04780c0d63b8faa24b07cf50aa0a89af2920f796dd9b2ce94055c523434ae64f

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 17:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_04780c0d63b8faa24b07cf50aa0a89af2920f796dd9b2ce94055c523434ae64f.html
Size 313KB
Sample260912-vkhdvscl4s
SHA256 04780c0d63b8faa24b07cf50aa0a89af2920f796dd9b2ce94055c523434ae64f
MD5 aff48b51171ed075d7f33564847d5f8c
SHA1 a47c28a8e85b2b8149446c34e5c5833310e4aaa7
SHA512 c0ee5d333c3dc7f37e6b0127da39d4f5d67d976e33d57283a57891d7a6db5aa8d1b22e68ea0d681b38b32ed8d661b529d96a1d7f3d6e42fc9436050071735da4
SSDEEP 3072:lUAh0qoaESL2hNeaNeaNeaNXRLOqXTWBGgx8tD4nIaUBkrkNMZpPF29vAj3yRg1+:lFh0eDLWRpXyBdx0D4ItBkrkM4bsa
TLSH
T169645A316CB24BEA716FFD6646E72F442D3B9247120182E07A9F0FCF0FD152BA966944
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2872	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338249016785147"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{A8C3B09E-BCFD-467C-9BBA-B3EEB995BFF4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1416	msedge.exe
1416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 616 wrote to memory of 3024	616	msedge.exe	85
PID 616 wrote to memory of 2872	616	msedge.exe	87
PID 616 wrote to memory of 4336	616	msedge.exe	88
PID 616 wrote to memory of 4336	616	msedge.exe	88
PID 616 wrote to memory of 4336	616	msedge.exe	88
PID 616 wrote to memory of 5036	616	msedge.exe	89
PID 616 wrote to memory of 5036	616	msedge.exe	89
PID 616 wrote to memory of 2644	616	msedge.exe	90
PID 616 wrote to memory of 4236	616	msedge.exe	91
PID 616 wrote to memory of 2644	616	msedge.exe	90
PID 616 wrote to memory of 2644	616	msedge.exe	90
PID 616 wrote to memory of 4236	616	msedge.exe	91
PID 616 wrote to memory of 4236	616	msedge.exe	91
PID 616 wrote to memory of 4584	616	msedge.exe	92
PID 616 wrote to memory of 1964	616	msedge.exe	93
PID 616 wrote to memory of 4584	616	msedge.exe	92
PID 616 wrote to memory of 4584	616	msedge.exe	92
PID 616 wrote to memory of 1964	616	msedge.exe	93
PID 616 wrote to memory of 1964	616	msedge.exe	93
PID 616 wrote to memory of 3864	616	msedge.exe	97
PID 616 wrote to memory of 4568	616	msedge.exe	98
PID 616 wrote to memory of 3864	616	msedge.exe	97
PID 616 wrote to memory of 4568	616	msedge.exe	98
PID 616 wrote to memory of 3372	616	msedge.exe	99
PID 616 wrote to memory of 3372	616	msedge.exe	99
PID 616 wrote to memory of 3372	616	msedge.exe	99
PID 616 wrote to memory of 1064	616	msedge.exe	100
PID 616 wrote to memory of 1064	616	msedge.exe	100
PID 616 wrote to memory of 1064	616	msedge.exe	100
PID 616 wrote to memory of 1332	616	msedge.exe	102
PID 616 wrote to memory of 2304	616	msedge.exe	108
PID 616 wrote to memory of 216	616	msedge.exe	109
PID 616 wrote to memory of 208	616	msedge.exe	110
PID 616 wrote to memory of 3032	616	msedge.exe	111
PID 616 wrote to memory of 3032	616	msedge.exe	111
PID 616 wrote to memory of 1416	616	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_04780c0d63b8faa24b07cf50aa0a89af2920f796dd9b2ce94055c523434ae64f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff84068c188,0x7ff84068c194,0x7ff84068c1a0
