d20dc78a9c3cd1a22e4f3ebcb65d1dbbf9bd8cb18c22476f08938eaf02dd2492

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d20dc78a9c3cd1a22e4f3ebcb65d1dbbf9bd8cb18c22476f08938eaf02dd2492.html
Size 104KB
Sample260912-2qengsbc59
SHA256 d20dc78a9c3cd1a22e4f3ebcb65d1dbbf9bd8cb18c22476f08938eaf02dd2492
MD5 e152669ef7342ef38d7052d13e97e213
SHA1 7f6d157e4ed56dfdf428fe8c9b1b4a5d7bdb875e
SHA512 eb9243fec32d586378d80c362f599a3b5fbd39ad0e7dc47a6eff18d2389043ef7818f3551328fd88d254ced1ac18042ca0702b6599ed114b761909fe16771ed9
SSDEEP 1536:BPxoYn+hmas8RJn4yjM31lW0JTtUNop0Yx/VbEaoubEaoo:JWL04NQ1Vdoudoo
TLSH
T1C0A3A38701205CFAEFA049B2425F48673D2C5437BC5791B9E3FD8FA72B45DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338381959737359"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{85704E33-3414-443F-B662-FDA9D4AED834}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
948	msedge.exe
948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe
2704	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2704 wrote to memory of 4940	2704	msedge.exe	86
PID 2704 wrote to memory of 2364	2704	msedge.exe	87
PID 2704 wrote to memory of 1596	2704	msedge.exe	88
PID 2704 wrote to memory of 1596	2704	msedge.exe	88
PID 2704 wrote to memory of 1596	2704	msedge.exe	88
PID 2704 wrote to memory of 2868	2704	msedge.exe	90
PID 2704 wrote to memory of 2868	2704	msedge.exe	90
PID 2704 wrote to memory of 3888	2704	msedge.exe	91
PID 2704 wrote to memory of 3888	2704	msedge.exe	91
PID 2704 wrote to memory of 3888	2704	msedge.exe	91
PID 2704 wrote to memory of 512	2704	msedge.exe	92
PID 2704 wrote to memory of 512	2704	msedge.exe	92
PID 2704 wrote to memory of 512	2704	msedge.exe	92
PID 2704 wrote to memory of 5112	2704	msedge.exe	93
PID 2704 wrote to memory of 5112	2704	msedge.exe	93
PID 2704 wrote to memory of 5112	2704	msedge.exe	93
PID 2704 wrote to memory of 1944	2704	msedge.exe	94
PID 2704 wrote to memory of 1944	2704	msedge.exe	94
PID 2704 wrote to memory of 1944	2704	msedge.exe	94
PID 2704 wrote to memory of 2144	2704	msedge.exe	98
PID 2704 wrote to memory of 2144	2704	msedge.exe	98
PID 2704 wrote to memory of 3468	2704	msedge.exe	99
PID 2704 wrote to memory of 3468	2704	msedge.exe	99
PID 2704 wrote to memory of 2688	2704	msedge.exe	102
PID 2704 wrote to memory of 3832	2704	msedge.exe	108
PID 2704 wrote to memory of 4836	2704	msedge.exe	109
PID 2704 wrote to memory of 2448	2704	msedge.exe	110
PID 2704 wrote to memory of 4808	2704	msedge.exe	111
PID 2704 wrote to memory of 4808	2704	msedge.exe	111
PID 2704 wrote to memory of 944	2704	msedge.exe	112
PID 2704 wrote to memory of 944	2704	msedge.exe	112
