04f91153f038d87f2529349ed6c1bb15890ec85defa3bb72a2af851a9699746f

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 10:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_04f91153f038d87f2529349ed6c1bb15890ec85defa3bb72a2af851a9699746f.html
Size 6KB
Sample260912-mrp4aaxtc1
SHA256 04f91153f038d87f2529349ed6c1bb15890ec85defa3bb72a2af851a9699746f
MD5 9580f366ca59c663330cc0dbdc94e6a0
SHA1 c0cae79fe6cb13c7fbd15dc4d9a6fa73a0cbfab4
SHA512 c8af4dfdb58d26c86472c791fe02e4740e2040aa15fc19e17f800d99796667efd08228bbfbdf151a2bb213422499c78fb7516159982761f70b475556571866a1
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69f7yEcE8XECgUdDhQoKDejCPJu:zWLJlxebNf80WhtKDejCxu
TLSH
T161E1B51A9E4C853F4100059BF0A16A1CD89B447BD312E8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2340	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338198746128563"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{9C506D7B-FAB3-4BEC-BA72-CFAD6928E573}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 4912	2240	msedge.exe	84
PID 2240 wrote to memory of 2340	2240	msedge.exe	85
PID 2240 wrote to memory of 4036	2240	msedge.exe	86
PID 2240 wrote to memory of 1152	2240	msedge.exe	87
PID 2240 wrote to memory of 4036	2240	msedge.exe	86
PID 2240 wrote to memory of 1152	2240	msedge.exe	87
PID 2240 wrote to memory of 1152	2240	msedge.exe	87
PID 2240 wrote to memory of 3456	2240	msedge.exe	88
PID 2240 wrote to memory of 512	2240	msedge.exe	89
PID 2240 wrote to memory of 3456	2240	msedge.exe	88
PID 2240 wrote to memory of 3456	2240	msedge.exe	88
PID 2240 wrote to memory of 512	2240	msedge.exe	89
PID 2240 wrote to memory of 512	2240	msedge.exe	89
PID 2240 wrote to memory of 1612	2240	msedge.exe	91
PID 2240 wrote to memory of 1612	2240	msedge.exe	91
PID 2240 wrote to memory of 1612	2240	msedge.exe	91
PID 2240 wrote to memory of 4616	2240	msedge.exe	92
PID 2240 wrote to memory of 4616	2240	msedge.exe	92
PID 2240 wrote to memory of 4616	2240	msedge.exe	92
PID 2240 wrote to memory of 2084	2240	msedge.exe	97
PID 2240 wrote to memory of 3480	2240	msedge.exe	98
PID 2240 wrote to memory of 2084	2240	msedge.exe	97
PID 2240 wrote to memory of 3480	2240	msedge.exe	98
PID 2240 wrote to memory of 3812	2240	msedge.exe	100
PID 2240 wrote to memory of 3452	2240	msedge.exe	105
PID 2240 wrote to memory of 1484	2240	msedge.exe	106
PID 2240 wrote to memory of 4364	2240	msedge.exe	107
PID 2240 wrote to memory of 3272	2240	msedge.exe	108
PID 2240 wrote to memory of 3272	2240	msedge.exe	108
PID 2240 wrote to memory of 452	2240	msedge.exe	109
PID 2240 wrote to memory of 452	2240	msedge.exe	109
PID 2240 wrote to memory of 1180	2240	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_04f91153f038d87f2529349ed6c1bb15890ec85defa3bb72a2af851a9699746f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbc930c188,0x7ffbc930c194,0x7ffbc930c1a0
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,9166923427146836175,13452524327308113329,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,12579917022709102101,10939789634835551302,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,12368703193652726962,3245505040568131487,262144 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:2
