78746a4157296d4ee5f18998f3b458bb5fe0e4ebe7022788aff862ebc4f058ad

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_78746a4157296d4ee5f18998f3b458bb5fe0e4ebe7022788aff862ebc4f058ad.html
Size 66KB
Sample260912-tr4p1aed84
SHA256 78746a4157296d4ee5f18998f3b458bb5fe0e4ebe7022788aff862ebc4f058ad
MD5 ea7986ab378f012eef709f9681ae56a7
SHA1 5051e6b18f230fa890e354626fb2317fda1ebd69
SHA512 d2cbe678353b69e7bc7c2a4c534edf6d8e1ff45342b973ce9bea22dd24237e55591f62eaf7ad2c0c128f1309cbc459e6bd110d27e07af8fc65e5db51ecc61a13
SSDEEP 1536:Faz7lz8zrpOSMiVT9zDl9Q955n52nl9j9P5b9u5q505O9C9O9q9F9M9l979p9F5+:F7qiVTthiLtMlRd18YCEUwAHSD9HjPC1
TLSH
T13863741C0A442F3FD7A14D99FD66790D5AF829D730780632B06DD6A4AF38B6E832BD05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338353486739617"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{19F04CEF-6997-4767-B11E-9D2D35781630}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1220	msedge.exe
1220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1684 wrote to memory of 3024	1684	msedge.exe	86
PID 1684 wrote to memory of 1152	1684	msedge.exe	87
PID 1684 wrote to memory of 1952	1684	msedge.exe	88
PID 1684 wrote to memory of 1952	1684	msedge.exe	88
PID 1684 wrote to memory of 1952	1684	msedge.exe	88
PID 1684 wrote to memory of 2068	1684	msedge.exe	89
PID 1684 wrote to memory of 2068	1684	msedge.exe	89
PID 1684 wrote to memory of 4396	1684	msedge.exe	91
PID 1684 wrote to memory of 4396	1684	msedge.exe	91
PID 1684 wrote to memory of 4396	1684	msedge.exe	91
PID 1684 wrote to memory of 4288	1684	msedge.exe	92
PID 1684 wrote to memory of 4288	1684	msedge.exe	92
PID 1684 wrote to memory of 4288	1684	msedge.exe	92
PID 1684 wrote to memory of 2676	1684	msedge.exe	93
PID 1684 wrote to memory of 3196	1684	msedge.exe	94
PID 1684 wrote to memory of 2676	1684	msedge.exe	93
PID 1684 wrote to memory of 2676	1684	msedge.exe	93
PID 1684 wrote to memory of 3196	1684	msedge.exe	94
PID 1684 wrote to memory of 3196	1684	msedge.exe	94
PID 1684 wrote to memory of 1348	1684	msedge.exe	98
PID 1684 wrote to memory of 1856	1684	msedge.exe	99
PID 1684 wrote to memory of 1348	1684	msedge.exe	98
PID 1684 wrote to memory of 1856	1684	msedge.exe	99
PID 1684 wrote to memory of 4708	1684	msedge.exe	101
PID 1684 wrote to memory of 4536	1684	msedge.exe	106
PID 1684 wrote to memory of 3792	1684	msedge.exe	107
PID 1684 wrote to memory of 1776	1684	msedge.exe	108
PID 1684 wrote to memory of 3852	1684	msedge.exe	109
PID 1684 wrote to memory of 3852	1684	msedge.exe	109
PID 1684 wrote to memory of 2908	1684	msedge.exe	110
PID 1684 wrote to memory of 2908	1684	msedge.exe	110
PID 1684 wrote to memory of 1220	1684	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_78746a4157296d4ee5f18998f3b458bb5fe0e4ebe7022788aff862ebc4f058ad.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb92b0c188,0x7ffb92b0c194,0x7ffb92b0c1a0
