a9c91e933e513193f1ba056ed626cb26561101cf78aa61fcb10fae39c275ad9c

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a9c91e933e513193f1ba056ed626cb26561101cf78aa61fcb10fae39c275ad9c.html
Size 6KB
Sample260913-b7htcszcja
SHA256 a9c91e933e513193f1ba056ed626cb26561101cf78aa61fcb10fae39c275ad9c
MD5 a24b1f252903b294712589e3546b2f5e
SHA1 7f7ece754d0f0b34ed6dd8a59b6e211f2196af4f
SHA512 2d320a110718e945dabdc8fed2275a454211b6ebdf9916b3a346cca81694b5361cb1d38080290f54242c54e2ad36bed16e24a684b9a8f6e5835d17d4c1a5f0b8
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69DEcE8XECgUdDhQoKDejCPJu:zWLJlxe0f80WhtKDejCxu
TLSH
T19CE1A55A9E4C853F410005DBF0A16A1CD8AB447BD312D8A6FCFF416E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338210201214916"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{B38F296C-320F-44FB-BEAD-2F823BC53986}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe
1220	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1220 wrote to memory of 4464	1220	msedge.exe	83
PID 1220 wrote to memory of 5064	1220	msedge.exe	84
PID 1220 wrote to memory of 3488	1220	msedge.exe	85
PID 1220 wrote to memory of 5064	1220	msedge.exe	84
PID 1220 wrote to memory of 5064	1220	msedge.exe	84
PID 1220 wrote to memory of 888	1220	msedge.exe	87
PID 1220 wrote to memory of 888	1220	msedge.exe	87
PID 1220 wrote to memory of 2068	1220	msedge.exe	88
PID 1220 wrote to memory of 1228	1220	msedge.exe	89
PID 1220 wrote to memory of 2068	1220	msedge.exe	88
PID 1220 wrote to memory of 2068	1220	msedge.exe	88
PID 1220 wrote to memory of 1228	1220	msedge.exe	89
PID 1220 wrote to memory of 1228	1220	msedge.exe	89
PID 1220 wrote to memory of 2204	1220	msedge.exe	90
PID 1220 wrote to memory of 2204	1220	msedge.exe	90
PID 1220 wrote to memory of 2204	1220	msedge.exe	90
PID 1220 wrote to memory of 896	1220	msedge.exe	91
PID 1220 wrote to memory of 896	1220	msedge.exe	91
PID 1220 wrote to memory of 896	1220	msedge.exe	91
PID 1220 wrote to memory of 8	1220	msedge.exe	95
PID 1220 wrote to memory of 1144	1220	msedge.exe	96
PID 1220 wrote to memory of 8	1220	msedge.exe	95
PID 1220 wrote to memory of 1144	1220	msedge.exe	96
PID 1220 wrote to memory of 1296	1220	msedge.exe	98
PID 1220 wrote to memory of 4300	1220	msedge.exe	103
PID 1220 wrote to memory of 4864	1220	msedge.exe	104
PID 1220 wrote to memory of 3420	1220	msedge.exe	105
PID 1220 wrote to memory of 412	1220	msedge.exe	106
PID 1220 wrote to memory of 412	1220	msedge.exe	106
PID 1220 wrote to memory of 4508	1220	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a9c91e933e513193f1ba056ed626cb26561101cf78aa61fcb10fae39c275ad9c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffafddfc188,0x7ffafddfc194,0x7ffafddfc1a0
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,7590499138055832389,6799526833197963524,262144 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,4346207992064038870,14099138288036730239,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,5051690860362412499,1199722660465491039,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,6865976521491176753,17900235166559491560,2097152 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,9111268973057927682,12345176503231346229,2097152 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,12304275256245871662,12277075112380658221,2097152 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,7096080376864874817,8120784615424367770,2097152 