94f1641f4f28489a2bd4b72d4a462dc5b229c6534947871acc5c64a3bf6190b7

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_94f1641f4f28489a2bd4b72d4a462dc5b229c6534947871acc5c64a3bf6190b7.html
Size 111KB
Sample260912-keeexadn2x
SHA256 94f1641f4f28489a2bd4b72d4a462dc5b229c6534947871acc5c64a3bf6190b7
MD5 70311a22de8ac3d4c1e709300fe7c2f3
SHA1 bb3e416f6224e5251e271d729ba993da536ce45a
SHA512 bd81e3c1870e9f1dcefd161b0dd5199f8f1d0b5e628c263cef4c19c329a9a9635e952091a3842e43cdbb26b9afaab37dc27a6e3fa7ac1bd1f2e7076227688a3c
SSDEEP 1536:amx9Yn+hjw+gRPXXKg6wTw7GI4RlSQrTtHNoqxtbaqbEaoIbEao42MCUGaJueKyV:D5dQlNBGqdoIdo42MCUZKyule
TLSH
T1CFB3D68711204CFAEFA44DB3459B086B3D2C1437AC4791B9E3FD8F972B56D6E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1880	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338179020544702"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{29C4B8F1-0472-4016-A842-F72B9D6D8EF0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1408	msedge.exe
1408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 3500	1140	msedge.exe	84
PID 1140 wrote to memory of 1880	1140	msedge.exe	85
PID 1140 wrote to memory of 2176	1140	msedge.exe	86
PID 1140 wrote to memory of 2176	1140	msedge.exe	86
PID 1140 wrote to memory of 2100	1140	msedge.exe	87
PID 1140 wrote to memory of 2100	1140	msedge.exe	87
PID 1140 wrote to memory of 2100	1140	msedge.exe	87
PID 1140 wrote to memory of 4160	1140	msedge.exe	88
PID 1140 wrote to memory of 1156	1140	msedge.exe	89
PID 1140 wrote to memory of 4160	1140	msedge.exe	88
PID 1140 wrote to memory of 4160	1140	msedge.exe	88
PID 1140 wrote to memory of 1156	1140	msedge.exe	89
PID 1140 wrote to memory of 1156	1140	msedge.exe	89
PID 1140 wrote to memory of 5104	1140	msedge.exe	90
PID 1140 wrote to memory of 4332	1140	msedge.exe	91
PID 1140 wrote to memory of 5104	1140	msedge.exe	90
PID 1140 wrote to memory of 5104	1140	msedge.exe	90
PID 1140 wrote to memory of 4332	1140	msedge.exe	91
PID 1140 wrote to memory of 4332	1140	msedge.exe	91
PID 1140 wrote to memory of 4620	1140	msedge.exe	99
PID 1140 wrote to memory of 772	1140	msedge.exe	100
PID 1140 wrote to memory of 4620	1140	msedge.exe	99
PID 1140 wrote to memory of 772	1140	msedge.exe	100
PID 1140 wrote to memory of 4200	1140	msedge.exe	103
PID 1140 wrote to memory of 1408	1140	msedge.exe	110
PID 1140 wrote to memory of 4748	1140	msedge.exe	111
PID 1140 wrote to memory of 3980	1140	msedge.exe	112
PID 1140 wrote to memory of 1104	1140	msedge.exe	113
PID 1140 wrote to memory of 1104	1140	msedge.exe	113
PID 1140 wrote to memory of 2516	1140	msedge.exe	115
PID 1140 wrote to memory of 2516	1140	msedge.exe	115
PID 1140 wrote to memory of 1408	1140	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_94f1641f4f28489a2bd4b72d4a462dc5b229c6534947871acc5c64a3bf6190b7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x268,0x7ffbbef4c188,0x7ffbbef4c194,0x7ffbbef4c1a0
