0880a67199f1e306596f89c39a6ee5ab667801752ae347d349a4546d34df5eb2

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0880a67199f1e306596f89c39a6ee5ab667801752ae347d349a4546d34df5eb2.html
Size 119KB
Sample260912-2yhecabd53
SHA256 0880a67199f1e306596f89c39a6ee5ab667801752ae347d349a4546d34df5eb2
MD5 84faca7ee1b397e85e6231aca8bc52a3
SHA1 8811fc04ef2eac1d2b896981cfd0688dc5ed026e
SHA512 b58bad27de7b060b9c7569f1f710d21ac0d7a74d222575f028c101e0609b114b4b9c3a341307667e0944a425ca01abb0053c9cc94ebf44cd93bcbab67004b4de
SSDEEP 1536:XPxwYn+hdH+7ReK82snwOl6QSTtM+oExEP64Fx0gbEaoKbEao7KF2GBhrjL9WrpS:/eyQr+KPl30gdoKdoeF22hrjL0rJ6
TLSH
T119C3A4C711608CFAAF604DA2865F48573D2C1837B857D1F9E3FD8F9B2B41DAE0246269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
332	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338382875446674"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{EFF1C1D4-2BB6-4A1F-96DC-3550D221151C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 4332	4620	msedge.exe	86
PID 4620 wrote to memory of 3800	4620	msedge.exe	89
PID 4620 wrote to memory of 332	4620	msedge.exe	90
PID 4620 wrote to memory of 3216	4620	msedge.exe	91
PID 4620 wrote to memory of 3800	4620	msedge.exe	89
PID 4620 wrote to memory of 3800	4620	msedge.exe	89
PID 4620 wrote to memory of 3216	4620	msedge.exe	91
PID 4620 wrote to memory of 4344	4620	msedge.exe	92
PID 4620 wrote to memory of 2832	4620	msedge.exe	93
PID 4620 wrote to memory of 4344	4620	msedge.exe	92
PID 4620 wrote to memory of 4344	4620	msedge.exe	92
PID 4620 wrote to memory of 2832	4620	msedge.exe	93
PID 4620 wrote to memory of 2832	4620	msedge.exe	93
PID 4620 wrote to memory of 1476	4620	msedge.exe	94
PID 4620 wrote to memory of 1476	4620	msedge.exe	94
PID 4620 wrote to memory of 1476	4620	msedge.exe	94
PID 4620 wrote to memory of 592	4620	msedge.exe	95
PID 4620 wrote to memory of 592	4620	msedge.exe	95
PID 4620 wrote to memory of 592	4620	msedge.exe	95
PID 4620 wrote to memory of 3540	4620	msedge.exe	97
PID 4620 wrote to memory of 3540	4620	msedge.exe	97
PID 4620 wrote to memory of 3344	4620	msedge.exe	98
PID 4620 wrote to memory of 3344	4620	msedge.exe	98
PID 4620 wrote to memory of 2212	4620	msedge.exe	100
PID 4620 wrote to memory of 1708	4620	msedge.exe	105
PID 4620 wrote to memory of 620	4620	msedge.exe	106
PID 4620 wrote to memory of 768	4620	msedge.exe	107
PID 4620 wrote to memory of 3220	4620	msedge.exe	108
PID 4620 wrote to memory of 3220	4620	msedge.exe	108
PID 4620 wrote to memory of 4480	4620	msedge.exe	109
PID 4620 wrote to memory of 4480	4620	msedge.exe	109
PID 4620 wrote to memory of 1516	4620	msedge.exe	110
PID 4620 wrote to memory of 1516	4620	msedge.exe	110
PID 4620 wrote to memory of 5020	4620	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0880a67199f1e306596f89c39a6ee5ab667801752ae347d349a4546d34df5eb2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2a8,0x7fffb3dfc188,0x7fffb3dfc194,0x7fffb3dfc1a0