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,14160044024952269065,7537430048877276832,2097152 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,108630275701709701,10010606596587284915,2097152 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,10590920810043520668,655879623208707159,2097152 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,13106323879827859345,223979979943973970,2097152 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:2
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,9032076598806922116,7312552501317012763,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7500602374888441722,5921312876213327967,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,16854757901560365358,515512543725039304,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,16854757901560365358,515512543725039304,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,10176027619252970057,1169903898897486005,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1004,i,15343512828262771703,3391057538291532502,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=768,i,10556843562308615803,16809671201887214104,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,7249471575701110701,17830144233083010204,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,3353931237213785388,17292582596802064695,524288 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,10845758314041407604,7817969753895429070,262144 --field-trial-handle=2952,i,15592527797459388263,8123119212861912541,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d7ebbe9806c20bfc6a44683bf03bee4a2b129c94cc80ef7b459a7e8f2c0df329
MD5 79ef48a57e4d9b61cb118c6993f6b489
SHA1 26288b7984445c772dd034024f7c0a2b0cca2d03
SHA512 5e9d1a5f7743f3d16b1c515787fdab12fe3f006d787904f175982e18d8e63cb9cd3f8af7feee53edc495228e01d0c4afa8fbdd748bbd84bbf27ab90cd0419296
TLSH
T1655185C467D8A278F79485B086D921B371F885BB3D875F0B00E4F9795A0EB2A5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592a62.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592a62.TMP
Size 2KB
SHA256 d9526c95c3bc735a790cf609eba4b0f15ba01bb1aa69c3e1639b9f4335bdac7d
MD5 fb92849f26fa90e24d5c46e84e2346f6
SHA1 e272ce28b7029b5eff9a39f9e990d6211066a01f
SHA512 26f5cb11e78dfb854706167467e06ea8453d32376a381b0d6228d71c20d10546e1f815cd65478722a95c2465e425ff687ce3b4edab29596144a5d6638546c96e
TLSH
T1BF5196C467D8A678F79484B086D921B371F885BB3C875F0B04E8F9795A0EB2B5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b2e4acc3f47d2da5f8b6f40f6460af28ad190c6e072a08e9a4fd6b8271b77935
MD5 44c9881bcef3654899a64686af0c8dde
SHA1 c52327230d4f8a48e2e25d031458f41330330fb7
SHA512 ac206767bc50ad2fad0c675726f5a4907d3e7944b42f3548f014a3c6683f6c7a39904c95a8d212b08f42328a086b4c36b347c3420f6c2b60bf4eca2b8e249ddd
TLSH
T125218FF3C3D5C66EC90156F05A24AE27CE2D0A56422C3C1589E4EF2FA3F24B5E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a02172ae016839e01c6b7c9eab985576caf0a8d1789de52e51c4b51d2040300b
