a412c3f8fb758491ff57d5132d0b0d2bb334fd220f4c40327689be364cd39d55

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a412c3f8fb758491ff57d5132d0b0d2bb334fd220f4c40327689be364cd39d55.html
Size 40KB
Sample260912-twypjszhmc
SHA256 a412c3f8fb758491ff57d5132d0b0d2bb334fd220f4c40327689be364cd39d55
MD5 bc9c262bb4346c4cf7937beedc632f6e
SHA1 4a2eac37e2103452aa00feaf06035ff37facfa2e
SHA512 15ee0c68af157291d73b6a204fbf05426a06666835224583f187a03aecdf8c603b6ab0e6477631c00274830805b4647d700c9cd1c583ff397b70c5f9668099d8
SSDEEP 384:lJ50kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8CdAhYh/Y2:7Xw8hW8VgJG8yJMRdwYa2
TLSH
T15E038364B8C222330133A37D9BA79608FB74515B820553407EBC27EA1FF1D64D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3604	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338244059726511"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{6A2D5186-453D-4FDB-B38E-DFD457E55573}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2668	msedge.exe
2668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4080 wrote to memory of 4280	4080	msedge.exe	88
PID 4080 wrote to memory of 3604	4080	msedge.exe	89
PID 4080 wrote to memory of 4000	4080	msedge.exe	90
PID 4080 wrote to memory of 4000	4080	msedge.exe	90
PID 4080 wrote to memory of 4000	4080	msedge.exe	90
PID 4080 wrote to memory of 4352	4080	msedge.exe	91
PID 4080 wrote to memory of 4352	4080	msedge.exe	91
PID 4080 wrote to memory of 4748	4080	msedge.exe	92
PID 4080 wrote to memory of 4748	4080	msedge.exe	92
PID 4080 wrote to memory of 4748	4080	msedge.exe	92
PID 4080 wrote to memory of 2724	4080	msedge.exe	93
PID 4080 wrote to memory of 2724	4080	msedge.exe	93
PID 4080 wrote to memory of 2724	4080	msedge.exe	93
PID 4080 wrote to memory of 2012	4080	msedge.exe	95
PID 4080 wrote to memory of 2012	4080	msedge.exe	95
PID 4080 wrote to memory of 2012	4080	msedge.exe	95
PID 4080 wrote to memory of 2864	4080	msedge.exe	96
PID 4080 wrote to memory of 2864	4080	msedge.exe	96
PID 4080 wrote to memory of 2864	4080	msedge.exe	96
PID 4080 wrote to memory of 3928	4080	msedge.exe	99
PID 4080 wrote to memory of 3192	4080	msedge.exe	100
PID 4080 wrote to memory of 3928	4080	msedge.exe	99
PID 4080 wrote to memory of 3192	4080	msedge.exe	100
PID 4080 wrote to memory of 2408	4080	msedge.exe	102
PID 4080 wrote to memory of 1884	4080	msedge.exe	107
PID 4080 wrote to memory of 1752	4080	msedge.exe	108
PID 4080 wrote to memory of 392	4080	msedge.exe	109
PID 4080 wrote to memory of 4644	4080	msedge.exe	110
PID 4080 wrote to memory of 4644	4080	msedge.exe	110
PID 4080 wrote to memory of 1516	4080	msedge.exe	111
PID 4080 wrote to memory of 1516	4080	msedge.exe	111
PID 4080 wrote to memory of 2668	4080	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a412c3f8fb758491ff57d5132d0b0d2bb334fd220f4c40327689be364cd39d55.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe9b9ec188,0x7ffe9b9ec194,0x7ffe9b9ec1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,17581654326921255396,16087564504566044545,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,1376386129679937578,7773646424573213454,262144 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,1340405458405574538,16224486327275305543,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,1040794708941390240,5426963080182058380,2097152 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,7414265280537855549,15012951317009740697,2097152 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,18381186354443965759,6459269734457964991,2097152 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,13165416640890655967,16321092125461313975,2097152 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:2
