3d5e873b40b6a204bdc0b5adf49cf7046bc69c6e0926988bdc872a8af808de92

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3d5e873b40b6a204bdc0b5adf49cf7046bc69c6e0926988bdc872a8af808de92.html
Size 113KB
Sample260912-srcqvabj7w
SHA256 3d5e873b40b6a204bdc0b5adf49cf7046bc69c6e0926988bdc872a8af808de92
MD5 ae114e96d90ba315486d09a3428183fe
SHA1 a8fe5af31a243fc088c931705ff8954779ba3882
SHA512 b2e4437e10dd5b573a9a1408ab9819d001581cfd8683ca16757c1c441ccc77d9c63b83c6a26196e2fba4a8af7edbb0a211e7bb5b99230c05a34bf2919394b14f
SSDEEP 1536:pmx4Yn+hrOhdRGH45bYJOi4lX7Ttp0No7iwtbbEaoAbEaojip0:4SowN3ObdoAdojX
TLSH
T179B3C48751204CF9EFB55DB3419B186B3D2C1437AC4790B9E3FE8F972B5286E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4660	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338239629117196"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F59AEBE0-1FB1-48BF-B367-E90535ED2F92}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
116	msedge.exe
116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 1832	3032	msedge.exe	84
PID 3032 wrote to memory of 4660	3032	msedge.exe	85
PID 3032 wrote to memory of 3808	3032	msedge.exe	86
PID 3032 wrote to memory of 3808	3032	msedge.exe	86
PID 3032 wrote to memory of 3808	3032	msedge.exe	86
PID 3032 wrote to memory of 4892	3032	msedge.exe	87
PID 3032 wrote to memory of 4892	3032	msedge.exe	87
PID 3032 wrote to memory of 3508	3032	msedge.exe	89
PID 3032 wrote to memory of 3508	3032	msedge.exe	89
PID 3032 wrote to memory of 3508	3032	msedge.exe	89
PID 3032 wrote to memory of 1192	3032	msedge.exe	90
PID 3032 wrote to memory of 1192	3032	msedge.exe	90
PID 3032 wrote to memory of 1192	3032	msedge.exe	90
PID 3032 wrote to memory of 3212	3032	msedge.exe	91
PID 3032 wrote to memory of 3420	3032	msedge.exe	92
PID 3032 wrote to memory of 3212	3032	msedge.exe	91
PID 3032 wrote to memory of 3212	3032	msedge.exe	91
PID 3032 wrote to memory of 3420	3032	msedge.exe	92
PID 3032 wrote to memory of 3420	3032	msedge.exe	92
PID 3032 wrote to memory of 3944	3032	msedge.exe	96
PID 3032 wrote to memory of 3164	3032	msedge.exe	97
PID 3032 wrote to memory of 3944	3032	msedge.exe	96
PID 3032 wrote to memory of 3164	3032	msedge.exe	97
PID 3032 wrote to memory of 368	3032	msedge.exe	100
PID 3032 wrote to memory of 3160	3032	msedge.exe	105
PID 3032 wrote to memory of 4164	3032	msedge.exe	106
PID 3032 wrote to memory of 688	3032	msedge.exe	107
PID 3032 wrote to memory of 3148	3032	msedge.exe	108
PID 3032 wrote to memory of 3148	3032	msedge.exe	108
PID 3032 wrote to memory of 4064	3032	msedge.exe	109
PID 3032 wrote to memory of 4064	3032	msedge.exe	109
PID 3032 wrote to memory of 116	3032	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3d5e873b40b6a204bdc0b5adf49cf7046bc69c6e0926988bdc872a8af808de92.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9e633c188,0x7ff9e633c194,0x7ff9e633c1a0
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,18141012422809966832,12756716883531389372,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,4009557672498602240,9481038793926281918,262144 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,3370613079079918835,8725068108757107499,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,7846212908923304325,10570794071124952635,2097152 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,7377660733512477213,9417526807009336918,2097152 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,5001025126995662220,14063430282057831696,2097152 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,7133905540945763218,2746199094657877917,2097152 