8b0a253e8b8ab6d0314ae07328e7df71ac5bf503c926c614cadf39b95dde8934

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8b0a253e8b8ab6d0314ae07328e7df71ac5bf503c926c614cadf39b95dde8934.html
Size 105KB
Sample260913-b175nsdd87
SHA256 8b0a253e8b8ab6d0314ae07328e7df71ac5bf503c926c614cadf39b95dde8934
MD5 b5b5bb7d29c254f626cc11dbf92c5d30
SHA1 486bd22b473392310bbd6c43b7290da5c16621fc
SHA512 4c09beccca174a8e9ff19e96095df78ebf0c45780806329f2c9b172bf87d4a937c47297c0797e637401fe2fac4657f41ef65d155b908454559c3283325847ef7
SSDEEP 1536:EPxoYn+hnCsfR4DZrfj4Rfl7QNTtSNo9xLVedbEaoMbEaoP0:qGXQiNiYddoMdoc
TLSH
T104B3948701205CFAEFA049B2415F586B3D2C5437BC4791B9E3FD8FA72B45DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2768	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338311711711967"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{C5031EB9-FFFD-48B9-89A9-DE43B70FF336}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 4280	4496	msedge.exe	86
PID 4496 wrote to memory of 2768	4496	msedge.exe	88
PID 4496 wrote to memory of 2680	4496	msedge.exe	89
PID 4496 wrote to memory of 2680	4496	msedge.exe	89
PID 4496 wrote to memory of 2680	4496	msedge.exe	89
PID 4496 wrote to memory of 4488	4496	msedge.exe	90
PID 4496 wrote to memory of 4488	4496	msedge.exe	90
PID 4496 wrote to memory of 1420	4496	msedge.exe	91
PID 4496 wrote to memory of 1420	4496	msedge.exe	91
PID 4496 wrote to memory of 1420	4496	msedge.exe	91
PID 4496 wrote to memory of 3648	4496	msedge.exe	92
PID 4496 wrote to memory of 3648	4496	msedge.exe	92
PID 4496 wrote to memory of 3648	4496	msedge.exe	92
PID 4496 wrote to memory of 3856	4496	msedge.exe	93
PID 4496 wrote to memory of 3856	4496	msedge.exe	93
PID 4496 wrote to memory of 3856	4496	msedge.exe	93
PID 4496 wrote to memory of 3348	4496	msedge.exe	94
PID 4496 wrote to memory of 3348	4496	msedge.exe	94
PID 4496 wrote to memory of 3348	4496	msedge.exe	94
PID 4496 wrote to memory of 2180	4496	msedge.exe	98
PID 4496 wrote to memory of 4880	4496	msedge.exe	99
PID 4496 wrote to memory of 2180	4496	msedge.exe	98
PID 4496 wrote to memory of 4880	4496	msedge.exe	99
PID 4496 wrote to memory of 1568	4496	msedge.exe	102
PID 4496 wrote to memory of 2804	4496	msedge.exe	109
PID 4496 wrote to memory of 5048	4496	msedge.exe	110
PID 4496 wrote to memory of 2132	4496	msedge.exe	111
PID 4496 wrote to memory of 4176	4496	msedge.exe	112
PID 4496 wrote to memory of 4176	4496	msedge.exe	112
PID 4496 wrote to memory of 1016	4496	msedge.exe	113
PID 4496 wrote to memory of 1016	4496	msedge.exe	113
PID 4496 wrote to memory of 4752	4496	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8b0a253e8b8ab6d0314ae07328e7df71ac5bf503c926c614cadf39b95dde8934.