10c8bc73773f9c9ec34ac917651e55ea0b9a3d6ddd5c248e02438bac060bfd74

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_10c8bc73773f9c9ec34ac917651e55ea0b9a3d6ddd5c248e02438bac060bfd74.html
Size 114KB
Sample260912-sjc2msde98
SHA256 10c8bc73773f9c9ec34ac917651e55ea0b9a3d6ddd5c248e02438bac060bfd74
MD5 5a963c648fc1bfcddc85e87b531e9808
SHA1 167cd7a70c24aa307132d5f2ae1a37e358053a37
SHA512 eb070f84a2d14a3e833ebdb0e74dd233aa914e9856601c6f6b06ebdadb00cb3f02fe60b91a89df4127ec9b78818246b0f62515147f5ba058f47c4dc67c702867
SSDEEP 1536:NmxaYn+hqDsHROFKq0owq9zgu7Q37TttNoQxwLW2yF4nbEaoxbEao6Rsk:8kqQ33NiLW2Y4ndoxdotk
TLSH
T19FB3C58712204CF5EFA54DB3459B486B3C2C1437AC4390B9E3FD8F972BA6D6E034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3168	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338348195701010"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{7F0621C5-B15B-4399-B176-42B5AD77BA36}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1156 wrote to memory of 2764	1156	msedge.exe	88
PID 1156 wrote to memory of 4044	1156	msedge.exe	89
PID 1156 wrote to memory of 3168	1156	msedge.exe	90
PID 1156 wrote to memory of 4044	1156	msedge.exe	89
PID 1156 wrote to memory of 4044	1156	msedge.exe	89
PID 1156 wrote to memory of 3448	1156	msedge.exe	91
PID 1156 wrote to memory of 3448	1156	msedge.exe	91
PID 1156 wrote to memory of 540	1156	msedge.exe	93
PID 1156 wrote to memory of 3032	1156	msedge.exe	94
PID 1156 wrote to memory of 540	1156	msedge.exe	93
PID 1156 wrote to memory of 540	1156	msedge.exe	93
PID 1156 wrote to memory of 3032	1156	msedge.exe	94
PID 1156 wrote to memory of 3032	1156	msedge.exe	94
PID 1156 wrote to memory of 2648	1156	msedge.exe	95
PID 1156 wrote to memory of 2648	1156	msedge.exe	95
PID 1156 wrote to memory of 2648	1156	msedge.exe	95
PID 1156 wrote to memory of 4184	1156	msedge.exe	96
PID 1156 wrote to memory of 4184	1156	msedge.exe	96
PID 1156 wrote to memory of 4184	1156	msedge.exe	96
PID 1156 wrote to memory of 3352	1156	msedge.exe	100
PID 1156 wrote to memory of 2732	1156	msedge.exe	99
PID 1156 wrote to memory of 3352	1156	msedge.exe	100
PID 1156 wrote to memory of 2732	1156	msedge.exe	99
PID 1156 wrote to memory of 2104	1156	msedge.exe	102
PID 1156 wrote to memory of 4344	1156	msedge.exe	107
PID 1156 wrote to memory of 2992	1156	msedge.exe	108
PID 1156 wrote to memory of 4288	1156	msedge.exe	109
PID 1156 wrote to memory of 4800	1156	msedge.exe	110
PID 1156 wrote to memory of 4800	1156	msedge.exe	110
PID 1156 wrote to memory of 4980	1156	msedge.exe	111
PID 1156 wrote to memory of 4980	1156	msedge.exe	111
PID 1156 wrote to memory of 1792	1156	msedge.exe	112
PID 1156 wrote to memory of 1792	1156	msedge.exe	112
PID 1156 wrote to memory of 4132	1156	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_10c8bc73773f9c9ec34ac917651e55ea0b9a3d6ddd5c248e02438bac060bfd74.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe9b9ec188,0x7ffe9b9ec194,0x7ffe9b9ec1a0