MD5 9670cbba299128cdbe926b6f81926b7b
SHA1 e0eb92c0e1dcc936f161d0832c91439c2b9c1a46
SHA512 6ecbf221c332a418980bbe7b6d386652b561cab1ba1d55460e97b8704325a249dd5bbf0778eeec4cb57300ee5ee25bdf3fe252ea2d5e5401352fb6f1038b3484
SSDEEP 192:sxZbKRyWd/fCsR4IdpdTHW6+WNGYgU+pIgrJ:sxZ2Td/fCsRJ1HbGZ9
TLSH
T1BF12A812AE28A97B8CCBD20DBB15BF53D5FD5031A1951E48EAFCD61C05E6ACD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 312541d02b7523b354d501a040dfe4a3d6c0f6f3e414236246838eae67ac0db7
MD5 8efd53d7530a27f38f03a9e506f83f2d
SHA1 e09c46336d7d991e776cee63d48fcbf60b584a48
SHA512 05dc9bcc8b134c9f25b0e21cea0c0269fc9ec5067914827c3a55cc52f7272b35ec3335b4e4b656e1071de16ffa8ffd917f710aef25694262a5935f8c7b382d65
SSDEEP 192:sxZbKRyWd/fCsliIdpdTHW6+WNGYgh+pIg5NJ:sxZ2Td/fCslL1HbGmt
TLSH
T12B22C815AE28A97B8CCBE20DBB55BF53D5F9503251911E48E6FCD61C04E7BCD121740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d58ded7d611662a3642c1040ec96b1e7d20a5f84e7f0361f960b4ed44e2e5a0b
MD5 5de6f1bb3ada9cbfe825b6ad7b5942c3
SHA1 fad710b9318fea091a06022e90651f6ed2d5aea2
SHA512 e04af1cfdcab93903084cfda609fbb9558062d6645b4ac585dcfaeed36edfcc48561da364acbfd9d19e95eb343c1d7887de3b8201e7c7c2e24782ce57f6b440a
SSDEEP 192:sxZbKRyWd/fCsliIdpHTHW6+WNGYgj+pIg5NJ:sxZ2Td/fCslLzHbGct
TLSH
T16422D816AE28A97B8CCBE20DBB55BF13D6F9503251901E48EAFCD61C04E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6f38eb791ed7f0d729f1155b255156814240c664ab2dd8843d40e299c0059aca
MD5 718f89fe3852453faaffe99c881a2eba
SHA1 1b8b26ec049855bbac03c6907d0fa9d61b75557e
SHA512 a8009d58217ee6f23a84b7fe90d604737e2da7357cf9e4782b8d8042985688b67e62437f7228da474a2b807ca9386840262a1aa46ed5c70d2cb8f960407dd82c
SSDEEP 192:sxZbKRyWd/fCsW4IdpdTHW6+WNGYgU+pIg5vJ:sxZ2Td/fCsWJ1HbGZr
TLSH
T1DB22B716AE28A97B8CCAD30DBB55BF53D5FD5031A1911E48EAFC961C04E6ACD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8fcf0be81a8b07db339c1708469a0d9b9017ab59122fb69ae0b746a9bae2c57a
MD5 f68a2ea6b9901166b2c3865c53495b45
SHA1 cb1492d85e48e35063ab298c48d7b9725060bec3
SHA512 73f79439f8ca51c52a2776a45e347e033d2b62e027825089ca0184b51c7ccb46cf13da53944748556af1783cbe074b87582d4f04b364c8bae1e4741da485acdd
SSDEEP 768:sZichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz7roxIGd:sZichfPWvPZplu1jan+LKgzInd
TLSH
T1D8C2EA3B640CCB7E4FC05E9DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 15e504c536a4e41cfaab02260d1ba7087b663262c85660f53b1b33264af2aad6
MD5 d1481ec507df7ec28395d28c3dd07fc4
SHA1 f36498b852be03194bbcd25e4f4be8830b216080
SHA512 e136b5cba5c376e4ec369a908c52c0ca4e4af46e8280bd7b8eb9ecf311d3f09b644750a3191c8f1b23e9903f79f5a72cd5d05d914c76b5f5f65445ecf69f28c1
SSDEEP 96:KjeX0QeEkxVwFsfIxKn4f+x7WO9IkS60wKVa2BuKicyj:ceX0QeEk7wF0Ia4f+tWO9IkSPUVj
TLSH
T15E913E5431BB0601387D6568D172876A42823AF3305CE62B7FBC41E1AE6FE041EFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c4cd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c4cd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f1de781102adfaecc56f67e0e09c100856bb8efa6cefe34ad5eb201705a98f96