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,7461901825708639500,16823460229120715246,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,16294560084508296506,10933161054094079802,262144 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,6377788939032355411,10444247883807311506,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5388897576500942343,18029743333111905387,2097152 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12595325372389036591,18270884985215170098,2097152 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,10000398594986651232,11386425048268074941,2097152 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,8914116560768057742,13847427514276479272,2097152 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17914017820127992395,7356532025431084599,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15562870651940953296,13625777898921425143,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,1763233663194637824,12162582387530316717,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,1763233663194637824,12162582387530316717,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,3824127387769520330,7352263945765314650,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,5970324659298985884,8624511822036559506,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,15630285503517851556,806096121490640967,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,16659859789885585842,16113461217321802583,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:8
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,1537768826733311560,904222960969411448,524288 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,5345722881993219840,13203772354442004948,262144 --field-trial-handle=2288,i,2592095807625424621,18328022591945349569,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7d17f124bdb03f49ea2fb0da80f02b9ace8af25da46a259e0fe59039b93bd059
MD5 ead16a023012b58cdf4b46f2df47b25a
SHA1 4b85c6a337ab0f80aae7471af1f76658d5ee76dd
SHA512 bfad3ac135c11bdd24be908c112e6313426f8fce156eea3d44c80b94abb95a3447c479407c8eb8a01dea1a0937b089119c5c0c82968be15f9c24cd388be20ada
TLSH
T181E078950DC5C65DD154E74B4354470CD280374FE7CC7A0537808DCA7105054F3D7551
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bc7a94070ac93d6c25a2f450f8207ea50c8ee3a82d57bb3cee7e82f68f4eb43a
MD5 fefdce7fddf97c5c249bab3d347b75a7
SHA1 2d34b87def15c3a4d892df964349f7598d93d455
SHA512 de477b98fae7474807a8329997d9450a41cdedb6b5f9d717a89b3926a733ba414162d75b9ea406ba4c7483a05e1ed1f087b5f5392e2a0f3d8c63892ea504f580
TLSH
T1E4617383594040A5FBFC603193F01E8F37F68E81A94BBD53319CF4A7DA06F569139894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fd47.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fd47.TMP
Size 3KB
SHA256 109deb810de7d27cae452ae9007b61d1e79f3e32c81aecf140ab90334fd66b47
MD5 ee9c1ac4e25efca49195b55dd13935d3
SHA1 c024b22d34bc5664ce8aa52b1ce0732976d28516
SHA512 cf59ea3987658eb95c22bb6e3a4d36bfb3ba47dfe155b6a981eec054657733d44ebe546a72f412a1ee3832c6b37a0b06dbc5fe9ed4e8fe1e7961a5700a042e01
TLSH
T19C618483594040A5FBFC603193F01E8F37F68E81A94B7D53309CF4A7DA06F1A9139894
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4d244a917b11ceeaee2f932fdf8d0f3ba038615c4b0694bfc42f0f83d806fe9c
MD5 d0b1723fcd7a312745d769afdd0f5c62
SHA1 4b19aeeb7eda67ab44bc350ff18a0ea290693ecf
