21d2ad04d5c05a8fd8add17e51cd5a9623468b775b9958c1f96bcf64cabd60d0

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_21d2ad04d5c05a8fd8add17e51cd5a9623468b775b9958c1f96bcf64cabd60d0.html
Size 40KB
Sample260912-p2xbfscb37
SHA256 21d2ad04d5c05a8fd8add17e51cd5a9623468b775b9958c1f96bcf64cabd60d0
MD5 49b23815b4314a2bfab49f9dbea7b155
SHA1 71801c6f0d7482212bad6a0b3951c66a178bdfab
SHA512 54714ebd148fa0e84d5669d55200d720e62543ed426ecf0709303c281a9a90c02396c192741afb82c3d00c4fe3167817b27415aebfd1d597cae0548213e21e98
SSDEEP 384:2J58kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8CgNLMY2:I/w8hW8VgJG8yJMqNLB2
TLSH
T1A2139374B9C221230133637D9BA79608FB74112B820653407EBC27EA1FF1964D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2856	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338336767405629"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{90F178E1-8EF0-45A6-A8B3-2FB1F1C5EE7F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1440 wrote to memory of 3352	1440	msedge.exe	83
PID 1440 wrote to memory of 2856	1440	msedge.exe	84
PID 1440 wrote to memory of 2916	1440	msedge.exe	85
PID 1440 wrote to memory of 2916	1440	msedge.exe	85
PID 1440 wrote to memory of 2916	1440	msedge.exe	85
PID 1440 wrote to memory of 2720	1440	msedge.exe	86
PID 1440 wrote to memory of 2720	1440	msedge.exe	86
PID 1440 wrote to memory of 1424	1440	msedge.exe	87
PID 1440 wrote to memory of 1424	1440	msedge.exe	87
PID 1440 wrote to memory of 1424	1440	msedge.exe	87
PID 1440 wrote to memory of 1596	1440	msedge.exe	88
PID 1440 wrote to memory of 1596	1440	msedge.exe	88
PID 1440 wrote to memory of 1596	1440	msedge.exe	88
PID 1440 wrote to memory of 892	1440	msedge.exe	90
PID 1440 wrote to memory of 892	1440	msedge.exe	90
PID 1440 wrote to memory of 892	1440	msedge.exe	90
PID 1440 wrote to memory of 4580	1440	msedge.exe	91
PID 1440 wrote to memory of 4580	1440	msedge.exe	91
PID 1440 wrote to memory of 4580	1440	msedge.exe	91
PID 1440 wrote to memory of 4120	1440	msedge.exe	95
PID 1440 wrote to memory of 2536	1440	msedge.exe	96
PID 1440 wrote to memory of 4120	1440	msedge.exe	95
PID 1440 wrote to memory of 2536	1440	msedge.exe	96
PID 1440 wrote to memory of 4572	1440	msedge.exe	99
PID 1440 wrote to memory of 3536	1440	msedge.exe	105
PID 1440 wrote to memory of 536	1440	msedge.exe	106
PID 1440 wrote to memory of 4804	1440	msedge.exe	107
PID 1440 wrote to memory of 4568	1440	msedge.exe	108
PID 1440 wrote to memory of 4568	1440	msedge.exe	108
PID 1440 wrote to memory of 3472	1440	msedge.exe	109
PID 1440 wrote to memory of 3472	1440	msedge.exe	109
PID 1440 wrote to memory of 4908	1440	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_21d2ad04d5c05a8fd8add17e51cd5a9623468b775b9958c1f96bcf64cabd60d0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,2753439467379362269,8810731359526515426,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,8823413501998373582,13382150553189632456,262144 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,9364004145094523365,11025599789524968655,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,4228367460013706190,8000677288463459795,2097152 