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,14367322202014825146,279397967901182934,262144 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,3939030218845685826,16466912189213110303,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,9555379706963568455,18066497790940195365,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,4090459035307024303,3031660070439168457,2097152 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10498097790773210631,13669240755092214282,2097152 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,13550741799404407090,10200666633505204742,2097152 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,18437292809774075659,18174763090268187844,2097152 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,3344414225748679865,18051012731590494100,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,8872608245839100155,8155707316519077345,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,15942365062307069677,13270204313306404484,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,15942365062307069677,13270204313306404484,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,3746321211827350070,12823709411911075944,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,8687759711490233024,8468445771137924276,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,4323924507672821219,2220323781865430141,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,4966038130832397476,14382113248586620255,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,4796660344675987452,11379849207539486806,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,9720835385615370524,15097295479320697563,524288 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5244,i,9924322769609104952,10339749275211776132,262144 --field-trial-handle=2368,i,4645908402430787792,2772100067725317604,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4b9b0d012702b02606de742b07598893e38600b6edb5871c4f889f79f57e9212
MD5 9396f3e9f089a8fdce3214c5f23e4b33
SHA1 524e66d72fb2731c587e947bbd4bcf87f8be1fd5
SHA512 6167a36b922137d6f4d505d1349040007925bb93833b15773c753f904b8bda2d6b2a925967126dc342aabc5bcad16dcd35d11cb3d7dab265f5870546d7ca1f5d
TLSH
T1D2E026880AC8C2AEA74CA647416ACB0CC280375F93CCFB8B17418889B005072A3C2F90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 813c0fd9a0faef657336cfe85e9110cc80cec7f727790e7e901ff7c1f94440aa
MD5 5145e054f1bba813d301ed30b2baad8d
SHA1 715da23002128f2d463d3cdc2a67830528fca46b
SHA512 7d21731bf75506052130d57d775d566e7cd3b5568af7f300f057b3340226fdc0a40e36bfd44fade87e0b92244225aaceb5da16d71aca28ba192082fc337c7123
TLSH
T1D7516FBA454A48D0FF5850F0DEE985873EB8A97D55C3DE0A37B0DCB6A9027797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5927c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5927c2.TMP
Size 2KB
SHA256 db241554fbf4bec784998f4cb469000fe410cfbd432a0985f775caa64b8bfa83
MD5 c17aee733227ea6aa51c874208a0c1d4
SHA1 ad932bf5849e6f50ee81269c1c47c2e5651a4412
SHA512 91fb844cdaaa7cf3e6f2f6fa79582693d5ca54e3d8403d507c9c9e9554d4c6479d88ad3c9083fb5587057d712d3223b669b96c57fd72d744e110fc69f43cfb03
TLSH
T137514FBA454A48D0FF5850F0DEE985873DB8A97D55C3DE0A37B4DCB6A9427797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 61fa1259a66f006c2ddc6228b3eb052b807d324d9d99675b3c378a3e484bbe79
MD5 669e1a3d9593c80c272b05cb42801ba6
SHA1 109071a3503ae6936f9f9cb8991411dcebea5891
SHA512 8d3c002286d8f753108c272dcdcd3d2c3a4fe1d7a0949882e92428bc745857d6ec3b22fac8b52f3a4afd9c4fb9a0f5d3da1b5524a0003af44a2a0b618da036c2
TLSH