PID 2704 wrote to memory of 948	2704	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d20dc78a9c3cd1a22e4f3ebcb65d1dbbf9bd8cb18c22476f08938eaf02dd2492.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,4664819401754628523,5071957983573883260,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,2600171423368293914,3704884664583460514,262144 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,9437181048407167114,5404060977944728405,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,5620798065540274930,8962414870288478722,2097152 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,6475560842263415941,17964692454419350114,2097152 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,11755993652622620975,9473265507302447687,2097152 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,13776602994794583397,10890133148803398628,2097152 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,10771878847431180833,9278442020580211676,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,7353477500382696594,14241260369843209653,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,10088703139431937103,8270466667428306156,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,10088703139431937103,8270466667428306156,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,3378929793309548119,10879295591825228001,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,8173900538823839926,13196176416189449793,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,11960743955085421410,600809224966538588,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,6961877724001692412,2498962139569869014,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,15604212467957709166,1773952817664573860,524288 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5256,i,12453024712790939088,17074869673896010063,262144 --field-trial-handle=2236,i,1236243083693896598,9039241910194595952,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5e1b011e-ab42-40e0-bdf2-09ffcb8dc42a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5e1b011e-ab42-40e0-bdf2-09ffcb8dc42a.tmp
Size 18KB
SHA256 f8f546388a601bd13e19e585bab7f99dd85e0ae06721f2cc6d271a2bcb2f096b
MD5 04dd2e5db7fd0acb8cd873e823ed85e1
SHA1 844f8e53a5830af40c32bff8bcaaf887b98a706c
SHA512 1a30ded73612dc8e1a96dacb75920b72e78a33f9128f075c7cd42d5975ad97daff3e449519f0da218064895ac8a97446cc126b3fbd462b6ec457b87ddef4401c
SSDEEP 384:7ZcIksN8yw8tjYZHCpOjTVHglhBVs7O6R2Feokkoy:jk4PEnOFVs7TRiZ
TLSH
T119828D716C786C7659E7D041F88A32035FFC90A7D7C92B80D4ECAB1E01DAAA81307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95f78bb0-3a31-44c8-bd4a-ac481b783a37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\95f78bb0-3a31-44c8-bd4a-ac481b783a37.tmp
Size 18KB
SHA256 865bb41c20248ada631e7ac3f9e312db07ecc3b19b29ade2b6b936c27d6ca469
MD5 c6af0b8b5a79f2a1d4686a3656931beb
SHA1 59ffee9a771100053bb2082b5ea1b8bd6bde41fe
SHA512 0b4d84d1085fa91dec8a06d179fe98b730277bd14ee1118961b4dc9afa32b32b454ae34240df73ccf925174e7969194b585f91e166b4b353cc66de41a67013eb
SSDEEP 384:9ZcIksN8Xw8tjYZgCpOjTVHglhBVs7O6R2Feokkoy:lk3AEnOFVs7TRiZ
TLSH
T102829E716C786C7659E7D141F88A32035FFC9097D7C92B80D4EDAB1E01DAAA81307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 320c3004f4d29c6d56f4f688009337dab177db3f68d0649535c340613674c0f9
MD5 bf73ba4084c4be618e1c3b7be1485dd1
SHA1 29ac9a53312f960370dd1a437099c7ccf6caaadb