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,10015482250395588901,8254298713971784897,2097152 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,14941686634322568502,3239190006924497322,2097152 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,6230786169466663747,1067653002261133778,2097152 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,16562167679336326340,3998137234921037261,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,653221119408785300,5072071043627009645,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12043047763469963150,11581105871582376863,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12043047763469963150,11581105871582376863,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,11299783579499347934,16061566576029622384,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,8952561545657259607,1795601167787390723,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,4837807726570136720,8242883702048737529,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,7385838606483825599,4478551485284268815,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,8389049695867466254,7682022476535746021,524288 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,13603830897401672010,10562947778455219482,262144 --field-trial-handle=2068,i,16595822709778508691,2061160200673608847,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

5745bbcf-5cfc-4a04-9e30-d6a31d3ae00d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5745bbcf-5cfc-4a04-9e30-d6a31d3ae00d.tmp
Size 10KB
SHA256 66f942c4c07499b13c9dc19b85c968a9127d53c33cba7371a368375c1212b1d4
MD5 8003f2bc021c670a8dde22c62dc918e7
SHA1 22aac280fca892dda61d3ee7f118c3db5f22b73b
SHA512 fa012af856b14f5fe64993943fdc1415ba4dff2cccbc13076d0d76a4390a57ca247ef8e1aa52587c5bb8f64a106009141bf5057b32a8b86a86c5e14ff7dba6a5
SSDEEP 192:sxZvRfWG/fWsYIQIdpd2HW6+WNGYrprQIg56J:sxZvAG/fWs/xoHbGHk
TLSH
T1C322B9566E28A97B8CCBE20DBB15BF43D6F9503261951E48A6FC861C05F7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0975936e529311a56b07956035eb8546599f13e99043cd0f9d61683bb8303db0
MD5 a8862f06fbbab42bee77ac74ca42bc0c
SHA1 9b24b9021d4c6a2428f261c7feae6c796f95ca79
SHA512 116770dd9d1f3c1fb99f80ad32d2341312ffad795f9df43079ceea008ad6cd1ac223250c74e329389cffae377eb0ce9802bf9dafbb95fdc93ffd23d25966c6ed
TLSH
T141612E86E48E4463DBB491FD8DE12CCB3938C6F046AB1D5A0398D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59571f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59571f.TMP
Size 3KB
SHA256 8515f9876f8ce09c8b5c8ffd65ffbdfbde42817c0e3a752a32fa1d750a6142b0
MD5 ee076b5c6e664450ae88d8f1856d71c5
SHA1 b9d51738b57a02fed9f830421feb87197aa1b6b8
SHA512 346358a97e4ae247ccdae2e2c322916d0feec5c2083aadf9ccd25cc8092e5255115a5714eed4120aec5c692867d44dddfb73ecdad9f463eff18cee2219d32b0f
TLSH
T137613E86E48E4463DBB891FD8DE12CCB3938C6F046AB1D5A0798D8785F26F5272B001C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

df26047c-f4d3-41dc-8183-d48ade25f078.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\df26047c-f4d3-41dc-8183-d48ade25f078.tmp
Size 1KB
SHA256 2bf647eaae7e33bcb25df9e912b287248b19eff489385ca7c078b0985859661e