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,5147430138498745453,15422368250943483758,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,313378675337119152,9685230810735215915,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,14703531641746190231,4536613062251063216,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,14703531641746190231,4536613062251063216,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,16199776873335286419,4690635666739091163,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,18171228835103838438,15221261972908665990,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,7360277415650398148,2525998487676642881,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2984,i,17515999548943152616,788001899362375378,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,7615238305599287340,1210416818662373540,524288 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,16169447918909636614,4731947752860038651,262144 --field-trial-handle=2312,i,6823919972535100639,2857374229998486510,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2668

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f9a22a44e8af69a7aee55bc8d630eeb566ea2a43c3d9383388361788564d8be6
MD5 984d0516babb9f4b8f49ac4c6804bd79
SHA1 9bab4a39e33b22eb253c9dfc475ff53d09ed08c5
SHA512 5d357df234e1051cc9c19fae2d4072b01b2ec771494dd11b2ceb5e49a735f9fab04fb8efed8d9bc14664d6d2a7960556f28e220be82b289cda9fa35c49d2284a
TLSH
T16E516EBA454A48D0FF1850F0DEE989873EB8A97D55C3CE0A37B0DCBAA9027797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59282f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59282f.TMP
Size 2KB
SHA256 3574a6bf40a371c8b72e7bea941b56f30ac6597c61c45a14451ccdaf814bcf39
MD5 ce486bb7fd0f1037b0dfd4013230c53e
SHA1 f221b407ab6365c35b6ac248ad97d59c2ca05f40
SHA512 3fd286bb33cfb69d64fb0d1a61d5854b353826e740d7e40e267befe0b829972c887be4e3c5bb908d2cbfe01057c5068f2a3f61891c1f0e9fa7e3e685833bcdda
TLSH
T169516FBA454A48D0FF1850F0DEE985873DB8A97D55C3CE0A37B4DCB6A8027797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f7767647baa3089113f39bac718048cef34b6cfb0d363f2f42d1229c631d78d1
MD5 9bfbf6d5f56bf68980f1908093a46bdc
SHA1 61f5149ae70344d829bb9137d365b5730c460723
SHA512 4f4baf4853053f8650b5f000fc291d8200b8590a9da3d02e37cb9c7d0ee2a6b7784346a6715dbcfc02672b6eb1e548773500689257847ca49813e9926434d0cb
TLSH
T1E4216EF3C3D5867E890116F06A24AE27DE1D0506421C3C19C9E4EF1B93E3475E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c1197436bb1be05bf820733b49db8d11dc9f082d3dc9f48c084fd9bf7890d16d
MD5 c7fc87e2e13f585d21159cd40a57fb03
SHA1 9a5c1bb573a1971cf4691c889335193cce4dbdc9
SHA512 ba3d21dfa2715b2fd8930d2c3c543f153b9f6c659bf6b0b1ff17f4fe532dc4939c60c6f6bd13785f9c73153c009f8ff809a18761d1078c9c3e934228832f568e
SSDEEP 192:sxZgKRmWL/fjsad9IdpdrHW6+WNGYrbnIIgrJ:sxZgKXL/fjsad+xHbGn9
TLSH
T1D312A7526E38A93B8CCBD20DBB15BF53D9F9503251D51E48AAFC851C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 be6ec9c73b9336feff3fa894510338f38ad0d4d4ca5c46909d3cce6ac9b11f3c
MD5 fc89bac20502c7241f5dbabcb8889a8f
SHA1 c9cf02934273963cf32094d6a9fbde5206116405
SHA512 e5139d4a0ac71540f3caed35cd11169b02939d1068c8b7501fd16e32d954f6044aae022eb29864b1cdf071ae0f38ccb7671442841940614fc53d2b2325fd7c69
SSDEEP 192:sxZgKRmWL/fjsPd9IdpdrHW6+WNGYrkLCnIIg5WJ:sxZgKXL/fjsPd+xHbGbLv4
TLSH
T11E22B8526E38A97B8CCBD20DBB157F43EAF9503251D51E44AAFC8A1C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b9d631e0525aad3bced0d9b0ab32f050ef6ac2cc23a0f0c474602dacff453f88
MD5 cd15ef416c748bd11f55d9601da7487e
SHA1 8c1cc3f96308fcc5dd933e0be236c04763f5cb5d
SHA512 1f3b94511e979355d189a7a7c9f49346cc3e9b1a6ec179f23fa576d73e93374fcdd3a606f8c326dcebf6c10f317ebba0e6d12477f3cf0bd8cafd036459391411
SSDEEP 192:sxZgKRmWL/fjsPd9IdpHrHW6+WNGYrpLJnIIg5WJ:sxZgKXL/fjsPd+LHbGOL64
TLSH
T16C22B8526E38A97B8CCBD20DBB15BF53DAF9503251D11E48AAFC8A1C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 965b08bce6665b258b802e4fedb708734e8cefc9542dbcb278a78e19e8435b69
MD5 c637b9518d6f1b836392eb9b8fa8b105
SHA1 bb5cbecac10372d5edba6f13f42d3582071166e5
SHA512 041a96adf254c4a4e555b5adfc7c971cecfc5c5d4c56ed710d45e1584e7354143112817aae4b7844aff9e90508048ae57cc8d9ef8bf0b57ba03015069a224aed
