b06cdd5f4af779abab42f74c2137d6c88e4884b9b5112add8555ff0f115cf988

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b06cdd5f4af779abab42f74c2137d6c88e4884b9b5112add8555ff0f115cf988.html
Size 191KB
Sample260912-vr78vsfa57
SHA256 b06cdd5f4af779abab42f74c2137d6c88e4884b9b5112add8555ff0f115cf988
MD5 6e836a60159ba87413a8efb726da4b0c
SHA1 bbbcc9265248273b72b6ec363effcf41e1a39286
SHA512 9d959da64af7bef55d57f628bb72669f12a0905c4e2de5a519aa2963005419590d052857aa0b4056de18ff9100a03637d4c4b1c5fe59844de95a233ef27653a4
SSDEEP 3072:em5QQNQ2/doFdo/jEjuYknEtetolYu9nICY6sbGRAFDZAt3v:eIQQNV/doFdoniv
TLSH
T1B0142EA763508DD4FFFD2AB34DE1097F3C2A4937890260A5A39DDD89CEFB5190349886
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338357800083982"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{86BCB2BC-E077-4357-B4DC-35DAC02128F0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3476	msedge.exe
3476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4544 wrote to memory of 3064	4544	msedge.exe	85
PID 4544 wrote to memory of 2360	4544	msedge.exe	86
PID 4544 wrote to memory of 1632	4544	msedge.exe	87
PID 4544 wrote to memory of 1632	4544	msedge.exe	87
PID 4544 wrote to memory of 1632	4544	msedge.exe	87
PID 4544 wrote to memory of 4396	4544	msedge.exe	88
PID 4544 wrote to memory of 4396	4544	msedge.exe	88
PID 4544 wrote to memory of 624	4544	msedge.exe	90
PID 4544 wrote to memory of 624	4544	msedge.exe	90
PID 4544 wrote to memory of 3704	4544	msedge.exe	91
PID 4544 wrote to memory of 624	4544	msedge.exe	90
PID 4544 wrote to memory of 3704	4544	msedge.exe	91
PID 4544 wrote to memory of 3704	4544	msedge.exe	91
PID 4544 wrote to memory of 4248	4544	msedge.exe	92
PID 4544 wrote to memory of 4248	4544	msedge.exe	92
PID 4544 wrote to memory of 4248	4544	msedge.exe	92
PID 4544 wrote to memory of 3376	4544	msedge.exe	93
PID 4544 wrote to memory of 3376	4544	msedge.exe	93
PID 4544 wrote to memory of 3376	4544	msedge.exe	93
PID 4544 wrote to memory of 1704	4544	msedge.exe	99
PID 4544 wrote to memory of 636	4544	msedge.exe	100
PID 4544 wrote to memory of 1704	4544	msedge.exe	99
PID 4544 wrote to memory of 636	4544	msedge.exe	100
PID 4544 wrote to memory of 1492	4544	msedge.exe	102
PID 4544 wrote to memory of 1304	4544	msedge.exe	108
PID 4544 wrote to memory of 2644	4544	msedge.exe	109
PID 4544 wrote to memory of 1480	4544	msedge.exe	110
PID 4544 wrote to memory of 640	4544	msedge.exe	111
PID 4544 wrote to memory of 640	4544	msedge.exe	111
PID 4544 wrote to memory of 4716	4544	msedge.exe	114
PID 4544 wrote to memory of 4716	4544	msedge.exe	114
PID 4544 wrote to memory of 2124	4544	msedge.exe	115
PID 4544 wrote to memory of 2124	4544	msedge.exe	115
PID 4544 wrote to memory of 3476	4544	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b06cdd5f4af779abab42f74c2137d6c88e4884b9b5112add8555ff0f115cf988.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x210,0x218,0x23c,0x2e8,0x7ffbe92cc188,0x7ffbe92cc194,0x7ffbe92cc1a0
