e0ac82b76187e06e5d934b33f3a0c25e69138163e1ad4a4af6c79de15a5ff761

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 06:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e0ac82b76187e06e5d934b33f3a0c25e69138163e1ad4a4af6c79de15a5ff761.html
Size 40KB
Sample260913-hhdaxashpc
SHA256 e0ac82b76187e06e5d934b33f3a0c25e69138163e1ad4a4af6c79de15a5ff761
MD5 640c1721de58ccca8f9688d97326fb88
SHA1 e71aaabc3fe711695cf5613f66c22eb9876938e9
SHA512 eaacb2b319b8134e25b8efd448c2935268d25254427bc182cf813232068b13621f5b32173b73dea5e200214f483234a8f5d6c69b8fc5b76445a76ec4bf4b227d
SSDEEP 384:cJ58kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8+D6ElY2:iHw8hW8VgJG8yJMvDpi2
TLSH
T1AC139464B8C221330133637D9BA79608FB74516B820663407EBC67E61FF1950D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3872	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337916357066215"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{FF96ADAC-CF6E-49BF-A6DC-E1B99273360B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 392 wrote to memory of 3276	392	msedge.exe	85
PID 392 wrote to memory of 3872	392	msedge.exe	86
PID 392 wrote to memory of 2140	392	msedge.exe	87
PID 392 wrote to memory of 2140	392	msedge.exe	87
PID 392 wrote to memory of 2140	392	msedge.exe	87
PID 392 wrote to memory of 3832	392	msedge.exe	89
PID 392 wrote to memory of 3832	392	msedge.exe	89
PID 392 wrote to memory of 3156	392	msedge.exe	90
PID 392 wrote to memory of 3156	392	msedge.exe	90
PID 392 wrote to memory of 3156	392	msedge.exe	90
PID 392 wrote to memory of 4588	392	msedge.exe	91
PID 392 wrote to memory of 4588	392	msedge.exe	91
PID 392 wrote to memory of 4588	392	msedge.exe	91
PID 392 wrote to memory of 5032	392	msedge.exe	92
PID 392 wrote to memory of 2936	392	msedge.exe	93
PID 392 wrote to memory of 5032	392	msedge.exe	92
PID 392 wrote to memory of 5032	392	msedge.exe	92
PID 392 wrote to memory of 2936	392	msedge.exe	93
PID 392 wrote to memory of 2936	392	msedge.exe	93
PID 392 wrote to memory of 2392	392	msedge.exe	97
PID 392 wrote to memory of 1436	392	msedge.exe	98
PID 392 wrote to memory of 2392	392	msedge.exe	97
PID 392 wrote to memory of 1436	392	msedge.exe	98
PID 392 wrote to memory of 4268	392	msedge.exe	100
PID 392 wrote to memory of 4656	392	msedge.exe	106
PID 392 wrote to memory of 2880	392	msedge.exe	107
PID 392 wrote to memory of 4204	392	msedge.exe	108
PID 392 wrote to memory of 2060	392	msedge.exe	109
PID 392 wrote to memory of 2060	392	msedge.exe	109
PID 392 wrote to memory of 228	392	msedge.exe	110
PID 392 wrote to memory of 228	392	msedge.exe	110
PID 392 wrote to memory of 4992	392	msedge.exe	111
PID 392 wrote to memory of 4992	392	msedge.exe	111
PID 392 wrote to memory of 3984	392	msedge.exe	112
PID 392 wrote to memory of 3984	392	msedge.exe	112
PID 392 wrote to memory of 3424	392	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e0ac82b76187e06e5d934b33f3a0c25e69138163e1ad4a4af6c79de15a5ff761.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff91e7dc188,0x7ff91e7dc194,0x7ff91e7dc1a0