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,12264369776923381835,4086507217883567115,262144 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,6452327775356878233,731269230608354549,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:3
  2⤵
  - System Time Discovery
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,5288387599879865041,12368744355090666516,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,2784028020156348351,13280809349476082748,2097152 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,6124456243871107559,15854634215831073603,2097152 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,16146193658284677185,10657714181323874451,2097152 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4144,i,9930193809792060958,15019535706172270720,2097152 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:2
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,3297325837114924062,5029243762363081313,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,1525468662332206841,11728017812180064917,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,14035458272207193790,766934723273810794,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,14035458272207193790,766934723273810794,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,15166243799920694670,8611984627851456908,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,2240568075262483609,10641766187327077725,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17320661691022786973,10195553632799605356,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,5625974761957626057,5065437917775674719,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,7701519494592019871,7712124336253016435,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,4353869222088943408,10519368448492290324,524288 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=776 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,13553921680989564713,11588206883454271703,262144 --field-trial-handle=2188,i,18345049326876733751,4480856666928237016,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 168a51a0f5b6aecd6eb8a202245ce9430483f6249a3cdba2f8ee00d91f6d2c21
MD5 9cc44f1ab15e1296a37977382147ef7e
SHA1 258180df697f1b7527b9c5f02ab9a026d07e0254
SHA512 ed70ae99f23d556257820deaf9e0eb7a517c240cceee85bfb232f2313dfaf11c4c430638e2800a0be12a314625490fd5ae6ba66119800a72d5386ad97cc25528
TLSH
T18CE0268406CAC26FAA6064874678678C8A883B4F92EC6A0A2744CCEC7001A44E782790
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 822d28aeb8dd0365ce31b77af0b01ca528b575dab81a76750d98813c01dea330
MD5 7629725f4bd0b5578d567a03199f7db7
SHA1 ddcb3870de7f77fdf4cdc06375a30a8df3579f2e
SHA512 fb846597100c0606f9a5f31dd9117d651200d93afe54625ed269d55711ee5027b0ea1e16d35e9ac9a9c8aa91d8ef75095406d2d8b029506de9afff76a3a3505e
TLSH
T19F51DAB9B3D50491FB5C487188DD1263FEF645807D931D2218A7D8B89CB533DD0A6E48
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 746f51cc6d1e71610c4e2ce2cedeb0361896f4f80c00d2a173f3c2587cd9b2f2
MD5 579dc7a963cd65fb0aabe09de7f2e696
SHA1 8935112da91be37b98c5d1edd97dbf484ac89ff9
SHA512 428d1ed8cc1a535a0d1c04c031102048d938343081ab6139e80c6f862104aa1f342f43f2cd929e751404778e549a4fc4b2a49e7d53b6676346550b02859b0c25