SHA512 e0385244d96cf3c55c3a4b87f08d145fd54d05c720eaf6298578de7051690d6c6173f08bdff24dfd5fa02b5225eb01d19b4e1c47d03cee47aeaea2231202d5d8
TLSH
T16961A2CAE1E34885F7A806B047C70DC73333DC83656B2E5E9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5890e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5890e1.TMP
Size 3KB
SHA256 1ae03b6706e029b04455a956d17c5834a004ea12767cffa5876d4f7af264f532
MD5 446c1ed8952567a3074312343ace2385
SHA1 aff09cee5e0b128632db01667ebccddd671a9419
SHA512 f39daf4f180c9722c3f0ec4846d84f232f60d26c7f05a0460f7bbecc6aa7ea26aebad3b2909f84e6b7deb87158f8e0cb5a1d95e1b163399d9e97d4ab08df832b
TLSH
T1A161A2CAE6E34C85F7A806B047D70DCB3337CD83546B2E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d5d2c7093a9dfe06d644bd48203d42b2a49e782a93d518164fd9536a54764320
MD5 ce9b31943cf7bdf04c8a360bc6d5f085
SHA1 c9e31f3778e7b716fa58568c36a9659901a079f9
SHA512 b16a24de4cc83f6ec897390d507042038e3141da2475991d39a8ae70c55cc39aa3f1228ad44533a175bceb10991ae8e0178bbc5c464f890322eaf7fedb3ad489
TLSH
T10C416DB7C7D4877E890156F4AB246E67CD2D0A5A422C3C16C9E4AF1FA7F24B0E20159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 eca59bd08ff2af972503fa92be57a95c13a931a0e28977474eac1f8474c62cec
MD5 623f8a8ef4dbcce0900d85a0a3f3ae2f
SHA1 85c38cce6aa11cfb0a3b415d0cce6868eff4e2c3
SHA512 65a7167740489d21f7c4e86e4a3dd646d84c2aac678d3da14f7f4f380d3f94d12e7e861bb808e642a517317acd09645b3e36111b9f06145ab66b482d0a1abdf2
SSDEEP 192:sxZOR5WQ/fbsq5dcIdpdqHW6+WNGYRPRc4IgrJ:sxZOyQ/fbsQdF4HbGmb9
TLSH
T19312C8156E28A47B8CCBD20DBA25BF53D6F95032A1D41E98EAFCC61C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 523ed36e1a890dae4aa08498910b7dd7a190d004c9fc900240813981f691e700
MD5 dd62594806547e371ca8382796c88c12
SHA1 dbc2ed423b9f9a82ae9270618e8e22218745ebe6
SHA512 dfa0adf31a86108aae3ff285d3fbabdfa1894493fba3ea5f804669a939ef0af1411a460b210230caf433fbdc36d527f804d1d044e91d4cc6202ab5c66eb174e9
SSDEEP 192:sxZOR5WQ/fbs45IcIdpdqHW6+WNGYRPrc4Ig5XJ:sxZOyQ/fbs2IF4HbGmRv
TLSH
T1E822C9556E28A47B8CCBE21DBA15BF53D6F9503261D51E84AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5812aab81f3cec492bad8837497177ad9a760fb19a111e4a323a32d84223a435
MD5 bfcb4390bbcd6ad212e96dd215417c80
SHA1 9f0f3b03f4978d35662da6f3ae71a43b3a90e3e5
SHA512 12a87ecd030d5a2be62a8cd478c65a932b9964fc650f4259a4d0308e6478099a38df9271fe4f44ec9b690beda546ae2512d0cba26c60bb21d92604205532317d
SSDEEP 192:sxZOR5WQ/fbs45dcIdpdqHW6+WNGYRPRc4Ig59J:sxZOyQ/fbs2dF4HbGmbZ
TLSH
T13922C8556E38A47B8CCBD21DBA55BF53D6F95032A1D41E88EAFC861C05E66CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5d1863b9651b8ee3acc0ef9f8ea1c1de2ffd301f750e0b319d84f98f5962ec97
MD5 f0f1621cb153fadcac07f9f560247e07
SHA1 445fe2a7bffce262ad34213ad52f7f4cd4bd3248
SHA512 dd2317bbf56601d16523837e75e0c9c7a57f187b88cbf998cee08618429bde7d8a8e781b5fac570fc839e884a8990cbe1926b14c32bbe4317344fb1b2ee2d1ce
SSDEEP 192:sxZOR5WQ/fbs45IcIdpHqHW6+WNGYRPVc4Ig5XJ:sxZOyQ/fbs2IFKHbGmXv
TLSH
T18A22C9566E28A47B8CCBD21DBA15BF53D6F9503261D41F84AAFCC61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fad98faa83ab1b58da831f61c8fe46c9f879b73f163095fdb9362c4a77b65f4c