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2518742105399101838,11247276085706743522,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,15724037153747201244,17306071697491027099,262144 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,2549723476346486707,7895731256253259218,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,7393952172323711550,16521274402763387359,2097152 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,1240757884724591927,6054342653112070678,2097152 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,6153154706504984706,16661947272922875433,2097152 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,13777976378017792142,9036310479240891912,2097152 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4408134878336724403,18325817711235460525,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,1630894309850829559,14065325835537435110,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,14070321238205486759,2341034937964232770,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,14070321238205486759,2341034937964232770,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,1306303397515773441,11782436317025955179,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11559030524171288724,17911705090896439531,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,1024678435941298143,1267761510456354138,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12484338867239542335,787901701226642877,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,14587747107773909051,15769624082233503234,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,9249668421913341559,17932067717365778451,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,13097692086165020269,4879184867201089284,524288 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,7528789091423744140,12929622123534220186,262144 --field-trial-handle=2340,i,13957861249735808222,16133593886105127831,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4f96ff8221e1e6023495ee8c7a333ecfdea888d903e77bd6b3f3dcbb7004c79a
MD5 1d250ad4dd61106c091deccab34a6223
SHA1 353ecf3aff6678bb81c2fedf5b2d01fca685ac07
SHA512 5350e69967d83baf0bb5b9ee7f510edb38021bcb4e598dea3c2ba2291cc9211d99f973a07cf8a6f81585936cd5acbe23543298c46d7c4f143eb85b17c40c6ab7
TLSH
T1D2E07DC44ACCCA6EB248B45B42F8770CE2CA374BD6CC6E5A2700B5C9704E840B7C2A90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 dd10bc10768bd2a7a98d9db377ebf706512bb3f0b19407b2efb88b56e97ad17e
MD5 b47049ba1b2bef1aec8fc9c3b4e221b6
SHA1 2c696dbb2aa968121bcee5ef20dee02f458b8842
SHA512 cdbc3d0c5db92715bb7122e0d7d5c125fcd5f3045616851caa062a4a8782129faf4f91783e572795d6ce238c497e16f80444edc05d2dd08e2e3083c68521d600
TLSH
T165E07D8506C8C33EE258648741F8F70C9281374AD2ECAA1A2B0886C47001840FBC3A90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 cf750685c26a87caa7c46b35de0f31c47851b39370ca36831677242802eace6d
MD5 99c8c132a26903ea2a59baff60df4e54
SHA1 166d55f67bd224004a8e8580fdd9977f5cb006a0
SHA512 c6c221ae5a252dad964a6b66081b1ccdbf7aaa225bd357e6e20d196583439656e512db45ab56374c433489411c1783db00e754b1135ae3b611553e50cd10782e
TLSH
T13F513CA13592C0D7F7F8417482DD614B3FF8D5A1418BCEE32FA4C8BA9846771C194258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5917e3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5917e3.TMP
Size 2KB
SHA256 787c55b2f82ac59452fc97a46793916fda13c37e62eedf280118cfe0308cb1ae
MD5 07140290c4212b2b572ca5df63de2f6f
SHA1 a9d51c31c67bbb230768e0ee35e3bbe01402e91d
SHA512 e97c63f70e62d1d21b578e631dbbe7aab13d5bd68f069e3818c19bbb4a0076ff2a157605fbddd9176c5980d475ea007c1857532b69ba1494d1bd0d27aa9c03e4
TLSH
T1D3513CA13692C0D7F7F8407082DD214B3FF8D5A1818BCEE32FA8C8BA9846771C194358
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b441f20b5222223759050543b2c6f05af6c73be4d7c1aefdb2a691294782d531