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,11709413695881963158,5393532363580633036,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,2058641790107914910,5023498527968689410,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,6192074779881116794,1384479518229625687,262144 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,6935599215379035879,14801814347470956066,2097152 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,13850102144260822421,4668791060578258764,2097152 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,11033559140245648380,3394014561406832019,2097152 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,13646664937631575830,1367553203889153094,2097152 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,13832767196729162538,10230408416142130334,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7535786142555131624,1972797376854634778,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1906856669850763929,6426666949145884037,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1906856669850763929,6426666949145884037,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,2084854246481531052,1700952500452167732,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,6135105607496755424,15450532829987715774,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,2989978713572383638,15937632995426306909,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,11105349306089707695,14212187949843409781,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,3466016723862651728,18376402577418603138,524288 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=1236 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6072,i,8975310160119180566,11143528804942749829,262144 --field-trial-handle=2320,i,6507969384452569832,5727188755598916068,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a3ff9ba6d3b2b8a00dd8ec3c2524efc1e84aeb130377f534e52911eb715663d9
MD5 18c12ab089375ebc77c7fb6c72c4e61f
SHA1 ea730af81f8095ac59386ec5b92cf37deaf9f7b0
SHA512 28c88120f52436690bc706ba10fdd82762bad061608713ee6adbb9d92e8391b421ffbb2e7557b2413dcc56819bf9d8fa88905bae0e0d42f52a660839873b7ae6
TLSH
T153E026DA08CAC26EF34075878178674D9280374F97CC6B4A6F40888CB046590EAAEBA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d7e50b3dcd9f99bdc20389a0cc6db66dfe5ca1d0dffccb67fd0082a33c016a43
MD5 551daf127cdd87d82e51c08d6bf7966a
SHA1 bdbd4020220fb9d37fd0458d9832a43a2e0a0399
SHA512 ddfaa7f136a3d594451ac13e36a7e187d05e5c6b5f70e51beb9656b7e29083be522289783eafc53fe3b5fe0db6ea624a849eb3fe63dabc95654eda74f695fab0
TLSH
T1E151D9C4DCB14354FB991F79D2D801CF36B867A16687DF3E1A9DE4B9580AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ea5b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ea5b.TMP
Size 3KB
SHA256 2a0c4566a4f629809782b2e73284dc9a4488bbc6a3080c278cbb4e26e721636c
MD5 99adb8c57909c90fdc51abaac8531ae9
SHA1 97462129202846dc88cfa3e620992ec2f283910b
SHA512 5fe9d3a5df798b94375fd237bfeb7a69801bf0fd81328e61200a3108aa8dc94703ad0c657e55fc718449a57cd7f38e8c68f5e5af577bcad083922e74ed0a38b5
TLSH
T17E51D7C4DCB14354FB991F79D2D801CF36B867A5668BDF3E1A9DE8B9680AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d21a5a47f70d9a0bce3a05d455e44dfc61c5671bdd49d42f4335c72e9f6e65f3
MD5 7275ec8c9824c42ffcad695f5d9269db
SHA1 21eed9bda6d379a0c1ef090cafe1c03fed93ada5
SHA512 aafd06ce23dd1a12dd2831facd957b17bd7e41b2e892584464e93cd70e32d68dc7372e4da0f39f3931649de3f0257f01775444b39c2e5168d5e83e6d5f7f1e6b
TLSH
T11D419AF7C3D4877EC90156F09B24AE1ACE1C0A5A422C3D16C9E4AF1F63E24B4D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fa2abbc9de2e92064a5c348ab7253406c2a234c77d2397b2aea02648d2b93329
