60c9ffdc1a804823e93334d4b8c0373a4179e16dea890852aad22fdab8511b98

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_60c9ffdc1a804823e93334d4b8c0373a4179e16dea890852aad22fdab8511b98.html
Size 40KB
Sample260912-pg1s5sbe44
SHA256 60c9ffdc1a804823e93334d4b8c0373a4179e16dea890852aad22fdab8511b98
MD5 7eeb9637b936fc2b5deae2b7e11ca5e4
SHA1 8f63d176808fc82aaebc5f2c47d5f34f81c92312
SHA512 e52cd53050f1d3edd259b2d5265b5a5860df012a55c90e62c05ecf23ffc8d5697eb7c327103644f53b9f62394f4ad16eb0e58d19bf04492bcb49c625d0cf863b
SSDEEP 384:CJ5Ekw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8rbWJY2:03w8hW8VgJG8yJMwj2
TLSH
T151039464B8C221230137637D9BA79608FB74512B820653407EBC27EA1FF1D54D6AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3032	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338333710117182"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{B85DFEA3-CE4B-48DE-BB2E-542407D94C32}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3188 wrote to memory of 3176	3188	msedge.exe	88
PID 3188 wrote to memory of 3032	3188	msedge.exe	90
PID 3188 wrote to memory of 2588	3188	msedge.exe	91
PID 3188 wrote to memory of 2588	3188	msedge.exe	91
PID 3188 wrote to memory of 2588	3188	msedge.exe	91
PID 3188 wrote to memory of 212	3188	msedge.exe	92
PID 3188 wrote to memory of 212	3188	msedge.exe	92
PID 3188 wrote to memory of 3336	3188	msedge.exe	93
PID 3188 wrote to memory of 4852	3188	msedge.exe	94
PID 3188 wrote to memory of 3336	3188	msedge.exe	93
PID 3188 wrote to memory of 3336	3188	msedge.exe	93
PID 3188 wrote to memory of 4852	3188	msedge.exe	94
PID 3188 wrote to memory of 4852	3188	msedge.exe	94
PID 3188 wrote to memory of 3416	3188	msedge.exe	95
PID 3188 wrote to memory of 3680	3188	msedge.exe	96
PID 3188 wrote to memory of 3416	3188	msedge.exe	95
PID 3188 wrote to memory of 3416	3188	msedge.exe	95
PID 3188 wrote to memory of 3680	3188	msedge.exe	96
PID 3188 wrote to memory of 3680	3188	msedge.exe	96
PID 3188 wrote to memory of 4324	3188	msedge.exe	99
PID 3188 wrote to memory of 1696	3188	msedge.exe	100
PID 3188 wrote to memory of 4324	3188	msedge.exe	99
PID 3188 wrote to memory of 1696	3188	msedge.exe	100
PID 3188 wrote to memory of 2352	3188	msedge.exe	102
PID 3188 wrote to memory of 5088	3188	msedge.exe	108
PID 3188 wrote to memory of 3040	3188	msedge.exe	109
PID 3188 wrote to memory of 2968	3188	msedge.exe	110
PID 3188 wrote to memory of 3840	3188	msedge.exe	111
PID 3188 wrote to memory of 3840	3188	msedge.exe	111
PID 3188 wrote to memory of 1876	3188	msedge.exe	114
PID 3188 wrote to memory of 1876	3188	msedge.exe	114
PID 3188 wrote to memory of 4288	3188	msedge.exe	115
PID 3188 wrote to memory of 4288	3188	msedge.exe	115
PID 3188 wrote to memory of 548	3188	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_60c9ffdc1a804823e93334d4b8c0373a4179e16dea890852aad22fdab8511b98.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe35edc188,0x7ffe35edc194,0x7ffe35edc1a0