MD5 bee2af5752007bda0f401366f56cc0bb
SHA1 dba68fa9a6b2460b1429cc5f5ba36379081393ba
SHA512 ca5c961a8706c4a8e76498d7a1e0babef5b6001103e7a7daf74d41662b1b78f652916ca256ca44cb4476e47b62c330422da1c754fb553b1a8eb531c01d8249f8
TLSH
T144214CB3C3D596AE891156F05A28AE17CE1D0506421C3D1A89E4EF1F93E3475D10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a75265e66ae5a27daf6ff26ab778ba3a48ed3662e90085c61bcee7c57057b42f
MD5 b90eaf73d5e45a3a078417bbf83b49cb
SHA1 7bdb78b1f745ab70054fadc1e15e513df8724b99
SHA512 38bdd3304b4b6067e0f65b3588165cb48aefa75c38c5a22bcf4919afe0fca039e598597ff91a5734bd50102bb39355539caa5bb944d1a0fe2a1adcda5edf5f81
SSDEEP 192:sxZvRfWG/fWsgIQIdpd2HW6+WNGYrbrQIgrJ:sxZvAG/fWs3xoHbGf9
TLSH
T15D12B8526E28A93B8CC7E20DBB19BF53D6F9503261D51E48AAFC861C04F7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1001daa634cafec16e4873241f9822e46254b64752093a1caecfe0dfefc43102
MD5 55293c45c450e729fb42e5491f77eb43
SHA1 3745563e601daedd843d10a66f9bc625f2497958
SHA512 b4296f8b2d2d02c4c9df6b17a14a2cf11df45a3d02796cfe66bb136577222f42976cc6d56906c626b448f0cb8f954e61065d16e51add5e6db62c1d90e4d38ece
SSDEEP 192:sxZvRfWG/fWsGIQIdpd2HW6+WNGYrbrQIg5YJ:sxZvAG/fWsdxoHbGfm
TLSH
T1C522B8566E38A97B8CCBD20DBB19BF53D6F9503261951E48A6FC851C04F7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 564fc42f5d9a13622664183acc6bae5663f6d3e741f45a26074881fc0ad05c56
MD5 0b2785739d90b025788ceda10b6f0b14
SHA1 6f6841c09053e76d8c006673b0e03c306d527844
SHA512 ebd5c908d4555e713039d248a14d493725dfb691872f58b8c5e0590166e14d10af4ffeb703c311ef8e6e696b2317d36f567d86da80f9889e624fa6d2c2f16205
SSDEEP 192:sxZvRfWG/fWsYIQIdpH2HW6+WNGYrlrQIg56J:sxZvAG/fWs/xWHbGjk
TLSH
T12322C9566E28A93B8CC7E20DBB15BF53D6F9503261951F48AAFC861C04F7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1b7a32e09873a4363848cb2232d803e7808545141b6e8e78bfe1d4e01abb5102
MD5 eb5a99d2bd4c4fe9486fe40ad0073c34
SHA1 a0a126d17f597e4d91d8ecab980b1061c66946f1
SHA512 bb8da2f12e7ba0cf63a3c325a6c45d7681ecf8713cce713511bf38d80a31a90bd5aea67d491065e735216832257ec937fb306dada228fdc414ff0f22f059190a
SSDEEP 768:yPy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb9roRLt:yPy4J/DWvbtBhu1jajiLm0b29t
TLSH
T17DC20B3F684CCA7E4FC00A9DDD5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cf67480d7d4284c38724b46ff1ed5a04172ffc74655abe511d4e50c923aebc85
MD5 61d86ed94563298eecc0cb9f2e2a1793
SHA1 884006be3198857cf2d49903a6cf00c35bb9a409
SHA512 6d4a227b8a3f253a13bdf7488c62833f1abab22c4dd909f0b6d297bc9914952ca4dbb18dfa5966ac34901af9eadf6be86010761929c0ca29cdad9f786dee178a
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLISf7IpKMwEnyJqI/K/6l:KIDCKs0+iSh7GKMwmaqkK/6l
TLSH
T1E291114470BB125138BD295882B79B1E138176737418E67B7FB950B1AE2BE094EFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 04ca2c9707a8e37ad8d86901e60ae6f400cf9c04195ec60a0c384af8c35411d8
MD5 12e7b075a81a4883e6689e9db3fe9614
SHA1 665402a4c2ff9b3dfec8ac26fb14b39594ba1545
SHA512 5009f688e8e96b940de4f364ae8679fb453cdd32ef368286243853ae3c2f9555a600c8010b5b388953d4c7ddb14184ca3444af2e6ae10171c6dd64fdff25e6f5
SSDEEP 384:LZcIEsNCRBinyVjZ1uquHX58EC8xJgXw+2+37O6R2Feo2h7UJo0:TE4yVjaPaHwl+37TRRYP
TLSH
