0f93662ae144f9a455dc3c3dfc86cc34d169e00c1ed3e8f49d1c7dca87a3d03f

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0f93662ae144f9a455dc3c3dfc86cc34d169e00c1ed3e8f49d1c7dca87a3d03f.html
Size 129KB
Sample260913-dbmtjseb68
SHA256 0f93662ae144f9a455dc3c3dfc86cc34d169e00c1ed3e8f49d1c7dca87a3d03f
MD5 2dfa17e8b3eb30c5680a3dcb331cf66c
SHA1 d4766420a95bc6438029cd5cb36dc8ecdf8fda0e
SHA512 2dbebf84f639bf1e7d65d59aa8ba6862bdf44d5eba143efa85c480d4c8783277301dec7a49e10b18f41dab8c657ca18b7f177671aa5d4415f1798b98c3e5f6a1
SSDEEP 3072:dyDQSNJUGdoadoLdOfBYpVF615iWcqTVtb:dSQSNGGdoadoGcEtb
TLSH
T105D3B59713204CF5EFF819B349EA096F3C2D0437A80250B9E3EDCE965FA796D0349969
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338314401925443"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{CF5ACCBD-8E70-485F-AE10-916B2644FA2F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 3328	1804	msedge.exe	83
PID 1804 wrote to memory of 1716	1804	msedge.exe	85
PID 1804 wrote to memory of 2192	1804	msedge.exe	84
PID 1804 wrote to memory of 1716	1804	msedge.exe	85
PID 1804 wrote to memory of 1716	1804	msedge.exe	85
PID 1804 wrote to memory of 2944	1804	msedge.exe	86
PID 1804 wrote to memory of 2944	1804	msedge.exe	86
PID 1804 wrote to memory of 1132	1804	msedge.exe	88
PID 1804 wrote to memory of 1132	1804	msedge.exe	88
PID 1804 wrote to memory of 3352	1804	msedge.exe	89
PID 1804 wrote to memory of 1132	1804	msedge.exe	88
PID 1804 wrote to memory of 3352	1804	msedge.exe	89
PID 1804 wrote to memory of 3352	1804	msedge.exe	89
PID 1804 wrote to memory of 2868	1804	msedge.exe	90
PID 1804 wrote to memory of 4764	1804	msedge.exe	91
PID 1804 wrote to memory of 2868	1804	msedge.exe	90
PID 1804 wrote to memory of 2868	1804	msedge.exe	90
PID 1804 wrote to memory of 4764	1804	msedge.exe	91
PID 1804 wrote to memory of 4764	1804	msedge.exe	91
PID 1804 wrote to memory of 3904	1804	msedge.exe	95
PID 1804 wrote to memory of 1712	1804	msedge.exe	96
PID 1804 wrote to memory of 3904	1804	msedge.exe	95
PID 1804 wrote to memory of 1712	1804	msedge.exe	96
PID 1804 wrote to memory of 3392	1804	msedge.exe	99
PID 1804 wrote to memory of 1892	1804	msedge.exe	104
PID 1804 wrote to memory of 4936	1804	msedge.exe	105
PID 1804 wrote to memory of 2860	1804	msedge.exe	106
PID 1804 wrote to memory of 1364	1804	msedge.exe	107
PID 1804 wrote to memory of 1364	1804	msedge.exe	107
PID 1804 wrote to memory of 4744	1804	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0f93662ae144f9a455dc3c3dfc86cc34d169e00c1ed3e8f49d1c7dca87a3d03f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff952b6c188,0x7ff952b6c194,0x7ff952b6c1a0
