7E185B44632239DFC506797C86FC0E9ED5F2E00D9BA81306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bfc2a671ad11d4430e80655a35005cdeaffd827383eaf406ab8f6f268a7d782c
MD5 2937eb4e2c88cf146aedf8301fdb5c47
SHA1 be669051df3388f081b60890c4a32dec8c35b777
SHA512 f59342b53330797a6bc7fcf554be363792dc5d62d4c14ea34ff4f75bba07f58c64c24959100b67a6e8c6086f60859f8f3bcf39ba4d5fc000abaa2ea56ed2ee0d
SSDEEP 192:EONO6nnHGQmiUyxBQYcX5hQDP1Ajzor181mI7Mc1cU6:EONO6nCUQNX5+DtI81KHGU6
TLSH
T1FF02DA34ACB87C7B9AF3AD45B1873713AFA52167A5942FC0DAE81A1D00D765C2306D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cbcaa31669a086583e9f9ef1827039c968aec0d63fb8f776abee29edec893dc0
MD5 4233f16983bea19aecda8be8dc5d4ead
SHA1 20f649daf1ea917bb2180248f89208c206821060
SHA512 6f06d77de6a11b726ce0f9408531e26c1b68a5d15cbf26e4b64b1bbe42be606e669196c74339a602e6c4c4d9cff5e4b8dde4a60426a6520b034a46793b7011d3
SSDEEP 192:EON76nnHrQmiUyuBDYcX5hQDP1Ajzor181mIwXXSJr8Bg3a/5wU6:EON76n95DNX5+DtI81KwXiJr8WUwU6
TLSH
T1D5121D35A4A8AC6B5DE3A595B0873123AEA91127D7897FC0D6EC1F2C01DF76C5309C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87b9dc94-bd24-4ffe-9b74-cef4c8aae7ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\87b9dc94-bd24-4ffe-9b74-cef4c8aae7ac.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b52065c681bb063ad7670cdce243271f8489b9988ad99267bbaef2513b5b741a
MD5 19d5011cfb4c1e50f4ea68864b40b1fd
SHA1 41608b13d6d91272ed2c80e14789abf4d4ab12be
SHA512 be19c42f9c8bfd61d623e12de3fe91adc67e47fc1db01e508a1a3295c5590a401ad85a3ff1ef087b29ecee8da9fdcbcba1ae84637bbe3ba8d22c526cf56d1b44
TLSH
T11E411849B6ED1104B3B77E5A6BF6A86D447A78372E06D49E10110D4F0A22F40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download