8c22e4f2e23fedf6b5ec14ffb2b26dc1fd310a883074016b095a2b12ef16d0b0

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 07:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8c22e4f2e23fedf6b5ec14ffb2b26dc1fd310a883074016b095a2b12ef16d0b0.html
Size 1.2MB
Sample260913-jp7c1awvbv
SHA256 8c22e4f2e23fedf6b5ec14ffb2b26dc1fd310a883074016b095a2b12ef16d0b0
MD5 2c598a4c55dfcf5ce6f35426af6beef3
SHA1 8366dd457fb4c88229a5a964b8278b582622317b
SHA512 354f3f34fa1c769e186d57c3cba7846722bed6b3054508b2573495c3ba344ee0606b290a3240e92af80585dfe821050ce1bbb9a71ee4720ad0e90bf9309aca1b
SSDEEP 12288:3CeSXyMTNrjTEY0+kC6bhxs7jGzQh6WNJWo:3CRyyjT3kC6bhxsIQh6WrWo
TLSH
T13245C7DB9231717FF833A8B596C8A949F3988CC1E5164AB5BC70A61383DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4588	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337950389122093"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{9A0CF9F4-F164-416E-9FD6-AC0B8AD63449}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 4568	2908	msedge.exe	88
PID 2908 wrote to memory of 1732	2908	msedge.exe	90
PID 2908 wrote to memory of 4588	2908	msedge.exe	89
PID 2908 wrote to memory of 1732	2908	msedge.exe	90
PID 2908 wrote to memory of 1732	2908	msedge.exe	90
PID 2908 wrote to memory of 3332	2908	msedge.exe	92
PID 2908 wrote to memory of 3332	2908	msedge.exe	92
PID 2908 wrote to memory of 4420	2908	msedge.exe	93
PID 2908 wrote to memory of 4420	2908	msedge.exe	93
PID 2908 wrote to memory of 4420	2908	msedge.exe	93
PID 2908 wrote to memory of 4824	2908	msedge.exe	94
PID 2908 wrote to memory of 4824	2908	msedge.exe	94
PID 2908 wrote to memory of 4824	2908	msedge.exe	94
PID 2908 wrote to memory of 2004	2908	msedge.exe	95
PID 2908 wrote to memory of 2004	2908	msedge.exe	95
PID 2908 wrote to memory of 2004	2908	msedge.exe	95
PID 2908 wrote to memory of 3608	2908	msedge.exe	96
PID 2908 wrote to memory of 3608	2908	msedge.exe	96
PID 2908 wrote to memory of 3608	2908	msedge.exe	96
PID 2908 wrote to memory of 3480	2908	msedge.exe	97
PID 2908 wrote to memory of 3480	2908	msedge.exe	97
PID 2908 wrote to memory of 3480	2908	msedge.exe	97
PID 2908 wrote to memory of 4036	2908	msedge.exe	99
PID 2908 wrote to memory of 4036	2908	msedge.exe	99
PID 2908 wrote to memory of 1584	2908	msedge.exe	100
PID 2908 wrote to memory of 1584	2908	msedge.exe	100
PID 2908 wrote to memory of 3276	2908	msedge.exe	102
PID 2908 wrote to memory of 2648	2908	msedge.exe	108
PID 2908 wrote to memory of 2776	2908	msedge.exe	109
PID 2908 wrote to memory of 3628	2908	msedge.exe	110
PID 2908 wrote to memory of 2120	2908	msedge.exe	111
PID 2908 wrote to memory of 2120	2908	msedge.exe	111
PID 2908 wrote to memory of 4904	2908	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8c22e4f2e23fedf6b5ec14ffb2b26dc1fd310a883074016b095a2b12ef16d0b0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffafdc5c188,0x7ffafdc5c194,0x7ffafdc5c1a0
