43a572b7e7a5902c0bf966d5c71d0de06fcd04af67f1457e3850ddbe2a3f60ae

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_43a572b7e7a5902c0bf966d5c71d0de06fcd04af67f1457e3850ddbe2a3f60ae.html
Size 112KB
Sample260912-vcb7wack2y
SHA256 43a572b7e7a5902c0bf966d5c71d0de06fcd04af67f1457e3850ddbe2a3f60ae
MD5 76dc3aad412dc0c3665fecb3d746e68a
SHA1 49b5988a575def6dd3b27b8ca3849eb8f83e9adf
SHA512 91ce784bd130d1ecc0fbf7c0d70616630d720f574310752dd1a0a875696bb78d54ef529bdedc5a384dd6eb9f1d1301773d7a401d6979282b4458f5d9477caaf3
SSDEEP 1536:0+x5Yn+h/g+GRJyEv6Ym0gqxqlOQ3TtNNo9xfGie2vCbEaoMbEaolPy/:NdWQfNOGD2vCdoMdolK/
TLSH
T198B3C58711204CF9EFA40DB3459B186B3D2C5437AC0791B9E3FD8F972B52DAE034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3636	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338246313085246"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{9EE134FA-9A86-42A1-A177-9248E520DD51}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 4700	1804	msedge.exe	83
PID 1804 wrote to memory of 3636	1804	msedge.exe	84
PID 1804 wrote to memory of 5060	1804	msedge.exe	86
PID 1804 wrote to memory of 1060	1804	msedge.exe	87
PID 1804 wrote to memory of 5060	1804	msedge.exe	86
PID 1804 wrote to memory of 5060	1804	msedge.exe	86
PID 1804 wrote to memory of 1060	1804	msedge.exe	87
PID 1804 wrote to memory of 1248	1804	msedge.exe	88
PID 1804 wrote to memory of 1248	1804	msedge.exe	88
PID 1804 wrote to memory of 1248	1804	msedge.exe	88
PID 1804 wrote to memory of 1544	1804	msedge.exe	89
PID 1804 wrote to memory of 1544	1804	msedge.exe	89
PID 1804 wrote to memory of 1544	1804	msedge.exe	89
PID 1804 wrote to memory of 1368	1804	msedge.exe	90
PID 1804 wrote to memory of 1368	1804	msedge.exe	90
PID 1804 wrote to memory of 1368	1804	msedge.exe	90
PID 1804 wrote to memory of 1280	1804	msedge.exe	91
PID 1804 wrote to memory of 1280	1804	msedge.exe	91
PID 1804 wrote to memory of 1280	1804	msedge.exe	91
PID 1804 wrote to memory of 3692	1804	msedge.exe	95
PID 1804 wrote to memory of 4616	1804	msedge.exe	96
PID 1804 wrote to memory of 3692	1804	msedge.exe	95
PID 1804 wrote to memory of 4616	1804	msedge.exe	96
PID 1804 wrote to memory of 4008	1804	msedge.exe	99
PID 1804 wrote to memory of 4632	1804	msedge.exe	104
PID 1804 wrote to memory of 4996	1804	msedge.exe	105
PID 1804 wrote to memory of 992	1804	msedge.exe	106
PID 1804 wrote to memory of 4532	1804	msedge.exe	107
PID 1804 wrote to memory of 4532	1804	msedge.exe	107
PID 1804 wrote to memory of 5100	1804	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_43a572b7e7a5902c0bf966d5c71d0de06fcd04af67f1457e3850ddbe2a3f60ae.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff952b6c188,0x7ff952b6c194,0x7ff952b6c1a0
