188b2711ef2edd379b0e3f004a0eabb2c81060f044cb3ee9dc1dfcb8a2902e5f

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 21:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_188b2711ef2edd379b0e3f004a0eabb2c81060f044cb3ee9dc1dfcb8a2902e5f.html
Size 68KB
Sample260912-1vvptsysfx
SHA256 188b2711ef2edd379b0e3f004a0eabb2c81060f044cb3ee9dc1dfcb8a2902e5f
MD5 cd73de77e460c2addaff9e072d7e29f3
SHA1 0ac2c6bdc674d199630f7e8004e28c09de329cf6
SHA512 58a7964f51544ad5a65c42f375304e13a429b1b729af4960b1536df5f4f31b2f5fa44d6c65cf32903c6072bec79cecd4fff3047ca7f389cd0d024675b76f7780
SSDEEP 1536:PBgguDFRLCQWXBOxSPSW8N6fGNNKOGrSNJs2wVXk1H3w:PHuuCGeTKOeVXkm
TLSH
T1D46339A73A64B457926332B4907FA04AB23BC1731508C010F69CE4F66FF99949677F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4444	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338272124867858"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{D3747A22-C7AE-4CBE-98A9-4A1688429600}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 1896	4324	msedge.exe	85
PID 4324 wrote to memory of 4444	4324	msedge.exe	86
PID 4324 wrote to memory of 2592	4324	msedge.exe	87
PID 4324 wrote to memory of 2592	4324	msedge.exe	87
PID 4324 wrote to memory of 2592	4324	msedge.exe	87
PID 4324 wrote to memory of 2100	4324	msedge.exe	88
PID 4324 wrote to memory of 2100	4324	msedge.exe	88
PID 4324 wrote to memory of 1552	4324	msedge.exe	89
PID 4324 wrote to memory of 1552	4324	msedge.exe	89
PID 4324 wrote to memory of 4272	4324	msedge.exe	90
PID 4324 wrote to memory of 1552	4324	msedge.exe	89
PID 4324 wrote to memory of 4272	4324	msedge.exe	90
PID 4324 wrote to memory of 4272	4324	msedge.exe	90
PID 4324 wrote to memory of 820	4324	msedge.exe	91
PID 4324 wrote to memory of 820	4324	msedge.exe	91
PID 4324 wrote to memory of 820	4324	msedge.exe	91
PID 4324 wrote to memory of 2200	4324	msedge.exe	92
PID 4324 wrote to memory of 2200	4324	msedge.exe	92
PID 4324 wrote to memory of 2200	4324	msedge.exe	92
PID 4324 wrote to memory of 4192	4324	msedge.exe	97
PID 4324 wrote to memory of 4192	4324	msedge.exe	97
PID 4324 wrote to memory of 1636	4324	msedge.exe	98
PID 4324 wrote to memory of 1636	4324	msedge.exe	98
PID 4324 wrote to memory of 896	4324	msedge.exe	100
PID 4324 wrote to memory of 2452	4324	msedge.exe	105
PID 4324 wrote to memory of 4820	4324	msedge.exe	106
PID 4324 wrote to memory of 4056	4324	msedge.exe	107
PID 4324 wrote to memory of 4860	4324	msedge.exe	108
PID 4324 wrote to memory of 4860	4324	msedge.exe	108
PID 4324 wrote to memory of 1032	4324	msedge.exe	109
PID 4324 wrote to memory of 1032	4324	msedge.exe	109
PID 4324 wrote to memory of 1824	4324	msedge.exe	110
PID 4324 wrote to memory of 1824	4324	msedge.exe	110
PID 4324 wrote to memory of 3472	4324	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_188b2711ef2edd379b0e3f004a0eabb2c81060f044cb3ee9dc1dfcb8a2902e5f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe2819c188,0x7ffe2819c194,0x7ffe2819c1a0