MD5 839f0c2d50c11aaae521306e8c9a7d2a
SHA1 9b9429fc3ab4fe784f956fda93dc8a17544db8f8
SHA512 9e83bbe92c4a2817620c21456fb31b57dbf907b69314724592d5e45b445051a01595fb00efb92da67be201f0d407dd4db23be509eb46f3ad6e8cb0df6236d020
SSDEEP 384:LiFiZcINqsNX8TUNTUlIlj0O2w5V9WBGYX5EOv8bOXGO7O6R2FeoCYo6:mFQ0ywglRJdQGYuO2eGO7TR0p
TLSH
T166A27D738CB4D87FADEB9A55F54A36038EF84067CAC5AB50E7DD6F1D009A598130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 289c1a79da85fcd410768802526dc3bd48e40dc0438bc50dd0ab9c11a94018bb
MD5 8cbc7a0dbc9cbe3d8dc8e676df03f702
SHA1 0d7fb0ff3871ed609adf3020cdbb71ff44b6a079
SHA512 d1f6b1fd939cb61613af77abb6c0f171e9f11778f13e9c8bf1f48640bbeebb4d5a4fe16426b23b0986af405862e4bf7fa2c2135158f4b3dbd7953ac5941db21f
SSDEEP 192:LJONS6DphmqQmiUyYAq8wGYX59ezXCHjzor4Rukk7IgU6:lONS619oRwGYX5EOv8RJU6
TLSH
T1DA02D835E8787CBB4EE3AE45B54B26139FD8202BAA956F54D6EC1E1C00D764C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e273bcb35971bdecdc6816c850bdc24231c27e1c07d0670912a2ea3eeca2f51d
MD5 8aa7a0aab1f7ef971c698600fab7a52b
SHA1 14cebba886b5625afa16e09d703a4c37275bffa6
SHA512 4e697e2c8c69ce941df96cdfa2444b960e305a5d95b7a7f0a20cab49f4bd1f051e2fc7dd9d027221ec87c1599a2d93377a9c202f789e13259587e0dc00d37620
SSDEEP 384:DZcIwsNNQ0O2w5/9WBGYX5EOv8bOXqO7O6R2FeoCYo6:bw/RJvQGYuO2eqO7TR0p
TLSH
T174829E729CB4AC7B18EB9151F54A36039FFC90279BC96F40D6ED6F1D00DA998130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e7d712858fad897d520006f6946b63ff3107e5785d3bfd93a9608f33685e1f86
MD5 f8020619d8ef4b39e2768c2764053443
SHA1 bf7ae7e094c2f4d5bca8f5f2df2134e25c3aad14
SHA512 259c6b138f23b6b2b72d6ee45f208214150ac169f195dd3c7d2c8676d412d13c5273dd90cc7348db6dbbf7e68f9403fc68116f0ae4137fb8b0c3ace3a890edb0
SSDEEP 384:DZcIwsNNj0O2w5V9WBGYX5EOv8bOXqO7O6R2FeoCYo6:bwyRJdQGYuO2eqO7TR0p
TLSH
T1FF829E729874AC7B18EBA151F54A35039FFC80279BC96F40D6ED6F2D00DA998130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 44643f8715ecdd04d9221f03a3933ade43233e94101ecf45e648e7a9780d3974
MD5 2b89007ea24cafb4ae217a93da53e5bc
SHA1 3767ff4d80780112bb6feb2d97bf6130700c30ad
SHA512 02ba266c36f50c86c561c0bef309f5c7f2845e6adc20ff233445a506596ca9d5ea1c42125acb7f548ad33fadd58c0bfa5eb944f225cdc040c202d267cb60f03b
SSDEEP 192:LJONI6DphoqQmiUyDACwGYX59ezXCHjzor4RyOX+e4kIIDr/5NiU6:lONI61X1CwGYX5EOv8bOXjOU6
TLSH
T100121836E8B8BC6B1DD3A550B44B35139FA8512BEB896F50D6EC2F1C01EF59C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed8b3b62-3af9-4b1c-a52a-6f2a24f79170.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ed8b3b62-3af9-4b1c-a52a-6f2a24f79170.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 80ec30bbc444eb507a23055960382d9498a7d22193d23ddc9439a8d71bbaee34
MD5 84d5f5b381275b45f60662f030fec714
SHA1 7b3f27c10ea6fbc993b582d87ee0380841c943a4
SHA512 7288d0802bb35250abf126b4c27f2057ef2ca8807cb084a0412f0dcfa4a041aed6028c955d3826a638ff285604184e2ca6b4310cec66ea9082ca8506056e27ac
TLSH
T183410B58A6E92148F3B7BE56AFF2A86D447AB8772E0A949D00110D4F0A76B40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download