78d47f2c72ddbf9e308a225ce846f1c0fdb51fe8a92773ccecc68412a4f9f891

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_78d47f2c72ddbf9e308a225ce846f1c0fdb51fe8a92773ccecc68412a4f9f891.html
Size 1.2MB
Sample260912-lr1dkshb75
SHA256 78d47f2c72ddbf9e308a225ce846f1c0fdb51fe8a92773ccecc68412a4f9f891
MD5 38286718d7beb68c8bed0177b0bc5c36
SHA1 672eb214206d4f41de8d3eab0e1e794396edcebb
SHA512 a5b9a4635d4cccbc59c67a7c5b89c59e63f13243359e969398521079853ec0018c9e66168723a9bdc477a19d340f884a84939ce1657f0a2f004ba6a6ecf945a5
SSDEEP 12288:lCeSXyMTNrjTEY0+kC6bhxs7jbdg6WB07tMfiWP:lCRyyjT3kC6bhxs5X2OMaWP
TLSH
T1C045C7DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2304	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338285998785508"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{3A8F6D95-5698-49A0-BF68-2EF1EAC9E662}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2408	msedge.exe
2408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe
1264	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1264 wrote to memory of 4872	1264	msedge.exe	84
PID 1264 wrote to memory of 2304	1264	msedge.exe	85
PID 1264 wrote to memory of 876	1264	msedge.exe	86
PID 1264 wrote to memory of 876	1264	msedge.exe	86
PID 1264 wrote to memory of 876	1264	msedge.exe	86
PID 1264 wrote to memory of 2524	1264	msedge.exe	87
PID 1264 wrote to memory of 2524	1264	msedge.exe	87
PID 1264 wrote to memory of 4628	1264	msedge.exe	88
PID 1264 wrote to memory of 4628	1264	msedge.exe	88
PID 1264 wrote to memory of 4628	1264	msedge.exe	88
PID 1264 wrote to memory of 3352	1264	msedge.exe	89
PID 1264 wrote to memory of 3352	1264	msedge.exe	89
PID 1264 wrote to memory of 3352	1264	msedge.exe	89
PID 1264 wrote to memory of 1640	1264	msedge.exe	90
PID 1264 wrote to memory of 652	1264	msedge.exe	91
PID 1264 wrote to memory of 1640	1264	msedge.exe	90
PID 1264 wrote to memory of 1640	1264	msedge.exe	90
PID 1264 wrote to memory of 652	1264	msedge.exe	91
PID 1264 wrote to memory of 652	1264	msedge.exe	91
PID 1264 wrote to memory of 3956	1264	msedge.exe	93
PID 1264 wrote to memory of 3956	1264	msedge.exe	93
PID 1264 wrote to memory of 3956	1264	msedge.exe	93
PID 1264 wrote to memory of 3092	1264	msedge.exe	97
PID 1264 wrote to memory of 636	1264	msedge.exe	98
PID 1264 wrote to memory of 3092	1264	msedge.exe	97
PID 1264 wrote to memory of 636	1264	msedge.exe	98
PID 1264 wrote to memory of 2288	1264	msedge.exe	101
PID 1264 wrote to memory of 4340	1264	msedge.exe	106
PID 1264 wrote to memory of 2804	1264	msedge.exe	107
PID 1264 wrote to memory of 3488	1264	msedge.exe	108
PID 1264 wrote to memory of 4756	1264	msedge.exe	109
PID 1264 wrote to memory of 4756	1264	msedge.exe	109
PID 1264 wrote to memory of 2408	1264	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_78d47f2c72ddbf9e308a225ce846f1c0fdb51fe8a92773ccecc68412a4f9f891.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffbacf6c188,0x7ffbacf6c194,0x7ffbacf6c1a0