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,3105244347366794680,18127988995483498069,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,3369185646845510660,8780914988682250681,262144 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,16376491058769873770,10839853521805582851,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,16462226189548772717,7722900397362017817,2097152 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,2390869286959632700,9945436149051238249,2097152 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,18424657402761500643,13586999068656102058,2097152 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,1022292465720454644,15604273732699920226,2097152 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11860128069424909191,15964161508253322466,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,447548937634009257,6848389100932663807,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16442267288891529167,16760138360623421239,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16442267288891529167,16760138360623421239,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,7620844946543422847,12468286518140758334,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,10719966586352355045,14344519056582985898,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,9649833301721996336,16824751058027186054,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,15700035822240980233,16279964663325903798,524288 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,5650608700531693337,13847202754755104,262144 --field-trial-handle=2836,i,3653936059193815226,3047287059934490652,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

89e303b4-82bf-416c-a3b5-113ad727da36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\89e303b4-82bf-416c-a3b5-113ad727da36.tmp
Size 19KB
SHA256 eb352312ccd63d05726d4830d4af168cfd4acda9b93a8b0c8b91b0b1c3836583
MD5 85ee40760540dd7d669b9274991de350
SHA1 cbc80929771fd9d3a1dc27b53e31d8608ba05901
SHA512 0241ad454558f8a44bca5b9e88b257f465648367b53155158eb64aba3eed65ebcbb9b188b10e4893e8c5a01097f130ac3ba3769602f699c7e10c781f85b9731d
SSDEEP 384:tNniFiZcIx6sNM8TUNTUlIlruY95cKNBGYX5EGQUFGqDLX81oq:fiFQ4hwgN9/vGYuGQ5qDLXUN
TLSH
T188926C728CB4D87FACF7AA45F94A36138EF85167D6C4AB90E2DD5A1E009B1982307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1f8afbffad819f9d62253580d7e12136423e733a064ff9ccf733e52cd633dcb6
MD5 860f0be334c983d60025b57e5a0e1f01
SHA1 4ae44a76f8d603220921047d351e14558ea00d19
SHA512 f20ff7aa2240b8c1bb0d41bcac5c84e5350138f0bdfe21ae572687085b0606d46cd0fe37b02d67e11b5fa6b55244ec447c47df725f43a8593ee88cdb810cf05d
TLSH
T12861B6812287837EF777647441DE11CF3E3558C9198B2F21C4E5E578B88F765A31911B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a330.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a330.TMP
Size 3KB
SHA256 44f5b36999a26d061f67ba12cf1d80af04ee68af1181bd89187bb576bc5d2044
MD5 472eaf9173b8754306da424406bcaa4e
SHA1 ee708389d4c67f1649173b091fb243372833c520
SHA512 f20fe0432cf217137bd26150b3d007d94d5a74be8e91bacaf4889de807d69c621ae0a8222f8e6635122817dcd524f84ff78dd08df54ee7ca34d845faba9f694a
TLSH
T1F861C5802287837EF7B3607481DE11CF3E3458C9188B2F22C1E5E578B88F755A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 17ddf96cfd341022a15c8c19544ce33c7d3adfeb725dfa230e4b60b363f13da6