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,242545049031874514,6323665863323120509,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,9093496228135765767,1256017171147046346,262144 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,10337479625098484087,2768688562658596673,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,2076866431876535589,10555664069978998885,2097152 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,2886563790668342357,10487438532099162581,2097152 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,4976272763260964921,3851582273739471933,2097152 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,14503687580077012133,2102282621114684572,2097152 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,15731352612091899830,13014697411712636565,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,17550517758003870920,1501017850137552853,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,2126671229225663474,13188202188408115313,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,2126671229225663474,13188202188408115313,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,5274107014792247592,8009132213391040344,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,365146974246063458,11563582144219534235,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,17756274408661251003,17507796601831466405,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,10939480932134170439,10350562173411243722,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,7281428175454973656,2748424466026507118,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,10251828184942222935,277151056111553602,524288 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6368,i,10845298083819664378,4661443443636127948,262144 --field-trial-handle=2328,i,15546825058720744332,10873142945675206941,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 704ab50a7865d86112b0cb1a1c3e6d656029a18b181bdddad2f59d829706e881
MD5 4e03f61b5f251b3b75a369e529a4ca3c
SHA1 7e760d0fdac4ac5a044907377b753ff13dd0bd41
SHA512 cb8831a0ccff3ae9f3274335142f04069b96c7da56913d52a5535ecb2ada61b05d0cef75c11e88073d2761575317279be0692768f59203bc142d1abf07149e67
TLSH
T1ACE07DB546C8C3AEA244669B4378679DC282374FF2CCBE1A174484CC7601650B7D66D8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 60083ea2082d4f8a41d255f914fb93ff70a12b5ab92e05cea821879a32281df1
MD5 e184bd122393b2002c8ed9a2ecf926c8
SHA1 511131369693c5683b567a089da8d7b666b8a1f1
SHA512 0c94a8421b41f26d231a8281f3524c5f6ca4a9f14e3b4da37568387bbae8fa606a421b52622fa4bfb127453d775349e918c2b888d69b2c22a01160d7741fb7bc
TLSH
T102618163F2D08016F7D87AB88BE52697317CD9C1DB83EF520158D83DB84EB946A390D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0179b389d39aa0f1525dcb099788626ae201c8f6d55e64b8bb7816143533c7e6
MD5 0b01b2602abab7798afa57e42f5ea80d
SHA1 f1978ffbae3ba35cf0be99c4a02b7d3ecdb29cda
SHA512 eb288fc8ac3c0c62f12898425386811655874569e48fa66a3c1212c2a5b16dae95cc465e622013503e22f09e19d8f9ef9b1d369f3ec52c18ad13fdf0012a5075
TLSH
T12F318EF7C3D486BEC91156F09A24AE2BCE2D0986422C3C55C9E4EF6BD7E2471E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 aef6b440103a48f0b38fa08ff1ef48113a1d3e43d053731265bc6d1d520ee683
MD5 50130f4d1bb3086e8f587643f846572a
SHA1 916fe637785cdc274c0bf4a89d32c814171d0d7b
SHA512 2587ce6fd52a0b1fd008e068cdb010bb8ac3a9233e3a1c8e8e8cec36c8543f0cdf02a41fe52cd90e6c199ada917ef71dd58ea24e04fea7c06ffa99d371f00d76