SHA512 c623ed8e16e37abf0c77c47959f7b1b2b067f793317514a3f8127edcc32c0614d5ca35213e3703c9bd8e7e8fc340f74914bb0536d45be6592df53dd0cf22b649
TLSH
T14921D0B783E446BE8A0156F05A14AE1BCE2D0503431C3C2589E4AF27A3F30B5E00269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c1ad010eaa4d5aca962431a57f973efca33f2e46b80cd717b22d1c76a8c461af
MD5 e70fb95d401238943b2a49cc96829587
SHA1 0c4e431c768e94e569ca379dd11a01f35c10c3b1
SHA512 2ab11eff5563e16619c097d45215de149aef282584c33ee798b54916df7b608b7eebf7c7dad236e193204501ac62ab1fa06a4600e5c00cd0179e3a69b4ece8b1
SSDEEP 192:sxZAR0W6/fZsOmIdpdZHW6+WNGY3R8AIgrJ:sxZAN6/fZsOHjHbGw9
TLSH
T13012A7526E38697B8CCBE20DFB25BF53E6F95032A1941E58A6FC861C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 96b46df4ba0266e88d0a8def551ff7b4eab26d8ae40e8b49372513914691d575
MD5 0c79162b3e95ed2e40dd89982c4d3e02
SHA1 3b0030b732e73dab5147862aa083b5b0edbfa013
SHA512 4851c6b2608ccb65231ec482f2cd648ff5b3cc85424c56da7d54f9f1652c97b404c8aeacf0c4830b35e0f3151caf6c6f3987647e903c51b2c8c6c74d498a5943
SSDEEP 192:sxZAR0W6/fZshmIdpdZHW6+WNGY3R8AIg5oJ:sxZAN6/fZshHjHbGwS
TLSH
T1CA22B756AE38697B8CCBE21DFB15BF53E6F95031A1941E58A6FC861C04E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 912a624a4690b055c9bb4776a0a0dfa75dfa043f96b23e80bf1afd19cb075d84
MD5 eed5d4ad6fc2c845ac0d8834e6c5c129
SHA1 b512c5464c65ffa90a01d8975530f14d2ebe94e6
SHA512 d451c183fd32bf3c91b3e19bd5fb716421fb3d04dfca2667cf91b889d395c5bbd738c9241d24ca297a968cdf17483ec98399f8c3b8eaed0c9eaf025259b9dc22
SSDEEP 192:sxZAR0W6/fZscmIdpHZHW6+WNGY3aJu8AIg5KJ:sxZAN6/fZscH5HbGrJiQ
TLSH
T1F122B656AE38697B8CCBE20DFB15BF53E6F9543261901E48AAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 33088d48179085f7aa4ff81f7ffb273518c30c722a2fa069d047a9ce429711bc
MD5 59583c2fed799d38dabe939f62849de7
SHA1 a1c9d8806b1452f212dbf6bcc5052c847e6285a0
SHA512 29806bb422d5a064213861e78cfaa5f1ecd654547a24c8d740e93fe4890716bf8a9d7b2e3e1e35aaef9b6f52808bc897662f9ae978b2036d86a7e66be3b6d4a9
SSDEEP 192:sxZAR0W6/fZscmIdpdZHW6+WNGY3nJR8AIg5KJ:sxZAN6/fZscHjHbG+JrQ
TLSH
T1C222B656AE38697B8CCBE20DFB15BF53E6F95032A1941E58A6FC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8e40e6d88d6d47d4d83686029d0753ad6eab10fd31e5fa137d84391b85f9b5c2
MD5 db44e8e867c58094b0edb4d270810fe2
SHA1 b9a192cf5d58338456f99676df3fd04fcb02164b
SHA512 db3f40b389f53044c0c96892bbdaa5d0288c1b26e8f5d1a1ec98d228f480d0b988b195d7005d8ee68fbbb88bc78a20e649c1f4bd6c75512e0615e4448b966ab3
SSDEEP 768:Nj30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72erolZMs:Nj30AbSWvS2l9u1jaLmLZ121L
TLSH
T12AC2EA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 edc0fa8d0edc063aefb2a8ebfa2ad12ab69c2607294669c5c6103d6fc7d27f34
MD5 59d6bde8a176852188f8ed1aa7e350a9
SHA1 ce2b26b46d1cad5ab5e0c3546b0be24c88082e4f
SHA512 4d1df93070e09ceab44412d1a9fee8746e734aa3c5ba04896ffb1827e1fc54dd081f33058619ca9728923160a999a12381721db18bd0f6ba22ab2774a209c486
SSDEEP 48:K0CNCsChC9CPC7C/CgbCTCmCzISC1CgK9C11CXCgxClCwYC2C3CtCtyL4neioS27:KgfeKgYG+fSKAsHCYKjK6G
TLSH
T1AB91F01435BA06113C7E295D81A58B2E124131B37254EA2BBFBD50A19E3FE491DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5998fa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5998fa.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1e992faa991b11a5ef33ac19934fa26f1c9c92114f1f3e0fa04815fe814b6f2a