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,4496738133476860676,2714809937403429076,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,13706638475372791034,3484105259669362946,262144 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,2882598060675126197,10355723451005075888,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,9787983753569160661,7131697296578641860,2097152 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,8970553500842657949,4200508239891008360,2097152 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,3315218141326462054,9398377816596502900,2097152 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,6006846863396738298,11986756446285070072,2097152 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,4646528863265680430,4723121240755933385,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,16185303137131685786,6502685273695531771,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,11851576852717219808,1238425931530832088,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,11851576852717219808,1238425931530832088,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,10130157150023805407,7907395886050266489,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,2510418376770287558,3464798521813138039,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,5760641980465385673,17032637728461704552,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2876,i,9911511428955526716,16749685977892290295,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,16008063520571893732,14507612569987691582,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,13494042367448359239,11265021590260188850,524288 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5708,i,11671086983367307270,12894991954640351091,262144 --field-trial-handle=2280,i,5591666400609649575,11505936607710969913,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c3b4e835611be5595830fd838f47bae62b60d12fa3e43174672a8811c9430a59
MD5 1a5fb5a2e9666184a4db7d6a2bcaa98d
SHA1 037e767b0e64e7a21fbc769e07110325b23a71e5
SHA512 70b56578db4451a17411533890f53d18f943b75de2d513c21502c9455ee23777bca1691a5ab64db0b9bd73cf0acf08d19fbd98b4acd5b316f7049f07f323cbd3
TLSH
T1B0E026988DC8C3AFA244B647417C5B4C8280378F92CCAF8A1748C48CB5050A0A7E27A4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1071ea4ab63ff85cb93ab2336f30f08ee2f3bb51973e4f1adad1df1f5d2846a1
MD5 c30c2bb66ad7402635684d58a5797a74
SHA1 b532194ebfe942a4221f95c255b6c4a08c45527c
SHA512 f843502597b711d5dba8f961399b5bcf8f0d7f2f33c9cd88bcf7ea522a99df30d3d234b6bd753a1f404912d6d98da1f0835d8a114e3184fe44df5b32049c5c90
TLSH
T19741CE00DE907355F7E40675AEC41EC37AB69EAC51431F013EB8C1B9694F75B7140C54
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

925fdf2e-f20b-4bc3-a21d-aa5df40d85c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\925fdf2e-f20b-4bc3-a21d-aa5df40d85c4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e7eb6a80705a049d5b312e00365ff2599cd3356b578aa096ba5260484e13332d
MD5 931e0418a3a70443e8c9e0a98cc62730
SHA1 21f9eea36756962bbc5cb27c68a4f3a684c62d76
SHA512 ffd7d717e58af3a950676d4319b38ac968aff8dca1eddb61cd322410d8fa57571ad45616a2bcf9e03327339917feb87a3b13f851d9627b2d216fd868ee2da884
TLSH
T10E217CF7C3D586AE890156F05A28AE1BCE1D0A06421C3D1589E4EF1BD7E24B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5bfe223ea0021425d9cd4ec87212686d7f3a56b9ddd755e961f1d9135668093b
MD5 e0991c378c81ee9a124ac3170f5877a9
SHA1 819c3b6e39a0b689d2544758be9b2c258cc13377
SHA512 f49e75acc84a8af8259258851837c9a8ce93f2ca683fc3e1ed79add4ba5b4be2613a808cff91ca89fa2b12ba93b21ba067ceed06a6d50a00bfa941efa38f82e4
SSDEEP 192:sxZVRDW6/fPs5nIdpdOHW6+WNGYYBa1+pIgrJ:sxZVw6/fPs5oQHbGfYe9
TLSH