SSDEEP 192:sxZCRpWs/fPsi1IdpdyHW6+WNGY3RtCIgrJ:sxZCus/fPsiGEHbGd9
TLSH
T1EF12C8116E28A53B8CCBE21DBA65BF53E6FD503251D01E48ABFC9A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85ec1fdab85108aa2736e57a56d9985e5954c4819f141a5f63bd160068a4f1bc
MD5 6dbcfa02839e4425edf5d3287be08394
SHA1 dbe1528f5753370d99e8930c7456a579e4ab3455
SHA512 de9d7dc3b4d877c6c098d4772c164c76b9c1fde3ba32d6fa969c44980670cffad1e313ee7a84f1a606907ba7a3be9e364603205407d509f0fa0c0861ffb1052c
SSDEEP 192:sxZCRpWs/fPsw1IdpHyHW6+WNGY3KtCIg5eJ:sxZCus/fPswGSHbGGs
TLSH
T1B722B8116E28697B8CCBE21DBA55BF53EAFD503251901E48ABFCDA1C05E7ACD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6faa9405b6b2d4bfd2d6dfa753ec1b4f3acae798fe92206395ef9c35d66d2daa
MD5 33502ab9165e8c9c1f67f045a79ec2f1
SHA1 35ee93ce81c9d33ad8aeb4e75a3b183e7a1b1489
SHA512 7e8fe87ca5e039effc82ad219a7255d64b45a3ea4d8c021760349d8e40a0bc5e5350554db0e67a81db1f55039236521f9740b7d95daeecdb7e0a40d2bf888044
SSDEEP 192:sxZCRpWs/fPsw1IdpdyHW6+WNGY3jtCIg5eJ:sxZCus/fPswGEHbGZs
TLSH
T1AD22A7116E28697B8CCBE21DBA55BF53EAFD503251901E48ABFC9A1C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 721255b54a6a43f08d95e74fdc2f937090075c8768aca8a22cfd6c9a20ee83f2
MD5 7afda83269555df8313136ee5d43d1ac
SHA1 c1859bea10e3e3159af23800d824dae1a9dde8d9
SHA512 afd8a0b7deb9c436a2e2734e72f3708a5a37bb1ca7c957e3b2b113d02923e887d18f2e46a8cb0189754173b10b0b2e74cf9e963002a17b82290cc7e9b616fcf5
SSDEEP 192:sxZCRpWs/fPsz1IdpdyHW6+WNGY3RtCIg5sJ:sxZCus/fPszGEHbGd+
TLSH
T1A322B7116E28657B8CCBD21EBA55BF53EAFD503251901E48ABFC9A1C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b2c779b4841e4bb34d8b16b75d66dfc20830e9ee928c10ad9cfba460a75e3e42
MD5 c9a3aa4593e698222ac8a1d880cf6fe5
SHA1 9407fc82c3dd79ae9ece7e2c6f2b9546722e9312
SHA512 79a42a76c6d4babb1cce19e2715c5d55038e9986b8fb935ab7ee4d1441f62ce1ba9c2f358f51820be65f84caa19b249a5b0348eb6541c616576efb696f0d55a4
SSDEEP 768:C+30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72VrolZM7:C+30AbSWvS2l9u1jaLmLZ12uI
TLSH
T146C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796588D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b5dbdb38c52a1ce6cff1ac43db1cb0bd7c2b464cee284adeeb10fc79bbb0b010
MD5 6343ab65df9e2f1a2537375a6e683aa5
SHA1 0522b34a2b1c009d05af8bd10297826a936d9d1c
SHA512 67b2e4c41754e19d047331ae7365b46cfb9a5a033c1b1db070dcb9db0c4452cef722b8c92d09d9d7807dea0e841285282d18fa7a8c66418370c509bd1ab4aa0b
SSDEEP 96:Kh4rk4iqqOI6FViYOK67i+OmAYdOIPPZY/DRT/zIveCiLzK6qitzmJhW3eRSdx7U:AdXofbiDWiMsl
TLSH
T1E3910E4532BB0200387E2A5D81B0875A466371B33114FB3BBBFD15A69E6EE085DFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c4ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c4ec.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e753481262d2527b7377443db546ab57c36fdd71022efbcfd6c4419f9c8dc8a6
MD5 7aed61346dd8f867b94600a8f50799b9
SHA1 07c035f03d1e715352cde706cda0141787e33e83
SHA512 73ca7e3885ba8b616d34d0f909392dfa53a2bb71162deea7cdc6285971b05dd1612515be13bbcf7d8230a4791326bc875ec2b80933b7151730e9ff97230f3250
SSDEEP 384:1ZcIxsNmq30DpuUf959iX5F+JOrtsa+VYzd7Uoog:NxU4j3aiJEthgSdv
TLSH