MD5 d5109311a36e51eec076b0ec9199b981
SHA1 1162d70fedfce4070d2fa41ad1a8a58a701afb70
SHA512 86826bd5ddc153d24a2548ca6a5f73964ad0980f4da188a022b181a24bbdaff8bafc0b9c84602d1f01b8177e3b9645f15c67550deeed8c7aa8516605df93f5a5
SSDEEP 384:8ZcIIsNH6cpudvg9iX5FE6i7O6R2FeoAh7UAoR:qIeOka1i7TRL16
TLSH
T1DC828D72A8B89C3B59E3E155F54B36135EF88077ABC85F40D9EC6B2D01DA6D4030B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8fed5a8a242957b60e9f329eee152e216c91635edf8c316a70923276313f4850
MD5 04bf2ec6702bb63a6efe9a2222cab1e9
SHA1 b045469335b667bb549c3b5d196f2d37c0ab2f50
SHA512 b3703be7b16f5bb6e228e1ff6a41054c8175bef0ddc35426ed5634578aa39d8da2831f55cb7b5e0b99ce7faae2096a11c65ca7efd8317b5d644479f19e880c38
SSDEEP 384:fniFiZcIimsNZ8TUNTUlIlXcpubvg9iX5FEni7O6R2FeoAh7UAoR:aFQbUwgackaEi7TRL16
TLSH
T129A26C7398B8983B9EE7D645F54A36139EF840B7DA89AF50E6DC5B1D009A5D8030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8344379649d5fb507aa1e18882cd76f76e106ff0e3f9a9bc62b81d9752f6b473
MD5 75fc3cc0df0eae888918bb82dffdf6c1
SHA1 7f9349cc6669f86b854a71f29a0f487dd550d0a8
SHA512 b75f6c777c9d541241cc9708b17c8b8a6a2a3b24d2485c8a442b1ec050e3440f5dbe00d85eb6c4de7f18d4964c84cddc1b3a8d893cd8c99d2e8ac6e89e4a8927
SSDEEP 96:gqONkXQsjpfuMVwptaL5ih/cIPURHl8h4otop5giCDgBIPuva6zx8X5Fx+xfYvNN:LONr6AmwprQmiUywE6siX5FYRkJiuhU6
TLSH
T12502FA35AC786C7F8AE3AE05B5877B135FA4117BEA952F44CAE81B1C01D768C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 533cb52013d33d11b4f291cdc63eeaa7de79652e26826b6fd11e5365e1f1dca0
MD5 0f560ebb66f461d8e14f2eb6c5d72d5b
SHA1 dc74bc26b1ba7941774f38e139470f12a18e74ce
SHA512 ce59a32b8f117b01419383d19bf3a6279c21b15149fb79ae497a55bcf6559cfaf39d3f26cda8693dcdf46dd3eadb81629e8b3fa016b079a14d6efc6877f56cc3
SSDEEP 384:JZcIIsNHXcpubvg9iX5FE6i7O6R2FeoAh7UAoR:BIncka1i7TRL16
TLSH
T111828C72A8789C3B59E7E155F54736139EF88077ABC85F40D9ECAB2E01DA6D4030B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 09ea885ab5bb7d83256dcd01924e76a982118e11f7dc8079e56f947c157847ef
MD5 3857e5c10f9ac6498564120d52428571
SHA1 0e70ce1e75563b16f522e3c43fce04194a42c45b
SHA512 c40f7e6386d09f147f5c46c3ddf6556a7f1bc4e17ca1f33a18e9fb1d435c9b376a246f98c53d73f8f723efec826f0ee2458babf327ed62e61cfd7d09a25d403f
SSDEEP 192:LONS6AmwpHQmiUysEAsiX5FYRBelRB/gU6:LONS6ippGAsiX5FEMiU6
TLSH
T1FE121A36B878AC3B5DD3A550F08735135EA9522BEF896F94C9EC2B1C01EF598530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04e3c66c-040a-40a3-b219-3083b70e3170.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\04e3c66c-040a-40a3-b219-3083b70e3170.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2238bd6386d0f7a8d67c6647c1372b84d91efdc9ef55ad165cb7c25c54ba8e10
MD5 7406f8fd4d49a3836fe3ed1b013296fe
SHA1 e48cc1bf39e8e8d9e14ab195d4ba141da6e3c720
SHA512 13a5bd157b340b37c21443e6c9694f909be0a33f7c164d43faf53a206995aa032936147c8bbdb9500558257c2ed634d2c81d00cd710015828410feef6539f3f5
TLSH
T185414A98A6E91148B3736E5A9FF7A86D487EBD372F4AD45E00000E4F0A73B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download