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,1072705150604740518,7677919841047422452,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17784591238468305086,13104484348776539984,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,10811796821776868325,16206035811583897578,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,10811796821776868325,16206035811583897578,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,5867089158383795373,11496256213615839206,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,1764231911552529985,16548743640051311231,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,12814449941659624123,6712282663239240833,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2880,i,11415159791275892876,7294547943663481052,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=4024 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,925359204142309225,14686238879993956075,524288 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5412,i,323299866524103406,4394238208519295649,262144 --field-trial-handle=2292,i,1229604136787871891,7254413509433258747,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

8e8407ff-1c42-4809-921f-a61124f1b0db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e8407ff-1c42-4809-921f-a61124f1b0db.tmp
Size 27KB
SHA256 3851330dbe15bd938d503139141ae3bbac64020079292e7a4eff368438144036
MD5 42397975077f911cd37389dfb2429ff1
SHA1 ca15bd9ad36beb6ab82c1ba42983cecd15bf0f88
SHA512 488325545a2405fcdc886be1d820d273a3afa4b0298340da12201e0e42cd2befdf19367ac7572467c4db41c6ecfb01450942963e950674d10412070743a848f1
SSDEEP 768:2IKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/dro7U:2IKlm7QWvUYe0u1ja8/L/E/W7U
TLSH
T1B3C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 23c5403f20493d5851d535b98dc25abac6dd437454e820f0076080796669c513
MD5 cfa5648dc0c6e5c2be27f23e17dc6fce
SHA1 da67928c1a9deecc70d98e1c55f7215160caa319
SHA512 70cd58b593b3bab8c04075bb16627917f62df9f7a57710e042197dd21cb0f0e54e1093fed443814ed02c7507c9a21b267183686135d20232207720d4be97b669
TLSH
T1A9619680CC80C1D9F3E56373A1D72CABB5BA50C11DAB0EA1597EEDFD8846F165684E34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ac68.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ac68.TMP
Size 3KB
SHA256 a93c8df39a778352a139453cf85589df39e3132cfd5d87b461f7f59db9da9234
MD5 d32eb25324154786a3d578f62e4f89da
SHA1 afd556db02625bab99c4cf0df343aebe0e1f1ef0
SHA512 da76f3a257d445209beca0b5d1724f930dcedaedcbd8b3d5be6035be21152c20ae3e405998404d343b001f11aa2bd0521acb6a3dcb43b2206012c9bab4358e90
TLSH
T14F6196808C80C1D9F3E16373A1D72CABB5BA50C11DAB0EA1597EEDFD8846F1656C4E34
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4e7e9a2423d37566f9a1ec67d2d92989ebb66b9eafbaa0c45520845c3e9227fe
MD5 8d96f0b0260a9fbfa6c35ab1b5d588a8
SHA1 f13c4aec86524da5c5b3070305e8ece920da95c6
SHA512 a12a45ee41a09aafa18aa9a654f4c3fa9f8c4e50e8e5dae0cabf50e0e804f53cfbeee2afefd52f0329a27f03a9d74ad47e96528a456078c737654ce887259ae7
TLSH
T145518AF7C7D4877E890156F09B246E2ACE2C0A56422C3C56CDE4AF2F63E29B1D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8058fa99a28133c2394bddaeb68b34d69536d3eae07cdb346e781ce9945055aa
MD5 866d123df957f6d2d8d3f5b90a974aa9
SHA1 8344f50b46566a6ccf4fd30f81a950861b309c2c
SHA512 8077c2f31073d69b02afefec55ebe30a0822444c6b172805b22c0b7960fa7302567dbbf385613ec26ae35a7fe27bc487e886f8ee3c1fa48e7f32b9178ffa1cc6
SSDEEP 192:sxZ5dMRwWOre/funs+dlRIdpd5XyHW6+WNGY36agTIgrJ:sxZ5dMFOy/funs+dlaXXyHbGX99
TLSH
T14512A8116E38A57B8CCBE20DBA257F53D6FD503261D41E58EAFC861C05E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 34b0b7afb61398c96d43c63d7c7dd018a2eccf12641a6a096b17031499e1822c
MD5 2e881a620beaf536dc09e3d0b259f8b1
SHA1 f8c7c160f10c3775e9ee42bdacda6dfa8f60c282
SHA512 1db7215637ca60cbf2595bf930c438edac0113e30d01cf2e91b031d0ad1be498846b263cb13a175f2845657d8ab64c47ee03acefdab73c3c049fb795b8a039ec
SSDEEP 192:sxZ5dMRwWOre/funsM4IdlRIdpd5XyHW6+WNGY36agTIg5lJ:sxZ5dMFOy/funsM4IdlaXXyHbGX9R
TLSH
T17122A8116E38A57B4CCBD21DBB65BF53D6FD503151D41E58AAFC8A1C05E6ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dc3bd8ea37b928a9fb9c84f861905299336eda62a4ef06b7c6c336e8cf2f230e
MD5 a25a18a9585723480d831ab60725d9b5
SHA1 f738276a0ac313c5b78ed85a35a1270861190ef2