TLSH
T17E416DB7C3D4867E891156F45B286E16CE2D0A1A422C3C6689E4AF1F63F24B0E24169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ff1e20901623d920e2d7bdeb67c968c17be1602f9dc4d711eaeeb12c530799e5
MD5 ccfd95afdd34e1de67a0d7ef3d3a6f7c
SHA1 65dacd226e8b7f5eeab92cbe69e4d9fe4d24015c
SHA512 5fbbd62314fc96beb94755f2e92c0ea7602c042016540b152798656d79e22a65de9341dfe646e207ec87a38d4a6523c1a24428e66773f52441cb18e52d0ad928
SSDEEP 192:sxZERDWz/fSs3MPLfqIdpdJHW6+WNGYaQGQQIgrJ:sxZEcz/fSs3+LfjbHbGXl9
TLSH
T17812B855AE28A57B8CCBD21DFB25BF53D6F9503261D41E88EAFC861C04E6ACD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0c4eefe8747c2e86605519953b45d2662ce69bc85c872b412b3529e96d0dc59a
MD5 d593c8cfebe2cfdb4e69c87ad75f82e1
SHA1 a37c813c6e503a6120ffc667938f826e1b1f7941
SHA512 f10eab89e3df25f02ed03ccfdc6a1c21cb88e0fe57fa36cc8a07cc7287c508a40c48a66445d1fa95cfa3599e602b6d0e02a5b952a04576d9cb1e2c8d1252ebe5
SSDEEP 192:sxZERDWz/fSsfcPLfqIdpHJHW6+WNGYapGQQIg5DJ:sxZEcz/fSsfuLfjpHbGkl3
TLSH
T1C722B755AE28697B8CCBE21DFA15BF53E6F9503261D01F88AAFC861C05E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bad1a45d3a682081b8311504a4a1e14715fda350cd398170dc6d7c8694b2684b
MD5 d4c015e0e331c17afd3fefa0b7ca6c3b
SHA1 f6179e330b065e877f90d31cba95a75b34729d61
SHA512 b1ba21b7558daec0c43c2406491831aa228d5d52faf1796b32f5d8aa5f8b9df756c4d3233d876626adda93176ce659836386ef772e2a8b8be5686184cf695241
SSDEEP 192:sxZERDWz/fSsfcPLfqIdpdJHW6+WNGYaVGQQIg5DJ:sxZEcz/fSsfuLfjbHbGwl3
TLSH
T1FA22B755AE28697B8CCBE21DFB15BF43E6F9503261D41E88AAFC861C05E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2a85613c35d437ee2b8a36b8967711f1268c1334e085ab8920087ac304cc9f34
MD5 491c69f72bf4a4b5a79042bb934ddc88
SHA1 a9e6c9ab1441ef496c66ad10d0298d0a78f94eda
SHA512 c16bcf8b982130ed8706b9c0fcc647553dd0f47838e93f1f53bbdcb5383796585a096ced06d244533417e222b5b1fcab0185b4a36a072bdae38bc6219a789157
SSDEEP 192:sxZERDWz/fSsfMPLfqIdpdJHW6+WNGYaQGQQIg5ZJ:sxZEcz/fSsf+LfjbHbGXlR
TLSH
T1A922C815AE28A57B8CCBD21DFB25BF43D6F9503261D41E88AAFC961C04E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f10b5f197393cc25f38d72cc8d6032a7870818371f650ab6a4b775bab5af9304
MD5 7bb5eabc1a0cdd95eedd4c19945e21f8
SHA1 1c550d9671c92d4053c25a6105549b0798364a72
SHA512 dd8f22dbf0147e758286b5aeb68f190f57ad9859fcda4748e9d5fd8122964366e60057b2ac19c949267902925f8d4878b2343b71013db30a1fbb3b3210a725ce
SSDEEP 768:fUyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3groeZZu:fUyQRbrWvvlpZu1jaXKLf33reZZu
TLSH
T12BC2EA2B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 01b60fb6ca0b469ba1905450d96f35591c7797d40e4aa1cd13419b54176bf670
MD5 8722e8d2c8c71ca842641f55a48c7c7c
SHA1 fe10d0a9205465a706e5ae1479df73a02181c5bd
SHA512 3caa77d70b2711fc5afda029b715f5aed9ab1d395503af8940d448a2a5121883d4c824bed04bc0d1a9f0504db787ff38b06b3c98276d8930b14ccfad009845e0
SSDEEP 48:K06lI064I5bkjUISs5K9Q1K5xipYb8IKyL8rKWkmKzb6ZCISOzK9q1IzxsjYhyHI:KA9OKmYiO7WKwc3DaKA4yU
TLSH