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,14262112198357478890,8324164646711960326,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,14221803554482470338,4984329858358779697,262144 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,12877794035899451379,10071658752453357072,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,17990826061712578771,14249528226982145835,2097152 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,10984467337389630210,12606502865021233431,2097152 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,9065601880637357131,11439664297020313038,2097152 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,9936376134525129155,1930367425185227507,2097152 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3552,i,15130831057111154468,17460144413148467974,2097152 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,9805967673873288668,4300300722799004081,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,14742861653417976569,4680928785389398712,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10559628512974442415,2166573775916664118,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10559628512974442415,2166573775916664118,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,16047109438468919145,10733806150572101998,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,7680062881894959968,1019715355305410108,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,18088085190509499691,6083866229170540997,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,13534066028658378534,3977270055150136325,524288 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4464,i,10328982415490854743,13507713020060275908,262144 --field-trial-handle=2324,i,6596325342434523244,6251144954536586582,262144 --variations-seed-version --mojo-platform-channel-handle=780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6c6163bc4209944d3a9de438678e62444ef1d762e065d4225a9123c492745b31
MD5 d22c26fd6d304d306ce95ef489e8a6eb
SHA1 d235e083121882780f96d7eaadd49df6c439769a
SHA512 d6d5b626db9f2b158bea1bf0182aeca5b842b217e4607a973066ba02998edd824deb370f06321c10699823fe23ba5e8916d7c10b55d0889e215b1844f3d64097
TLSH
T12851434C46F69177F7D84132D1F642C736309B7165832E4222A7F7B9FA86359CB46092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fd37.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fd37.TMP
Size 2KB
SHA256 33a783632e5751a0e36da3bead1d15ed3a57b6aaacd4cd437e59ecc0d4662138
MD5 29ada2ced50562bf9148f7732cb2646f
SHA1 459db0a3e549ee5e0316d9a0439f4f3f412ae260
SHA512 60e51d2964de1f5d16866ba793ce12a0b92ba04504b98562bc42400d59ef2d4dcfb1799951e254cea3448b89d35a4bb93f3d42921fd4d23ae2dffba6ee7fc5b5
TLSH
T11851634C46F68177F7D84132D4F242C736308B71A5832E4222A7F7B8FA86359CB46092
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 36d797c1cd92fd586982aaec4652aeb7a9046f2f4e37412afa090c1549da6308
MD5 aec7f347f6a17ddc56d5e5b8d08b7605
SHA1 198c116dd75d96437869a9960a2a2abe1c756d76