T1E912B7116E38657B8CCBE20DBB55BF53E6F95432A1D45E48EAFC861C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0ec8c00745b520056b8984c075e20958811c087fb2ce520e44af3a87a4d31ac2
MD5 3f41928d84180095057b682939d7c35f
SHA1 686f92bd262cfa2c72fe56db03cc1c794ba8f06e
SHA512 304f14afd530f3f809075bff853884fc293a10d12ab74666f47d526071e527c4332bb9bb0db604a8e8e9c08b3e0bef28540e50ea65c81eb3378f8664efaeaf5a
SSDEEP 192:sxZVRDW6/fPs+nIdpHOHW6+WNGYYBN1+pIg54J:sxZVw6/fPs+ouHbGf3eu
TLSH
T19B22C8156E38697B8CCBE20DBB55BF53E6F9543261905E44AAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8d80506ab73c5d8b93a7bdb154fd57aa41e4eede1d7b949d5f7994eb440676ae
MD5 4d9b70a2a594148c38c6bdc473ad475b
SHA1 95ece391f0485d671082474053e4b640aa8a5526
SHA512 6784934e8155f71b4a00dbe3ae4f861921eb531196aea41faafcc3f45a7a89ee3222fe266382e7f1df34ed31633e5ade2ff3779424c99297345805710822417c
SSDEEP 192:sxZVRDW6/fPs+nIdpdOHW6+WNGYYBL1+pIg54J:sxZVw6/fPs+oQHbGfxeu
TLSH
T1F722C8156E28697B8CCBE20DBB55BF53E6F9503261945E48EAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c6dad50385a63f4d7504010a2bca4987bb1972b2a1910a5b6cbd1a630f4f9b59
MD5 2afd84287fe901c359d6ca00b7533ee7
SHA1 2979e1d74ad52c040c7ff02102483215f639b091
SHA512 ec82d59dd2a48367610a751fd488d436e111c5b6786b0c4233a249d02d3daf7ceb3739c6b0510b2d0cb0e420d6712068f3a6a1b07a0998fc8323d89db61395a5
SSDEEP 192:sxZVRDW6/fPsunIdpdOHW6+WNGYYBa1+pIg5SJ:sxZVw6/fPsuoQHbGfYeE
TLSH
T18422C7116E38697B8CCBD20DBB55BF53D6F95432A1D45E48EAFC861C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a2e7737847ec87d0335985e84102608758bd88ee73a5b82e6407984a89e34e8c
MD5 05da7838528b8684ed964f48c754c5b3
SHA1 16e59214746258295ff3abaa495955d50531f924
SHA512 8f1a2b24e6b87272876bcaa240c722dc0108d8268373586bc853daa519fcab1e48cfca01656b2543d632d5dd046d7dcc7a8b2f7d4a3b4ada268f8d561ce821a5
SSDEEP 768:NmyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXiropW1x:NmyYR7jWv3NpBu1ja/CL8OX5q
TLSH
T11AC2D93B640DCB7E4FC01E9DDC5A6FDB6E9802C7A6548D4047FA944C02C77EAA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7e875009d98deb584f8f8408b6c7ae4fadb698662849630bc28da3893281d374
MD5 b7f67d9d3ff9bc78ef06866089978b86
SHA1 83f40f37b3b6134cd09eb7b9504490cbb207a82f
SHA512 fd7fd9edc0c0e67b29e068ad1ec4b3489f3b4aca0ab7d9912f946eb9d3f6afc894880131da7e521863af714d9233e5e11508ff3807c774829a1c0b1fa1922a27
SSDEEP 48:KglEZVnTHIbbcLq2EGqTba5iISuTK9K1oTxMDYBSqwyLdcRtfLPwbD2jISlwK9lU:Kg5T2KIUCyOgKv6MIIKJi8
TLSH
T1A691225270BB124039BD258C82759B1A41513273341CEABFBFBD04629E6FE444EFE9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1005B
SHA256 da2b5d0a994bdf75b4ca79c2b988d958bbdc6826f81374f5fc2cda7589dd03a6
MD5 d5c194094bd7c853d0ceab416abee306
SHA1 da416bb021be304243f386dbfafc8ff30f6f8f1d
SHA512 cccfa5d4d30a6583af56f424c9d65b7d92e7dbf2d05aa62d496e3e5a5b3ee869f0ec70946c2597379e5293dcc895bb0fedc11dc02356b59c913687275086fd12
TLSH
T151113390F3E62148BE89A951C21A670350A13F67150D58F6631D44F49F48C194FAFE65
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a187b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a187b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 090dbe194e10ceaa1ae825a7c1123c56dd1f972675ad02f7cc30bae07b420b9d
MD5 cab41435d0e2e82e1458fc3ef61b3e75
SHA1 7b751456ee0e2891932332c6c3d91e2b173cd941
SHA512 ce5bfbb540d2d8eb8777e5d1dd533562087b2eacf6bfa4d9307adeb5f808955781f61a8f3d33b7cac347564a35f1a8bc1442509b0380afe33c260a6d91324017