T12E911E4475BB4254397D695D80A1976A124231A3701CEBFBBFBC50B2AE6FE080DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 273ed4a6eebdefb30dc5f96b1618ca4f30a9c19c8f7b2f779b9c46291bc5fcad
MD5 00200da87975259cbcea231fa8647b4b
SHA1 28b33aad533b7b658b0ddd103a62ba0cbadd4f50
SHA512 d4165b8ae41e661d14408c1c3797cf51f984226466d7950585b03135f3858912d9ef83d4074133a2b80eb9b01780200a30dc2cda0ff9cc807b2a490964c49058
SSDEEP 384:3qZcIUlsNRZYVoF2dup5u8i0a/n79yBkwc0aGUoY:YKvyk00EBkuaGUr
TLSH
T1A6928D7658B4AC7B6CE2A052F5473A039EBC8167D7886F80D9DCA71E05EB5E80307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a3faf636009e13e298c5187441df957ad8701e28384b299f162f21def463168d
MD5 e85f98915c0ff55e46eb2fa16505482d
SHA1 81b7fdfcabbf8b8061e8731a9fc2bdb102f8fbc8
SHA512 576a87164c026ae90907e4f7ffc14c02f73cba10e2ed71e2a3ac6ae029ac6bfd63137b9b2fefa446a0af557a1acf02088548c4caf4db6b3a27377e3033499ca4
SSDEEP 384:OZcIDsNRZJVoe2dup5u8i0a/nh9yBkwc0aGUoY:sDbyk0KEBkuaGUr
TLSH
T13E828D7558B4AC7A6CF2A051F5473A039EBC8067D78C6F80D9DCA71E06DB6E81307A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7117322fed6aa58207dcf4fbcaa780ca5b0be23e92097ce8003662ee5279ec51
MD5 7ee635fab09442c32df3dd166b6a09fe
SHA1 932d47feae72eb8557aae107388b9a86729c1961
SHA512 799843b37c7867192f89ce6b838fcf770be1ab32f38c1a8fd18a35aee7e4d2de1d1ee67d8cacfd918b97799a02f10ab5b316864789bbc2d0306fe65503493461
SSDEEP 192:SONV46iDTQmiUydgIq5u88P0PC/WKRuZt/TyU6:SONV46cVIq5u8i0a/nI9yU6
TLSH
T17E122935A878BC7B6DD2A861F48736139EA8416BEB887F80D9DC261C02EF1DC5707513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4ccb72f6be4c60b39b905a116ab3444145185a632f4c82614b19e10993aecddf
MD5 9b1c265799d50ada069e0fa62bb16832
SHA1 ff81f90fb7edf3c7b5673dedf78c2dfdc5557a3b
SHA512 176118b95449fcb3e6f21d5f86ba3718b23cdc9dcbbb259cd2c13b458c3b06b5054841cfc4b8811fa18979f3257540f64f3cc02955ed1dff7f387b527746477c
SSDEEP 384:4ZcIDsNRZYVoF2dup5u8i0a/nh9yBkwc0aGUoY:GDvyk0KEBkuaGUr
TLSH
T105828D7558B4AC7A6CF2A051F5473A039EBC806BD78C6F80D9DCA71E05DB6E81307A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3b0e2c7f9f23730635c1e84edab4c4b78e6ac19089dccda49ce164e9cfd37608
MD5 b17e33188fffdaa9a96948c708361d8b
SHA1 6f6eafbd6b7c98fbb0414b9c0d624e91de033429
SHA512 d69f5c693039fff89d7634a7cf7909fb0b8a82bf3620c24390f93287a8d8666b107a7110cbc33a99f6536f239243884ef62965d10d3d403eb1e198f9de322ef9
SSDEEP 192:SONh6iDCQmiUy2gHq5u88P0PCiSq2IIIU6:SONh6/wHq5u8i0ayKIU6
TLSH
T12C02F838AC787CBB9EE39D15B48B7B179FA4016FE6941F84D9E8162C01D768C1303523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

846a7b57-a492-4ae6-8bc6-7b58ec27e1db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\846a7b57-a492-4ae6-8bc6-7b58ec27e1db.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ed652cf772c3557fd761dbdf4a98d060d1d8f7dddfa735a69f6d21e1b02dd88b
MD5 012427161a0759db50ad57ca8eae868e
SHA1 c0f07ca2df830ea45cf58bd7dc0e8830afd587e1
SHA512 7eff4900b4e1f4bdc4ced0777bd582aa9e0144dc3faaad913f4cfd2769ada84ee5169cd64283e26e7e9a6180ec8858a1994bf64db220e46193bcf588ce8a7e93
TLSH
T1BE412658AAFD1104B3B77F1A9BF6A86D887B79772E56946D00110D4E0A23F40CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download