a09a630446c2a1bccd211680201fa0181d97d7a379b08f63dd35b02461081b18

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a09a630446c2a1bccd211680201fa0181d97d7a379b08f63dd35b02461081b18.html
Size 6KB
Sample260913-a8acyayfpg
SHA256 a09a630446c2a1bccd211680201fa0181d97d7a379b08f63dd35b02461081b18
MD5 98e223c423357b6f1eaf4bcc7dd0d6bb
SHA1 d09c3f29802369299fbcdf4a2c38097421224bf1
SHA512 c34b8333c6933e96df5bbb47bbda33bf5ae2877560d9b60737710c0267fca551a7761894e17cb3a75b50614bb609b57da6ccb953b58ac5a52578d579614c1c67
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69oEcE8XECgUdDhQoKDejCPJu:zWLJlxevf80WhtKDejCxu
TLSH
T1A1E1C55A9E4C853F4100059BF0A16A1CD8DB447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338274361384207"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{D92E891C-BB8A-491A-B844-288579531F35}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 3760	4120	msedge.exe	85
PID 4120 wrote to memory of 3360	4120	msedge.exe	86
PID 4120 wrote to memory of 1972	4120	msedge.exe	87
PID 4120 wrote to memory of 1972	4120	msedge.exe	87
PID 4120 wrote to memory of 1972	4120	msedge.exe	87
PID 4120 wrote to memory of 2460	4120	msedge.exe	88
PID 4120 wrote to memory of 2460	4120	msedge.exe	88
PID 4120 wrote to memory of 1948	4120	msedge.exe	89
PID 4120 wrote to memory of 1948	4120	msedge.exe	89
PID 4120 wrote to memory of 1948	4120	msedge.exe	89
PID 4120 wrote to memory of 2980	4120	msedge.exe	90
PID 4120 wrote to memory of 2980	4120	msedge.exe	90
PID 4120 wrote to memory of 2980	4120	msedge.exe	90
PID 4120 wrote to memory of 3824	4120	msedge.exe	92
PID 4120 wrote to memory of 3824	4120	msedge.exe	92
PID 4120 wrote to memory of 3824	4120	msedge.exe	92
PID 4120 wrote to memory of 2940	4120	msedge.exe	93
PID 4120 wrote to memory of 2940	4120	msedge.exe	93
PID 4120 wrote to memory of 2940	4120	msedge.exe	93
PID 4120 wrote to memory of 3740	4120	msedge.exe	97
PID 4120 wrote to memory of 3364	4120	msedge.exe	98
PID 4120 wrote to memory of 3740	4120	msedge.exe	97
PID 4120 wrote to memory of 3364	4120	msedge.exe	98
PID 4120 wrote to memory of 5024	4120	msedge.exe	100
PID 4120 wrote to memory of 4320	4120	msedge.exe	105
PID 4120 wrote to memory of 4168	4120	msedge.exe	106
PID 4120 wrote to memory of 468	4120	msedge.exe	107
PID 4120 wrote to memory of 4924	4120	msedge.exe	108
PID 4120 wrote to memory of 4924	4120	msedge.exe	108
PID 4120 wrote to memory of 4812	4120	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a09a630446c2a1bccd211680201fa0181d97d7a379b08f63dd35b02461081b18.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff932c9c188,0x7ff932c9c194,0x7ff932c9c1a0