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,4228508197002041916,6085642449360140067,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,11909123909748711873,3270849619592547330,262144 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,9922498706908554035,13131197497053924740,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,12049493533248762240,12416052164439149546,2097152 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9785216644842533532,10028438659646044319,2097152 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,10227300934172616343,7393067879758237922,2097152 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,4931188438841298494,3652325095087018621,2097152 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,73596396402018106,15201085363019041531,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,11656989725456280278,2858787090989109698,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16082755282497240415,10808108550823606969,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16082755282497240415,10808108550823606969,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,3708155701536128307,5061684083591112296,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,10144737900809861186,9872500365435268291,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,17044543003180881976,14327290694156165909,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,3138768099596098617,7497340411634208732,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5031276243759349680,13150372873833210396,524288 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5164,i,959938017012494771,9154821036184629870,262144 --field-trial-handle=2272,i,16582719766416380132,10029257986152608225,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 28d0be87c8391445e2968b32101fee45a0d385bbf4f4af2553bd0ea9adbd518a
MD5 e01b8decf5554411e3a260d4afde30ae
SHA1 6a93da5ac405cd1240edb2f3030e9b8b837abe31
SHA512 523b2b1af4b9a92fd8274a6f1ca7cdc5e4b07181d4db25dbb7deb431eb24481c334ea17de0b7579f4e833d3cd371c52ad0881cdaad59c0d763242d8a76d6132b
TLSH
T17161A2CAE1E34C85F7A806B047C70DC73333DC83556B2E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58911f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58911f.TMP
Size 3KB
SHA256 bd699cb04b9ddbc0d934b44a6ca3a0ee7d0b2958f74907d6f9c5d9e1b022a263
MD5 5b9698e0b222dbf3bf33210124779bd5
SHA1 b01a49fad6da6533844b24331b2e8ce92534cc7a
SHA512 8cb6b911c4fa255ec190af4925d7d16a025b5af904a0805a637c2874847b57ff6afff20da49508c4d3d37b5b01a9ba192f585e1ac4a5fedb87eeb2917e0aca2d
TLSH
T15761A2CAE6E34C85F7A806B047D70DCB3333CC8354672E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e54f683f534256a7905741567db87d4eae74fd53b3d01ac2267cb4979d92aca2
MD5 72f8e38b8c797b586c1a4640ed91654e
SHA1 7c0c2a821b1f84764b7e59e3f2ce164189917e1a
SHA512 870a6ed53736a8d581baf68b8d8fd9af4f9ea19f99658431fa67f7e514ae6ffec5c4097cb4b13c24198b3d21c8013f64b5f5ecd5dd21e2ee6ca6e5e155fec739
TLSH
T1764168B7C3D8867E891156F0AB246E1BDE2C0A46422C3C56C9E4EF5FA7F24B0D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1bda6f05e01ebca97b3cf690bab6064a4c825f423236b327287cb19d874bb825
MD5 cc600efb3f8247e3c57c03d3936dac6f
SHA1 7347717f9c2958066d169f1d5850c70c731ab9a8
SHA512 7192b709988ea6f930ea7b6a671738616a7af63eeb0a1e99bc85ea926b0e9f31e19316088847ca447abb6d16d8838d1a8ebc8d939790c9c6c7e316d273c31b3f
SSDEEP 192:sxZxRRW3/flsB9IdpdPHW6+WNGYRPRibkLIgrJ:sxZxK3/flsB+NHbGmv9
TLSH