SHA512 c4bbe7de88ff4f3c6e81a50c0b5e9123270e2d31b8471797126c1112454215f4a7b86b87900411eb529e05df060dddee66c7d0f75041af721c6d3632ef5490d5
SSDEEP 192:sxZ5dMRwWOre/funsM4ZdlRIdpH5XyHW6+WNGY366gTIg5PJ:sxZ5dMFOy/funsM4ZdlaZXyHbGXd3
TLSH
T12D22B8526E38697B8CCBE21DBA25BF53E6FD503251D41E58A6FCCA1C05E6ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2f14540ffd6db6888dc93e33b86ec0d1f5a5dbc69faba02aab25805df4cdcf54
MD5 5c948ac96de0e7cf3dbbb15ba3715165
SHA1 c0dcb12ab4835eae84fb6dfa59ff7e2c9dd674f7
SHA512 10514ecf2e8af47e7623d77967f7f9968b4c1bc930d96d50ba33eef881316967a747cc1c1d94c4ba06cdfa93b7085ba46b5fa284090f60fbd9b0f2dd15c76215
SSDEEP 192:sxZ5dMRwWOre/funsM4ZdlRIdpd5XyHW6+WNGY36rgTIg5PJ:sxZ5dMFOy/funsM4ZdlaXXyHbGXu3
TLSH
T15322A7516E38A97B8CCBE20DBA257F53E6FD503251D51E58A6FCCA1C05E6ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 21f98d27a630ac2240848d03087ac7c5b226ef193ac5207dbb0a9fde01627653
MD5 e5abdffed2c8a28aa67b6c5a8c20b1bb
SHA1 c320d3e132e32c5a98c175cf7c68bdba63a4ac71
SHA512 00d7c6bfaa5afeb5840829f4eae3ed014b884bf22f340e399b95b2317563f1b335451270d49e43cf628c88b378dc168c229e3f382349e65e2db65b52f7429db6
SSDEEP 384:cZcI8sN9n6bbHfB4x2h//YhKYsa+VYmlvoW:K8R/5uG/QkYhgXl
TLSH
T1FF828D716C74ACB79CA7D382F84736138EB880B7A6C86E58D5EDBF1C05DA1A81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d79a248fb3bf0aa3fc1c6c5191bd454ca5dd0395d5649f8b53d05b3736621173
MD5 71502d245da675a18ec2a18efde49d88
SHA1 060b09da79d31a3d81be5e039240511c9b37fead
SHA512 abe74f2a6194d32af87ec98601b13c961cd883b61aed49507f81fb171df48c3114d70525db9fc386e4972b7d6725290bc283a2d4ed3559d352065a0066a1e151
SSDEEP 96:KqONkrQsjpfbUmjH5ih/cIPURHl8h4otop5FaD3BKP4v+Y1xf//ojdoxTeYzqsoC:BON/6JUm0QmiUyGxso//YpBCH1EYU6
TLSH
T16B02D739BC74BCBB8EE3AE45B48777239FA4107B96915F44DAD82A1D01D725C1303D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ddc0cf79be844d596adb7b6a2d862c3d7019ad8c614541755d839432cfb8a805
MD5 b60268d4d873519e8bb1962feb363159
SHA1 804f49095e11017a9b4a1453108be8edc7802947
SHA512 e7bd53c1e66805d19526d84e063ea09538128d2b9ea8fe25d553ea72ac22c4554252f9f82b095113d16100e3c5fe542ddd4e5964a4185a5206b664e89e82931e
SSDEEP 384:XZcI8sN966bbHkB4x2h//YhKYsa+VYmlvoW:f88/0uG/QkYhgXl
TLSH
T166828D716C74ACB79CE7D382F84736038EB880B7A6C86E58D5EDAF1D05DA5A81303D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0d9e6f873fe47d712eb4cc45deb82e251803f03713050d78ac13c4712fdd041b
MD5 9d93b798a8cc443fa5c50dd2324e6f47
SHA1 7d8c23241bb8d636adb74ef1d3c532fc28b4883c
SHA512 500e8103342b83c001a24aeee673a7dcbaba14b1f313de56596c4a350785140ff2d8a201f3af68826a1a91370ed6f2a67fbc8afb550fa91e27541dd81ff848b9
SSDEEP 384:IZcImisN966bbHkB4x2h//YhNYsa+VYmlvoW:2D8/0uG/QvYhgXl
TLSH
T11C927D716C74AC779CE7D382F84736038EB880B796C86E58D5EDAF1D05DA5A81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 390d389594094d5881b48820bde4cc75e05cb610ac9230b3d547a8ef079844a9
MD5 677c20fe03938ba05664660c4c591f9a
SHA1 9aaf578da0633e1b85620237f2026f7fa10e9e81
SHA512 461dcf4ded992d9453b65432fb494c2ef0e9a9320b74f5078a7b04fac5e0a06a545693df429969c96ce0b03196a3253fd9189019cd09c286d0eedd3fabfa4ec1
SSDEEP 96:KqONkMQsjpfbUZH5ih/cIPURHl8h4otop5FkD3BwP4v+Y1xf//ojdoxTeYzqsoVY:BONQ6JUqQmiUyExio//YhVNxr/UU6
TLSH
T1CA120735B874AC775D93A581F08736138E644177EB856F94D6DC2B2C06DA1ACA307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1fd663d8-8fb2-4472-a07c-dcf1f364d90a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1fd663d8-8fb2-4472-a07c-dcf1f364d90a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e9f391497544ca7c53f2bbbf2e267aee98fee44fae0503317ef6842160a6de11
MD5 da8da9a075b9e1d56010cfe43491b442
SHA1 9010e52e64b95efaf4d4c49ae2cc8cf5f7651a84
SHA512 7d7c8d2a6d71ec52fbfc6f89f140b52f8d2bd688be27fe61e5ee868a4f1b97a9fc0d171c9dfa0cb51c62f0085b3ecc3c391dc2fc3858402a2df44dd382e4fba4
TLSH
T1B8411C58A7FA1148B3B7AF56ABF7A46E487FB9772E06D46D00110D4F0662B40C9B2733
MD5 SHA1 SHA512 TLSH

Submit Download