T170418DB7C3D9877E890196F09B246E1BCE2D0A56432C3C16C9E4AF2F67E24B0D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e4ec94898350f685bcf33bf8366c55837b32f3dc8bc20607ac0c2f161b2d32cf
MD5 81837761d9092501ce886472a773f2e9
SHA1 2353ae8224828b7b4feac2d817c7180e25193f6f
SHA512 12eef2b4aa2479aba3e30fdb5f9ce33a9715ee66b4effb7356309c568d6192b502afbdaeb94f9cde00f1c588d878e7f022cf080bcda8060ef9d22becef572af0
SSDEEP 192:sxZrRXWl/fKs9CGIdpdUHW6+WNGYrbi9IgrJ:sxZrUl/fKsUnmHbGx9
TLSH
T10D12B7566F28A57B8CCBD20DBB15BF53D6F9503261941E48FAFC962C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b3da8469082851a50293e6cf8eafeb01874154babd2001880242053b82b456bd
MD5 232dc1926804a9085cfdda8c9a9cf1a5
SHA1 7274b8b4bf8a4d1208b8535745ed3a31e58f7345
SHA512 19745cbe3d164a2957bdebd5939a5d2dc52c052e4f920f8fa8da37d2318c4614427e9316a4f12356addfc87150301c181c827dcbea728f1377d88192896ac612
SSDEEP 192:sxZrRXWl/fKszCGIdpdUHW6+WNGYrbi9Ig5grJ:sxZrUl/fKsenmHbGxU
TLSH
T18022A6566F28A97B8CCBD20DBB15BF53D6FD503261941E48EAFC962C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6b38f66e08d52516d990f32bcd38622fadd1fd08450852e362cf7f2df3f363a6
MD5 aac578ab984a5600782728b94aa8c5fd
SHA1 098339c7c944af457cfae74e0946f75cde4639e6
SHA512 79fca3e153cda6e51c60924e5477b6abeaac5a958d8def11faadbecf0f1390c431f37ec1dec9ce9da97686fd1be70f67bec9e892cb2eb180dd61278570523025
SSDEEP 192:sxZrRXWl/fKszfGIdpdUHW6+WNGYrui9Ig5gJJ:sxZrUl/fKsjnmHbG6+
TLSH
T1AB22A8566E28A97B8CCBD20DBB15BF53D6FD503261951E44BAFCC62C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 71594f3f7273063d28ac2c136d4419692ba109bf2491293e7fc9557508deed3e
MD5 43f0becf8abe4899d96e9aca81b2592e
SHA1 1287eb2d372375d259b9ceb61608f6f7c5410e18
SHA512 9f2e783c1d342e636713ca0c623a6e9b39047e2baeb4a36e94ff4f7eca8e6e5784d3c107eef62eff62faf7a4abd98f744b35cf20a495e8803e5b93f525c57d53
SSDEEP 192:sxZrRXWl/fKszfGIdpHUHW6+WNGYrNi9Ig5gJJ:sxZrUl/fKsjn0HbG7+
TLSH
T15022A8566E28A97B8CCBE20DBB15BF53D6FD503261951E44BAFCC62C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fa7715c9390405db41741a29a7fc9d30e8d60526261318dce49571636b3cc525
MD5 9d45c49174b226f9d389b84802db5539
SHA1 51e01db5e33b20d04f78f590bd4e6fe995ae4ee1
SHA512 f3ee93cd63ec5d21bd6f232f0d4ca6e93220d898580afb6f9162fbbc33ba0b2c63342bae4f87b781f8be960f0c8622b54919c24e3c87b15073dd82586525baa6
SSDEEP 768:Wfy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbNroR8s:Wfy4J/DWvbtBhu1jajiLm0bm+s
TLSH
T1DFC2FA3F684CCA7E4FC01A9DED5E6F9B3E9802C796948D4047FA994C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9f2d0d0b76a78396ab868f9d39d35804fd0f2240ecb63598f574c2c45f687934
MD5 5037beb5baa78db82a851ffaa443fdb7
SHA1 ce2d5bfb695c7a32325c33c13b080c69f4233c2f
SHA512 bc2b710a9b1075b642eb160339bf543c64608266085e52cadce782dddd33088ba284aa1617a02adef1f825c80004867f6245725ab2ccab3f168a8ddd36060494
SSDEEP 192:uzHsNr2QcaHylDZFjQmiU16h/4HX58gZDOKaFbAWWa/3UPL/DbUt:csNr2eHqZ7OwHX58EDOJbAWWa/mbUt
TLSH
T1CB421931A978AC374EE7A185F54736039FB84067E6843FD4C2EC2B2C00DA6AC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 81e3560910a48e340476dbf60afaf0469213803bda767055289accc2c5995ee6
MD5 a967634aece0683cc747c3ab54ad2fa6
SHA1 0b6b41011cb896e164d4440a75b18aa4492d08d7
SHA512 d28afd11f3393efe8463d92e1b1c0ab930276afa5a56709ff10e77fda83cd2307c84fbf6588c9182af8bc7f2739f6ffff59ca7e784c309ddc092456b33bbbb90