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,13793645886245139422,10457089916520182403,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,5554942243753601182,9874815611195430754,262144 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,780404981265552700,11893045779629320817,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,4250935261091634436,9655598118350317417,2097152 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,4158229263169144639,11468049498928268895,2097152 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,4683273453892904179,16308190403225072538,2097152 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,17433616972711187613,14905029526800171445,2097152 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,17118804241251613480,13477487505477430693,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,3031240070203074174,14550062189357811039,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,15927518523926683448,8505354333352367978,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,15927518523926683448,8505354333352367978,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,18066446678372049192,10819148089670783893,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,525484091376109363,11672676051372810625,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,7928314282730877947,6973442248266618185,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2072,i,5111584968765241792,17813254752711595377,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,1216842239993936389,4856864050693816799,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,3446772193925442573,9064073835970608533,524288 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,877001081424352271,3172719952780642380,262144 --field-trial-handle=2264,i,3895635433399499064,15213110415136752,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9c981ae8acd0a47391af2799cd687fae8acdb8379835a0880f467b94b012fd5f
MD5 5e9b9b5341061066f8fb1ac1ec1d7999
SHA1 5fe948354892c2fc40e050bc9a8311027354f37b
SHA512 a10b760dbff9a63d3a2863260fb02eece8f3a786c9a032c18ad66b5202b3ab5365bbd320126e7f59ec3523a9156245a6c74113d488352be2279aafb0ea6ba1f4
TLSH
T179E026A409CBE2AFB2406A47856C878CC2803B4F92CC7A4A57C9D4C9F441254BAC2BE4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e6738aa010be7a5bfc5f8f8213226c0f8b0895ef1ce6cd8a44ca63a73eaa3026
MD5 95d0c1ef872548ae8c3face400a65660
SHA1 b70643ffe6ebc96f129724ea0c82c7e67fe7523c
SHA512 78576781ab8617b695dccc6fdfc84abd2b8921989e66624cbf54f8c70c6d95b27e0fb3e67305ee946ca275f42ed2a76159ab29d0c4f9d23de4604ba20249b54c
TLSH
T12B51318056A25370FF64F87E99E5136F3B38D481D7CB6E5A08A6DCBC7BCA39E9106044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58df4f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58df4f.TMP
Size 2KB
SHA256 f395790dbb678ee4f776b57e8e564b17361cf952c4f64e9c63daa160034a632d
MD5 f8573410a9b10c99e5a4339b27f02b23
SHA1 d33a0cf6d1727e8d8e36ceab672d6578b6cca159
SHA512 85d51cd7fe30c2dabe60efc5ab3ccfe51f95082a07d6c33469ceec91d7d86275233bf2a24b7a962d315b70f5bb0ae8c369be29da5a6750b954e1049238795a87
TLSH
T14251428056925370FF64F87E9AE5136F3B38D481D7CB6E5A08A6DCBC7BCA39E9106044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 450c7b30d098000a563c8b37811405c5e445b3674365fcf6c2ed71e60f38576d
MD5 7c9dc6d1a87af8885d92d112a9cab40f
SHA1 44f086c49f30804f3f3f3ce939aaa4e1b01a11eb
SHA512 f3b9988cc43477e728a379c35e09268158923b0c52d8a4d6ca37d572dde16afbcd594a2f73bcb28ea07df5f587cfef7e2574cccbb69feb7e57917c358bf6c16d
TLSH
