d6d6584d4b48f9ff13fa6c17edb5fd652b5a1f3b96e264b6eee1407c91e025c2

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d6d6584d4b48f9ff13fa6c17edb5fd652b5a1f3b96e264b6eee1407c91e025c2.html
Size 132KB
Sample260912-ltgn9awvb1
SHA256 d6d6584d4b48f9ff13fa6c17edb5fd652b5a1f3b96e264b6eee1407c91e025c2
MD5 f3323c7ed042e6c8d96c03e32b64e54f
SHA1 9bd38e12af09b9352c9b363518e272ba27593c67
SHA512 c22e3d9ad67ae4903a7bdd251f94336519f58eb05be3b2878659c4fa152ab8810635d42cb96efeb793994026cf91f03e91b46611b559386dd46454aa5f4caf7d
SSDEEP 1536:VPxEYn+huo8GRA7APsLzHDlrQPTttNoQxELD5bEaoDbEaog6+M26ENeuf+Lfty:VaYQDNe35doDdog6+M26EMuf+Lf4
TLSH
T1A4D3939713608DF5EFEC1AB349E6082F3C2D1537A80260B4E3EDCE965FA786D0349599
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2696	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338184178429525"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{13CA29F6-B5DE-431E-9DD5-9F8C96B124D8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 456	4260	msedge.exe	87
PID 4260 wrote to memory of 2696	4260	msedge.exe	89
PID 4260 wrote to memory of 1588	4260	msedge.exe	90
PID 4260 wrote to memory of 1588	4260	msedge.exe	90
PID 4260 wrote to memory of 1588	4260	msedge.exe	90
PID 4260 wrote to memory of 4464	4260	msedge.exe	91
PID 4260 wrote to memory of 4464	4260	msedge.exe	91
PID 4260 wrote to memory of 640	4260	msedge.exe	92
PID 4260 wrote to memory of 4412	4260	msedge.exe	93
PID 4260 wrote to memory of 640	4260	msedge.exe	92
PID 4260 wrote to memory of 640	4260	msedge.exe	92
PID 4260 wrote to memory of 4412	4260	msedge.exe	93
PID 4260 wrote to memory of 4412	4260	msedge.exe	93
PID 4260 wrote to memory of 404	4260	msedge.exe	94
PID 4260 wrote to memory of 404	4260	msedge.exe	94
PID 4260 wrote to memory of 404	4260	msedge.exe	94
PID 4260 wrote to memory of 868	4260	msedge.exe	95
PID 4260 wrote to memory of 868	4260	msedge.exe	95
PID 4260 wrote to memory of 868	4260	msedge.exe	95
PID 4260 wrote to memory of 1480	4260	msedge.exe	99
PID 4260 wrote to memory of 3568	4260	msedge.exe	100
PID 4260 wrote to memory of 1480	4260	msedge.exe	99
PID 4260 wrote to memory of 3568	4260	msedge.exe	100
PID 4260 wrote to memory of 960	4260	msedge.exe	102
PID 4260 wrote to memory of 3936	4260	msedge.exe	107
PID 4260 wrote to memory of 4240	4260	msedge.exe	108
PID 4260 wrote to memory of 1592	4260	msedge.exe	109
PID 4260 wrote to memory of 4404	4260	msedge.exe	110
PID 4260 wrote to memory of 4404	4260	msedge.exe	110
PID 4260 wrote to memory of 1544	4260	msedge.exe	112
PID 4260 wrote to memory of 1544	4260	msedge.exe	112
PID 4260 wrote to memory of 4264	4260	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d6d6584d4b48f9ff13fa6c17edb5fd652b5a1f3b96e264b6eee1407c91e025c2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x248,0x7ff82b3fc188,0x7ff82b3fc194,0x7ff82b3fc1a0
