4cd6a0b2286618c6f8c666f23cc96ec2811f69d3725c545733632a664953c135

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4cd6a0b2286618c6f8c666f23cc96ec2811f69d3725c545733632a664953c135.html
Size 6KB
Sample260913-e2l6da1gne
SHA256 4cd6a0b2286618c6f8c666f23cc96ec2811f69d3725c545733632a664953c135
MD5 c5ab349d13b9ba74bc271b4adcaeb252
SHA1 373e1a045a2f81da5ad539a15da5a23dea6c6582
SHA512 463c63747fb5aba58fdbade7b58d5048871685aeb56dec90646fdd51a4bef88983cb08f843317c2764bdfc8f9379453c01e799067d7eb1f22130a4a6ebd46227
SSDEEP 192:zWLv15G5WDNl7eqmngZ1nZ69REcE8XECgUdDhQoKDejCPJu:zWLJl7eOf80WhtKDejCxu
TLSH
T1FDE1B55A9E4C853F4100059BF0A16A1CD89B487BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3608	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338189275515962"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{9CF65A52-9F9A-44EA-BD4D-3CC0DE0A25DE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 1640	4252	msedge.exe	84
PID 4252 wrote to memory of 2340	4252	msedge.exe	85
PID 4252 wrote to memory of 3608	4252	msedge.exe	86
PID 4252 wrote to memory of 2340	4252	msedge.exe	85
PID 4252 wrote to memory of 2340	4252	msedge.exe	85
PID 4252 wrote to memory of 3716	4252	msedge.exe	87
PID 4252 wrote to memory of 3716	4252	msedge.exe	87
PID 4252 wrote to memory of 3612	4252	msedge.exe	89
PID 4252 wrote to memory of 4352	4252	msedge.exe	90
PID 4252 wrote to memory of 3612	4252	msedge.exe	89
PID 4252 wrote to memory of 3612	4252	msedge.exe	89
PID 4252 wrote to memory of 4352	4252	msedge.exe	90
PID 4252 wrote to memory of 4352	4252	msedge.exe	90
PID 4252 wrote to memory of 2836	4252	msedge.exe	92
PID 4252 wrote to memory of 2136	4252	msedge.exe	91
PID 4252 wrote to memory of 2836	4252	msedge.exe	92
PID 4252 wrote to memory of 2836	4252	msedge.exe	92
PID 4252 wrote to memory of 2136	4252	msedge.exe	91
PID 4252 wrote to memory of 2136	4252	msedge.exe	91
PID 4252 wrote to memory of 3284	4252	msedge.exe	96
PID 4252 wrote to memory of 3540	4252	msedge.exe	97
PID 4252 wrote to memory of 3284	4252	msedge.exe	96
PID 4252 wrote to memory of 3540	4252	msedge.exe	97
PID 4252 wrote to memory of 2488	4252	msedge.exe	100
PID 4252 wrote to memory of 1232	4252	msedge.exe	106
PID 4252 wrote to memory of 2388	4252	msedge.exe	107
PID 4252 wrote to memory of 4044	4252	msedge.exe	108
PID 4252 wrote to memory of 4108	4252	msedge.exe	110
PID 4252 wrote to memory of 4108	4252	msedge.exe	110
PID 4252 wrote to memory of 4012	4252	msedge.exe	111
PID 4252 wrote to memory of 4012	4252	msedge.exe	111
PID 4252 wrote to memory of 4280	4252	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4cd6a0b2286618c6f8c666f23cc96ec2811f69d3725c545733632a664953c135.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd1508c188,0x7ffd1508c194,0x7ffd1508c1a0
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,4501832723141964880,13362429492225503002,262144 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:2
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,10027826481217170926,15015933798300126312,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,13079712504065395665,4414930510874834751,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,15120470359342600667,13351817767044974553,2097152 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13023588661426917748,13119313533925223829,2097152 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,18058079934627692013,3913127779233982859,2097152 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,8217467897925980062,10015501179272087794,2097152 