T13E12B7566E28A57B8CCBE21DBA25BF53D6F95032A1941E48EAFC861C04E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 91f26d4570bbeec633bdf04107c30974eefd6888d70110ef9e2693641283f959
MD5 042ae5f2264c366db1fdc2c10441c388
SHA1 e9b5dc30c271cc07ea18e8ba590f359973d33af2
SHA512 033ff62ada13776368964302992bc5770f6b87e89fe405d2b4f60fdbb18180ad3cf91a35afda03cb500ca9f35865f72de4e64617f25bac6de91a8586d5d090de
SSDEEP 192:sxZxRRW3/flsY9IdpdPHW6+WNGYRPh7ibkLIg5MPSJ:sxZxK3/flsY+NHbGmZR/
TLSH
T17722C9566E28657B8CCBE20DBA157F93D6F9503261911F48EAFC861C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5a63317dea66cf307f4b2449c0d00ff884cea4bb51baa7acdcaa60dab6748e3b
MD5 5fd70285007736b12767351dc5f67fce
SHA1 a5853931633f2887edd96af5fd574d6795c58723
SHA512 182409adf76aeccf4a8a970f531769a5cd987246e2a32405645cde8954ae33d2291809eca5a93b288c826491d3cdc9f99065dba7f754cd616cd75bd8336d1b66
SSDEEP 192:sxZxRRW3/flss9IdpdPHW6+WNGYRPRibkLIg5MPgJ:sxZxK3/flss+NHbGmvp
TLSH
T12B22B8566E38A57B8CCBE21DBA15BF53D6F95032A1941E48EAFC861C04E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8c17ac9cfa614f82a2f48d6a56f2adc5c92746baa5003e5a4665d19193bdc44c
MD5 37646329377158517e66a557df263596
SHA1 bf945114d2b4f739160ba61c7da7a2c8e0e3b03c
SHA512 04c18e296e690203118694a78bb999a87ac97f9bf88e08f4a2d9b452dd30a9400a78af002511b72614ad4ae63d7483da395641f6782c8b29e6f3d299921b21c9
SSDEEP 192:sxZxRRW3/flsY9IdpHPHW6+WNGYRPxgibkLIg5MPSJ:sxZxK3/flsY+vHbGm5o/
TLSH
T10D22C9566E28657B8CCBE20DBA15BF93D6F9503261901F48EAFC861C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 864d8eba63c3044c7ab156d1bec89619f16dddcfbe17f3b093bb8cdb2fb20cc7
MD5 086157c0bfb576e5338cbf227182bf75
SHA1 4622b68e091b134edc438fb8785e1cf1b9c884df
SHA512 fd33ca0ea2ddcc81a2000e236e28b4859f75e6608a628184a5c54d4cb80395a50f1a823e0fe4295c43fb3cdae58d57086bb059aff576018788ec84d38b9b4904
SSDEEP 768:CQK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Nrob+OX:CQK9uzYWvcQWsu1ja0HL7Q3mb+OX
TLSH
T114C20A3F640CCB7E4FC01AADDC5A6F973E9802D7A6588D5047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5a6ce59a1d18263272fcf5815a80babd88c191ae2b0e93e64c956a2bc43197dc
MD5 fb21d7b24044995dcf8dc4dfb000d59a
SHA1 383cd5289d9749a67c4b4f2d49d8d3e201f12872
SHA512 c410a5faafa3348c903b2ea9016e1c1cc9523f56888999acd2951a5358d8bc5964bba8ae8186bbe31c41b70578ca7b0840af77ab9972ae999804f793c52fe83c
SSDEEP 48:K0mImRAthrvzMb/KXIS5MK9Z1zMxxcYKbRRyAIX0oaCSWQCRdIroWKqzyWWmgGhA:K0mJGQKjiO+VKKOoSGHiKswl
TLSH
T15D91311431BB070138BE6959C1A4872E524231B3315CE62B7BBD19B29E6BE065CFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1dddf066-25b7-4104-8917-df67d72f5a7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1dddf066-25b7-4104-8917-df67d72f5a7f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bc0f37d992c67d7ec766cf611743b0b3d37ddf8f36f1708236a83c6c43cdda96
MD5 c17d90d085a849256d2986afe2af425e
SHA1 4801200b23a7bdb99a353c407a1de365bee19836
SHA512 26f57803a730a6380de06ec3b4b42050d26ec339824d20fddf7734ce324f083b6bc450a2dc8cd58d9715c33e937a66a6215ce476068099075299536fe12d3ce7
SSDEEP 384:EZcIUsNqSwJCSdrIOjTVHglhBnesa+VY5d7URot:iUj17nOFnehgIM+
TLSH
