459792c5f151e7ce598cc561b6871f041f758c8954c51a9c0ff94e3194331524

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_459792c5f151e7ce598cc561b6871f041f758c8954c51a9c0ff94e3194331524.html
Size 41KB
Sample260912-slgslsbj21
SHA256 459792c5f151e7ce598cc561b6871f041f758c8954c51a9c0ff94e3194331524
MD5 81bf448b5e3e4dd29f9f53f575020139
SHA1 0e61784f2ff56eaf51ecddac8bf986878dba0aa5
SHA512 92e7606df0260b7735503a5fc1fc709c14db8c2f3f577c532267a09fed8dd5862764b905989c75e0e54868383805c02bea0e2722813a47b1b40486b98d769702
SSDEEP 768:e82TfYbChjE3M2GIIRJaXrzMJHrJbWe+zkak01R7rWcGJtzVTgtlArWpe0N4qi7f:G32MnhRNHqR7rWcGJtzVTgtlArWxN4qI
TLSH
T1BF13944E73408B9B5CB61BEAB82439848DF712BB6280D1E8B2BF45405FD557DA0379CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1144	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338239456801004"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{63F365E7-5A6B-479F-A1E2-80F61D83B8E5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe
4616	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4616 wrote to memory of 1728	4616	msedge.exe	86
PID 4616 wrote to memory of 1144	4616	msedge.exe	87
PID 4616 wrote to memory of 4240	4616	msedge.exe	88
PID 4616 wrote to memory of 4240	4616	msedge.exe	88
PID 4616 wrote to memory of 4240	4616	msedge.exe	88
PID 4616 wrote to memory of 4520	4616	msedge.exe	89
PID 4616 wrote to memory of 4520	4616	msedge.exe	89
PID 4616 wrote to memory of 4992	4616	msedge.exe	90
PID 4616 wrote to memory of 2764	4616	msedge.exe	91
PID 4616 wrote to memory of 4992	4616	msedge.exe	90
PID 4616 wrote to memory of 4992	4616	msedge.exe	90
PID 4616 wrote to memory of 2764	4616	msedge.exe	91
PID 4616 wrote to memory of 2764	4616	msedge.exe	91
PID 4616 wrote to memory of 1808	4616	msedge.exe	92
PID 4616 wrote to memory of 4032	4616	msedge.exe	93
PID 4616 wrote to memory of 1808	4616	msedge.exe	92
PID 4616 wrote to memory of 1808	4616	msedge.exe	92
PID 4616 wrote to memory of 4032	4616	msedge.exe	93
PID 4616 wrote to memory of 4032	4616	msedge.exe	93
PID 4616 wrote to memory of 4504	4616	msedge.exe	98
PID 4616 wrote to memory of 4504	4616	msedge.exe	98
PID 4616 wrote to memory of 2092	4616	msedge.exe	99
PID 4616 wrote to memory of 2092	4616	msedge.exe	99
PID 4616 wrote to memory of 4388	4616	msedge.exe	101
PID 4616 wrote to memory of 4820	4616	msedge.exe	106
PID 4616 wrote to memory of 4100	4616	msedge.exe	107
PID 4616 wrote to memory of 4632	4616	msedge.exe	108
PID 4616 wrote to memory of 2332	4616	msedge.exe	109
PID 4616 wrote to memory of 2332	4616	msedge.exe	109
PID 4616 wrote to memory of 2096	4616	msedge.exe	110
PID 4616 wrote to memory of 2096	4616	msedge.exe	110
PID 4616 wrote to memory of 4032	4616	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_459792c5f151e7ce598cc561b6871f041f758c8954c51a9c0ff94e3194331524.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffcd1a9c188,0x7ffcd1a9c194,0x7ffcd1a9c1a0