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,14515151600626537619,12962752062933326086,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,8859152276925816309,11556226315826689876,262144 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,10945867844385721308,4684391786994319435,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,11232665614462229494,2560332126808770256,2097152 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,12253437559070144393,13636737579750991495,2097152 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,17779909643972248459,9310538920369528354,2097152 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,14628599915504526106,4074692072890351869,2097152 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:2
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,9399127752001118604,12497381992975403121,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,5115214108432519968,9137449359122895053,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10381409964851819122,16157648857311971954,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10381409964851819122,16157648857311971954,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,5508125946124188726,337971805741434592,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,14406817815944169761,17318762167543349558,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,3986350696543948787,6996024047127819956,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,4381704394463226107,14231394855458506495,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,12292080986438996880,14177244259550228502,524288 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=584,i,2083764744975188878,16960530050383070448,262144 --field-trial-handle=2316,i,16773523050447831516,8442397905714631985,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0f037b2619906c966bd701d98395c66aaf8fac8561c7b4f2be66a725cfa0cd86
MD5 8f404f5a31585fe658539f175aef6011
SHA1 7c26daaf7ee659657695a00997b2232dda451072
SHA512 cc8f45b4731544c1764bf1dbb481e16fd0abd3e4e917c999c2ee8e1f91f801f460b6dac2e9a3bf8d1b054b126b941a54ea17ad3f55455778dd5bf1134e18c3db
TLSH
T1F861B88E6551F4D4EB64E1B89DEE18BBB53A65F0504B5D32125CE8BD3F0E3CCB2040A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5939a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5939a4.TMP
Size 3KB
SHA256 5b674de471e47af5681d20b68bfee78aa8ab20b2f45def92971f8da7f74715de
MD5 4513f45b3ee841b4b47de86eaeebd25c
SHA1 2c17c4df9f588ed2041f54c8bc8b74d8ef06c941
SHA512 d2478b2f349634682f2ab72ba6204fb2f10ce4ed228217e6b1ea08ebdde281552d45c7fe83e7ad8e2c9da10116f78340db6fe8016e37025a685fbc9b25f69440
TLSH
T1A261B68E6951F4D4EB64E1B89DEE18BBB53A65F0508B5D32125CE8BD3F0E3CCB208061
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 03cc5a323a365fa2cc0af0324f6a3109e7ad3ce453c92513b33cc498f360616d
MD5 a4197f111df7dd6fef275dbf9f30a530
SHA1 8cae0b04bedf26e5bb3314f2ac38fde7e0c6e5ea
SHA512 07de5d4be1fe73c1b199e48f47e1ea1d7f2e098aae485abdda4f2ddde11c64b76a46ad3b9cb4b63dcb92e4c5e65aa5a65147c025789c58d5b4b61cb25ea57b3c
TLSH