T1F6827D72A878AC3B59F7E146B44A31035EF99067D7CA5F50D5EC5B2E01DAA98030BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7be72833ee5919ae4ce435ad68678d80dc81a87a18dd474cdb4c812bb30f2a02
MD5 2e6239e9bb7485dd1cedf38dcef3251d
SHA1 5cb5e169a83928a7b21905faaea57e16a461e3f9
SHA512 cdd1b67e68202494f8d6db6e0a631254518fc5066eb2aa2ce2a0c2ee687d0b8c6ccb712b26022bb76ae40c5dda02d51952dda24e0fecdcd70398391a9cad219a
SSDEEP 192:1ONO6wlDgQmiUyBZW4X58gZejzorxJlDlrFU6:1ONO6kgIW4X58EC8xJLRU6
TLSH
T1FA02F935F9787C6B8EF3AE0AF58627139FE5112BE6552F44DAE80A1D00DB65C130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5437535d63d9a80c767c7422acae7aa395e1e5f4d9abae69e8c1d69febda3c96
MD5 69e03e5269fd810abf966f0f557cdafb
SHA1 1746ad6c8618ede23bc30ebbea5438ca777e4708
SHA512 d0c6fb37ac93d5802ac520fbe68614f29daa663a97299c9b6798d642485c79c3c57191ac3cf5c9321cfa5ac083f9edd9fb4624b3aa762e498e57a0f4af6aecb4
SSDEEP 384:gZcIEsNCcBinyVjZ1uquHX58EC8xJgXw+2+37O6R2Feo2h7UJo0:eEzyVjaPaHwl+37TRRYP
TLSH
T1FF828D72A878AC3B5DF7E146B44A31039EF99067D7CA5F50D6EC5B2E01DAA98130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 aa1b122e7c0a19a2ad56f3a0251a3ec4ce5322158cecd10bdd4328fc9c307ebc
MD5 37f3ea22e7a7552f30d54c5b597002f2
SHA1 43111693bd83ecf1ba8fad32da9556f92f2b06f4
SHA512 2aef153ff27e9fbb24a202ada9a5a200f205a543dd0003de25001ed9059fe93eb4e8213372bd9b43de658e0d5e0911648ea3e98cc43409f50f8069963b173588
SSDEEP 384:SZcIm2sNCcBinyVjZ1uquHX58EC8xJgXw+2W37O6R2Feo2h7UJo0:g/zyVjaPaHwlW37TRRYP
TLSH
T108927D72A878AC3B5DF7E146B44A31039EF9506797CD9F50D6EC5B2E04DAA98130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9ce13ef9d142f2abed79a834c1593dfc68d7a0bd3c02c537497107656f9dfbf2
MD5 f82c714814933dc377f2f89a503b8d31
SHA1 647598f4986aabb1a5d02831dc6ec33ba9c09151
SHA512 13a50046dff33e04b4b5f1c7ac9b211f169ac5ff6bcde7a77b0d7986dea62eeebe6f5c06afb5cd903704adb55e32f41242d0d19b1ada1a78266a02d05770a902
SSDEEP 192:1OND6wlDQQmiUyfZ94X58gZejzorxJgXA7R+2tveS/gU6:1OND6kQ094X58EC8xJgXw+2M3U6
TLSH
T118121935F868AC2B5DE2A545B08B31039FE95117EB8A6F90D6EC1A2C01EF65C534ED13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 e97df6fdc64db7bc0819bee07ec25858b59572ac9db1cb652c54260b48617dda
MD5 9ac17826129e9d453309837d52ddbab7
SHA1 9d69f2b786c8d121cd3a57f4bce418ad00d4c7d2
SHA512 8332ba6edf1691086ef9056b241bf076b31ba797c10a2ecc52a8083daa33f949d8b0877eb93c4ea24985b40750a0c851751d9f0e211995802d271759cb182626
SSDEEP 384:XsNC6BinyVjZmuquHX58EC8xJgXw+2+37O6R2Feo2h7UG:XhyVjNPaHwl+37TRRT
TLSH
T145624C32A878AC3B5DE7A146B04B31139EF950A7978A6F90D6EC1F2D05DE69C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad1ad44b-ec1b-4249-8c61-2148b4d5edb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ad1ad44b-ec1b-4249-8c61-2148b4d5edb5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 06a974de3fcf885be13ae99fe1e4f4fe159921dfccb7946bc572ac29eb715076
MD5 95ca12555ef7a0c45d357ebec17ddd9a
SHA1 a856d690cbf62ce66d51f6c0cf9a2297e5f08aef
SHA512 372f0e7e95c2ad88822cde2a4962b1135e36b32cf9110d5c10d1c3d7ef382c09e558beab48ed3fdcbbf3cecc1ac1846a389e464bf063b3939bfbc132b8f130c1
TLSH
T115410458A6ED0148B3B7AF16ABF268AD447FBC772F06D46E00110E4F0A26B40D871B37
MD5 SHA1 SHA512 TLSH

Submit Download