T18F419AB3C3D8877E891156F0AB296E2ACE2C0A06422C3C56C9E4EF5F67F25B1D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b1b55bee5616ec5d2768b1dc1397d0f10cf794a93617124a34bd84d5554570ef
MD5 a374bb535312dfe724bee71c19c232e5
SHA1 166a8c59801ceec6aa5ba077310af41e97013fd0
SHA512 7cfb0f6982119484a0789d4e495cca35e2c2ba8cf656967da42a4a035f3858132f2d41c5127f503d901a7a6b99a7a676680287df2958fde36f2ff40da3a1c03e
SSDEEP 192:sxZPRCWc/fzs/JwIdpd5HW6+WNGYapYLXIgrJ:sxZPfc/fzs/vbHbG09
TLSH
T1BD12B7566E38A57B8CCBE20DBA25BF53E6F9543261D01E48EAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cea255b470a6b64d3296023e05e5838bdb28c1db15a9d689dd4fbf6c0c4a7e70
MD5 fbf2398c052160fed063279dc314452c
SHA1 2128ab4b04d6b5d28344c915f058554671a9902b
SHA512 e7688f19732281efd11a3f7da5e3f8669a2697454fd0683d6ee80b37a898421f1bdf4cbe06f8485a731d0dfa96a49cdac672dc373bfa38aeb6b26c94372c16f8
SSDEEP 192:sxZPRCWc/fzsSJwIdpH5HW6+WNGYapNRLXIg5BJ:sxZPfc/fzsSvZHbGd9
TLSH
T1EE22C7566E38A97B8CCBE20DBB55BF53E6F9543261D01E48EAFC861C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 91c0e1ce7c3c69c9c191874424c70f5df3df0fffb2e8d8b86ee07da590891a88
MD5 4aef9faeffae3623f18bb2050faf02ef
SHA1 ba7fb2f16e8bfeb9a7aa1ff22efd3efecf48b55b
SHA512 d3573c7c828ea613387b17bdbb5c1504d27230d7b04ee05998daaea0cf230bcccea722c0afa4c6f265d5b538508552ef27aedd323d2a2647dd1cd81596b1567e
SSDEEP 192:sxZPRCWc/fzsSJwIdpd5HW6+WNGYapDeLXIg5BJ:sxZPfc/fzsSvbHbGK9
TLSH
T1CA22B8566E38A97B8CCBE20DBB55BF53E6F9543261D01E48EAFC861C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 550d636ee62104b18988c787f956fcbe038ff48adc01dfd0d4f7e8be39530bdd
MD5 039d4e5085e20f485a5890f4f0e99187
SHA1 6736214dc35b1f1fb724d5113a1c5a8cccb843c6
SHA512 ed28e63431d8a6daf3106056ad0d76306b7c79e52906f7dc58802263744974f1bdc182d1881b1de498fbc4f7fe508a749572567e8728373f8418b08946a6d971
SSDEEP 192:sxZPRCWc/fzsKJwIdpd5HW6+WNGYapYLXIg5zJ:sxZPfc/fzsKvbHbG07
TLSH
T10622B7566E38A97B8CCBE20DBA55BF53E6F9543261D01E48EAFC861C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6aa7e651f90b62805622cf3d216b534ab2253f30cdab977e836855395a4d4ddb
MD5 5b9ec8ef096a3158cd5f55c7795dde92
SHA1 240c99f8c5a99c23f4eca17ab51a547010c44e26
SHA512 1b10dd587cb34e594479ad73e37a28b1131710b0162817c1ee6e70cc28111ce6bd512e74f9e19da8c0eed7ee8769500f1ea7e146d2578b15b47eefaf6d9fc781
SSDEEP 768:/BWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Aro4gfeEmRu:/BWPcLKWvKeEeu1jaClLiF7L4gWEmRu
TLSH
T1E3C2FA3F644CCB7E4FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 581b9964b0bf579827f9801dc332531fe3b4bf56a34c00a36b6e60aa3229e506
MD5 b54de0246f7b86c614d9dba11afd1167
SHA1 9fc9436dc3a63effa9e4cb450a4c9a7b8bb3c70f
SHA512 ca43f46b9fbabb49213bc7535ffd9c485cfce0da63929d21fb2c03d68da039256bb1b15dc0b5082ed5083ebfef4f149a9cdb565abfb9b4d1effd4abcbd4a0e04
SSDEEP 96:KMIAKZa+2PSKoEjt+K+AqK6Aqtm68wkMsAw:CjB9JQqtm68wkTAw
TLSH
T1FDB1DF1132BA024238BE650981B58B2E52913573751AF62F3FFE44A29D6BF184CFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 221628894d1d2764e08d317f965620921bd55b294a0913cac6fa10b711d45ba1
MD5 0ab4c8e423f2aaff561594d876ef7b5f
SHA1 3c6d04cc9ac816960a7d99091cdf662021939153
SHA512 63dbe81929b5847f7d9d3964034b001c7618e10c8f4495f280292b3bd869dabd71f343402479f2128c80a7af552a5e6c07efe5f730a52520f08bcee8b7e669ed