MD5 e7cdfccdc591d364c0dec9a8d58fb69c
SHA1 2460dbf11175eb9756ffc3b5fbb89916a0c789dc
SHA512 96d6743ad63a3487a16f8c55aacf0b3c4b9a5c6a08e29c6e2a3b1b2ea1e2087ac92f52c498696f4bb8dc1a2761e9b448e01d320e7e86c26118977a2fa778aed3
TLSH
T1A7218BF3C3E9866D890512F0AA246E1BDE1D0906822C3D16CDE4EF6BD3E34B1E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 03a05c637d259864e23fdb27bea398cf0570514f4a3bd54e28fbe79250b823a2
MD5 33623e6110e44624f3aa70bcdff7faf1
SHA1 a2f3846b3509e6f38f5fe54c004627d3e9d66338
SHA512 eacd62fa85e7abc052cb362d7c31da48788d5cbd866ac0f94df5c2d26565c7fc000924486beb1920769d7df39fdf3ed7214bf5eb6b8a552c5824b746aa36663e
SSDEEP 192:sxZVlWa/fYsOOKIdpdAHW6+WNGYapYkPIgrJ:sxZVMa/fYsOGmHbGB9
TLSH
T1D212A712AE28A57B8CC7D21DBB65BF53E6F9503291D41E58EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1d6ebc3fa5057fccc8e0e8d1b0340842025a225ca5f96924c1f2eb1063a2d80c
MD5 88efa929782fb9d443514706ff80a52a
SHA1 5bbf7d3a91d4220fc798f117509a92d8b7dcd2b2
SHA512 9813fcd251eb3b8675ba08dec5e9445b2282add44dfd538625978cc79337740943e9025ac790e60352872f5b9ed8d1ba9b063f8dc7bec10b76cc8611a44c1873
SSDEEP 192:sxZVlWa/fYsqOKIdpHAHW6+WNGYapv/kPIg5jfJ:sxZVMa/fYsqGgHbGViL
TLSH
T1D822B812AE28697B8CC7D21DBA55BF53E6F9503291941E58EAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 abd7bc2fb7e131823dfedb56175664bb695d6074da9a84fcc22d81b8b16cb475
MD5 fe037f0129d9f70cb192665a7810b81d
SHA1 d003cc88c9ce1c251b3fd7d8f481e72b3f8cbcbb
SHA512 0a176e9653c320c32cd72f889b95cf2d91c963efc59cf6295ee82b4b7568be55edfa621ff3aa80d0863eaf7eaa55bf6c4bf554683fe783c723c31c1dc6ecfeca
SSDEEP 192:sxZVlWa/fYsnOKIdpdAHW6+WNGYapYkPIg5j1J:sxZVMa/fYsnGmHbGBl
TLSH
T11022B712AE28A57B8CC7D21DBB55BF53E6F9503291D41E58EAFC861C04EB6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 129b971e899193590ac1ae69c57d1fc0acc49e0ff49d5c4f1c0cc847c3b0ce62
MD5 69dc4e76e7b55a721f00c836e12497f4
SHA1 eddd52d95558915df30887071f22249e9d25aada
SHA512 5a9e351edef6ee29d6f324c390e140082e45a15c071edff6429582ed36f238a8d114710f8bd0395bd32be9e2f81722109692ab87725452894d01261f3c6797c1
SSDEEP 192:sxZVlWa/fYsqOKIdpdAHW6+WNGYap4MkPIg5jfJ:sxZVMa/fYsqGmHbGeDL
TLSH
T12522B812AE28697B8CC7E21DBB55BF53E6F9503291D41E58EAFC861C04E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3151d0e366605cc46b516a661581de636a8a16c3a3b505b02a5f0f103817db57
MD5 0b36e2c37e860a03c1dd02e5f8bd7e6b
SHA1 738dad34ec385d91546b9f5930e81f93e872d27a
SHA512 c9ab145631dae6a445fe2a04c488e5fda98f4b052955e09d198351b2f38fcedb3ca90e1510001821645380303aa8dbd99859cc1504d844f946c8aa15f52709ce
SSDEEP 768:UgWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Wro4NfeHmR0:UgWPcLKWvKeEeu1jaClLiF7t4NWHmR0
TLSH
T19EC2EB3B644CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 923d9dcff45a9c6f5d803d8cf25cc3121ac07134f6d85958208b7fae332e1a59
MD5 314fc4f05c7ec7032788765a5876d8a6
SHA1 0db9ad9ff36ec18ab4d109fc7e7f1c4a69c1c3e7
SHA512 6adf7a5bb92a46c52da6ed17d143917995699b1ee5cecc171e8a5a2b24c1e5aac6574a8c284b736e23a08a95c50554874928adf43074a26976e362f3195190ff
SSDEEP 192:uTOsNB/QL3dOVE1gFoQmiU1hyJ74zIGmDnjzorbhRUpuX8d97iz/p8Lqyp3KM:psNB/GOe1xPUkzIGmDP8ouXAiF8XNz
TLSH
T1B4522936AC78BC3BADA39544F50636139EB850678AC82F54DAEC9F1D01DF298130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 218aecbad61e316a20e0148e1a543a223441353d7d1aeae07b92334a68aee764
MD5 bffe6eb3f5e357b082241fa24527a2ca
SHA1 1db90129d995b358bd22d1fa1db12fae02ce233a