SHA512 63af8c32c946e81c741cddd311d0964d32c7cd1a941cdc7e969ea5f42ce6d14e2d98e70c3b78564fd5b3f309f3d065db3b6eeb64e034389b8a609e2682ffa4d4
TLSH
T1AA317CF7C3D4866E890156F05A28AE2BDD2D0916432C3C1689E4EF6F93E2471D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 eac59494d869b6df8798a1dc8408d37bbfa4d0ba6eef51869a866b27269a8981
MD5 c25690cebbd89d8b689d5350f1cd5ecf
SHA1 de61b018d5e97e71018a5a16c3bfd484bd3cbca2
SHA512 6fb01d5c3d00e5749b968c89d3308c329fa33c1e87be68535c9f6738dfc8ea546c70c667424ab303ac139ee5c193408abbaafb45263ca7a9d97a99f8640dfe13
SSDEEP 192:sxZ+RDWl/fgXsrgKIdpd7HW6+WNGYYBaUnIgrJ:sxZ+0l/fKsrgDpHbGfF9
TLSH
T1B61297116E28B97B8CC7E21DBB65BF53E5F95032A5901E58EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ebefee90297af8fe1547fa298e28255b2ac68dc9cac3103c9341c955e713ef2f
MD5 c41ffb7b0ab4d39bf55f3b7a480c916e
SHA1 2a4c3f2e29b15019f1031a51a824aea3898b1a5f
SHA512 cb6555333050905eecfa636149073670c72c265bb9d5d136e122e2decde562b10e284a1b45bd7eb89cdec892b2ce0a2efd6ec4ee0855724fbc4b0aabe5ba60fa
SSDEEP 192:sxZ+RDWl/fgXsVgKIdpd7HW6+WNGYYBaUnIg5SJ:sxZ+0l/fKsVgDpHbGfF0
TLSH
T18622A8116E28797B8CC7E21DBB55BF53D6F95032A5901E58EAFC861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 970a7255216ae94764c091eb210b050c13b28547ab8992bff25ce71603bc6dbd
MD5 df133953f819aa109160164b313ea732
SHA1 f1d6ca7122c3410bbfbed3cfc0494a23730e51e8
SHA512 17c97065c4faf634b890c78feddcd529e39845d5ee996765594d4edeacfad025b1d83da53f30ea1bc22a7ac324126268233f2c2f92ffaa29c4782c2902831c3c
SSDEEP 192:sxZ+RDWl/fgXsVcKIdpd7HW6+WNGYYBWUnIg54J:sxZ+0l/fKsVcDpHbGfRe
TLSH
T1E422B6116E28797B8CC7E21DBB557F53E6F95032A5901E58EAFCC61C05E76CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 87b3feec5cbafce71441e3cd81ee33e1f24e80d0fd7214205cdcb1a1d09f685f
MD5 2a3c67605b2875e52cae600077618b2f
SHA1 6897635529a1a8fab2567f83f8900a9aba936551
SHA512 a4eb34a8ce75b556140f931a392f3bad5770ebd7830e3ef763d3a946bf6768552f93d96c43e58504e58de5a943a7f173c564bbf4e2913b1eaa508e685a7e431b
SSDEEP 192:sxZ+RDWl/fgXsVcKIdpH7HW6+WNGYYBXUnIg54J:sxZ+0l/fKsVcDbHbGfWe
TLSH
T14122C7116E28797B8CC7E21DBB55BF53E6F95032A5901E58EAFCC61C05E76CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c8116ab5ddda843725e42ba44839b2a74884b29dc51d7911d575c79475d3feef
MD5 f64e757d1b0f239ea8109abfeeed5193
SHA1 b51e37287bb63d07021a3ac25706caf97185b755
SHA512 186ae7d4d1cf2db49e2914bde9bb0cf34ec7c79614d5b494861ab104d0ebf1d2d23a441a4f157e109e5aa4ecb297b5f933690367fb9178f172dc6c0d1780f8c3
SSDEEP 768:mTyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXuropnJ7y:mTyYR7jWv3NpBu1ja/CL8OXl3y
TLSH
T13BC2E93B640DCB7E4FC01A9DDC5A6F9B7E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9438a5a-1baf-4dea-94cc-4ed2904e912f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f9438a5a-1baf-4dea-94cc-4ed2904e912f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17e8be513fa85c55ab66c9ed20b3fa1d393cd74f29a7fc552f9ac5276cff7f82
MD5 0a25ec43e95138e7e74ff3fc55964b48
SHA1 05ea713b68cc0056f7a506ce5e83736bcc0b6af5