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,15713141090118109184,12003150195715020210,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,15293436682266793806,16976640373167451329,262144 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,13073113425474131326,3514591110964384241,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,7080851492617943790,5452815990617927098,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3404,i,10661890971930679946,11353053715465320897,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,2178459502137082285,14786210149765397909,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,12499044277339584697,2108371312269757067,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,9574611643497095568,15650725070397511355,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,6465416519261129098,7061127227294630112,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5500,i,12342305162284071943,5051067173024300380,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5828,i,13601605713892009380,3522751051258644974,2097152 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,8574404433515981894,15510359883448683047,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,8574404433515981894,15510359883448683047,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,4363465364470047541,5002352309954216101,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,6661710780992722941,13220255631730255211,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,1696317266048763374,10902005476901500535,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,18103641666940441652,253457290969031577,524288 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,11180591093015446180,5254305042485696216,262144 --field-trial-handle=2288,i,16154791473686528061,9511614875007653994,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0efbe41a1f7cfc7805d2f44f9b6d84f03f8b54499fc50be38d136aaf540eff22
MD5 b1416ce519c5ca0e339039cde0d2ccbb
SHA1 50791c8ca76d4d19e8b56b1cb9505278f8b0fedc
SHA512 336d85234fe65ddf159a9ec9fe920f5333a379a15aacebb749e3679e4f7e1c378e991a31dccfc5f4933f3af0c86028f2ea6ec5d005ce0eb165e4da5101c91bf1
TLSH
T1D161C84DC5914674FF68047381D221E33D35B68A46F7AFE207A9FABADB3A364535801C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ded2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ded2.TMP
Size 3KB
SHA256 aff56d6b8196ddc3d81e2e627e5f3f7ef2a8b792d4295082f81e8b74d69a0148
MD5 04b022c3f7e43570b50090f74d1e95f5
SHA1 4d5215c4c1e414bb4e43d5b8eaccc7f9ecc56cb9
SHA512 b59de126022472c7d091ad9c2d1b56ad8ff4d5c6b2e29092687abecdd91702e97aec8136b0517e66d3d0795014aaa19f51e49ce6199e2743c86c472f70f3e18a
TLSH
T1A461A64DC5944274FF68087381D221E33D35B68A46F7AFE207A9F9BADB3A364539801C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 96500aa35b6208ed93517e6fdd287b468050266f8cbd82fa4b10b16bb066952c
MD5 4f988d51fce50e3557b516b9f25a77d8
SHA1 fea97bb5fbdb0c3404da81c8c71f8836cca3f606
SHA512 f27e2dfc627a490b13a298ac86a3b1f1205bf604896073d076c6c8313547c77e6e89b0fb63823b676bb3dac2efd6861a4cd48db96a9be861a0d48d95336ce456
