48eee9790830d01dcfb60e4904ac6150a0bf557a6acde06f48705257ad876a46

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 17:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_48eee9790830d01dcfb60e4904ac6150a0bf557a6acde06f48705257ad876a46.html
Size 10KB
Sample260912-vp5d7afa33
SHA256 48eee9790830d01dcfb60e4904ac6150a0bf557a6acde06f48705257ad876a46
MD5 d45b8418eb36df2a7fee47e594f7d3bb
SHA1 49c5c4df1515e148e6fe1092854eb8fe4a639cd6
SHA512 be1e8af41b9b5c5f50b4d7f7ca78d42329d0b6bc65fa618dca6a58014597f53b04d2aba319063af969e08de9311d97120827509589cb7b8a19f522ede7352e9b
SSDEEP 192:lxBjBLFP/WsknUY+q2Hri7SWfBu731Dd6MIU70syXlHHWhadXSZmJR8V3pj0Vpf4:lxPFP/WsknUY+q2Hri7SWfBu731DQMIM
TLSH
T10422CF08B2C4C526B131128FC6156F1FC936B31692909E527E4C4E96FFBACB34FA11A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338357656730397"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{DCF4AC3E-085A-4645-BC2B-FA8EB50DB40B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe
2692	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2692 wrote to memory of 2252	2692	msedge.exe	83
PID 2692 wrote to memory of 5000	2692	msedge.exe	84
PID 2692 wrote to memory of 4756	2692	msedge.exe	85
PID 2692 wrote to memory of 4756	2692	msedge.exe	85
PID 2692 wrote to memory of 4756	2692	msedge.exe	85
PID 2692 wrote to memory of 2284	2692	msedge.exe	86
PID 2692 wrote to memory of 2284	2692	msedge.exe	86
PID 2692 wrote to memory of 4428	2692	msedge.exe	88
PID 2692 wrote to memory of 4196	2692	msedge.exe	89
PID 2692 wrote to memory of 4196	2692	msedge.exe	89
PID 2692 wrote to memory of 4196	2692	msedge.exe	89
PID 2692 wrote to memory of 4428	2692	msedge.exe	88
PID 2692 wrote to memory of 4428	2692	msedge.exe	88
PID 2692 wrote to memory of 1680	2692	msedge.exe	90
PID 2692 wrote to memory of 3492	2692	msedge.exe	91
PID 2692 wrote to memory of 1680	2692	msedge.exe	90
PID 2692 wrote to memory of 1680	2692	msedge.exe	90
PID 2692 wrote to memory of 3492	2692	msedge.exe	91
PID 2692 wrote to memory of 3492	2692	msedge.exe	91
PID 2692 wrote to memory of 4144	2692	msedge.exe	95
PID 2692 wrote to memory of 704	2692	msedge.exe	96
PID 2692 wrote to memory of 4144	2692	msedge.exe	95
PID 2692 wrote to memory of 704	2692	msedge.exe	96
PID 2692 wrote to memory of 4284	2692	msedge.exe	98
PID 2692 wrote to memory of 2556	2692	msedge.exe	103
PID 2692 wrote to memory of 2952	2692	msedge.exe	104
PID 2692 wrote to memory of 3432	2692	msedge.exe	105
PID 2692 wrote to memory of 4180	2692	msedge.exe	106
PID 2692 wrote to memory of 4180	2692	msedge.exe	106
PID 2692 wrote to memory of 4608	2692	msedge.exe	107
PID 2692 wrote to memory of 4608	2692	msedge.exe	107
PID 2692 wrote to memory of 432	2692	msedge.exe	108
PID 2692 wrote to memory of 432	2692	msedge.exe	108
PID 2692 wrote to memory of 4156	2692	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_48eee9790830d01dcfb60e4904ac6150a0bf557a6acde06f48705257ad876a46.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff981d5c188,0x7ff981d5c194,0x7ff981d5c1a0