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,18371430205484638182,9155454849859353640,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,10959802621906596238,17878841319133750245,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,16383627469929264451,13065311556282741944,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,16383627469929264451,13065311556282741944,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,2562165577896362385,15579053290483656404,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,1187742948932596593,12766744854904281116,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,13212275252427296152,16036026445163982803,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,309258116713099638,14508439045854425377,524288 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5948,i,7826000167153536974,17670030508686506727,262144 --field-trial-handle=2108,i,1333813109834161738,4334860954040511632,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b8cb129a1700a2b1004fbeaa8ef097a0496cd9e02ff5824952c0750b54678872
MD5 b9697180160c702b3c41ae3720638cf4
SHA1 999482435c3068c8a88d9ae097c0ea0019033f5a
SHA512 0d3094ecfb98174a95ecafb056c5b24d9df0869e5075b320d5edd0fef7dd6687bca789ad3c11a5261187d65336d20df6d66d94bf6e2a9a3345c50fc3bbacbf3d
TLSH
T13161A5A34E40A0DDFBAAE573B7C925873D30C580A1431DE10B98D0F758C67FB228A870
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591ce5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591ce5.TMP
Size 3KB
SHA256 52cb60a05cd0129517211219105e04559e8b0ff599117c66d4999e15b14109fa
MD5 3aedf1ff5cf89297a88f0ecfa6681f1e
SHA1 6fd1016cf2e3c32d081212be993016cbe58746bf
SHA512 ae999897132adeb2b6142d7c9c85e8fe24d6821267613b58e3ac4780cbc1506e2efa04bd7b04c67e3296e2721149743d2d259c3f18fb5f51e776fa3b7ae7819c
TLSH
T15161A5A34F40A0DDFBAAE573B7C921873E30C580A1431DE11A58D0F758C67FB228A8B0
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9cf875574bb9d234e7f808e8530fe25d67c2618e3761fd3ee48714d64dcb55f4
MD5 e388fb6076fae0073405769ff0f8ab98
SHA1 05efa77b9ea1edf271d33602b84d98b578ee4ded
SHA512 6e0f8309539f27e026cd1cb5d00576a64c9b078fea8e65024ebcfc44bbaa67083006049981e376caa8f6568fee3a9898cc6daaff21f0c3aaa9e6232e6b6bfaf2
TLSH
T1B1217DF7C3D486BEC90157F05A24AE17CE1D0A16922C3C56C9E4AF1B93F24B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 75d1ec47c5efb108e20e1f551d36a9598f3b721af1a738f34fcb40073ea57613
MD5 a07febf217d294b4b6752aaa5641cdc7
SHA1 616df7a7f78129bdaee734d23cc66d6dca2c23fa
SHA512 8e2ac4c07389b3cb292dfda0b4935e965a15c1341c9912fcbb827f459de0c309494f64affd42dcbc6cd9e18bc3563bec455af67b582c429111712f94e58217bd
SSDEEP 192:sxZORxWQ/flsFulNIdpdPHW6+WNGYaQhOCIgrJ:sxZOeQ/flsFulu5HbGaB9
TLSH
T16912C8516E28A57B8CCBD20DBB25BF43E6F9503251D51E48EAFC8A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f28f47acd05961ca104597391cf6771e45aba332a5c23f2b50e2bf83b35d804a
MD5 8e70e7c2bf176ae258b6a4067f1f4154
SHA1 1aa7531eeba623c758f8615dcce2c3256403fa12
SHA512 c92c4823007626ae3e49d4c9ff26e48764deaf3ef5a218e8ff36a594f5d70a7677dd1c3fd21be93c194377b2fd7f03f5c5a855df73de7d0459d1077dbc826be3
SSDEEP 192:sxZORxWQ/flsCulNIdpdPHW6+WNGYaQhOCIg5+J:sxZOeQ/flsCulu5HbGaBc
TLSH
T1EF22B8556E38A97B8CCBD20DBB15BF43D6F9503291951E48AAFC8A1C05EBADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a4f2ff1bd0d47b24e3f6f82ad2d15b644ca0063ef0517291365ba3baf009c77a
MD5 8f77c00ceffe1b6bbcf1d3c3cbef15ed
SHA1 61afc3bafb07e94789ad10e2b11d37655261da83
SHA512 5c06ba80b499bf3d1886eef63243c3edc90be3564c8cdd332135f0f2c1c4993c4290b0f3aa10dee213cf07fc0ebba0ab1a803c19f07509248f852c71824d4e6f
SSDEEP 192:sxZORxWQ/flsquXNIdpHPHW6+WNGYaqhOCIg5UJ:sxZOeQ/flsquXuvHbGIBW
TLSH
T10E22F9556E38697B8CCBD20DBB15BF53E6F9503291911E48AAFC8A1C05E7BCE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a47eb4310345df58fa403dee6adb6b064bef4ef27e52ca6dcbfa90580408c8e7
MD5 595d3635b2f9828e93a7e89ee4fcd706
SHA1 e412596a77db9d2d6d5d3700235a64eabd10de8c
SHA512 a37d5a0392b8c2b747ecb13d5f2999a8ac6ebad8489793e233fe1334f0f9f67454f5efbcc52ce5e3e273da0ae61355cb7fb23baab25c879f4ce59b2c96766df9
SSDEEP 192:sxZORxWQ/flsquXNIdpdPHW6+WNGYaEhOCIg5UJ:sxZOeQ/flsquXu5HbG+BW
TLSH