SHA512 a1d0e0a8231a7633623d20722afc2bda93c0d287c7936d16e57f44afa20117dbad807584157b40d0156e243b20e07e131a07172cfbeab91c2cf6607d2764ab29
SSDEEP 192:uTOsNB/QL3dOVE1gZQmiU1hyJ74zIGmDnjzorbhRUpuX8d97iz/p8Lqyp3KM:psNB/GOe1kPUkzIGmDP8ouXAiF8XNz
TLSH
T1FA522936AC78BC7BADA39544F50636139EB850678AC82F54DAEC9F1D01DF298130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d64331a83cb91eecd91c0fbc82026f6824664d1ddbb491ab41bb9f380e4cecea
MD5 115d29188deb339183327d440902a34e
SHA1 0ad80a2f65d4fce03d74f3a208ce46f0b7cfbe68
SHA512 a7e0560f65f63f687e5b8abd8ee1b19038c855b3c6b5cc539f344380781ff8187e5d12084bf847d8b6f322c1ba6eb8157f7f26cacb830904f860b3964d4c94b4
SSDEEP 192:aONA6IE7QmiUyUZTPuIGmDnjzorbhRUmC7sAPU6:aONA6DtTPuIGmDP8ys+U6
TLSH
T12002F935EC78BCAB9EF3AD09F4473A23AEA4112BD6D52F54DAD41E1D00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 fa3eea0aaf89147bda74334a95a5c4b133114387f26a3e1a1540bae8d29d1149
MD5 b7a309c500c2c62a024844a8fe8611e6
SHA1 9bb66c0078636d9c6acdf19d41045ab103309973
SHA512 d63bf141ef0dee32626ea921dbdb9fe320ca50773369c52f272df36e68fc1c552a026868387c0f6bf610d4a050ec5ba5b27917ce936af29433902b0332a33b63
SSDEEP 192:ugOsNBeQL3dOVE1gFoQmiU1hyJ74zIGmDnjzorbhRUpuX8d97iz/p8Lqyp3KM:csNBeGOe1xPUkzIGmDP8ouXAiF8XNz
TLSH
T1E7521A36AC78BC3BADA3A544F50636139EB450678AC81F54DAEC9F1D01DF25C130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 af933cca5afc862e1b289f2d43cc084aa8278442f7073288c7c01ddefbe3b910
MD5 856d839ed8f0fcc21d86fc70ecec228d
SHA1 3313a60d7f5284051b697b0ae4b398579120cce9
SHA512 7e72dc439749dc845f97bdaf1f1e3ae088ca5625a78577d593a6c768fddc5bc56c856afb24e6c70bddfc4b6181dace6a4b56e4d64084a0ddb3d7276af9300ab8
SSDEEP 384:CZcIosNBUGOe1xPUkzIGmDP8ouXAiF87O6R2Feo+h7UboY:woCOeTUesh+Ai67TRtif
TLSH
T15D826C329CB8AC3B6DA7A045F44636139EF890679BC95F50D6EC9F1E00DE698130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f3256105b755b23eb611998cc29669b32c08b049b09198e79be9d9b7b16d47d9
MD5 8de3ac757992cfbafdd66e64619ba386
SHA1 e0224f7ba032b3c4129d60b364d2e4cc4ec57b97
SHA512 7339ddb8b198c25f92c71374e4e53cfdc78a08a80ee3d9c10c0d425b81446073bfdf3bb4b9a954ef8f3462fac4fc69680b526d250a5320fbcef52de99a9c4a7a
SSDEEP 384:JZcIRWsNBUGOe1xPUkzIGmDP8ouXhiiF87O6R2Feo+h7UboY:BoCOeTUesh+hii67TRtif
TLSH
T18A926C729CB8BC3BA9E7A105B54636139EF890678BC95F50D6EC9F1E00DE698130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d11477702f0b0bf597a056180584b76027bd47fb01fc3bf13fa5fa1815c7ddc0
MD5 e0e729fb4a972ef490eb0baf485408f4
SHA1 d50c44adbfd52a251ef88f211255ee923730fe8b
SHA512 2c2acef3ff2fe04e16e72c8deb691772373738e9ef3c3d0884b9714544f457fec22ddd3637ee66c0af5821abb6e78f34daa716644ba8fe2470ff5218bea1d4fd
SSDEEP 192:aONU6IELQmiUy/VZTkuIGmDnjzorbhRUpuX8427Hz/p8U6:aONU6D9SHkuIGmDP8ouXSHF8U6
TLSH
T17712E936E8B8FC6B5E93A844F4873513AEA5412BDBC56F50DADC2E1C01EF25C530A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ea7d28e-ae56-439d-88e0-b4ca50179aa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8ea7d28e-ae56-439d-88e0-b4ca50179aa4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 083ade0ec7ab3aa80412ca46c7de0cdafb2dc218e27890aad472bc6a99248295
MD5 5caf8450aecfcf76980647cfd1b76cec
SHA1 b8181d81b3e7dd1802181e63d07ad3ecbab5a0b5
SHA512 5dce28c78cc5acf40c9e374e3fdff206b4f1d712fcc9ce53cbd56f883a6393c0badf753bd972a1666f5d61f2bfdc9892d1ee81c9ec6c94fea44fb97ec77ac6ac
TLSH
T1DB415B5CBAEA1048B3B76F4A9BF7A86E847EB9372E06C55D00120D4F0623F80C861737
MD5 SHA1 SHA512 TLSH

Submit Download