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,7884185925834470169,15497154236288445414,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8425576172849379580,12087750631966961727,262144 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,13254798802511851656,15778930904601877114,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,12621179237580701033,10572046323036630165,2097152 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,11606122151702498029,557554323832418686,2097152 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,5393386786982820083,12759224550627658321,2097152 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,8416732912571069042,17675812573673724762,2097152 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:2
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,16670889045943805842,6360188865300403708,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,2551496307947336263,8931941859526631434,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17720608176122356028,7725458245814119107,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17720608176122356028,7725458245814119107,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,15079129394540440050,10109608985379772604,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,4186755402678571422,13211027227385923418,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,6369826951691119016,15123646751878618176,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,6256342724755538767,17754644267931750366,524288 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6268,i,16836902622591736024,15512020880863421866,262144 --field-trial-handle=2160,i,15741606336545171228,13971296363527701995,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1328bc497bd9b06b8f737fd0185b195ff2a319c20da2fc2a5981433715d029c4
MD5 3bf7c09aee4653833a72f437d4099f3e
SHA1 702a7f0dd4025b3c86382b1ea3bd17a15c638028
SHA512 42eb137057cb7e552c870f57c2c23679cd3c195831f232407ab668ee550e51372f6006b2a115d9997bdad3eaadcf7f83ea88bd82b7609733791cc7a1a76ccbc6
TLSH
T129617479AA70E2B9FFA84479D5DA14CF39325D95B447BEC30EB4E87ACC7630491B8101
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c455.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c455.TMP
Size 3KB
SHA256 b0245641696b01bbd7b9b699c43e3ed82778279042bee6753138622f1472b08e
MD5 04d717cf1d0476267f416acf65a4c908
SHA1 4672a4fa9a0550be29e3686eb81f0fadb7e2e966
SHA512 d871d6bc1c0379d97a41c9b32e47b134452ef8542166a40c70d4452eaf1473dad091cef6e51581f164d374025c50324246cff5bc160a362f2074363db58d6cf1
TLSH
T1F6618579AA70E2B8FF684479D4DA14CF39325D95B447BEC30EB4E87ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b5f9b28a0f571d4c164be3b9af61c529d1d980a7812df3e033db9e64450d0b94
MD5 6b301822c46a6009fa5d8ee9e6061c18
SHA1 cc71025f123f8a7df691eaa8030aca4250a44d72
SHA512 e31f904a5f7e7cafdd8bab3152149e359cb7d8f9cd89580286b94ed17b0d50dc9ab60a975ccb4246d83ca3be68d5c095bbc09b556372458df6b4db36eb6d04c6
TLSH
T1AF215FB7C3D4967EC91156F05B24AE1BCE1D0646422C3C1689E4EF1B93F24B5E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f8f36add4d47d05386f380be20666054e33422640e08672a2670f1de865e53d7
MD5 3b8078530f5e15dc3ce80b768ad56da3
SHA1 4c21e493495e3f77c3b52eecb49f8644fdba5342