SSDEEP 96:DnKOa9cCBFEeBuX0zXPZux6Xj6EVv/5Q/vgDdSDGuzwQ:Dn5a9cCseBuX0jPZu0XjfVX0YDdSDGuP
TLSH
T199C199B7C3D8877E881252F09B257A1ADD1D195B42283C568DF9AF0F63E24B1D20269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 793ea2d20fc143f890a3147b0ab8827254d229d7aa40a21233dda63563981d07
MD5 2d9ba746f615ed54d72bc6048c145c51
SHA1 6054376c264d611c610fde2c00de13f5441827d0
SHA512 4240f69f37b0be7d999ad5cce1d06c84e9f11f23f350ff1045fed681d246d5993b8366184edc102ec5d39468caa5a3b02140ac85781fe0e809a42332ca30692a
SSDEEP 192:sxZjRuvWz/fls+tqgIdpdN7HW6+WNGYRPR5QzIgrJ:sxZjbz/flsSqhLHbGmzy9
TLSH
T15912A7126F28A47B8CCBE21DBA25BF53D6F9503291951E48EAFC861C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 248fa8d68274287db8a1c4d39bae228a307dc1c27d260014ec1abacd07a84cc2
MD5 b731c3bcf4f53662ce761350c4c009ae
SHA1 20b4e4fe6f147e12f036ef2d573f9016c2d6cefa
SHA512 120da196e720b4e7ddff9d3487b79f48a91e7b461f13e62264931b3e83e2be2fd6c66e1815b411d16934756b1a6546b4af70b7d12f79bdbe4eadc1ea781bf5ff
SSDEEP 192:sxZjRuvWz/flsPtqgIdpdN7HW6+WNGYRPR5QzIg5YJ:sxZjbz/flsFqhLHbGmzyi
TLSH
T14722B7126F28A47B8CCBD21DBA25BF53D6F9503291951E48EAFC862C05E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f5ad3f56883c11f15009692926672b9db00527c66f4aec6321925e113482197
MD5 92c1356049c6ba58b3549c3fb25b7fa9
SHA1 0bd448bc1726dca3fb8e45d8d7338d0b8426e334
SHA512 920923475cc048776650ce0e20bf79345b2f3ada06a8321b95477afff4434a7522238fa95d46fb24b15555ceb25e648ac1f49dcec52e652a8bd7897a15d8e9d0
SSDEEP 192:sxZjRuvWz/flsP3qgIdpHN7HW6+WNGYRPE5QzIg56J:sxZjbz/fls/qh9HbGmGyg
TLSH
T11322C9526E28A87B8CCBE21DFA25BF53D6F9503251911E48EAFC8A2C05E76DD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 506fe26b75c87d3d084aa4564106c0fd85e8f99991ca323e2b9d1d9594c726e5
MD5 07b5eb326810033d00ba869418997396
SHA1 cab48055ab9ee0b4d6a9acd96bf8ec3c7d68198a
SHA512 79bab759d4961146f558ce354f10dab190e95d4dbc0f6f21186bbca9b91b24cd16d99c196d15b4d92a888e4015dcf03e64f208f781ac15de2c692780e921cf96
SSDEEP 192:sxZjRuvWz/flsP3qgIdpdN7HW6+WNGYRPx5QzIg56J:sxZjbz/fls/qhLHbGmDyg
TLSH
T11722B9526F28A97B8CCBE21DBA157F53D6F9503251911E48EAFC8A2C05E76CD130741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 409f49c53133ed3e87a7ac424db41b2d8802501a4f9cc27b072e3060e03e5e8f
MD5 7347a5af896bbee086920c9332835fe2
SHA1 9b92c10b40034ea26719afaa907d687cc29bdaa9
SHA512 85588304011fbd070718963f7a076ee8a3b5ca1803090d3ec5aee207f6e36fdd1686aa92acb3f41c25af204db92210fb2a38ea143f1219492e51a399b2000f92
SSDEEP 768:qkK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3proD+SD:qkK9uzYWvcQWsu1ja0HL7Q3CD+SD
TLSH
T1FCC20A3F640CCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 07a1edb7f15754e39439f9ad82589dd45b70d12c0a8bddc40dfa46834b8abcd6
MD5 6c8d4f9c5c2b946367a58b3f4130bd65
SHA1 9e8e34a56af28e0aa5a44d541a9e9791493f3807
SHA512 dd77e91d329f7561a546804e669600f766d7ceb20019eb0c7a8b4766d24547d029659a688ff5b50337b159d4c3e5f18e4aed70eebf9195fb3ee5f48f31c1279f
TLSH
T16631BA5032BB1250387E3964C0E4971F9641B367301CE66A7BBCA4B29E67E486DFD8C9
MD5 SHA1 SHA512 TLSH

Submit Download