SSDEEP 192:uzHsNr2QcaHylDZFkQmiU16h/4HX58gZDOKaFbAWWa/3UPL/DbU8:csNr2eHqZKOwHX58EDOJbAWWa/mbU8
TLSH
T151421931A978AC374EE7A585F44736039FB84067E6843FD4C2EC2B2C00DA6AC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 8fe764c6e8ce8c63cd623c097950c590f2ae2d1c67a3bedbdae0bf6fd424bd40
MD5 4931f48999dd7fe2ace05fd3dae5d046
SHA1 9e6b58bfa996c23031e009d648c7d744de9b0d9a
SHA512 06c05d1df7f35ff2f4ec101c8ef803ef810029e7b60c14d01d10bebdf9fa70d37ab11d6382de818018f6f7aa1865865e43ae4bc317c0498b21cb2e72ebc211a3
SSDEEP 192:ues1/sNrXQcaHylDZFjQmiU16h/4HX58gZDOKaFbAWWaY3kPL/DbUI:o/sNrXeHqZ7OwHX58EDOJbAWWaYWbUI
TLSH
T1F7421935A978AC374DE7A585F54736039FB85067E6883FD4D2EC2B2D00DA66C230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5d3c0334660939a81cf4f75738eb9ba542843067d81906269ce1ea9e8f32be88
MD5 4400116db57860f62a5fc705825073bc
SHA1 126837e005b35d0b80f0f626099f6a03f9440b87
SHA512 278cab21cac566f8b5e8cb534619b573b70e9959fb33fb3af25402f15f4e27d657099147ca34a91ac921bb7509dfa6ecf87ec712da70416933cf708a7c4e29cf
SSDEEP 192:1ON46wlDgQmiUyUcW4X58gZDOKaFbAIDl8QUU6:1ON46kgIW4X58EDOJbAsyU6
TLSH
T1B102D735B9787C7B8EF2AE49F58B36139FA5106BE6512F80D6EC1A2D00D765C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 005b0210e4d1781a834d3d1ea73fdf5e1ca5151a4fc070c7f802ab646913bb46
MD5 9c38c806b7b4a714e04fa1113414e713
SHA1 ad391e3db5c3a727300f61bcb94ef7a8e31d334c
SHA512 a00a39b449cd691dfaa37b0cd9ece1976dbbaf5bdd5395e4c31f4858a91c33b8befab9ac947969f0ef50055469754cf116291d3e6ea8dd6258a4440aac862e22
SSDEEP 192:uKHsNrXQcaHylDZFjQmiU16h/4HX58gZDOKaFbAWWa/3UPL/DbUA9:7sNrXeHqZ7OwHX58EDOJbAWWa/mbUA9
TLSH
T12E420A35A978AC374DE7A585F54736039FB84067D6843FD4D6EC2B2D00DA66C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 4c5464d656ee35b53f1a477c6b01b056c74855db6f662ec74af19376326c88e9
MD5 8c457c3a08b6559591491428e48bfcc0
SHA1 c874b316af3bee72700488883432aa453ed849ce
SHA512 3cf18b90bace9b8fa715e642cf48b7cec1508be29249e85ab8dbd9989051d27b97cb8a2a3a16602cccdd26af496979ce232347a7ca2895aa40f9a3947b217057
SSDEEP 192:ues1/sN+XQcaHylDZFjQmiU16h/4HX58gZDOKaFbAWWawP33PL/DbUI:o/sN+XeHqZ7OwHX58EDOJbAWWawPvbUI
TLSH
T165421975A978AC374DE7A185F54636039FB85027E6843FD4D2EC2B2D00DA6AC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac1215897a6500953e5140745cd77ec1af3d05c6e8089d86b1d5a846b0160db1
MD5 5892725c8671d118dc90a51b38b6e86a
SHA1 0407025c10508d045815d0d22fbcf27f5a67f7c0
SHA512 ad55fdf90ff3d10f3b0cd68248f1ba53071836fdba538f92b711b16b3baa161b46924811f2c1db691433eb8d628d5e27a1f9822e46afc9bfb5ce15ee0a506a1e
SSDEEP 192:1ONe6wlDGQmiUyVcw4X58gZDOKaFbAWWaRveL/DbU6:1ONe6kijw4X58EDOJbAWWagbU6
TLSH
T1AA122935B578AC375EE2A485F48736039FA95257EA857FD0D6DC2B2C01EE6AC130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9d4c209-ed10-4007-9221-005ea642913d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9d4c209-ed10-4007-9221-005ea642913d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a966fbe61de51203269d9acfb635a809762df02270eca57de3f627f2c6b181d8
MD5 746e165f1896b41a33dad66381ea53d5
SHA1 dfec368d353f69dd24c5a5774cb0f87b6b849cc4
SHA512 f37ef96b042ffa135287fc014611da52566a46e63b9bc2284e5a60672e478e8946cb23088f18639f4482ff8182749071557b2895430e66db04f28ab4c2de7e61
TLSH
T1BE412958A6F9114CB3B67F1AABF6A86D487FBD332E06D59D10010E4F0622E40CC62B37
MD5 SHA1 SHA512 TLSH

Submit Download