SHA512 be33dd3a4981de732c8bedb82056d862f958fd7ceeeabe907b9d0e08ebca2bf09069c7bf40056c5385f47ec60f4db34d52986c2b495edcff278b5c9a7c17e81c
SSDEEP 192:sxZpRhWQ/fQsz7tIdpdSHW6+WNGYgUjXIgrJ:sxZpyQ/fQsHOIHbGs9
TLSH
T1A512A7126E28A97B8CCBD21DBB15BF53D6F9503261911E58EBFCC61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 71e7b0db84f4bc85c512d59a900dd8063011d0f42698677930d7ecb594135863
MD5 cd011ee8fc934d57c3b958e05eac41a5
SHA1 2fc96a1ad39c395d7fa0bb165f6d21ea825511e5
SHA512 21b8e3320a24179f31689b63fdc8d6fee7a024f69288c260214063bffd6ebbf3ad66bea2e6cbac93a816de8d2f0a0634015498feb5b3f1e83ba8dca9d70ac3ab
SSDEEP 192:sxZpRhWQ/fQsG7bIdpHSHW6+WNGYgMjXIg5eJ:sxZpyQ/fQsYEyHbGIM
TLSH
T1DE22A8526D28A97B8CCBD20DBB55BF53D6F9503251911E48ABFCCA1C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1a704e18a40df656ea152e316e1ed03c8505a3e96421fd43a3ba418c50baa44a
MD5 15187313141a3aeb925c5218e8442d03
SHA1 cec1fa9b14f31c7359c9a3f09ef858865c33ca3b
SHA512 2b9be431e970e3a4278b73a17b23aa9981633dd3f529e48100d1117a349ce84c7f270da518ccc51fae0062967d1565325a8aa18fd71f414570d6e9607328dac9
SSDEEP 192:sxZpRhWQ/fQsG7bIdpdSHW6+WNGYgPjXIg5eJ:sxZpyQ/fQsYEIHbGZM
TLSH
T18D22A7116E28A97B8CCBE20DBB15BF53D6F9503251951E48ABFCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0708386f466ee49aff8087625958c7bf90b05061e30f6abd6c81f999462ca935
MD5 388c358feb88c79262a967aa158e06ce
SHA1 fa6427b0e9e818306a6db3bc257b7b6440d27da5
SHA512 0841ddcdbc3cc78f6728fb8b2a04c5b8755f835140126f9030e3bab42c048cdc7155b6667dd147abda74312cd37de8599bea30dc50b5d9faf3acb1458667c43d
SSDEEP 192:sxZpRhWQ/fQsO7tIdpdSHW6+WNGYgUjXIg5sJ:sxZpyQ/fQsgOIHbGse
TLSH
T13522A8526E28A97B8CCBD21DBB15BF53D6F9503261911E58EBFCC61C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0d6a85794dee1118198892a02cb0011249eecea94ff7ea9706ce1fdf378b946c
MD5 5f48473bcfe49b041f82da1d8fd2d878
SHA1 507eaf050e748734f0483cf6c50fe985df1c3565
SHA512 f845e45b4f6dbbee20f2e0a17c1d11a7473f8cd85a91193138d4af1dfefa60cb0920d21cabd2bbb35b1630f6ad944ad6c4de317894488ab58b393cea5028dae7
SSDEEP 768:S7ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz9roYx47:S7ichfPWvPZplu1jan+LKgz2Q47
TLSH
T194C2E93B640CCB7E4FC01E9DDD5A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 e6601f3753a142e509be5d96c75280f2dfdcb50bdc9083eea487fa8ed28979a0
MD5 ad6fd667195e5ee3efaa9d255324b75e
SHA1 5a6416978c33a5da2a288ef336289cd6abcb7a5d
SHA512 d7421034f4e613226e879f3265d955bf89a175da8ef8f6af37895634080aeccf4ccec99577cf3e856db2d612003f467e54fc63967378f8124b937e477edbfdc6
TLSH
T11F112181E3DC14456E4DB641C24B6B03D4E17A97520ED836535E84FC9FC8D198A2E954
MD5 SHA1 SHA512 TLSH

Submit Download

a47eeb6c-6c07-4b4a-84e1-e7f003d7b247.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a47eeb6c-6c07-4b4a-84e1-e7f003d7b247.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 0a8e4b98130999ddab86e31ec11d346cfcdfa41850e2c1691b63ef868934e8a3
MD5 c45910af66b59e09c86e57bd85bf7c31
SHA1 bc8a8d3e23e12b47820dc32360ce5f314fa9ce61