MD5 124bf35bd1aa492b9e221c67c9916bed
SHA1 71d5a5c0c909598fd597f9c6ff51a24126eb708b
SHA512 66dd5cae243a160bf43bcdf03a872b1e662a98d8c74d7c479e0096747e0a239129d385c87c851b6a04eb95fa628c79f7107889c0e2e2d933e9f2f33dd227e82a
SSDEEP 768:NtK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3CroF+zS:NtK9uzYWvcQWsu1ja0HL7Q3ZF+zS
TLSH
T1BCC20A3F640CCB7E4FC01A9DDC5A6F973E9802D7A6688D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c99ce830759eddf6e27f6b0efb213f24879c808294973a18aebd0ceafed6642a
MD5 ee476782a3d46d257c4d4d169cde7edd
SHA1 9ae9013a957d2fc9bfb714590d705e5449da236a
SHA512 947c40f53c9a7a7eb077dc5564e3301c8fe9b9f0cef15fcfdbc36cdcd50dae7d712ef7efd94019a6bc61fce1ab1aedf9db755750135de055f3e168a4b230a91d
SSDEEP 96:K0mJGQKjiO+2Hcw2sMxFQ1s/4xKX4/WxTemd4MSa24Kfa6:Nb+2Hcw2sMTQ1c4q4/WNemd4MS3j
TLSH
T1EBA1214136BF12513C7D652891A0975F424275A3307CE6AB7BBC60B2AEAAF440CFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592c56.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592c56.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c5f2a72fe8b54441a19b1436bdb78984ffdce8545fd0d675fbc96bac62f028c1
MD5 fca35209f9a5fff34f4dbeff7db2301b
SHA1 ad4761191661020a4130bb01acc7a59d43c124d1
SHA512 0a852131bd93dbe22d845636a3721987d87e67c26b61a96fb0c753dfbf64115521d13d01c295435a28c17d98622b5832c183d758cae3e0a180a20643774a8ff0
SSDEEP 192:SONk6ygpQmiUyt4tOCTVgcSMosSPzPqoU6:SONk6lHLtOCTVHglbrU6
TLSH
T18E02F935BC787CBBCEF3AE06F88622175FA8117BDA552B80D5E85A1D01D766C2303936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a9c16c7107e9bf08ad686507424d361eebe05b7bbde04b72ab1d75b157f3291d
MD5 63106976bf62280e05f07daeb9386544
SHA1 26c97cfc0ce3b4a84c29173572f822a69028aae2
SHA512 8284eee2ab4040df5a5e32c67c01e02d9965b00fc7edc7f1385882108ce59ef93cf77451778d3a402338f60d3df92cc24da554edf0388814b827718387418961
SSDEEP 384:AiFiZcIRysN08TUNTUlIlXw8tjYZgCpOjTVHglhBqs7O6R2Feokkoy:bFQkFwgdAEnOFqs7TRiZ
TLSH
T1F5A28E735CA89C7BADFB9641F98932039FF840A7CAC5AB80E5DC9F1E00975981307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83910ee76a9c7ce791d12f4f8174c2ec3f000f03e90556f6f123b8885d2cfaa6
MD5 beae755f252ee5d197c53b666de56231
SHA1 97199a3baf5b36a134f151b1345e1ff08c1f55f9
SHA512 b2a71067fabd9132ca49a0888db8c0618f47dfd15a58849de129044c874d506eb6db80ac65b5e0716f6b56650dae1db82c5afc2ceb6e06b29ee719563292b6af
SSDEEP 192:SONl6yAQmiUyL4LOCTVgcSMosSh2BEwY3UO//U6:SONl6PxLOCTVHglhBysU6
TLSH
T1E2121A35BC686C7B5DE3A541F8CA32035FA85267EA497F80D5ED1E0C01EF6AC2307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dba82dad30fc51ef4ac7cc6374de977f5c6b1908e92d1a21f5687569740ac993
MD5 fa61ddc32169b956af6ffded7306cfb0
SHA1 3ca38c6e7b92e2a0d071269d3cb315c6d5c3d869
SHA512 beac31f85844280da0cee608570f497271648cedd1062fa5bd90cadc926d6e67aeb552c8ee145126e73ac1d4fd945f3515b2d3009b97651fb49c468966a6d593
TLSH
T121411C58B6E91148B3B76F579BF6A86D947EBD772F06D45E00020E4E0A73B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download