MD5 bd129600f891a501090446fa5de17615
SHA1 c6268bd821d9b955c830dd84e9fa7cbf1ed0b83a
SHA512 01214f99b3376712f24f233ec780a7b417d467fe4724bc33a4e458100930fb74954c7cdd753ee69adbd01e0952ba9be61f311303b00bd61522a94c7d9148a1b6
TLSH
T1A1418BB7C3D487BE890156F45A246E1BDE2D0A46422D3C1A89E5EF1F67F24B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9f5cfc5045d4bd375f361c6b48aa105ab4f8572e721142874c55d3bedda45a9b
MD5 0743fa0c6745cac39a411516291fd16c
SHA1 87edd804b34e01b00c83d58eb2016ee7c5237782
SHA512 ba1c32c9e578a1daa3103dc91a81f10ddc364616fe576ef700442447c2d8d3dae47d491860f4668686db85fd9ecf2dd6c1f1d086e343508be376519af41c9b01
SSDEEP 192:sxZeRWWz/fAsIafIdpdMHW6+WNGYgUnjIgrJ:sxZerz/fAspQeHbG49
TLSH
T1B012B9566E24A97B8CCBE20DBB15BF53D5F9503261951E48EAFC861C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f936b92a4b68c900aa3ed50c2cf72c53742cd1a03c76162c2298b6a72de1dac1
MD5 50ccca5dc4b3c611ee93a5b4a7cb054d
SHA1 d134c8ead6bd36b602bcef2aa09a9d1ac4a5737f
SHA512 77cd78772f8895e19311beddcd2112d4c093988c9eb7f8a140166373058a3a136ef98e0857f534f7d709222c69cbae28e8ae650d7ad1a0f90b8ea9645b8fc871
SSDEEP 192:sxZeRWWz/fAs0/fIdpHMHW6+WNGYgAnjIg5EJ:sxZerz/fAswQsHbG4S
TLSH
T17D22BA566E28A97B8CCBE20DBB157F53E6F9503161911E44E6FCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ced5263684efbbcb28fe3e53119a5425e2dfac993bd8cc3cf6fedd8a423b93c0
MD5 de95a9c5262aec9c5e8e5783b3838d46
SHA1 36eda6761fa469bc3e4f4b6ca42f719aa4eefdf2
SHA512 0a28ab79b08e965aa194038e2f590b6ec5a42bf5eb4985cd95cf0d181dfea8d22008fd06e671bee4777e6ad5f1cfbc3088379787d8ab49742733419c2f8fb27d
SSDEEP 192:sxZeRWWz/fAs0/fIdpdMHW6+WNGYg/njIg5EJ:sxZerz/fAswQeHbGlS
TLSH
T18A22A8566E28A97B8CCBE20DBB157F53E6F9503261951E44EAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 215e0d745008b34fa95ce59b7e71e3dc3c3137a257a17b79a3cb7606624e3eab
MD5 a28c2d06bd6fa2e70c64807c091e4a67
SHA1 bc89d40ad1880d4449300028c53b290940de086a
SHA512 528a668b09465a218f0507c2c64dc574cc473259fb2864ae1d063ef9c6571956a85aa6544d2baadecfdc0c6ad14bac332ab2bc97e00c53ee5a7804fb23fdfe1f
SSDEEP 192:sxZeRWWz/fAs0afIdpdMHW6+WNGYgUnjIg5uJ:sxZerz/fAstQeHbG4o
TLSH
T1A522B9566E28A97B8CCBE20DBB15BF53D5F9503261951E88EAFC861C05E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 aaddac4bb7235386f741d0682a2459ae5def5980439a9b2244a64f85500d66f3
MD5 3d6d353cd502468f1c390b18e6d9ee39
SHA1 21564177f439805a91877861ca14512fa4b74bf2
SHA512 5ba05e6e39499e53a36d5f8a624a9f2b4d77c7bda95d543e84facfa872c22a76d483f4a6e98e1c8ffd5fc9219c47b950ad2dfb05729aeeb28c8ea89371dea0e2
SSDEEP 768:YtichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzwroXhY:YtichfPWvPZplu1jan+LKgzbxY
TLSH
T161C2EA3B640CCB7E4FC01A5DDD5A6F977EA802C7A6688D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41a5f869-f2df-46b7-883e-6c28db23b188.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\41a5f869-f2df-46b7-883e-6c28db23b188.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 898a3060f9990d134c22640e8b1a1edf8d0d75ba84e6761884d788b2372f9de2