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,639760660912558571,5257754491705435278,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,18321858661098365933,9207445222590534557,262144 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,27397960561332670,11939838669152775227,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,4195213896154867001,2656559440431679199,2097152 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,565277507857621095,10039030463222656914,2097152 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4076,i,5740228514709494344,8384866854652911528,2097152 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4116,i,13322059875172812864,15654041558583526191,2097152 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:2
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,17363279986688442670,4125995835129064107,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,14166312944270737899,855276090731202661,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,3976396242226772615,13818150021861811981,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,3976396242226772615,13818150021861811981,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,12492696513888976100,393428004883011269,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,2456263086136331869,2187321109801518920,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,9892505921563463275,15672539335109277927,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,2371137190924403556,16238334643811599502,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,16856766745473394878,2036971857127632749,524288 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6052,i,111492318560786113,8119707342463360440,262144 --field-trial-handle=2284,i,13246723420549886265,7893883939788267354,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 b5e02a7d959ec970911dddbdcddda53f9a3da27d563bb555dddd309504d8609b
MD5 f904122df3dd0b5f8cee457a97bf15ee
SHA1 e296ce6139b16cbad337f7f5566c4b436f11c95b
SHA512 b5d8eafdfec9bb58dcb5016c55e4b820abef2c27e0a64ea4db8ad270a1f8ddc4bbd1843c698ca175b721e1125cfeb706f89387797eeb879f941507f226d67789
TLSH
T181E07D845AC8CA6FF248664B4BE84B4C928C377FD2CC6B0B3F4888987402060F7C67A0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a44bd2435fd0a86ed640a41441a263fbe14e603b849a42b6435b335161940b5d
MD5 f7472d15072b5da9df2b248e1b696e49
SHA1 c53e5302093d7d514604484ba9e2157113db05fa
SHA512 d2b7dfdf6fddf2b7a29a218b602c54900d343c514af54f9ae5dd758eb03b8223175101c08cddd0b0db118b4b60f212dc5544232e3807d0487d4072f350069612
TLSH
T1E96129CDD142848AF7980075D2DAE4E336B25CA169B39FD338E4E3FD9C07F40A918418
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bfe0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bfe0.TMP
Size 3KB
SHA256 5a8e02ad14b268e1f4db035969f2d8914e1c7ca0423bcb3dcb8ab12c5a446f6f
MD5 974204ff5be936d556632f3c7f08991f
SHA1 bfa5f6bdcc0c4271dd9a07f7b0366a4ae20de5db
SHA512 a8428151fa38752daadee4d9065d6612fc4cd30fb387f6066748b0a45653b928d97105c3f831dcc4f40912a17912013feb39858bb7cad2b7cedbabc91feeda1d
TLSH
T1A7613ACDD1428489F7980075D2DAE4E732B25CA168B39FD338E4D3FD9C07F00A918018
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 763c95581ee04980dab6df59c2559e78fc28cc2ccb38409b985db3584760e79c
MD5 48f793e4481e9c3ca2848e23f2c2f337
SHA1 7d659fb6f6a5a550e6bfad40ab7b3c60659b9642