SHA512 fdcb9e98d9216ed7d818d5b82ca8bc1ced558134eba23bf919a2ca073b2438c30b4ba70b18677a84f51d785f5506abdc209385aa65ec3f806f1f74f016e0b5b0
SSDEEP 384:HiFiZcInesND8TUNTUlIlVpN7as5GTmMBGYX5E0S+YpDtF7O6R2FeoAh7U0oj:CFQeCwgVEiWGYu0SVp5F7TRXlI
TLSH
T1A1A26B734CB4DC7B9DEADA52F94A36138EF85167C6C5AA90E7DC9E1D009B2D8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 108b4abbbcf69b1fc5316cbe49ab546ee67245e2e252afeea8d86841f2da54fb
MD5 7a8167fb466cef03f2ac201cfcc1504a
SHA1 9f34d6217d396f63fca7ed81219c8cecc602a883
SHA512 a94bfd94137282bc914ecf42c70565a15dc68c95fb585f4e75b874f192b29c5864a1fa8ed11cc10293235a69ae10f7cedd5441e8c8f4e669ae4f44da1b4d8a79
SSDEEP 192:LJONc6DphmqQmiUyUnq8wGYX59ezVCNY+Yjkk7yr/U6:lONc6193RwGYX5E0S+YbEU6
TLSH
T1EF02E935E8786C7B8DE36E45B48B2B235FD8112BAA956F84D6E81E1C01D769C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d8feb0239b1c5861ddcb284ffe81a295a3a9075e19f68abc4a5b4c125f286446
MD5 7b5e97f0fd664f554aef1c9a78087e5e
SHA1 f21eb6a81f4817ad0fd2c98d32f2160892f6b042
SHA512 4a408895662209c8c3e1036fe1bf6cda5dee3c782d27b623b84e5aac5a21f50ba4489aec470717b1c515a6801878d088ec3e045b1f05eaf9ae7cba49c8e0c130
SSDEEP 384:tZcI0sNxQpN7as5GMmMBGYX5E0S+YpDzuF7O6R2FeoAh7U0oj:10jEjWGYu0SVp/uF7TRXlI
TLSH
T116827C724CB8AC7B4DEAE152B84B3A138FF8516797C52F80D6EC9F1D05CB694130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 30fc584d3dfde9a1a83b756eeea96524d434ce8d3e7afbe467f6fa70e6fa9b05
MD5 18bd45daa9cab8461b7efbea4f988b1c
SHA1 95d1ab3f3bfdcab3f06aede3b64ade41d49a6475
SHA512 d687a7f50820d19e050cb3e16975caf7c230634c9636b4c50bbdd72062f502bedc53587107267e4ff9b52c9d7179702c6feb355cba9f82a02b3c1bf70a377bbd
SSDEEP 384:hZcI0sNxVpN7as5GTmMBGYX5E0S+YpDRF7O6R2FeoAh7U0oj:p0YEiWGYu0SVpFF7TRXlI
TLSH
T1B2827D725CB8AC774DEAE152B84B3A138FF8516797C52F8096EC9F1D05CB694230A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a940fe25a7e793bb451f2f05620dcf5464d71d6ce39c4ed0d3e97dd735c6828
MD5 2e786b799605d18fe9a7d0381275a1a6
SHA1 c18de9bb9d731a7401bc0b1e35b5658f86475591
SHA512 b8b1cfc00e1a1bca0863ee51ef2dab4a10619815e2663f6561ffc80a437c113f04c23eb7ca75860362d28657c482c6676ede98324440825be70f828978d9511f
SSDEEP 192:LJONU6DphJAqQmiUyMncwGYX59ezVCNY+YpDyeLkIIT/5bU6:lONU61j1bcwGYX5E0S+YpDmFU6
TLSH
T1E4122A319878AC7B5DD3A991F48B3A135FA8522BEB857F90D6DC1A1C01DF29C130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15243955-4a82-4b01-89ab-51a0c87c838b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\15243955-4a82-4b01-89ab-51a0c87c838b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 261ca46d15be5968150214b4c2a45a0c8b6708313bd85834afbefa18c065ad6b
MD5 ccee4bd936037f6f7be110906c8bcee7
SHA1 53e014529baa4b07abe3e54745397bc79b43f6e5
SHA512 18df8d9c9c75e09f56d9f3c7f1b5a7e7ba9538b8628912b15e3f06898ae59f3e8f2728a0b242a6842b1c513c7017de267a22853a2869eb315c4837c09e3183c8
TLSH
T1C641075CB7E91144B3B36F5A9FB6A86D447FB8372F0AD45D10210D8E0676B00D861B37
MD5 SHA1 SHA512 TLSH

Submit Download