MD5 2f649adb0061670e11eed6ef5e4ea05c
SHA1 b9740154ebf06981cefce7d5b83478523f6d1cdc
SHA512 e0734f06556e82ea7f91ed41c280c099eb9d4ab36e9fdac6723624b29822472639e0b68b677e5c019574f572f7734d32a6765457577f4bc7d07acc4fc4f69dfa
SSDEEP 192:uQ8zSsNE/Q9YbphvRR9KQmiU1yr9oD4BGYX59ezHC6m4Une+JkH1Dn/5lLqy8Ko:n/sNE/uY95cKNBGYX5EGQUFiDLX8H
TLSH
T176523975A8B8AC7B4CE3A451F50B3A139FB8512B97C82F9496ED5B1D01DF29C230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fa530ede9e9441d982a9d471a181f9bf6f2d0d33999dd26254f8995a13420c80
MD5 005775566362241066e29ef3ef0cd2d3
SHA1 33edccff1655813b407809915234f1610cda49fd
SHA512 3baf144d84b7a401f28febb6a2d651563ec85e3139500e31c86fe447d16410eb79149d7d61ac8e248094da9e9c713f918f1df6ad8e1f6687c1656d41a30e11a9
SSDEEP 192:LJONC6DphmqQmiUyvkq8wGYX59ezHC6mEkk7DFaU6:lONC619/RwGYX5EG6DYU6
TLSH
T12902D939EC787C7B4DE36E45B54B2B135FA8212BAA916F84D6E81A1D00D764C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9acb1df719a8c670b8566dc1da9da36bb3c1027741add790a84189043d2a480c
MD5 124bd11d2f9f3cdffd08f560d1a57c17
SHA1 d7eb2bd236ac774fcc64f11ef4662f66fd10f045
SHA512 156ae06e9b83cccadd3f6657304552ae49fb6c9bdeff62fe8255d5376c24dea499b874492cc1d9c0656e8e794e6c38c388de558bc5e925edd46633df8b7c729c
SSDEEP 192:LJONF6DphT9qQmiUyRko8wGYX59ezHC6m4Une+PkIIDn/5lU6:lONF61a3PwGYX5EGQUFYDLU6
TLSH
T173120935E8B8BC7B5DD3A455B44735035EA8522BEB887F80D6ED2A1C01DF19C230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 a469e3c87a0adf6aebb56d14f02716f34df816dc6b935f1c17de97378e1b4f0e
MD5 ed6196aad7c33f96e0f8cc2b2c75c936
SHA1 adf9aa8a91c600c5471dcce9a5ac0a2e4737e2b7
SHA512 6719f903e7b447593a5ecb71e054efba6df9345f27ae6f750fe0c07cfdbfa74452aaac14a6de0f313030c17912c6960f53c98290350088ab97f0c33469c0408a
SSDEEP 384:FrZcIYsNEruY95cKNBGYX5EGQUFiDLX81oq:VYj9/vGYuGQLDLXUN
TLSH
T1C0727D719CB8AC7B5CE7A141F5463A134FBC9127E7C86F8095ED6B1E01DB298230782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 98bf17d032babb9a3b7aea30c461f98f391f66fe25ef952aedbd452a813e3594
MD5 41c72df9f7855006e88ef8c1c4889429
SHA1 9ff14c9518dd0ee0ba498ab28723cfbc38cbcc73
SHA512 f0af8c162182ba9e8e07bdb3ce3fa41f4f864b1a93bdb247b85ce538ccfbff28951e80faacaa6e3210e8e2108210ddf1d6b43dcc94a5e45622ac25c9632c5058
SSDEEP 192:uQ8zSsNE/Q9YbphvRR9zQmiU1yr9oD4BGYX59ezHC6m4Une+JkH1Dn/5lLqy8Ko:n/sNE/uY95vKNBGYX5EGQUFiDLX8H
TLSH
T1C4523A75A8B8AC7B4CE3A451F50B36139FB8512B97C82F9496ED5B1D01DF29C230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d01befd43778216442460d9d37d60e19992b055d296e251f391d4439c0963662
MD5 27187282e73a393ee23b8aa5cd49b09e
SHA1 1278cc5ade677bb8d64068c29f925e886f9999c9
SHA512 e34278c0fdf156a0aa6d8f97485decd1032f9a7759397c7098f170bb5da54390f6731002181d3ae0a4fe81cd62f62032436a67bf551751ae58a64e08ecd864b2
TLSH
T1DF410758A6FA1149B3B36F169BF6A86D887B7C772F06915E00120D8F0A33B05C971737
MD5 SHA1 SHA512 TLSH

Submit Download