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7721212690840346356,10890096078574118648,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,17355970168219897126,1669335560716904278,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,6499413661786556884,4498470174521151525,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,6499413661786556884,4498470174521151525,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,7367469212460952247,14156163826045127203,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,3160926903473537990,3204630005073966364,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1652,i,5754863879330150106,16644568218958145237,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,14446044801164810265,536388042771015093,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,7638024521511399780,5367947983589920146,524288 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5676,i,3756844913082246078,4628679882729412288,262144 --field-trial-handle=2840,i,14607844128335793130,3290503535142254450,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 17976186b6a48b328c2db3934deebb2b77dac08cd6c35e27e8480d59d78576a3
MD5 82859ecbe26e46f89ee87150fb255ce7
SHA1 28ace03cf244bff8b551f15d4505d4d964030b07
SHA512 3c14ead589f2b8b5ca0e6d81347cf830384234f80dee73e26235e9622481f88142ff492beb8b5bd08e8a6ac7e14c208ba044c921126b37755b723156ae8bf009
TLSH
T1FA61C68215440E69FFA8D97889FE27873635A58164872EC240ADECFA580EFD5E37037C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bbd9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bbd9.TMP
Size 3KB
SHA256 6f453465dc7233874b11e9ca86d00dd08f56149391a1120c55fdbf1457c732ed
MD5 5aecda635d5cd0de43ef28eaf2cd8afc
SHA1 b87abd032fdc56c52aa687e32dca07ea886607d9
SHA512 1b8fabc5073c6e275c32dd903b5b2e2efc49295a84de3998bc46fc9f1198fc948a3e8899a48155b7b72d04843ab311960b3706a80328d5a93a2ad7326429009d
TLSH
T1D761B68215440E69FFA8D9B889FE13873635A58524872EC2505DECFA580EFD5E33037C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b8d3969c1a1844659bdcb103d3fe320205765c924826c7384123412c0968f76f
MD5 6bdce70be5dc685bf19a84db30100b3b
SHA1 701081fc2904bfc021f9a58aae962ba44a6ab160
SHA512 b604375f3788f555775240d2e9783d214bf8cb308d25f268fcb105cb60ea0cdf70e624fbb5837a1091d298649430edb59a2913acf1731ff62deb7f9d3d49e7fb
TLSH
T1CF218FF3C3D886AEC90156F06A28AE17CE1D0A56422C3C5689E4EF5FA3F24B5D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 96e36ba8a923bc392b6a50b51cdad9a8a7fd25efe996844a50eda648cd534873
MD5 73deea4099ecca54c3dc9e86a88ca2df
SHA1 0e457404d3c0cedb3e9777ab3d1114d14bcb032c
SHA512 f7c2b3b0b16269b980381bd0ab2ea6049090aa3c711ac469f0973c97904b7848d058b038621bf40020963070a821e665ace6d36fccd1efa4cd058b5d4af43a2c
SSDEEP 192:sxZGRLTWH/fCsdsIdpdGHW6+WNGYRPR/OgIgrJ:sxZGYH/fCsd1IHbGmD9
TLSH
T1ED12C8126E28A97B8CCBD21DBA25BF53D6F9503291D51E88EAFCC61C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 512f3a41096b8066e0738dec0e3e0fee9570405e4c65b395631f2ba82156697d
MD5 2dff14b1048e54c9e4633d1e9d3cca30
SHA1 fca39e8161eae4c78aea4028d46afc5fb01e7c2e
SHA512 864598b5afa664da8b1e0f8b1ea2b30ca8e0f014403b98f9cf501d0744f40a77273efcac866b4caec72d4f29b0980c1beb517ba4c0bd210e7887d00cd256bbf6
SSDEEP 192:sxZGRLTWH/fCsKiIdpdGHW6+WNGYRPu/OgIg5mJ:sxZGYH/fCsKLIHbGmuQ
TLSH
T1B922C911AE38A97B8CCBE21DBA15BF53E6F9503291D51E48AAFCC61C05E76CD530740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c8e4b267bbc8b6680a17547e2e9f7c86f2224802d3ece680bde7fc9a344ff4ff
MD5 1ac38b631eafc912c5d3873968e0eafd
SHA1 fd3a188617954a41bd564938bf38f2d475f9bd7f
SHA512 ddf55fd479c2de224b52672a661fc697d2700fe85116045924f2c4a599bb62eaf81358a74651b32607cd54fabaf92d3a0a65e2fb1aa30a459e36cef056ddf4e4
SSDEEP 192:sxZGRLTWH/fCs/sIdpdGHW6+WNGYRPR/OgIg5EJ:sxZGYH/fCs/1IHbGmDS
TLSH
T1B922B852AE38A97B8CCBD21DBA15BF53D6F9503291D51E88AAFCC61C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d58abb5df76196afe8b569c350a8797e64926dd991af296a18fbb1536423c28d
MD5 106c9f17b8d88376367dfe9a3112c4ad
SHA1 9e88f3437203f81c25005b22f01189048cd4063a
SHA512 4fa23c5b5ca93209ab09cea7675e40e7b14bcc5a08975008dd7e00cdf244616270a7cfc106efd0c77cef0cd8dfe73b3a9af21d28a1f53b689acb4424b763e9eb