T1D6418DB3C3D4867E891156F05B246E17CD2C0A5A422C3C16C9E9EF2F67E29B5D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 da81195c131f61998fa091179485f6cd240b5c816c5d80145f967606d032de92
MD5 e8f94c7aa56062389e212279168cb57e
SHA1 92149391c2f32211bfcda1b695e9f6f9fb8c1339
SHA512 b908cb18ae79396583d7879f926d39c90e01d1cdbbe2de2305e0fdfcbe96ae4272ca17fe03ba78047eaeda209d2060fb74601bd30671dba16bb15c26d58fd2ec
SSDEEP 192:sxZuR6W05/fNsRHwKIdpdiHW6+WNGYYBaKHIgrJ:sxZuPQ/fNsRH84HbGfn9
TLSH
T1C612B811AE28657B8CCBD20DBB55BF53E6F9503251D41E98EAFCC61C05EA6DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85a5fb1f2ac59eb630111e9f84cc837023168d2906c77ab675a896b51e0d0743
MD5 201e1e83975e5a9ebac00961195256bc
SHA1 66db876b5f1366c93133474923e6bddf6ce5f983
SHA512 097c748f61b6883ac78ca86687f093326dca38809e893f98da530e46811f3f0f78f16cfd1a2b31b3446b582a3376072eef631e1f2aeaf9ba10a8968e77d2f882
SSDEEP 192:sxZuR6W05/fNs95wKIdpHiHW6+WNGYYBfKHIg5WJ:sxZuPQ/fNs958CHbGfYw
TLSH
T19222B911AE28697B8CCBE21DBB55BF53E6F9503251D01E88A6FCC61C05EB6DE620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c32e382c0a8ddce37de25c332ec995df6f47da0e74edc954541eda3d8ac53237
MD5 f5eca02fcf3353ca36ca582e9c0b3fa2
SHA1 05e2cfe760687dccc1a372da2e8d402dc290b3b0
SHA512 ff93a2f6e5b5c32c5e49a1d6dcb0d823b3c9cc3edb8b465b0c280a79b8894faccc6251d5934fbf5dc8c575f77f8679991a3d08c74ff966e48101438f9a84f431
SSDEEP 192:sxZuR6W05/fNs9HwKIdpdiHW6+WNGYYBaKHIg50J:sxZuPQ/fNs9H84HbGfny
TLSH
T11822B711AE38657B8CCBD20DBB55BF53E6FD503251D41E98AAFC861C05EA6DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 66f72530b7befc4b1eaf9b2b323669753ca99751fcbaf1c840e6922365a2b020
MD5 69d278711072f7a4de453ee37dc41eb9
SHA1 465fbf6b60d0df500565ecd0181078cc9634225c
SHA512 6085486679d82c3ed7e4d7086af7f772131c8752164c5a3a0a7b0543e24a2a8168683203278abceccab4ba9a1e66f7cefdd3c4b8873b7d7c36e4fb1d521d5518
SSDEEP 192:sxZuR6W05/fNs95wKIdpdiHW6+WNGYYBvKHIg5WJ:sxZuPQ/fNs9584HbGfIw
TLSH
T10522B911AE28697B8CCBE20DBB55BF53E6F9503251D41E98A6FCC61C05EB6CE620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1c30246e64e0b55bd221b1c5415abde470c94bfe718153d40e380cd5f4bb580a
MD5 4eeedf0d90bc7c448956493d0d5c8c74
SHA1 e000f06e2b10c8eb0510180f06e45c71ead28825
SHA512 66701f0f8976a11f19477a31d6d07c7c2520a027550fbdc187dded08dbbb6152dd9e8b05c7ec7df1c21a490e1fa10eeccb84ef5f54300557957b78d115f28c8f
SSDEEP 768:mbyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXtropK3x:mbyYR7jWv3NpBu1ja/CL8OXGQ
TLSH
T17BC2E93B644DCB7E4FC01E9DDC5A6F9B3E9802C796548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 cf724d742a4349b3bbbf62cdb51c0dc6d1e7564b89b914a3f0a3076b553c4443
MD5 018fb0f8d90d15fcbb2344de6aea67fd
SHA1 80cebe5dab73caef84be19628d0bd3d086ce22ae
SHA512 25fd8fee81eb243c4318bc37b03e5b91edd9614f20a8b713bd601e092812acff8cd9fa0825b188c9c6c4c78f2ba93731e385aa8f43ddceac15e9d37fef22f3b0
TLSH
T1992144C8B3F910947ECAB541D129AB0394A17B17111DD935235E92F49F86C181F2F9A1
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ed41e0f65fc0179595969189a6ac1b2a8be4de328e358a69c50349f1508b2817