T152828D329D746C7A4CA3D262F54735139FB891A797D86F44CAEC6F1C02EA6980307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c668e2854fd6fa968e2fb90f62df627983bc25ea60829562109b57b35867e367
MD5 f5cfc31ae8b02a1b4dd1ee995dc36313
SHA1 74db76607bd1567aa2b5e30443ae235aafaf5a92
SHA512 4211ebe9d1850fbaf7a00de8ce9b95b41a53a206f35f3e4b3d9d5f8952d9b6520570c2d4cbb5468ec1bc0aca39875e5366af4159203be6511eeb7c316c45dd8b
SSDEEP 384:miFiZcI6rsNm8TUNTUlIln30DpuUf959iX5F+JOHtsa+VYzd7Uoog:NFQ6nwgR4j3aiJwthgSdv
TLSH
T126A25C338DA49C7F9DA7DB56FA4A31138EB841A7C6D8AA50DBDC6F1D02971D80307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a5ab5ed9818175ec2596fc096cdc63a65fa8d7c49d18f25722cc5cc2be6063b3
MD5 4fd1509ec8d5646374b07aaf94e4b069
SHA1 bbf4642f1fe4f297ece5e65b036097a0ceefafd2
SHA512 f769c35978d9d3c4e7cb40eccda6250cea69df69360ff5a9b43d179315a34e034e9fa1a1c41029f03175d548d8c162e5dc5a8b0756720d38625bcdd5d30dea08
SSDEEP 384:csNmW30DpuqfV59iX5F+JOrtsa+VYzd7U+:cA4v3aiJEthgSn
TLSH
T172624B36A974AC7A4D93D661F54731139FB851A796C82F54DBEC2F1C02DB288130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8505f962528c1f8dca70800cc3f0314a378dae063486f7735d19ffde66869313
MD5 5ef3b6b3641e5936c6eaeb6be2399b16
SHA1 656265e1384d12390a26fbb9575b28fe654cb5d5
SHA512 46e4c460d7294b3f952313d197b20c2ec21dbbaa82b3cdf551fd1c1713d347573c34c0df5cd2f43bbb7a164fc8e3a37333422ecd251d238f519627454af49e6a
SSDEEP 384:SZcIxsNmn30DpuUf959iX5F+JOrtsa+VYzd7Uoog:gx54j3aiJEthgSdv
TLSH
T12F828D329D746C7A4CA3D262F54735139FB891A797D86F40DBEC6F1C02EA6980307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bfd8e51c2f0398096747dfc3795cd44bd0bd7ec405a120621c92293c666530f1
MD5 7a59d780142d62c44373926f8527d193
SHA1 a29d9ec00e8408d77b6cd4139a801f2fed6a749c
SHA512 e47da991647ff77f1a2cb72dc6ea9eb974426115d6e24908dd2cc2d482e2ee6b90c4db2db9f8ff8dfef1da2f3214edb422dfb735f71804849ae8891898c8ce9a
SSDEEP 192:LON96AmwprQmiUyh5H6siX5FbyhjkQJisurU6:LON96ipdgt6siX5F+JwhU6
TLSH
T18902D935EC686C7B8EF39E15B58776136FA9116BDA946F44CAE82B2C01D764C1306833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6280b46d2c84bf782c31bca374536b298d785621e4be98caafa1687c5b486516
MD5 3c704deda34dc79e5dacbccea68b4bcd
SHA1 88fd0b7de4a51b6d4594f8820f6d2a5bd26d8531
SHA512 2495d5a0fd4b50bde0b2006b3f24795e758724c4f39751ec51283542b0bfa4f0ec9dd6e704b1b42210175fd7c2f3fac2af6ec078253a0ba0a59fc6bf3a1d0a7b
SSDEEP 192:LONf6AmwpcQmiUyhwH7siX5FbyhjkzEe+fJlRw/kU6:LONf6ipsgI7siX5F+JOOtU6
TLSH
T101120B35E8B86C7B4D93E565B04735135E685267DB886F50DEEC3B2C02EB59C530A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b693ab0-f548-4526-9845-12c463d0469b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7b693ab0-f548-4526-9845-12c463d0469b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9ca48af80e8acb261b00fb2b7a144f018e1e2aac03099dc886fd324c4fef1da5
MD5 d596d532f9155df757fa0204ed714f1d
SHA1 0bd577544d6099694e2559831e9f904e1413919d
SHA512 4f36d4d1093d18640c0e083565a140ec99428ae997bf9337f8a533068b257af68dd37174d0cd03097f263b6f316378c796ec4587fa732428dd426d03b5aeedb1
TLSH
T1C8411A5CA7ED1148B3B77F5A9BF6686E487BBD772E06845E10010D4F4A26B40C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download