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,16116033029361809442,17946414005300266836,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,11493638476052639844,12538579166697975854,262144 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,10972281760137256420,12052783127837629440,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,14192286665655917522,1700804809092868891,2097152 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,13924736320876061919,1478112215066234757,2097152 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,13318314477912573115,1928592942798184983,2097152 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,10132573558599429141,15310103714309598382,2097152 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3616,i,13368573611900292346,15480244910349395629,2097152 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,6452419293494874932,14158218292943253401,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,187014585076791876,3994646773889432522,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7895830226772422933,13376707253909834314,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7895830226772422933,13376707253909834314,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,11540019840323868937,2753607055335315803,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,119703916916972638,7630108650892675867,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,12595704183825810466,7254851056073432497,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,12939324109547414578,10171129530741993456,524288 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6308,i,7424852419452042348,13132051073597115728,262144 --field-trial-handle=2340,i,15202588920727875944,16502376964822155459,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6efc2d8ae5d4f62545beafc10fb4f9edaa503b1a49ca63ccef49f4f532fa1add
MD5 4e81bd4325724e2000c79758ce07fab6
SHA1 4b5d17ebc1e29dd39e3694670bbe6769a30dac0b
SHA512 715a31bd90a6528de261b20d7a405facad4da278d9cd3a1e67749c4765724359345746f8781fc83b332d015acd4267a5582af6107cc7ff69a7347680458ddecf
TLSH
T19461878E516A4AB5FF5F9278A9D120CF3A7066E07F436D223D7ACC7870263818338354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b61c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b61c.TMP
Size 3KB
SHA256 a120cc56293a517f14b2f7e83f7de3a95ce4fdb72cdb761867035378da0e0a4f
MD5 ec5c3b8c5cd5def507ba0943df07143c
SHA1 2f59eec1e7a117f75aec2432f6faec952832a1a1
SHA512 6f813c32270b04865435bc94a77160340ccdc34e73f3b214c4319c64ba5e1d5afd8fa06b73c2d4c3027dd0f3ae9c39a80499a312d03251987655a40bd72c6a8b
TLSH
T17F61878E516A4AB5FF9F9278A9D120CF3A7056E07F436D223D7ACC7870263818338354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e879626a8bc30ac4474472113c3817ce3e486a67fbe8593673903d5911349d29
MD5 92ac7bca29703f26a52053dbd7fed3a2
SHA1 59b7591ff5347e27be65b4942c7c38309bde243c
SHA512 ea84df46f164edfa677793cc853dbee8f5c210eda6e117dcf8aa535bd314940531f48330c650d4139e5dbb4ef1851054ca3c47a3672fcc84e985e71429c08a27
TLSH
T1E631ACF7C3D48ABEC81156F05B24AE2BCD2D0A5A422C3C1689E8EF5B97F2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f56ab7017fd6a8c0f63a727977e876f9ccc5f383381fe8cfd24de17d8c632f88
MD5 df3f50225fbca7f87abca8371878b5c0
SHA1 a13cca0fb3a1444bde669966ca2ce38814a05264