SHA512 22d0daab972856093de945d8d9dde12a7d330a3a85bc6619eead23da2c1348cd43e09a8f023b1afc57b243f0f92fcf71c92c012c3cabb27a4ada7dc138601ad7
TLSH
T13B4158F6C3D887BEC80156F0AB24AE16DD1E0A5682283C1689E4EF5F63E24B0D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 becad01d670afc055c8ecc89b75a97f6aa6c534d00c21157c6518c1a22bdab83
MD5 e6a2c15c83e812488ea6c9fc370a6afa
SHA1 8108651b5c9f369a2d7da43fd96bcef0f7f9a0b1
SHA512 e8eb1c34ed52ffbfe852e060976159ddb96b4aa9e5d4df46479cf5750abb4fb0984eef31798c69c38bbd0b4acb2dc002d8f78573a5628c283633e6adb959e72b
SSDEEP 192:sxZpRwWH/f6sL2IdpdPyHW6+WNGY3R1jIgrJ:sxZpNH/f6sL3JyHbGY9
TLSH
T10612B9116F28A97B8CCBE21DBA257F13E6FD543251D41E58A6FC8A1C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bda94be8430506298e22ebbabdb5a449c584319d0e99f7a82e5fad1e68b3783c
MD5 3578b2c9105cb0fbac85989bf1d4117f
SHA1 d8029398f346f7eb195f94d6f9ebdd579017f353
SHA512 30550e60a939c80049d22d89efa9af4d19043d133a02ca88a292e5ce1724af99dc3cd6a12b797a6250c0b510d71d7c6a31927472297be5d4258f92f1e008add1
SSDEEP 192:sxZpRwWH/f6s32IdpdPyHW6+WNGY3O1jIg5GJ:sxZpNH/f6s33JyHbGvs
TLSH
T11522B8526E28697B8CCBE21DBA257F53E6FD503251941E58A6FCCA1C05E6ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cb15304a5adfc7bb13fd513eb6e6c1b6d618377a71f8e178beb2b9c744d5216c
MD5 f00a4730eb59bd4336c7993f6e5f51dd
SHA1 027faac793d2dd1c4825333ed629c6fde307d735
SHA512 13e45fad8573d17fd7376234958849cb38bb62d003ce2f6d84b7bd98429e819713f9c0937df2267362223c394eb1f8aaad491feaa8cfb6c8f83f30287ede2083
SSDEEP 192:sxZpRwWH/f6s32IdpHPyHW6+WNGY3Z1jIg5GJ:sxZpNH/f6s33vyHbGKs
TLSH
T1D822C8526E28697B8CCBE21DBB25BF53E6FD543251901E58AAFCCA1C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8e27546f6c938a80e8ac0ca319f0d7a03474fb7ba2bd7e1eebb0b5410eaa7a48
MD5 9b5940bcb8bb8bc5e158e0a0a620d5d5
SHA1 6c45bc2afa82ac8bbcec9a2bd3ecb7dd08aea51e
SHA512 5f259e13ba80e0c33d178e6e70c6369b95bb44dad319739c99ab155c47364a8cbc656fd4d091622adf0e956ebef65d6fceca0e10eed7b7909b663a7b998d1501
SSDEEP 192:sxZpRwWH/f6sO2IdpdPyHW6+WNGY3R1jIg5kJ:sxZpNH/f6sO3JyHbGY+
TLSH
T14022B8126F38697B8CCBD21DBA25BF53E6FD503251D41E58A6FC8A1C05E6ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 32a2f1632e0127c946c67d2168a7ed579c59c2e102c787b87d93d5acacd4351b
MD5 057dc45acc2bca1dd5db198662c8e654
SHA1 dbfb13b3dfe14b843e2c31bc74c3f86aea69051b
SHA512 a62b15a2270dc26f38e58c1cb8ac8cbebb11af064de0cbe53b158eb39449018faafbd18a576be24bbcb9df7515743571677ba048ad2cf9995751dbb94519ff5e
SSDEEP 768:IY30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ727rolZMJ:IY30AbSWvS2l9u1jaLmLZ12Iy
TLSH
T1C5C2DA3B640CCB7E4FC05A9DDC6A6F9B6E9C02C796544D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 42ab8d6e1e159ad295791b09c4ad62fed8e9d09a0dd18ae87a9e2a91d9ceba03
MD5 b0dc0a075dfe99b6c62cfba34a902e38
SHA1 231e45f57d6ed8dfd8ad0f07c3683bb054b8af4b
SHA512 bc23d124a71dbfbdedd2142d3f5403fdef401683ee76a941c180449097309b1cbd7811a28a4df59ca53454a7adf6f17ebabf198e398b4f5f33f4455c2e6d1b5b
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLlEZVnTHIbbebIStIK9N1/IxNYYO/Gt:Kwj2KcQey+0K7CcoIKRSG5
TLSH
T1A791991173B75311387E284884A1975E538236B33009F6ABBFBD54728E6BE690DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595da7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595da7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c909f6956b01e4faa591a33e1baeaaf0d0cdf91ccc5722704349301f4ebc56ff