SSDEEP 384:5ZcINsNir2Qu81OP8zIGmFAk9wXmiA7O6R2Feooh7UQox:RNq8aWCTAmiA7TRf1y
TLSH
T187828C725CB86C765EF7E544F8473B139EF8806396C92B80D5DCAB1E00DB658130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8b2cbc1d032ee289d9b73d7c1e3953860f1e8badf66277c1b5280b85a06669d9
MD5 39704e82440b49437f5e43ae0e6ed9c6
SHA1 af62df53cccec5519e4b638b36f9c9b75ff39b5c
SHA512 1e06ff88c44febcb8d32657d2ffb082b034a8978b464d1870f7d4e8a5984020006f0a730b8e51ab6237f39614510913ab7dc9be6d3b1e5935d79f75cee141bab
SSDEEP 384:uFiZcIybsN68TUNTUlIly2Qu81OP8zIGmFAk9wX5ViA7O6R2Feooh7UQox:uFQu7wgf8aWCTA5ViA7TRf1y
TLSH
T16BA27D7348B89C7A9EF7AA44F94A36139DF94067C5C9AB90E6DC9B1E00DB298130BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d28f8fa795251cd8c4af209f4f7154063c09f02c80d59fddd939cbaa15d4cbbf
MD5 530a524d80314470ff536263d289c31d
SHA1 006758259d971cb8839028ecc2382bb6a0aba4e0
SHA512 2841aeb2bf18451c9f442ad8dfa8d3fd77eb4388b866c6c9aa8ddcb19508c85774ea5388691426d2c75cbef2a010a1f668f4213c5756f5b2ea9c689f2f1b58aa
SSDEEP 96:3qONkgQsjpfe/tyng7X5ih/cIPURHl8h4otop5MYDWNBnP9ZvEI0IG2jbg00Lx6S:aONI6IE7QmiUytWTPuIGmF0LVC7sDbU6
TLSH
T12202E839AC787C7B9EF3AD48F4872B23AEA5112BA5952F84D9E81A1D00D725C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6a8c678f655f79f1bef1cfbff2d1f6bd277b65e490c8bd0b96d50488cd244c18
MD5 8b08b79e9f9a0268ba4e5fdad4ea2162
SHA1 a990751ee2a6e9f1433e278bd61b3b41b253765d
SHA512 29890e938170464d7e20da3bd93667a03c67aa6a939f3bdafcc53f281351277a86d9173d6436d9a6cbcf330a8a380f2f17ea3f747f8af38df6b02285d38dc7a7
SSDEEP 384:1ZcINsNiy2Qu81OP8zIGmFAk9wXmiA7O6R2Feooh7UQox:NNT8aWCTAmiA7TRf1y
TLSH
T149827C725CB86C765EF7E548F8473A239EF8806396C96F80D5DCAB1E00DB658130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 5ac4048567850e7f5fef5be5d0dbd00c637e99485f1f8bb97082bb02453edf3f
MD5 7508caa2aaf61ced3631e787077a8aac
SHA1 c79ab349960b35dbd680d2bd50b7fc374d966c1a
SHA512 0a649b57803a1a83aacf72b9cc038c32bba3dd07245347f00890f39dd59408d8bbfc6834975b75052b8842f769cdeff6d60252d41a33a267ee6ea175a4d907c3
SSDEEP 384:4sNiU2Qu81KP8zIGmFAk9wXmiA7O6R2Feooh7U0:4N8KWCTAmiA7TRfF
TLSH
T135624B36A8787C378EA7A444B44B3B23AEF9416796C92F90E6DC5F1D01CF65C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a2d53de082be3a82427d7126770b653988f1a46e63ee933c972aa3a3d7a0b341
MD5 857d2d676b4be45eb01de80388a48716
SHA1 1b7d41f9252516fecdc3e56498a9dbf37f50f77e
SHA512 849b36f19df932f83c093722332eefdb33070f4c17bce6862e903d50577f5e784d2b272e25bf86dfa4bbc7d2186c04a2b250b77e574b613b823f673dacea2228
SSDEEP 192:aONr6IEwQmiUyLWTsuIGmF0Lk90FX927Hm/fU6:aONr6DwXsuIGmFAk9wXaHAU6
TLSH
T16512F935ACB8BC775EE3A844F4873A139DA54227EA897F80D5DC1A1D01EF25C230AD56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ff3aa3f-52e5-4996-ac40-f667992614f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3ff3aa3f-52e5-4996-ac40-f667992614f1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 143152d06340910791617013a30ecb70917b65d622834a675b19314ae8f2623d
MD5 abab68ce89192880ffbf31cf782dc808
SHA1 f60e879a8bdbe04bb545f5b14e76580772111018
SHA512 49a088639cd0ca3d9813e12122fb199eba6f58c4a48ab1b378b038d291398fb7c5a61c51ce9f803392cdeac2764e10cfa5143594ad098d962af0b4003b3eced3
TLSH
T1CD413A5CA6EA0148B377AE4AAFF6A96D487A7D372E0BD49E00110D4F0A62F40C871737
MD5 SHA1 SHA512 TLSH

Submit Download