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,7572822382639139650,10958024294985194475,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,107567961118109672,11766723450823849778,262144 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,8976069220497117485,12987133993130658950,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,8247780897047848487,1464978858525922010,2097152 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,4038121851325366256,882308426501740473,2097152 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,17870842025219138255,2276396550985458424,2097152 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,10606667411351810652,5677821897020193858,2097152 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,535278764096389220,5545403220364580122,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,16509139699121271172,3967310597410870440,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,2900396186544169243,10499071640656867723,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,2900396186544169243,10499071640656867723,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,17325779899426817558,16289871594722614398,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,8682151527749093964,13175145332509296039,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,12208667320983548287,15250357175061524738,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,3516286774206202391,7599084999615718601,524288 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4200,i,3782460381231573860,16405873454283336491,262144 --field-trial-handle=2480,i,14052235927537905279,15463307918248402856,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5a0ab8e93b13f938d1b95d59a818453fbabeece18241827e8a6de0a907acdb74
MD5 258cb8da4e4dc37504719b7d73d1ba60
SHA1 888f631c1ff174b6a54389745d63d4759dafac3f
SHA512 39cbd40941b9428ad00a03b1429f6d69018825b4b7799495af781e71006fb5c836f67a8983fb53bff5654f67f89fc5c89264377899f35ea9043d181175444843
TLSH
T13D61D6812287837EF773607481CE11CF3E3458C9198B2F22C0D5E578B88F765A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a350.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a350.TMP
Size 3KB
SHA256 b8dee2186d639cc5b3613f1330921fe1a9ebc27c066e0a9662aade090da51707
MD5 aa672ef3305c0c9657e1511c6963cf00
SHA1 9982faa2c789d52259bfb74bafc0c6da58708845
SHA512 bc391a95baa06c9f95d02c0750cbb4555c8b151f688920dcad6040e39453af390b45f0e8c9c8fd460278dca4355974a00ee20a4f75a7b0566d3057ca4df88190
TLSH
T18061C5812287837EF7B7607481DE11CF3E3458C9188B2F22C0D5D578B88F755A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2d391808ef9cf25f7bff85b28cc09cfc1a5ca79ccb0a67b73206fa6e33f82fce
MD5 6cdfaaf248629f2fb5fb181c998fb9e0
SHA1 0d19148e1352377d651020bc3eb2050929984687
SHA512 caac8bdd213b8df3474b4852c1af8489dc8206cf6903b259dee2945e9b00289d8c131db987cb2cde85779ea53d8731e6d676540a7e43a32f8ed1ad7beddb9d07
TLSH
T17D419EB7C3D4867E890116F09B246E17DE1C0A56822C3D16C9E5EF2F57F24B5E101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0197b59f482e4e2a76f41680a7cc8fd061824faf69d31d73904fe0d22fc292a4
MD5 a6f8d70b6dc859cac044e1dc8d805a75
SHA1 2d5b17eb85352914b64f3b6276925f2cd4f978a0
SHA512 88b20296d6d79516b8956101ca922fd1489a9a9d9a09b118af86e4a534c6554a3173cfb53569b4f180035c648f64aac796d550bdad5bd1c70c80f27377789c1f