MD5 a765e1899b371acd40eb9b5a5f91a878
SHA1 b05045091d6b09928ac42b98c2ba9664bbcdba68
SHA512 65bdc6daf8f9c401ef042dcbd04ac4fc5a4cdf81978324c0edf14a636f7efecd2c6c0717eb6766509cb024c05a81df74280aeaf25306aee190652676f162b9c8
SSDEEP 384:dZcI/sNmeo2puFPC9iX5FlS82YomzA7O6R2FeoLh7Udoi:F/X2CGaYuzA7TRSQd
TLSH
T139828D3268749C7B59E6E155F40636139EF89077D7C81E84D9FC9B2E05D99A8030AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2be1723fee9a70d204a2c221eefd91be503c0678313b9723a4babfeb94b55382
MD5 71e25e270540546c040e12e04b55f8b9
SHA1 030838ff7e81f394e92e608584e151f17b20a783
SHA512 f61ca01bc9b556c58b741544a605ac78fa219aba8b8940e53fab46d57a892371aa7941d528c1bc274fee8367680c61d9fce07dceb6cec3c3826ee8fe4e9860b5
SSDEEP 384:qiFiZcIaZsNm8TUNTUlIleo2puFPC9iX5FlS82YoyzA7O6R2FeoLh7Udoi:hFQA3wgv2CGaYazA7TRSQd
TLSH
T138A26D3358A4DC7FADE6DB85F50A36139EF950B7C6849E90E6EC9F2D019A5D8030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3b20b7a16e42713af91de527e9a35612a1ec115a26bc57b04c787a2e0596bd56
MD5 96c3453e6757e65a50ad84d6643b770c
SHA1 7e4ad80b28dcc57e6ac32ed26eeafbf8d58e8cfb
SHA512 ef19d096580044370f372c8a504bc69781bf9b0d2b135a9ae55e9da1a970e965a4a2f6fa439ffdf57dafa88523dc9af498b022864424f7800d9f342f52b5850c
SSDEEP 96:gqONkoQsjpfuMVwptaL5ih/cIPURHl8h4otop5YiCDoBIPuva6zx8X5Fx+xKYv6N:LONU6AmwprQmiUy4c6siX5FliJiz7JU6
TLSH
T19E02F935BD686C7B8DE3AE45B48B3723AFA5117BE6942F44CAE81B2C01D765C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 86ad20b0408432c2385d2871fab551f79132a02ac92c944c49954aa9dc133957
MD5 d0d724e83be2c4e242f2448e9e920c1e
SHA1 5ef1e25ba91c96304d40bf49147bfdcaaa5e2b7e
SHA512 be2c15d66edd912d3d390c52ab05ac79d541e1139eea42ec5b2fb79d7ed3360827b5118e9b1bbbdf963c2114f2f6e1315f808cc3c64a205114fecb009c2fa042
SSDEEP 192:LON/6AmwpNQmiUy9cesiX5FlS82PwoolRzgr/ywU6:LON/6ipLnesiX5FlS82YoSzAU6
TLSH
T13F122B36B868AC7B5DD3A594F04735139EA45277DB886F84C9EC2B2C02DF5AC530BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b34c2cc1958224f0280cd7ea626b90444b7552e721aa3a690d6643ffe36273c
MD5 f4423777ba50e60e6d8767be712bf796
SHA1 b4a375ae7822c0cd68ec5a1bf07b86700c22771f
SHA512 c5d7a65d87ed074b3dc144a46ce0b8a43766545f1ffafc6d658d8b08b42665bc0ff262f1a639e75228ef7585bff409b95e50e6ba1d3afa51fb1db51289abeb57
SSDEEP 384:QZcI/sNmXo2puZPC9iX5FlS82YomzA7O6R2FeoLh7Udoi:u/u2EGaYuzA7TRSQd
TLSH
T1F2828E3268749C7B59E6E255F44B36139EF890B7D7C81F84D9FCAB2E05D95A8030AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3e4b39a-bf4d-4898-ad93-d5c79fcc44e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f3e4b39a-bf4d-4898-ad93-d5c79fcc44e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f12f9894cefe6a1c9f1acd39355f12b531234c48c4090fc53eb448b508fb3a4b
MD5 f7ad66a076f2c15fb3d43448b72b9e07
SHA1 fc5174b80e5bcfb3838077447ab8755a67a207db
SHA512 6c1db21ecf9580593155f2d6158f802e6c3529670cc437f2325fd1ecf070840b92d280b0e74cc7e6c03450b288b6362fc79c6dfee859f87d0070bbe6fc2874b7
TLSH
T1C541F65CB6FA1118B3B76F5AABF3A56D887ABC772E0AD15D10110E4E0A33A41C871737
MD5 SHA1 SHA512 TLSH

Submit Download