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,13881874838623754527,10657483911034382535,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,12417312112294843792,8281440865906678119,262144 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,2321882881304284574,8946105834986246761,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11818050087738914719,10171684273882454533,2097152 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16734898463819700155,16423259425555829497,2097152 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,6075591440693400455,15894932609697709021,2097152 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,15434298026469033350,1124455815160980961,2097152 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,16601813704223419805,7927362454578222477,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,2256384996539170442,10713515119424925637,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,10312402068476532099,5309678493361820393,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,10312402068476532099,5309678493361820393,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,15535066066363294980,17281296708572037457,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,15842881923902983481,14702470992351082535,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,5210169372652015083,17998550420068869295,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,6570212405761536365,9345149914958963263,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,1652444422520215430,13858703482980514353,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,12963317545142572496,8680645237677695248,524288 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5984,i,378286269991785285,1919591420773830794,262144 --field-trial-handle=2272,i,16868284834378201589,6918464880246974316,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 43b06005f1638c04a810021a0232d00fc59629d5012ae7f0744e87703a62b6b9
MD5 0c245e25f81ec2c75d7ed2be7aea1e7d
SHA1 efde95de6c7601beb120b1def0bc5dd406f5afcf
SHA512 8038fdab6b58e893a5888eff5e9c0a7e46eb6e0fa4c2f06ebc477b9f1592a0e5824c7e441a152a6460e3f707cfb0658a3534e621ba8264cdc9a5989d44b99e55
TLSH
T160E07DA406CAC2AFB280AC47497C4B8CE290378FD6CC6A4A278CC4DDF141240BBC2794
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2f6789e46efd2fe56d23add93a1ea4017013ac079dd3df1a9467c1a20c42e5b1
MD5 a58033bb9d252def1314894f9934bcb2
SHA1 c9cb4bc8c1ec9e8b0d7dab72d198eb9c44c9ac02
SHA512 6d65745b7c80c0c1f53da2fb138362fc3f2a38f785fed5094c15aed6506b36400df16aa8a7f98f58db50ab0885d67583cba0401ab8a9486200d53c0177900020
TLSH
T1FC6181B5F44474A8FBA8C0F394E5ED8B3A795081B9C31E221164FBFD684A3C49F3A118
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3549dfa110be4503c737e8771802af7690f11085717d4132c6e8e5b1958d83a5
MD5 117d3025d961782ec2f43f269240a7de
SHA1 6cd8985ecdc6a37d676d3e6d628b1a7ae3501d97
SHA512 8341554685417dc9f9a5b0475bd347bb5bd50a90bbae817ba9cc1037877060551e14d23e4432965f31ac14ddc478f59eeca21bd34bdba4d93a0b8f95fb4d811c
TLSH