SSDEEP 192:sxZgKRmWL/fjsEd9IdpdrHW6+WNGYrbnIIg50J:sxZgKXL/fjsEd+xHbGnq
TLSH
T11922B8526E38A97B8CCBD20DBB15BF43D9F9503251D51E48A6FC861C05E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 84cfdd6ad968fe3d5e8961d1174dff8c6f31bf4bb7589b8d5a6dd03fcc128a80
MD5 c51569ad92e1d9cd4fadd252bcfd3fde
SHA1 c5c15805eb9c2c75383286d4aac733ba9cf60643
SHA512 2e36b0d8f61c2a5d908f61a1c171c8309ba1d6ac9eff62dce89ba431ef1c4571deef981b3153549ff3504a39b6066fd4653986ceca619b74e04c66c7f94cb1b0
SSDEEP 768:pay4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TberoRZkT:pay4J/DWvbtBhu1jajiLm0b17kT
TLSH
T11BC2FA3F684CCA7E4FC00A9DDD5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c398f3e7-8728-44a0-9835-0712ac223f4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c398f3e7-8728-44a0-9835-0712ac223f4c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e86cc341f20f3f66de3eb8bb87f666808dea6b992cffbcda3393859dd35d8f52
MD5 57b3037ad6b90052881db7407d18b610
SHA1 7418e57d71317577dd6a1f5c9811a54c62495ec4
SHA512 ee6be633ac176fdb4d54176237171c2d79d474827343cce3315d8987ec1c77a994250a6142144ed22fe4c6d9744be04f854eb037432be35285254a2ae47fd945
SSDEEP 192:1ON46wlDgQmiUyp7W4X58gZDOKaFbAIDlSQUU6:1ON46kgSW4X58EDOJbAswU6
TLSH
T12802E835FD787C7B8EF2AE09F58B26139FA5102BE6512F80C6E81A2D01D765C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 04cd8d30807e37df4335ab8e56bca2b656c5e5ac59c6625068182db0b0c2417a
MD5 3bbcbacaf7006e64ea38f3272ba86713
SHA1 d3de1a2d630ebd829a8acd95b196d3a71ed88b6e
SHA512 6b5137b69273ac3bc43e862458719710f97b5c89996a34c2d8dcb25f1086658e7165860dfad7e33d7895c174dd9ef3f54c849966870710608a7764603a9c322e
SSDEEP 384:rZcIUsNundpZ/YOWHX58EDOJbAWWaWt7O6R2Feoph7U3o8:zUpqOwa4Odut7TR0yf
TLSH
T1C2827C71A878AD375DFAE145F54636039EF950A393C95F80D5ECAF2E019AAA8130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 4754eedc0ed5ea3b6813e2871ff216cdec23adfcea2870a84e4cbe047b678c6c
MD5 320031746ef19524f0f06e5e1475094d
SHA1 63cc352315b63f7b286d2c8265e76d5c9806a65c
SHA512 9931f933ead3f19f9e7bee606702dfba6aa8644eabf906069e4fe94a494c511c836ea17194ee22b549a3adc7237e93161aa4fa38871de373ba6f388732f3d5cb
SSDEEP 384:9iFiZcIuOsN+8TUNTUlIlndpZ/YOWHX58EDOJbAWWaXt7O6R2Feoph7U3o8:0FQfbwgNqOwa4Odvt7TR0yf
TLSH
T1C7A25C7298B8DD3B5DFAD645F94A3203DEF950A3C685AE90D2DC6F2D009A59C130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4b26ae3b49a1b12cd4b7cecfdb4a3bd382c0a958f54beb484df07c2fb364f224
MD5 0579e9140a43e5388dda6d05694424e2
SHA1 e186398e8a196ffe2520b18e5fa323d04e5be10d
SHA512 c939dd4a8adcd2fee130d185bf59df226056445f4f027b766d70880329233d559aa48b75d249e9d42fcbf84fb6377502392888e47209ec18e2c9e19d206355bc
SSDEEP 384:VZcIUsNumdpZ3YOWHX58EDOJbAWWaWt7O6R2Feoph7U3o8:tUkeOwa4Odut7TR0yf
TLSH
T1D0827C71A878AD375DFAE145F94636039EF990A392C95F80D5DCAF2D019AAA8130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac6eb4925ee405fb14e21fa863d3ff04a12c3a4b839ddc1fdd5cc17c2029d0ff
MD5 d4b18615e8647e5ed1b697a61af7b938
SHA1 db6617dbc9c0e65d0e5fa481a182df053eac1cdb
SHA512 26054e27fa41a99998c360f9b9108f32e6a8f1537869a8ba2a7921b5f64674ebb90554b01332610c3ae7c5d19a65cc1ce6d612c9fddf5ba7fc9bb43021bf323c
SSDEEP 192:1ON36wlDHQmiUyyA7h44X58gZDOKaFbAWWaMveV/3U6:1ON36kpPsC4X58EDOJbAWWantU6
TLSH
T100120835F878AC375EE2A585F58736039FA95157E6857F90C6DC2A2C01EF6AC230AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

404e7e46-6758-4fb1-9b5c-77cf6a7d69f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\404e7e46-6758-4fb1-9b5c-77cf6a7d69f0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9d75e3b3e68acf8afa0541414b26b6d3668205fc34cc04ab3fe4ca434f601011
MD5 40144d83053cfb48741284c301cdc3eb
SHA1 59b9aa7ca7ad609ed6379f7cd45ab06711137c1c
SHA512 3f225cae9302bd4fd77ec4565c8349e9f96ae0480c25392daaa86af6ef613663a7b4ba5d53f39323e1fe93ab4a963de98e9f3bc1e875eaba5fc68ad8481609f4
TLSH
T1CE411858AAFA1158B3B76F1A6BF7686D487A7C772F0AD56D10010E4E0A22B44CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download