SSDEEP 192:sxZGRLTWH/fCsKiIdpHGHW6+WNGYRPq/OgIg5mJ:sxZGYH/fCsKLmHbGmqQ
TLSH
T15222DA52AE38A97B8CCBE21DBA15BF53E6F9503251D11E48AAFCC61C05E76DD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cd81625ac3ada0b5a49e9abcf054554ef062a51ccf051d2cd7f13aa8c9d37e65
MD5 8da34377bcfaceb1c2d782f796cf3c03
SHA1 b63490986f35e43648c22430b30bb3a459a7398e
SHA512 facd4dc5672eacca24968f803d7143b32eb0c88e2341a54bcae7a334b561c151ba701dc5df96ded1812c0e0b2d62acb9622cc648e057f0626e670ee8fc77d03e
SSDEEP 768:g2K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3/ro++U90:g2K9uzYWvcQWsu1ja0HL7Q3s++U90
TLSH
T1B1C2F93F640DCB7E4FC01A9DDC5A6F9B3E9802D7A6584D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595877.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595877.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 48b17b032094b5d54b7c91998f70d51523f6ff1ba70a9db705a2c381e85e4c31
MD5 4d48be4ed785eba10bce8c6257d39459
SHA1 36bcde5e532c5f18e1b271a5ac91fb16165d5325
SHA512 f423331f17a6727911de657586e4e40b64e699c41a7d10268aaeb40b868da90e60e93ab9f96738e23723e57ee4a5a904d3715b3a0a1b1f35b284ea22f3764305
SSDEEP 192:SOND6ygpQmiUyUFtOCTVgFpOsR0XzPvBSU6:SOND6lHHtOCTVSpOsGzYU6
TLSH
T1B802B735AC682CB78DF36E45F48B37179FE8116BDA552B84DAE81A1C01D765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b478b18923fbb9a9788f1a19b81a4774eb69cb8eb4ef8596beac96993087dd5f
MD5 0066bc91dbc2c29609cf49be4efd3611
SHA1 1a987327b7b14054660b33a3fcccbf85ae113ba4
SHA512 871cef0baba800df2704cca5b0e1124f5d914b15deb796f18da33ef65730e8d3f1818e788349e3c1f260a40aa830b904f64076843f60a6331373b83f0e33a02b
SSDEEP 192:SONq6yzQmiUyuFbOCTVgFpOsR05bjHEB3Ur/XU6:SONq66/bOCTVSpOsG5bjkybU6
TLSH
T1D612F831A8786C7B5DE26545F48B32179FA85167DA457FC0D5EC2F1C02EB6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b0e8f03b5829a64c86daf251e577ddfd8a280702a495a763669f7b69331ccbcb
MD5 085f92cd6b0eb9532cf027177414eadf
SHA1 d93b27859810a75eeb17ac299fb3bbc9e2a34ac2
SHA512 3a37255d70c57f34eb38474df331e81b6142b4191aa3340dfcba678cf4e0476a825dd725737cd4ec4cb01ac9bcf5b415551147797bf6c36b668a60fb6bbe4b98
SSDEEP 384:7iFiZcIBNsNR8TUNTUlIlLwoK1BZOjTVSpOsG5bjk+vbsa+VYaXd7Ucok:WFQrAwgtkUnAOrjkQbhg3txr
TLSH
T15AA26D729C689D7BADB79B85F98B32078EF851A3C5897A94D2DD5F0C009B2DC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 65d64fba198d7a7fbe8df40014ed3fe417728b193cff825512ed0cef22636b70
MD5 ae4e1af8448557efd11271e209638dbc
SHA1 b2656bebb495959710af1d3886b68fec5994de62
SHA512 9e243cb2eb15759cfe28e314b08b6bc7b2db06ea1c75da3cad52ce0527893346b1a00886c84565a555c86c6f316c16b48d93dcb501481464b5799f143bfa6197
SSDEEP 384:1ZcI7sNv2woKZdbBZOjTVSpOsG5bjkzjbsa+VYaXd7Ucok:N7tSUnAOrjk3bhg3txr
TLSH
T1E9827D71AC786CB65CB79285F98732078FF89167D6C83AD485ED5F0C05DA6AC130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 af5f85d24d2e7112a97ed87b86fd7ef9591a9a5bb87af8707c660ea667bca034
MD5 25286f8fa7b381c73644a8134cf28894
SHA1 73eab163036ae288d7e00c01ce5687f283eeaec8
SHA512 fbb1e4f90544dd4e180eefcf2046e991396c2754f1e6f8c09387e436bb61690350e8370f5896da268720f8d1448b78033703eab9b7c6bc9437cd1a4c570910bc
SSDEEP 384:0ZcI7sNvLwoK1BZOjTVSpOsG5bjkzjbsa+VYaXd7Ucok:y7wkUnAOrjk3bhg3txr
TLSH
T1D4828D71AC786CB75CA79281F98732078FF89163D6C83AD485ED5F0C05DA6AC130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ef8b933-b4eb-4e72-8bab-a2d6974e877d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3ef8b933-b4eb-4e72-8bab-a2d6974e877d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 520dcd9b08ca754f751c7bea6cf4a732a775e0553b9e11a6bc5d86a9a00e1ae0
MD5 18fca2d21c217db377feff5be2fd6f8a
SHA1 3bc296f7afafb6583025924a15c346e0966ea705
SHA512 bf47e4c220a96cb1fe3792bb2f7d944a8b8de10afd8f8381259de55bf81b9829db78f7c9405c066a9c52fed19dd5cf4781213eaa4119df6dc4fe3aed016c3c1f
TLSH
T10F412958AAEA1118B3B36F5AABF6B8AD447BB9373E46D45D00010D4F0623B41C871737
MD5 SHA1 SHA512 TLSH

Submit Download