bf1c4559-2ea3-45f4-9504-b6ca245674cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bf1c4559-2ea3-45f4-9504-b6ca245674cf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 95c98fa212e85d056bcfae4752f1490af33853965cfaa987825b28c5b83ad484
MD5 769c316e3cfd179353e54d6fd5840a6f
SHA1 936b2e17610362980c6fd010ce9e74d20f87403d
SHA512 eeee0eb230418e2f3ffac40bb82d6dd8510dddc396366e65e7ef9b29af3dba0e916e2680e15cbdedce451150baee9bf2209a5d2f9b1cec871db02407c5298edd
SSDEEP 384:AiFiZcIUmUsNM78TUNTUlIlTwaemx+odHtcTOjTVKjGYmwDHYsa+VYard7Uxoy:bFQaXwg3LnJwchgJRIN
TLSH
T107A25C735DA89C7A9CBB9B81F98A32138FF450A7D589AA5096DC5F1D00DB19C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a6d104ad5f79bc5559b921d29533415477ab41f87c09178a2c7cd802ba3cd587
MD5 8c5551e8eff36b1abb0be21ae3a4d410
SHA1 1e8eed24187fa7e03438cbdfb237b4b6e166ebad
SHA512 d1e5f802d591c7c1d1aeacebfff467e6056c45393038859d4b7f14fee5ec9edde918f233fc84a6ec9aa228925a879206c0c85f96cd7c34b6b50f534e2270a50b
SSDEEP 192:SONF6ygpQmiUyqdqgtOCTVgVHDR0pqzPD1AU6:SONF6lH7ogtOCTVKjGWDuU6
TLSH
T11C02C635A8687CBB8DF3AE06F48A36135FE4116BD9552B84DAE81E1D00D765C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5bfb1f3e213add5810bc63064ac30de5e806e55fa6942d1451516aa4a08df65e
MD5 c6ecfed00433a2182e9ab3f11f95a5e4
SHA1 b9405499229e357579726a23c4f8dd0d0a8844ec
SHA512 39982b2b64c8dd4bd54820973624a62c6c4dc227592b97712730dd337745ed2df0226b655bf7e653ecf5f43038cf3560adca29be5b43425d0428356e8b9c6840
SSDEEP 384:EZcIysNMZAwaemxHodptcTOjTVKjGYmTDHYsa+VYard7Uxoy:iypLnJTchgJRIN
TLSH
T10C827D316D786C7A5CE7E281F98B32134FF890A796C92F4095DD5F1D00DB6A8130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3df891edd3e80a8da46a49fc70208949fb38ccf9c3c575fd32cbff35deb09874
MD5 e5224bca03d9b75ce3fd9c17172d5819
SHA1 a21b57c9044e42bde3cbb09d948f55ce3c8b1a75
SHA512 707002719004d98c682af098b0784d6f17d1427927c0a7b0f091e1a56a2fe5f92edef01ab264eef55ddce7b0806f00e0e9781e2cd202528e89ddf1052d2559d3
SSDEEP 384:7ZcIysNMZTwaemx+odHtcTOjTVKjGYm6DHYsa+VYard7Uxoy:jyfLnJ6chgJRIN
TLSH
T140826D716D786C7A58E7E281F98732139FF890A796C82F4095DD5F1D00DB6A8130B93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6a79059a71a2f562d0251ed831153e556411afe93276257f1161985ec392127e
MD5 2af2166f1cd76163a1f02a4852b430e4
SHA1 9bd69a476e484b44a88e7b53beec8802d8abb3b3
SHA512 49bdc8df4e5570daef8d3703c9a747d54f5882fe051cb82e6e70e1336034d6257a60576dd700ef9194ae78c98e593a38527b311644c8b5de663f21b60f8fa636
SSDEEP 192:SON446ycUQmiUyqXqgcBOCTVgVHDR0p+L9ERo3UDHi/jU6:SON446rk7agcBOCTVKjGYmLDHYU6
TLSH
T134120931B8686C7B5DE3A541F48B32139FE4926BDA496F80D5EC1F1C01DF6AC630B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0cb44d0-9215-4068-b4ad-432a71bb1677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a0cb44d0-9215-4068-b4ad-432a71bb1677.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0e4b734e0dc4cebadd04e3bedd1e631d546c3317bf0e99a2b8164c112f1f369b
MD5 11b38eaf7ae69da92e2c45e5f71e00ae
SHA1 c01a8d50abc10bfa88c7c72841de1a4b6aa3be4c
SHA512 e2101aae592864d992e814db86be983e3dda78ef0c3308d723e691b4dedf10fde93dadbf558ee64c471ade1d365b0d96aa2b63e0466cd186fd796636a094eaee
TLSH
T1BD412858AAFA1148B3B76F5A9BF6696E487B7C372F06D49D10010E8F0672E40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download