SSDEEP 192:sxZ7RlW//fssEnIdpdOHW6+WNGYgUDgIg5rJ:sxZ7q//fssEoAHbGLj
TLSH
T1A422B8526E38A97B8CCBD20DBB15BF53D5F95032A1941E58BAFC8A2C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e738a168e4f942b3153db7554512212871ca635b634a6b640d26f7d4657dce41
MD5 be5f27784fc7a3d829904c3b2d179f13
SHA1 b8692aabf6d3ed96ec31bd6d00069d251524f796
SHA512 2061c9eccb2176489692f65c24a384cb57421ef690c63b77332f659b3be5188f75908bdd954812cd80062aedcaba994198b0fdb6d6f56a7102e008764d3605c2
SSDEEP 192:sxZ7RlW//fssqnIdpdOHW6+WNGYgUDgIgrJ:sxZ7q//fssqoAHbGL9
TLSH
T1BF1296526E38A97B8CCBD20DBB15BF53D5F95032A1941E58AAFC8A1C04E7ADD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0919165ebb024b9ca1b48203b7ad69cb4926b4f2fc053d40c11b52b2b635aa6d
MD5 295dc36d6857039d77a0e8d7660901b4
SHA1 756ba21fccb0bd77ba2f51bb936f66e43d4b2f7e
SHA512 dce519189d473f531afabaad8c81e0adec5e07a5240965718b9580ed61e837f0984fec316bf9690cc95c8b2794826c4a746cd8e1c34f8f17614adf11f136d9ba
SSDEEP 192:sxZ7RlW//fssznIdpHOHW6+WNGYg9DgIg5JJ:sxZ7q//fsszouHbGYV
TLSH
T13B22B8526E38A97B8CCBD20DBB15BF53E6F9503291901E58A6FCCA2C05E7ADD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bd775d66a19461a4df8be0de38708173037bd9b5b966d9f8081854a050f8edb8
MD5 011d32123981befb8085a99ac84a109f
SHA1 f9340c249f8d85c616c420fb77cc2ebb1fede953
SHA512 7f4229ffb9cabcb44d3892cf5e53a921beccc1ac9bc5162c0664973f9da656072e4428000e18dce2a1527085bb060696e84c1a5bc6c0d7db211505a2f9356f21
SSDEEP 192:sxZ7RlW//fssznIdpdOHW6+WNGYgfDgIg5JJ:sxZ7q//fsszoAHbGiV
TLSH
T1A322C8526E38A97B8CCBD20DBB15BF53E6F9503251941E58A6FCCA2C05E7ACD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b3842f06db567b30d5f69829e183a6d92b0a9cb7903c6694d20032cce0ff6b13
MD5 f41887dbbeb69757bf8d65f481ae8ccd
SHA1 d5ea46c9beb54f95c386b368d3a68fccd5ca652a
SHA512 50da9098382be7165a1934098d92ade37372f75598665a1ec67bf21d46fca88efc3c10c1f42faa06379d621de9537d9168ad530b63b72ab7bbb1d6d3711bca0f
SSDEEP 768:DQichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzwronF9:DQichfPWvPZplu1jan+LKgzbF9
TLSH
T15AC2E93B640CCB7E4FC05E9DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 dd93ae366e4a5a676dfb3b80c8e4b13709bd5579cbf67fa07e4c0879db84fd19
MD5 860e6147f0a8c04c41b7cd3fe350eda3
SHA1 1ea734557c8ec46613ee0b3c95862e2ec410716b
SHA512 595881a092be3ca0750803ae918393509df4b115a5f88dcc30e5496f5b3de8552a837a5a488c94bbb86469db7a7b9b88e4ca058daf1e1155f4d0573f2da9d553
TLSH
T1A5510F1036BF06457ABE261990D4AB1B03427163B11EE62A3EE95171DE2BE1C1CBDCDD
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59404b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59404b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 baf097d6cbbcdb60abd2349ba6dd5227f19bea0f14d339464e0270444ca56d1c
MD5 ac0d0cc327033ee9fc101fda97ba2161
SHA1 e0006edc3aef58a77bedab1d4993e88a07dfb61d
SHA512 fcdc54adb98e09954be7a277b3ba9417d73be133e900bc03037b6194cde1af17afedd7eebd8b11a455b60c01d5424bb07eae49cdc870118b6a333ed2708da65a
SSDEEP 384:wiFiZcIMKsNA8TUNTUlIlnV5Pr1BGYX5EGQUFu87O6R2Feo/om:LFQJZwgTpHGYuGQT87TRQZ