SSDEEP 384:jsNPURg4HuMOiMGDQX5+DtwO01gLJr3BGXb:jPHYSEkDmOfLh3BGXb
TLSH
T126423A36AC74AC374DA39281F54736139EB455A7E688AFC4D2EC6F1D01DE6EC230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 30b49ab8e4fc818d6ca47345985ee9964571d8df83a3cf50f85d3ce1b8d6ec0a
MD5 f6e3c3c3d8d5d7de756bc0e8636a6ef7
SHA1 371852a57c29caa6c22d7153b8901665a381ad9b
SHA512 6c30567b9c89a2735d0bf825e1f8f3a78739ba0456349cb68f1968314f83c2fb907170362b8c244c5cd84ac775c6edd80787b23e3362719d9f98cd30ea70be73
SSDEEP 384:OiFiZcIgEsNE8TUNTUlIlIg4HuMOiMGDQX5+DtwO01gLJrcBG7O6R2FeoroD:lFQD9wgUHYSEkDmOfLhcBG7TRYk
TLSH
T1E7A27D335CA4D83B9EFB9A85F94A31079EF450A3D5C9EBC0E2DC6F1D019A5D8130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 9708a1fbdb80e7507b5ec3c3d12c08ea93174b0a923b56381c53881f27834a8b
MD5 fe7507829d5c449b7b4b5ce921db202a
SHA1 cc75d76aee944b46f921a4f8abef42bc7a7e7dfc
SHA512 d4d51d9066af322a28e384d92aecdacaa9f9403ddf832ed9164afd7825a6070bd0f8330fed63e25b5318ba9d90e34627cc4c9c5be0b6e804cd863091d54e8198
SSDEEP 384:jsNPURg4HuMOiWGDQX5+DtwO01gLJr3BGXb:jPHYMEkDmOfLh3BGXb
TLSH
T1E0423A36A874AC374DA29281F54736139EB455A7E688AFC4D2EC6F1D01DE6EC230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ebf21781f5a0802d0969de26a2b86d4cced33dc1ad4aaa5c68551a365fc6e8c6
MD5 21c7671bfd3f0c6ff7d5434f5fa85107
SHA1 898cb0e616fc6c7382bef0acda2974aa03fcb3ef
SHA512 2b4a07ffc4c041552e38f45b5f25f9452b299f43973373f944ce2dfdd6c78d81d1942e1248e5980b8e32e8ab8e02a63ab34ba18dc39c9d576862464d7980622c
SSDEEP 384:vZcIWsNPUIg4HuMOiMGDQX5+DtwO01gLJr3BG7O6R2FeoroD:nWmHYSEkDmOfLh3BG7TRYk
TLSH
T14F827D316CB49C375DFBA185B48735179EF89063E5C8AFC0D5EC6F2E0199AA8230A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4beabab756e75937745c6dfad9b223ecafa81b75c7a6bc7df4d08abae80d42cd
MD5 4ee1989aaf6f288fe58d0ef18ae6c99e
SHA1 d5dbb0e9a0a23e858ac0b8ff0fae6431a95ed31a
SHA512 56f7cf7dbc57a24c46ab32b70223af680ae67c6fdf09121543e80281bc9bdc914c4562e3ca3fc513d1fb142e36c751e5fff4d66145a6004651a3801006cdc6a9
SSDEEP 192:EONk6nnHGQmiUyAsQYcX5hQDP1wO01KMcH7U6:EONk6nCAQNX5+DtwO01ybU6
TLSH
T1B602EA34BD687C7B8EF7AE45B48737176F95212BE5946FC0D6E81E1C00DB69C230A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7bc642b73bc30d524122ceaf22d1442d1f137c6426e04a2576f476c1fe2358c8
MD5 a22605c826e79e0cfc477f324d50dc87
SHA1 2a54b71c4e15cbb39ab476311004b4e6d7473ee2
SHA512 d53402bc89fab2ba168a7cd7a02fbece95e46b3fced32ec785ca382fccb60afcfb0fbe60e019cef841dfa5051984a0d51f833a752d9f29dfdae71bf1a9eacee8
SSDEEP 192:EON16nnHNQmiUy8sRYcX5hQDP1wO01g8SJrhg3H/5GU6:EON16nrSRNX5+DtwO01gLJr2BGU6
TLSH
T1C6120A35A9A4AC7B4EE3A585F0C731179EA45127E689BFC0D5DC2E1C01DFAAC230DC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32b54166-1073-4ade-a6fd-cbce71dd80cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\32b54166-1073-4ade-a6fd-cbce71dd80cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 53730f9c6ae2cb92226b074132b6da6311e180181e12200112d7a2760135bd88
MD5 814daeb7d17c68139a7ced9ae3bdeb86
SHA1 5438d9505efeab6814d8945166e48f32a9c38b11
SHA512 5667f0f31f1b57442683612f09502e3bff2d8b0138076bb90e17120b4204e34d031c6534b79bfa025718d520b1dfb639d6deb656cf33e74f85e05a51e41312d2
TLSH
T189411858A7FD1108B3B76F1AAFF6A86D887BBC772F06945E00010D4F0626A44C972737
MD5 SHA1 SHA512 TLSH

Submit Download