SHA512 2d23e31e5e68aedede290f3c6dc9db50c36a2a57d60536436bde9d1074a636dc1ac342b3d198be34af0ced64d9c74e383d846c69c560ddd0b8d6d6f78c38d9b0
SSDEEP 192:sxZPRtWU/fqsiLIdpdEHW6+WNGY3Rm+QIgrJ:sxZPSU/fqsiU6HbGBj9
TLSH
T14F12B7126E28A57B8CCBD21DBB25BF53EAF9503261D41E98A6FC861C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5673bdc647f7fcc79259673bec906866b5b4a85c4459f3423a50c26e0f5322a4
MD5 84149c489d36facfd5be93b111fdc5ef
SHA1 aa7cf22769af1779c2afae7bf2b87821b5e20786
SHA512 92120790d29989c8a08bc18541582e99858e189384880001b808efa372f50c0784a1eb474f42131b2559495ab6bb52fd5499ea1ebb1d3d0edfa028f80f0530aa
SSDEEP 192:sxZPRtWU/fqshLIdpdEHW6+WNGY3Rm+QIg5tJ:sxZPSU/fqshU6HbGBjF
TLSH
T1C022B7126E38A57B8CCBD21DBB15BF53EAF9503251D41E88A6FC8A1C05E66DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 67335cb2b5bdedbaaab08bbd947350972d02ce0b7112e81ccb9930396728e384
MD5 b83ffe90c4c3f849e102ae356043102d
SHA1 015346c19757e3941371bdb13c2423bad2f3b00f
SHA512 4f56b8df4fa984b2a7de7d719bfdbec4da2b9c8887669576f80446316e0f8df92b2a6aff8febb73ffd62a5d245f71b2592030b1bea75d25ec0b3ad59bf900039
SSDEEP 192:sxZPRtWU/fqsDLIdpdEHW6+WNGY3Wm+QIg5HJ:sxZPSU/fqsDU6HbG4jr
TLSH
T1C222B9126E28A97B8CCBD21DBB157F53EAF9503251D41E58A6FCCA1C05E7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 44bd85f4715cf5ae79e7880e1da73e03fbd0083aeb7921b76096c7a1e9d11255
MD5 adcd58e06fcbd3e1f0da809f5dfd72ff
SHA1 011a7f9361d2749eed0a8f19d789c08be95b228a
SHA512 2a28dd9b1b874f09cb32d6466e9981587329984f35c75df7e9efbbc9328887abcf8b648a58d6755b25836362046bcf71205b40eb88cc87b48e9cad5930099b5f
SSDEEP 192:sxZPRtWU/fqsDLIdpHEHW6+WNGY3Jm+QIg5HJ:sxZPSU/fqsDUkHbGnjr
TLSH
T11722B9126E28A97B8CCBD21DBB15BF53EAF9503251941E58A6FCCA1C05E7ADE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0367eb3ed956b0b3a8697c25208c0fadd69a05406081b06ea23f1427a8d79cfb
MD5 b0ebe4874d891bb8054321171b2d01e5
SHA1 31fc12fd2aec838dff11c99d6ca8ed0f5db9968d
SHA512 cbc1d623c433f084a5ca9e89476bdb2fde9577dda5210de975ae87a90568c63d5a69852481a84f857c7ed478578f58a87cc3b217021eb4c09af8b3974e647557
SSDEEP 768:MA30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72DrolZMq:MA30AbSWvS2l9u1jaLmLZ12wB
TLSH
T11CC2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5952e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5952e9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 72a96ef78c4e396753a840ebdc50e8394bae8a2829d32852d54e12ee43f226bf
MD5 708b0752afe09c4830ebd3a1aa6a77d6
SHA1 34038040ffdd79c963b78aa174061b96065b3350
SHA512 2b438400c1d22bda6b90d851ff019b1168d5e1978359a92dcccf23d7d6013c7d485640b7e756d4125c3ab0053f7927dd1bb64febe1dd34fa58e61212cae21b0e
SSDEEP 192:ucIsNfUzQ6mwpupXQmiU1MA83n49iX5FbzQeliIX/vU8:wsNfUzTpuz+349iX5FbzJXU8
TLSH
T1504229316878AC3B4DE3E554F0073613AFB55567DBC82F84DAED6B2C01DA29C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 044245c302c9bab684e10ca2c2b04a37dfc98563ef538202fd7a7f494b57b149
MD5 169cfa3c7d64dc6158cc1884640cbcaa
SHA1 2712a934af9aaf1cfaf71fb95dda97fcde103522
SHA512 422e0d4e7c312e1d199c950e8af3e21cb210f0516054dd14588d7cb85403fe2d55426c46ea57462680637cabe95c5e55426b9439f604123391c826f14b604aff
SSDEEP 192:ucIsNfUzQ6mwpupcQmiU1MA83n49iX5FbzQeliIX/vU8:wsNfUzTpuK+349iX5FbzJXU8
TLSH