SHA512 4b2542dccc4260ed96380d09cd40ecfd8f0900ca0741751319f5f59dfede4121f4bce3293814f15d8912aa62e97e67e10b69c11e51631250e3fc97cb30de5462
SSDEEP 384:AZcIxsNmIiA9iuavQX5+DtI81KwXiJr835Nc7O6R2Feoo/h7U/oF:+xk9cYkDVDih835Nc7TRNxKW
TLSH
T14E828E31A8B8AC3759E7E195B1473613AEF8506397C96FC0D5EC9F2D00D9B94130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 020848382efa157bcda8300bb5cdd2827b3acc41f7bc50f33be3f028c53ef665
MD5 d742a19f7af92aa1780d9a309f3217f1
SHA1 9767726dff2ae57dcb6bac747e18f3e59ebc09fc
SHA512 fb6578b7720aab2a5eb9c68dd88854f71795f80e22777ffc61e152dafb0273e5e001be56241f575ae59dc6e14cc4ae0a757a20bfda96bfe9aa9553dc262377c4
SSDEEP 384:AiFiZcIwTsNm8TUNTUlIlHiA9iQfavQX5+DtI81KwXiJr8S5Nc7O6R2Feoo/h7Uu:bFQwvwgP9CYkDVDih8S5Nc7TRNxKW
TLSH
T18BA27E325CA4DC3B6DF79695F54A32139EF450A3DAC5BED0E7DC9E2D009A6D8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 37cc43fa8c68ea90d0f78cdc6a1d64274ccd1bd657310b0eea98d2d8de37c9d9
MD5 c57b451311c5e6d8009485eb8306adf0
SHA1 611c25cfe76e06293f7b3b93d1e7d4604df38680
SHA512 b6757680482d07df9a54ac9957945f22e5b69e08612663913f762e1daab9c4ca7c632f33baf23d0d30c2a8e208f1c3dc406a67a89737c5868c0d4a50ea8a5d26
SSDEEP 384:nZcIxsNmHiA9iQfavQX5+DtI81KwXiJr835Nc7O6R2Feoo/h7U/oF:Pxf9CYkDVDih835Nc7TRNxKW
TLSH
T1F7828E3168B8AC3759E7E195B5473613AEF8506397C96FC0D5EC9F2D01D9B94130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cf6e319178d68f2033f969e1246febd3a3a2f3bb868b1ac612b8aa1a27d4ee3a
MD5 ccef796a4238074136a5ef530b5624b3
SHA1 2edce4d64fe8635bbcd4431436ab20d1f62634b7
SHA512 58fee067bab6b81957b0b56e5258ccb41902b53b80b620e54147d8cc6c0bfe35cbf5cc1b01d3b3b543f3884218f989f2f8b38fce108709e230ae2ea2028f4fa7
SSDEEP 192:EONO6nnHGQmiUyk7QYcX5hQDP1Ajzor181mI7McscU6:EONO6nC7QNX5+DtI81KH5U6
TLSH
T19902DA34AC687C7B9AF3AD49B1872713AFA52167E5952FC0DAE81A1C00D775C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ee9994b8d05d05c7949e7313dbba134cb9ce064cfcf290178da335d1e98057f2
MD5 15ccc4ee52a808b9e299c351cf4f282f
SHA1 c91f652ab855d9f5855807245f1f8b82d8f63a01
SHA512 eb6c33ae5c705740003b199ddda19b9ddf422075029e0078cc2793251bbda0f26162c6d557c4e09325bcb09340402ce7a9c517f72a23843c11a56943ca166d34
SSDEEP 192:EON/6nnHNQmiUy+7tYcX5hQDP1Ajzor181mIwXXSJr8zg3v/5NcU6:EON/6nrvtNX5+DtI81KwXiJr8o5NcU6
TLSH
T183120C31A4A8AC675EE3A5D5B0873113AEA51127EA897FC0D6EC1E2C01DF75C6309D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc6c42f6-c379-4fcf-997b-69daa8897f69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fc6c42f6-c379-4fcf-997b-69daa8897f69.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c0d4325fdf2cf9287edc619d478fdc3002b793c168bf6e144f5f3f541c804793
MD5 97e3d4d9c2c27466d38ef1cd29270d4c
SHA1 cb2fbf9db84c7eff1ea2c1fcc06506653ff41325
SHA512 167e696e2b7bbbd1c73a76a684e482c820678cbdb689893ffffc5aa65fc147003aadb4f21035f7a900ed6339282ed5208dd680147e45c50614d4e914b14e7476
TLSH
T1DA41075CAAE91118B3777F469BF6A96E547B79372F06809E10110E4F0A22B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download