MD5 d6d3896f0ee737db8edc4db927846e02
SHA1 fd6c8ad04f43bfa824f5cbe8353392c2aa6c9cba
SHA512 fb5ab01bcf7b381bd021d2e0f4900c4bffa99b56c745b63c415864828edeca79a343a9bb76ebda9d3a0d0e73a162cf467d4e56ac7c0489ecdc167f690114d5bc
SSDEEP 384:uFiZcIpQsNW8TUNTUlIlKbiuW5QX5+DtyOO/Hq897Z0QlBsa+VYgUoJ:uFQODwgk4+kDIOUF9l0QbhgCS
TLSH
T1B2A26D325C98DC7B9DFA9781F98B32138EB45067D5C8AAD0E6DD6E1D00DA1EC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9803898cb406dc843418c0c725275c798bb93b7f6a177d0a488eb7fe79261fa9
MD5 a8f74af8254bc9a6ff87150d9e4fe206
SHA1 dc9dd7be1f81ce53fa82a2ee53eae4e970aca61b
SHA512 39ad29d4418db7a370d52a46a00ec371a6edf44ce5f46e2ff53ba5b11227029ad7e8fd95e8cdef012f0906b5183a66f3dd559faae173a261a9b6d911581b9fb4
SSDEEP 192:EONs6nnHGQmiUyo0QYcX5hQDP1yOO/FMcAWU6:EONs6nCoQNX5+DtyOO/FzU6
TLSH
T11802DB34BC786C778EF7AD45B58A37135FA5213BE5946BC0DAEC1E1C00D769C2306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b96731081866c54f7c7e21768d10ce36fa5f8898ad7a16120a628de3efa5997e
MD5 bce4447e6d1cab5e21ddb59b4733647f
SHA1 0fb8a0314add4b08dc0b853d8fed7dd09a1fffa7
SHA512 50fba2d0d9c7f243d3edd47e6354867f8ca96c4a223b8a05c4c4ac60621dfde658f4e182dabb2071b72ebcce3b1e4d04ec31932b12f864f73fa828edf6eea9aa
SSDEEP 384:kZcImsNWDbiNW5QX5+DtyOO/Hq89dYQlBsa+VYgUoJ:Cm9f+kDIOUF9dYQbhgCS
TLSH
T173827D31AC689C7759EA92C1F98736138FB85067D2C86AC0D5ED6B1D01D96AD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 65b5b22aa067e4ae977b78b9b011bb1f234e45d754c60d9b1304c88b63efb787
MD5 bff20ebb7032ad0908badd7a434a362a
SHA1 767c75bdeed4806362c611dd82c429e4d2dd5a76
SHA512 0c0ae6a659ee0f897532a96bdf1e6440236e6d16ed6a84b39349848df274f0f4742e7c3fee77d00730001991948f2754d769f58539f56cfd0be35097d803ca3c
SSDEEP 384:5ZcImsNWKbiuW5QX5+DtyOO/Hq89dYQlBsa+VYgUoJ:RmY4+kDIOUF9dYQbhgCS
TLSH
T15D827D31AC689C7759EA92C1B98732139EB85067D2C86EC0D5ED6B1D01D96AD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8888e40a4b3c14d945fa15f0d72f886fa1e96ae059230395ef53ab1844692a05
MD5 db50eed91b149e224dc1892e960ea952
SHA1 986ccab0a5422a56c678c9991037bbe8afcfb02e
SHA512 d83e811e10c1a606c8fa38881e876ef317fe483f5e3ae13f0c477c9f55bf2998ecfefeee1b5e094d52aed4b6bc6f5ff36edd40463287001975addd2270fd70b0
SSDEEP 192:EONP6nnHSQmiUym07YcX5hQDP1yOO/HGFfE9eg32/5lBHU6:EONP6nuo7NX5+DtyOO/Hq89pQlBU6
TLSH
T11D120C31B8A8AC775EE2A5D5F48731139FA51127E9487FC0D5DD2E1C01DEAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beb634ba-1f62-4256-adb8-fa68506156a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\beb634ba-1f62-4256-adb8-fa68506156a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c080e9cd279f0d002c7e15297a0bdf70299babe707d4c2c33f529cab5bdc1f1e
MD5 75657547e5ca6b63b16f1a5207a0b4e6
SHA1 3420be67116a556f7ccea58effca3f832c03a22a
SHA512 0b9ef26e6385680b0e193aa763e320c5e449bc250ccce9c5984dd1979bdd3069ae3662c899630ea07125d737c42aeacb348228761cc44f0eec7c19e3659a77a9
TLSH
T133410959A6E91148F3B76F5AABF2A86D887A7C732F46945E00110D4F4B22B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download