T1FB4229316878AC3B4DE3E554F0073613AFB55567DBC82F84DAED6B2C05EA29C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b016207859a85469b87dc3c0110ab4dae85c4e9ffb88d60522ca9db908b4594e
MD5 b243b3c5fabedd3dd5138887ba0675da
SHA1 20e592ad7f81390b367039f1589ecf01191b13f4
SHA512 2b709592aaa8062510f636fa34e0fc90ac4390e32b04faac3fe6bd63fc9492aab61d54a6a3ad44988d0cc3ac3a671d1020b5a5ed544f85686b979d4f795a1f84
SSDEEP 384:FiFiZcIJQsNU8TUNTUlIlMTpuz+349iX5FbzKXRl7Af6Aol:MFQWhwg8z38a2XLYbi
TLSH
T109A27E3358A89C3F9DBADB95F54A36039FB941A7C6C8AA80D6DC5F1D01A619C130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 666b54d1554e9afe316a0629006fe0475df4a32be3fc9d2a0b147e1047cf9dad
MD5 66cbe31b27ab05372c0add4d4050ede4
SHA1 271e3dc4b09ecc99e5fa9074b551939766781e77
SHA512 ca34612243f0f7685d34f5595f779a070f2f628d90fc41850c54dde2e165d148f26183a1daf6f3554a2473401142bbfe8f9f859323981699edceb282f7055180
SSDEEP 384:KZcIusNfUMTpuz+349iX5FbzJXRl7Af6Aol:ouGz38adXLYbi
TLSH
T1B6828E3168785C3B4CB7E555F54A3A039FB99167D7C85F80C9ECAF2D01EA698130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a8b8ad26e6ea3f78c14a73af9ed2ca6363d8f215d8fb866c0dc8035495a7f8a4
MD5 a3d832a1cc4986d5e7221fe35f3df8b0
SHA1 7292108a0cdc063c837ac2d3159f36f686f1e50d
SHA512 364008c70e51b44908df42eec6e78f19197c0a53965e738ea83bc16258bd57acd8c58f0c138bff7e5fb88fd2d6d00536d79e07516b16401f9f5e19f00ca3239e
SSDEEP 96:gqONkEQsjpfuMVwptaL5ih/cIPURHl8h4otop5miCDqBIPuva6zx8X5FxbxLYvit:LONM6AmwprQmiUy+66siX5FbeJiTNU6
TLSH
T10202E935AD686C7F8DF3AE49B54737236FA5116BEA902F84C9E81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6a81b016a97bf86828bf40cd8a071502b8f153b26d2f825d1483321c0a5b60ea
MD5 5913b32d6c75b78c0597c9b265475fba
SHA1 1d5872e4dcebca36653f4a7c6b6fcc674b0d2151
SHA512 79ecf7c98f5bc8899507cbce9b987ff3d8460969db60a734811722e6f0990c7c18b461e83535b5903e7378f3fa0cf9cf3da6260403928a264992b5a9c5aef3b0
SSDEEP 192:u+IsNfU6Q6mwpupXQmiU1MA83n49iX5FbzQeliIX/vU8:ysNfU6Tpuz+349iX5FbzJXU8
TLSH
T1FA4229316878AC3B4DE3E554F0073613AFB55567DBC82F84DAEC6B2C05DA69C530B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4c23f6e1c520d4c9029ed97d30358a948bf8036f0179c059ab1d98bfb6c59ff9
MD5 daff44b9e4cf494ee9a977e10fea540a
SHA1 4108a8d2e51f6ac6c0fd0dcbde6b7a5bb9a54f23
SHA512 71915dafe95487c92688a7d02a69f2131b6d973159719ca00882afceb57856e682ded80cf3ba99c457fa9c86a821bcd83d0582c880662acc97a18d50e1940f95
SSDEEP 192:LONd6Amwp3QmiUyAZ64siX5FbzQeplRX/vU6:LONd6ipZs4siX5FbzFXU6
TLSH
T141121B36A8B86C3F5DE3E554F04735236EB55167EB887F80D9EC2B2C06EB55C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43a45834-d950-4d11-b3ca-7aa11a6651f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43a45834-d950-4d11-b3ca-7aa11a6651f4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 91f274388b395adb2f6f408314686d80de329f5c26f35d0e6c1764b177db0d1a
MD5 16289b381bc1ff05ef289acd0cdce900
SHA1 1471d7f30bbc7937edc79d82899718999f6abbb6
SHA512 511efb372aebaa302266722d8f90130ec47476fdac6d70a4595c9a0a62ea8f52aa89a205ec0d1ad7fe91b97c2a7397ad1b6d20b9577fbc7b9ad43cfb02b87dc4
TLSH
T1AD411858B6F91109B3776E5A5BF6B86D487EB8372F06D4AD10110E4E0A32B40C8B2B37
MD5 SHA1 SHA512 TLSH

Submit Download