T103219EB383E5867ECA0156F05A14AE2BCE1C0506431C7C2589E4EF2B93F3475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b8aab468c9800fa37c6400838ebeb4a7a9599bfff05e5f1175a4cc907f729c08
MD5 e8a7c9df43d97bb945138b1ed171b79a
SHA1 b094584f1379c2a5a2586a05b3bc3efed28a599c
SHA512 7c6aa79cca13028f72963d1ad3ed78918f36796bbae967c89779a65ea990ecbeccdb076cc6a4c1cbb81c5cf08e3f9015084c6393511536b08544743d709b14f0
SSDEEP 192:sxZ2RXW//fssdIiIdpd6HW6+WNGYaQkmIgrJ:sxZ2E//fssdILEHbGS9
TLSH
T13512A7156E38A57B8CCBD20DBB29BF53E6F95032A1941E48AAFC861C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a6c6d7fc317ec3d16d994a90f7a0d9608f145be2f6afdcc477ab0c54faacd9a8
MD5 c28afb50d821f0846dbc27b8b534a93e
SHA1 c2e3fdfa24ba5d512b5318d6b9653178f9c3d975
SHA512 86a70766b9c17e6b6186d2420c279a248075a800d91c37f8d18c29e90f29b8ac80f665beba5715c54dfa04d1f4ba24affa22a216acd364fd5e9cd6ead6ba874d
SSDEEP 192:sxZyRXW//fssKHiIdpH6HW6+WNGYaLkmIg5MJ:sxZyE//fssKHLaHbGvm
TLSH
T16A22B7156E38A97B8CCBD20DBB15BF53E6F95032A1941E48AAFC861C05E77CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ad3812762867ceb00a9218b4a350807b1cc859eed7626bb1603e0e33b3e7678b
MD5 744d51086845a6d4aa1fd024bb6b2823
SHA1 b9ae6ee3cbdc720607a925ac8d3687f1dc763598
SHA512 506a95d4d8fe626e31004189b934cd19a70d26370ebd270fd50c9c05fce3b41330a3d434ba73592508564a9df178e32a980e545c87cac5983cf20b5a0f991224
SSDEEP 192:sxZyRXW//fssKHiIdpd6HW6+WNGYamkmIg5MJ:sxZyE//fssKHLEHbGwm
TLSH
T18D22A7156E38A97B8CCBD20DBB55BF53EAF95032A1951E48AAFC861C05E77CD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 462f11968956dd7756c2245ca05744b140cfa355d125d4b77c02af6b736b4adf
MD5 66607ee808bb832138f117baacfe4871
SHA1 f3f0984a985e61eeaea9516e216788862ba4a762
SHA512 90c274fadf69ff7a6aaff40e3399e130e9364f8b7ac0b291005a53b92bae172f6a3001351165dd90c874911db33764c23e8a3cff1874e672ff6f5d539ea6549b
SSDEEP 192:sxZ2RXW//fssaIiIdpd6HW6+WNGYaQkmIg5mJ:sxZ2E//fssaILEHbGSs
TLSH
T14922B8156E38A57B8CCBD20DBB19BF53E6F95032A1D41E48AAFC861C05E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 02312eae627223117419df58661286cff751100f996b0077ae514d0a29ea9a39
MD5 4dbf3a1cd1aace294b0fc9a1253dfd9d
SHA1 bcd93e84ae924e6ceeb71ea26fada7231a0ee120
SHA512 f39bd7882eb8ab2305b9013c823691e95c1b9f3613fe345d065789329828315a6e1e5df02d2f6096ab33086f81a6de1115a6afc67fde823c9595e451837f4685
SSDEEP 768:UtyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3nroRZNDn:UtyQRbrWvvlpZu1jaXKLf330RZND
TLSH
T188C2E93F640CCB7E4FC01E9D9C6A6F976EA802C766588D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 25ce5dcfcd0d09d4e9efeea62f7bed7a7d4a66dcdccdb9fe33cd62abc9c11874
MD5 d630abfaeb1c861739618555190b5f85
SHA1 2fef7c7eb38e2d1ed882b28347144de43438a0b6
SHA512 d3c372013c7a1733692c9ca6c76d7cfccf77176f4c207bf79a20e6601e233a2aae0ef35dff6b9a75372716fdcc39cc2e6688dd850ac4afeb2b4ed7dd4827abb9
SSDEEP 96:KE4gK1eySOEKXqtvmdJvtNxspcsuhxK24uPxKnfUhNSHLixVD5+:aj3KvmdJvtNKpcdhr4uPEnfUhNSHLix2
TLSH
T19791405636B70200787E694881A8971F42A171737108EB7BBFAD41B6CE2FE085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c74e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c74e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 34d8408901d5ac092f6f37a6afa5e79c082525fc8671f13a8dcf4eabd6eccfd2