MD5 9da32d25cd93577c80b5aea46db51475
SHA1 97571d1d206139235e3b8fea8595abb83d3e6c28
SHA512 296f0ae3380f94771938d6ffe7a725186a31b01c26d35507f11c92317626db5142fbc46b715ebdba1968ac8e36b46daa3c97eafe23dc16dc5926da45774242a5
SSDEEP 192:sxZ3ReWE/fOsvzIdpdvHW6+WNGYRPRjlIgrJ:sxZ3nE/fOsvs1HbGmn9
TLSH
T1AA1295526E28A57B8CCBE20DBA257F53D6F9503291D51E48EBFC861C05E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 492aada5c451999d97852587255c5ace134ab892fe322e14533918c7ab2f382f
MD5 b1549db59fc777b8a499171f86097653
SHA1 11a3465d175191160eb4f8d684795520ac12b818
SHA512 d582b2784d5e2e82e6ca54030b903979086b1afa892271400fda7ef90c5045b10a0cdf48e099b93e40f9e67047dbe2ce1cf91959628612c37329dcbb15be6c64
SSDEEP 192:sxZ3ReWE/fOsYzIdpHvHW6+WNGYRPvjlIg5uJ:sxZ3nE/fOsYsPHbGm1o
TLSH
T1AC22A652AE28A97B8CCBE20DBA557F53E6F9503251951E48EBFC861C05E7ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d86b87236ce9d7fdc887618e81e04a0e77522e7e75a37f9e028a4ba0e1c0c082
MD5 0b5c7d69526fbf2fd5b6d02c1c101baa
SHA1 4f96180ae4c2daebc8d036eb9d110569cba35b70
SHA512 16362a7f1f50caf89b9a1073d748664d861029a20fa875f95ba788ac6086036a5d466829ac12d50e2c4a85a44d5da47787604d1d7706e106a15d06e8dc324b41
SSDEEP 192:sxZ3ReWE/fOsYzIdpdvHW6+WNGYRPSjlIg5uJ:sxZ3nE/fOsYs1HbGmeo
TLSH
T1FA229652AE28A97B8CCBE20DBA557F53E6F9503251951E48EBFC861C05E7ACD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a9f6af422d2edc0f175f159061cce028557e2c9f20f34b08d500ffe975d52fcd
MD5 2c7452d87437f71410a103a7d3d8427b
SHA1 d2c327c844a46410e4d27617284cde7f5780db2a
SHA512 aa69f6af24d452986ff0681180cb569a17826c55a2b6a0375a1f224a6ed7ea52ac6774ee5564d06d94c968d78d8002f3d97a9eaa1575c8fe1df2a7a58f3ccf97
SSDEEP 192:sxZ3ReWE/fOswzIdpdvHW6+WNGYRPRjlIg58J:sxZ3nE/fOsws1HbGmna
TLSH
T11822A552AE28A57B8CCBE20DBA157F43D6F9503291D51E48EBFC861C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2d63db60ce6b1e5ebd436ed92575d2c938157d3a646ab34237e7910e93d1ca0a
MD5 73b221436e6d12ea2ed29d5c3867b56e
SHA1 6545746cf8a23a70b74a3b81b41f4c51ce9440ea
SHA512 37942375c13d52ba56682c881b38b56dffd606dc6857d1eae0c0768d084c0df6ea8bea28c53416ce8c8b95026ff7e560d3a73f8d419da825d73a369032fc7d30
SSDEEP 768:HXK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Mro4+0UC:HXK9uzYWvcQWsu1ja0HL7Q3X4+0UC
TLSH
T18DC2F93F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7cc88feb-2bb6-43b1-b465-3918500235c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7cc88feb-2bb6-43b1-b465-3918500235c4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ea119dd1b5b83893e92f253ad5a3e8c4ccba9fc703f2f5cafb6b5c7b4fa8fda3
MD5 0a79c00d6bd8e241004cd8ed7403dd9e
SHA1 45a7515f8cdfa20769b392e271505cfc58d96208
SHA512 c1c0678b82d3bb0cf85916d0d740e5d8edb9d952cc1e70799f9c65ac02424088cd34ec0c62d03e5d46925fbf0cb89ad940562c5705e0aa0e0548f6ba6e679ff7
SSDEEP 192:uKKXsNznQ/dKwI7FQmiU1xFj4OjTVg9l+FdV0R0rnhxFJSJrbsZVr/xU8:SXsNznwXeFMOjTVu6diGrnRwJr0XU8
TLSH
T1B4421A31A8386C7B4DA3B241F44B36139FB44167DA863F94D6ED5F1C01DB6AC630AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 09460917be8da4c5d33ce3c50af8158ce4aaf9de4905c6dd8cac666d08423406
MD5 6bda3e7bd03bb4f71374880b0529a453
SHA1 7122131a26490992c88e00e701ac5c1b2b6aeb2d
SHA512 cd1e7c6463deb50da41d853f74b2d7e7f9717a93afd5eb690f98f245c689a2a346267e99a37f69c9a3325af93616aaf274bd187bab5c931776fe001c5a9778e1