TLSH
T1C0A26D729CB8D87B6DFBDA95F90A35039EF84067C6C5AA90E2DD5F2D00D7198130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c3c4352e644d7b000c583f54ddcd0c0b9976cd82ca32085b191bc94f4a2b3c65
MD5 d7eef004517d02c7996d708fa6c414f4
SHA1 11df0922bcd39f583bc03c461a0279d8e783bd32
SHA512 fd06827e87f4fb487fc7ee383fd819dbcb3f7d88db8e6092bca1beb039c3537aa5fd4e8def89947c43a8f52075990a6db8e1c54f42ddbc6b6c41db7b13a7b4fb
SSDEEP 192:LJONC6DphmqQmiUyHqq8wGYX59ezHC6mEkk7+aU6:lONC619pRwGYX5EG6pU6
TLSH
T12702E839EC787C7B4DE3AE45F44B2A135FA8112BAB912F84D6E81A1D00D724C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a964fc4aaef6568c709cbd8b6450ef138f20fec1d808cf51da7b620116163a8f
MD5 36319426a2de7ce1024f519a025f3b09
SHA1 0ba425387039f027218521ce29f15ef8caa82fcf
SHA512 48d4a99ce064346847702079455a9d905000227a2a8ba6329c2d97564f1cdad511578c1a3f9329d4f44d78dcdcf52b17c64088b1f449fee288912510464c2c1e
SSDEEP 192:uKzSsNA+QSYhiphvNxvQmiU1tvq4BGYX59ezHC6m4Une+ykH1w/5LemO6R2IMMXt:+sNA+V5lr1BGYX5EGQUFj87O6R2Feoo
TLSH
T118623931A8B8AC775DE7E455F40A39039EF851279BC52F90A6ED1F2D01CB698230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d08df995b7362efd4ea24ce2c4958c39a2c97981387e1c3b642d069bbd520d04
MD5 c3e6ad7888640199474f2ad1ffed30dd
SHA1 c2c32320379e00b2db56fd1595ec5b5e8ea439b8
SHA512 81168b682f1ef8d38ff19d7e026952de3b9572b1b65a577c8eb8efea0c3378a664cd3aa4d74a5c004381de966d609fd139ede615645ae69f6db7783316592b36
SSDEEP 384:HZcIgsNAnV5Pr1BGYX5EGQUF+87O6R2Feo/om:vg1pHGYuGQV87TRQZ
TLSH
T1CF827D71A8B8AC775DEBE055F84A39039EF88027D7C46F8095ED6F2D00CB698130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 779ea8a326221c2b894f141e4d1ae17c422c98bd9d282fa95dea4988836e59f5
MD5 60d9c3462fec40f3073309a0e89bcbb4
SHA1 79d6453c3c6ae5e99fa2424b4a122f1da939ec3a
SHA512 6b0ed3746358db401fba03a247c57eda9397e1f302c4802ff38d30b519c1cc19ec8d67024d171d7981ab0cdfd4e0affa9e84b28bf00a2737b7a84887f8a18d74
SSDEEP 384:4ZcIgsNAqV5Pr1BGYX5EGQUF+87O6R2Feo/om:GgwpHGYuGQV87TRQZ
TLSH
T194827D719CB8AC775DE7E055F84A39079EF88027D7C46F8095ED6B2D01CB698131B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 95e6f58c396441d9653f54ef9cf4de8ae1ff778596cc48dbc4768735b0d2a89d
MD5 92817cdf7a04a90e5336800aa3865453
SHA1 0fbaff43cfb7818c6a07e9e2d70e510503b504ae
SHA512 2cd6158935cb9cdda0f325c7572ddc941507958d79c704158bbd54b6cbc667a148c7d52c536f6e266c0a5e5edffad04843408b5c984cdb9ca4394d4e5296fe1f
SSDEEP 192:LJONh6Dph7qQmiUy6qHwGYX59ezHC6m4Une+vkIIw/5LU6:lONh61wOHwGYX5EGQUF48U6
TLSH
T135120935E8B8BC7B5DD3A851F44739135EA81227EB857F8096ED2A2C01DF19C230B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f1af9d6c26707b614274d3cc5e570e83681748fed3280cba72e2acf0c5a7e229
MD5 24bcf13a3e9d684068cbc46d2bc6c008
SHA1 df91385af9e4989c8059fa151ce73647c3832498
SHA512 2c56f052decad92918c29198bcfa551a9110954c16f708fad5b3f84d6f72d64cedc780758d13cfef70ee053ca143bc6be7b0899695bfc496bc0ae50a05f54a2c
TLSH
T11641E958A7E91148B3B76F569FF6A96D487BBD772F06C49D10110E4F4622A00C9B1B33
MD5 SHA1 SHA512 TLSH

Submit Download