MD5 bca248ee243dfcc6ef57f2a6dc757ed1
SHA1 19513ce32c0919bc75396c359b151d19eefc62a8
SHA512 2856f93a646d83f695c0c08591aece2c92c4ee1b306fa11cd0dbffa957cfd19c6e948e558722bbae39c8f9ddd2a3c5967621476cb81a600ca740922f1e36c8fc
SSDEEP 384:QiFiZcIadsNQ8TUNTUlIlmxiKCp5u8igAAZYoRaBkwc0aGon:rFQUhwgqgkjE5aBkuaGk
TLSH
T117A25D325CB4DC7BADB79A55F54A36038EB841A7C7D8AB80E6CCAB1E01DB1D81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ccf8272df8837cf9b56781649ae55737a9982b605a659042da6b2deffb1c276c
MD5 106e32c3fed3c4446ab45d308a650158
SHA1 b127ee519fae5b0eabd6fc3d38c2bdf479649496
SHA512 821f1931ec2f08e51dbd7f1153f4f815a70eeebeea486993a67147f738cbdb259b3a60237ce7c1b230af07d4d11486ebbcc558a47f975f840c8083d5b77e187b
SSDEEP 384:bZcIPsNQmxiKCp5u8igAAZYomaBkwc0aGon:DPggkjEOaBkuaGk
TLSH
T11B828D351CB4AC76A8E7A555F54636039EBC81ABD3C86F80D8DCAB1E01EA6D41307A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9f5e6e965fe78b7c7c921d7c85345a6f13ac8e12dd8d1418f03f51e542d3ee34
MD5 d6b4ed8481e2e664a4880c9db2c53e16
SHA1 5d5d1a8c20624b0665d3799d04f834ee440f2774
SHA512 381be5e04dad21dfea184a6332be31189393586f36ad6d369bce027508e9c0bb50a7796ae85abc11f46a291151e26514c8abba6f677afec880744558cf951ea7
SSDEEP 192:SONh6iDCQmiUyTJHq5u88PEvIBBSqeBROU6:SONh6/gHq5u8igA3aOU6
TLSH
T138020A396C387C7B9DE3AE15B5877B175FA8117FE6951B84DAE8172C01E768C1303822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b6a1d76505c948c418361c134559fb4ccf8593b1e4d9cdfbf194806a4f19c07
MD5 8b0e9594eae7a2b9584e0928369e9320
SHA1 0fbbe0cf31db070774736fc9cc4f39d74ffdf40b
SHA512 7bf026010064b2d06bfdef3dd5a7b500377c055537da0aba7e1da04af6bb71d923790ace56aaf4c783a8a7d8307036400a425056abd11599e00724b571201f7c
SSDEEP 384:0ZcIPsNQDxQKCp5u8igAAZYomaBkwc0aGon:yPxgkjEOaBkuaGk
TLSH
T17A828D351CB4AC76ACE7A155F54A36038EBC81ABD3C86F80D8DCAB1E01EA6D41307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0de4d7f1ac92b6435df5de28c41a6b6318a9446cb153efe064a7f354edae0eba
MD5 22f58bd0630ea4ddb3a28641c17f5d57
SHA1 0b45c4ddd2a76dd95e0061ad50f4b2be606574ac
SHA512 ce98d5091120e9efdfeb02bcb614647f57b68668fe4155650219cdb1f9ba2214572145bc5422cc810ae0f9ac168bec001932d68633a408155182a3d872520518
SSDEEP 192:SONp6iDiQmiUyyJeq5u88PEvIBAB3PwoFuZD/OU6:SONp6Lneq5u8igAAZYocaU6
TLSH
T111123B366878BC3B6D93A961F48736139EA8426BD7887F80D9DC2B1C01EF59C1307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0504e8cc-9713-4923-b631-81029d4aec75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0504e8cc-9713-4923-b631-81029d4aec75.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 49f273cbf90563e64cf26ee7e036e6e56e3aedf6bf6677a03b4b30ff95b380d7
MD5 44986d51aaeb1711ae6bdd731c29439a
SHA1 d956e93e8ffda45b5cefe44d754c9f349eeab8d6
SHA512 bca43a6eab5722ca872c7658c4eb2296143334e145562c99a76485991aeaa3bbc0ccc56c5031f07d7fbfdc0cba0b6d694f46ee9c242f6d3805bdddbf2c4427e2
TLSH
T12041D85CAAEE1148B3B76F5A9BF6A45D487BBD732E0AD49D00110D4F0972E40D862B37
MD5 SHA1 SHA512 TLSH

Submit Download