T15722D8556E38A97B8CCBE20DBB55BF43E6F9503291951E48AAFC8A1C05E7BCD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d97e59c54c8ba137a624612fb90332e93faa4711e493cfd7a7d66bd522f434af
MD5 0925d060a8493d81aae38f3f404f66d4
SHA1 e523cf2d7b1b819508e4f811ec75bc1eb7996879
SHA512 8097a3046e56bc54d0ee0f28bac0de9d1ac1a3d06ca18edcdc59b3470db379b3ca80988c177fbe3c92b95cfe91c690b5a5fe179dbac329a30e88fb6445133170
SSDEEP 768:kfl9yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3l3ro/ZY0:qbyQRbrWvvlpZu1jaXKLf33e/ZY0
TLSH
T166C2E93B640CCB7E4FC01E9DDC6A6F976EA802D766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b934.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b934.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 788f5f9c6386edc3418c2668dd6029b428f49ee24a95383a17521b6f9edaeda4
MD5 f51d1079913650003597a6b1ba7ee9a6
SHA1 478c336a7ec0f897055b4ff96e54de13842b5ca5
SHA512 e703a01e5e4e44d3b17d934ef67803ae258c8ac402ab23d4f590c6656150b2437256ad08632f19eea000759694444fc84ffcb9573edd8283c180ca00031c7149
SSDEEP 384:jZcIRsN87tq8w89AibCM8up5u8iRwKHYo2rika+Npajwlom:7Rjc8VKibCMhkRNerika+ba0lh
TLSH
T168827D755C786CBA6CE6E151F94737038EBC81ABE7C86F80C4DDAB1D01EA6D80706A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3a60465f1d7effaf0e5b30e0a2e5a64069bb66cafc44fea459cb5ee1ef429423
MD5 536dda8643246868c02663f4fbb70f84
SHA1 444e3fcd30b0969f2e0ca9a7202f3863eccebeb2
SHA512 febe5aa6deb9f84d6af3ecc021ce91009aa22a23766884530e2a62f60eb203f6a40fe18d0485b11b1bcb9329b1905f4164486a06544500349bfbd0fe92432636
SSDEEP 384:gZcIRsN87Yq8w8QAibCM8up5u8iRwKHYo2rika+Npajwlom:eRjX8VhibCMhkRNerika+ba0lh
TLSH
T1F0927D755C786CBA6CE6E151F94737038EB8816BE7C86F80C4EDAB1D01EA6D80707A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c0255cdd89d2a87f6ba3a9b7f670340c6647941c86a09605bb2f1b5e2d4bd801
MD5 e6e6c59414a9578cdd8efed88572cfc1
SHA1 23aa0039e5d6e7142de003fa19bd62bf7911a167
SHA512 0d09327a485b6358120e04955647a8a2391b1eef7c7ced7d5aa2b7bc6085c1592c740e8d548ce04258f82fc30e02040231230032afbfca54156c052362fb2560
SSDEEP 192:SONI6iDCQmiUyuFuPHq5u88PRw7SqrKoxU6:SONI6/jYPHq5u8iRwhrHU6
TLSH
T17402F8386C787CBB9DE2AE15B5473B179FA5113FE6942F84C9E8162C01D769C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2f01b10f064ac1ef83c3d76b8097d4e73ca2598a38d138cdb97ed49b68d8cf59
MD5 71dc1321458241e7a4acd40564d5711a
SHA1 d2a7776a42ea7bc19162873b146b775ae7989ced
SHA512 8473bc664b60b14483e1093758822441193d24a2ecdc58c0bb5ed766e57f98733b3a4fe1b46b12fdeddd857d43cb7a71af15bdc50d0057e39def249d6525d691
SSDEEP 384:YiFiZcIiPsN8F8TUNTUlIlYq8w8QAibCM8up5u8iRwKHYo+rika+Npajwlom:jFQ2jFwgV8VhibCMhkRNmrika+ba0lh
TLSH
T148A27D724C689C7FACEA9651F94A33038EB881ABD6C5AB90D6DC9E1D01AB1DC0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 38a31902ed65c9108b09a4991724ba151028abbfc164d0b45be9eb986733cbd8
MD5 79dc18791bca50ff68301c1423bfebb6
SHA1 817c927028e6a11d4b18921eb10d87db96d06dea
SHA512 271cd03293f042d752fbf5f9860b8a043f489299096bf607deb8331393b7ad0fa3cc559e762fcf03d0f30dfe3c1df71e69216cf808b6d58cadf921f800565e43
SSDEEP 192:SONQK6iDNNQmiUyu0uPMHq5u88PRwKHPwoluZrB/oU6:SONQK6mLjZPMHq5u8iRwKHYo8riU6
TLSH
T1C4123B356878BC6B6DD2A861F48736139EA8412BDB897F85C5DC2B2C05EF1DC5307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0283d18-37e1-40f2-b78d-5519c6c253fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c0283d18-37e1-40f2-b78d-5519c6c253fc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4cd708190e42c500be1ab6df7ec144039ffd64a901a3c63217381925b469a9fc
MD5 8dc7126c5c0e658aedef38b80606ae87
SHA1 59dd9e24f24e8ff96acf86e51131b51e42416c95
SHA512 8ae6bf737f69e72cf31a37c03cc9de970d0af4b6316cd6235071af0cfc12700ab47cd99ed3d77e8e8f0ca1d04f13a8cfb57958af8085ec4a9ff3f6630a2e51a8
TLSH
T1BA41E9A8A6EE1148B3776F5A9BF6A86D447FB8732E06D55D00110D4F0A72B00D871B33
MD5 SHA1 SHA512 TLSH

Submit Download