SSDEEP 192:SONa6ygpQmiUyrgtOCTVg9l+FdV0R0rNzPT0U6:SONa6lHltOCTVu6diGrBgU6
TLSH
T1B802C735AC683CBB8DF3AE06F48B36139FD4116BDA952B94DAE81B1C01D765C2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 07a621b8cb6ddfb7f5d2631d1c57458641bbcffac13d8167bef12bcd4fdfe986
MD5 eed5f2f3616ada107533f42d03d771c7
SHA1 c5b002bdf43f7beb7d559f8fd838e3ebcddb753c
SHA512 4acb99ebd18e2f929faab6423f8c3cc0d6d8a448f14b1fb350280066cbd5e08abbe9595e0f0af3ffd41c3d7125280f7215561d4169e68ce952c6d29d61ab73da
SSDEEP 384:1XsNz2wXeFMOjTVu6diGrnRwJr0X7O6R2Feo2s:1XdHnbNih0X7TRs
TLSH
T122625C7168381C7789A7A146F44B3613DFF481A78ACA2F94E6ED5F1D00DB6AC230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 99bef83ffd7022185c6027781b40ea3bd8749c9400dabb70d25e97a5a5182d83
MD5 5b8c0ac8f51c8974309bc394d492596c
SHA1 d63b9dad8b23712c658be5623732eeeb94be4ae4
SHA512 c18b1bd29f8555058d570005a552dd29106d74572a2b6646a012d3b8b45246249544833e2f74a111e365c8cbc2f418aca0ec15b31929f86d4286893fa00843fd
SSDEEP 384:1iFiiXsNN8TUNTUlIl2wXeFMOjTVu6diGrnRwJrUX7O6R2Feo2s:8F7XMwgQHnbNihUX7TRs
TLSH
T1AD824A7298688C7B9DABAA41F54A3203DEF441E7C9C66B94E3DD5E1D00DB2EC130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4fbc6faa0637c7b1b30ebae65fdefb0f6b27aef6f3ecccd4710d1fe8c1fc8dc9
MD5 81ca237c7774ae4b64bfc627dd79566e
SHA1 78eff7e16e0530833be7c546a7c39117afa68ac0
SHA512 fbb61f6be6a5ff5b35226a636912b447a47c33f81d0e3ae15c4d73f1aed9c8a5f8b9f6bb2c06273252a30ecd1dc8fe3dccab489d921ddb4d5d432d9950d922c6
SSDEEP 192:SONW6ytQmiUy6gcOCTVg9l+FdV0R0rnhxFJSJrk3UVr/xU6:SONW6oecOCTVu6diGrnRwJrpXU6
TLSH
T11E122C35A8282C7B4DA3B541F48735139FE48167DE8A3F94D6ED1F1C01EBA6C530AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2be19d25a8ec2f8c3517c001c05dace9b24741355de4f2d56d816fdf18029d0c
MD5 df85d00a566475e2051b4e4e52ba2b04
SHA1 70ba722fafe0593c33de76d2b254dde3d3ec6749
SHA512 d74e3506ba0d853ce639c464ebf895185569e94cc3850b3af1150959ff0996a9d703d971866b99d4272ee832ddc7505f46901a48cdbe05c4dbf6bc36356566ff
SSDEEP 192:uKKXsNznQ/dKwI7eQmiU1xFj4OjTVg9l+FdV0R0rnhxFJSJrbsZVr/xU8:SXsNznwXhFMOjTVu6diGrnRwJr0XU8
TLSH
T1A2421A31A8385C7B4DA3B241F44B36139FB44167DA863F94D6ED5F1C01DB6AC630AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 6933e933772bb0c17772054714fa832557ad8eab7ff3152e861b03899c331207
MD5 958a406540e9221da8d86e3cedce1383
SHA1 d83e88a4fb8a511e31dfc7bc54f7bb1bb86be91a
SHA512 a11f355c2104d777ffe2c976962ca0c04a9e9760f657fb1f586fcaaea41c7d6baba1aa0174c9dc88e4b5ad1c5e7ed328fca1c58eaaa42550e7db84f0acb729f2
SSDEEP 384:1iFiiXsNS8TUNTUlIl2wXeFMOjTVu6diGrnRwJrJ3X7O6R2Feo2s:8F7XFwgQHnbNihJ3X7TRs
TLSH
T169824A7298688C7B9DABAA41F54A3203DEF441A7C9C66A95E3DD5E1D00DB2EC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64a469a0-bfb1-4bb9-8f20-6a39369b9f51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\64a469a0-bfb1-4bb9-8f20-6a39369b9f51.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9ba3d94e9a1b8e23f682b1538760caea291862e529d0d677082b4f5c609da01e
MD5 e53506fead855acd228be28b93cb311c
SHA1 dc8624c57b25d33b6e9efadf62f03dfc448457e0
SHA512 cfb5f8140c04c5e819952cbc63f54a5b9e41280a32f99b75ade987be414d26565e26cf8c6ca71aacc1c7f32f9322641998d594691f7026f3cd26eff4f7811de8
TLSH
T16C411858B6ED1148B3B77F5A9BF6A86D447BBC372F46D09E00110E4E0A66B40C972733
MD5 SHA1 SHA512 TLSH

Submit Download