T115828F726C786C7B5DF7A281F88626035FB891A7E6893B40D4ED5F0D01DA6E81307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8f25db94bb1fc0ade46af18f43ffb55fe731394961a3eaa5afc961d4a522c59d
MD5 4383743842a7b492235ac8d4fd5ff5d8
SHA1 8bf706414ce46805992e7997773d6ef82bf4cf25
SHA512 37814177a3d13f1ee746b65647430b1b815e60e03e1a7392363ac57be6065af33b412ca0358d16672746b9a0be5ba668e14b146a4024bf652c4ef534e9698c44
SSDEEP 192:SONk6ygpQmiUyGGtOCTVgcSMosSPzPWoU6:SONk6lHStOCTVHglb/U6
TLSH
T10E02FA39BC687CBBCDF3AE06F88627135FA8117BDA552B40D9E81A1D00D766C2303936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 1af350454240461ef031232247d40880f0063efb817a406363f2ca40c7b9a90f
MD5 ca1a5dfbf94e9f9a060ec56b18e9df10
SHA1 baa713cec143ea40878293cbf37be70582072a0b
SHA512 c958145f221d8d2bc26242953f62d12ba17f2c58e66bc8b3b606ff699488cd4cb6b495d1c7750561a219dc3af62c18d2fc2a21e077267f05105c829a007501a8
SSDEEP 384:/iFiZcIHisNy8TUNTUlIl7wJCSdrIOjTVHglhBXesa+VY5d7URot:KFQCvwgc17nOFXehgIM+
TLSH
T1FAA26C735C989C7F9DF7AB81F94A22038EF841ABD585AB90D2DD5E0D019B1EC1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a9bb192b9322420f027385a8103271680d14cfbe0696f253dcba6c9f2120e699
MD5 dd8607d3d2d1dd8adf40ea2f8caa2b5f
SHA1 596e26aceb2ef69f8b7c2f5987e19412719a25fc
SHA512 ca2baea486958f0bdc1b968c153d50d70aa91d7bd69dd831a442dd5904277ba7fcc17d475bc96f1f78d533ad3849471b284fd400c8f4e74df96023edd6f13859
SSDEEP 384:asNqwwJCSxrIOjTVHglhBnesa+VY5d7U1:apR7nOFnehgII
TLSH
T1AF625C367C686C7B8DE7A281F84A22139FB851AB95853F90D5ED5F0D01DB2EC130792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 efe53f3c653fdd1bd3b0d49e9e19e1c7c256310f8271fe8922a517686fda377f
MD5 e714c3be527fac2c4c64b865b2db4eac
SHA1 c9a8a34e23c1edc849c937f426012e73c9b31799
SHA512 e1c697359fcc6c3b1244748ad90056d740290c385dbcc1ddf564a0dfa4951ec03870e450b46f29723ffe729f338e5d3ff11ca324821ecccefd16129e417bac5b
SSDEEP 384:KZcIUsNq7wJCSdrIOjTVHglhBnesa+VY5d7URot:oUs17nOFnehgIM+
TLSH
T147828F726C786C7B4DF7A281F88626035FB891A7E5892B40D5ED5F0D01DA6E81307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 19b5f0a337edb982ef6dd25ae09a790c040e2c1b47966b60686efc64a6eb958a
MD5 bab70e3056c5ec74dc9ab1995c0f7102
SHA1 08129e2fad0f11bb8775d2738d8fef7c0020e4a9
SHA512 dfffc3fa388b34731f56e1e933b0af58983aba72b3a8cc425c5a64215b83cec45401d9e842b5d38570282f7ed971cceb55626c12e21ba6f0cefd3db02e257c7b
SSDEEP 192:SONT6yoQmiUyKG4OCTVgcSMosSh2BEwy3US/ZU6:SONT6XM4OCTVHglhB4eU6
TLSH
T118120B367C686C7B5DE3A541F4CA31039FA8526BEA497F80D5ED1E0C01EF6AC6307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6c54fac-80ca-4178-839f-fb91b50bca20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d6c54fac-80ca-4178-839f-fb91b50bca20.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 de4e3f744c4865fd8321748ebedc2bc1787f4e8724b1d2008f648766c5ec8552
MD5 540574e32dc56844bb9bc61968c8c600
SHA1 a3dd4b53ebae7cffaf1bb8034b2f513a30b934f7
SHA512 2faba1fe92529d0c8aec4b5d83b5bb2f75ad17b5b47fc45ef747b2c79bc4923229675570beae6a532e871d83e102ae59703cf1425058f07421b166e60f1eb10d
TLSH
T1FE41FC58A7FA1148B3B76F5A9FF6A86E487ABD772E0AD45D00110E4F0623E40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download