19a2d21e981bfc942988256cebcb371c193c3070dc07f69a2c5deec013a3fcad

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_19a2d21e981bfc942988256cebcb371c193c3070dc07f69a2c5deec013a3fcad.html
Size 1.2MB
Sample260912-w59jhsvthy
SHA256 19a2d21e981bfc942988256cebcb371c193c3070dc07f69a2c5deec013a3fcad
MD5 6dde7509829b9958e5baffe9feeee3f6
SHA1 ae02a04d9d332f6d14ff38d6ac1a4040d96d61f0
SHA512 16cccaeb32a27bbca5238574e38162089d529c9543c627856394ec311823061b194fd4d0e6d3842f0174d31399a7bbec89bf097e28b31cd6f4f3b2d9ff45c627
SSDEEP 12288:lCeSXyMTNrjTEY0+kC6bhxs7jGCajNWWC:lCRyyjT3kC6bhxsBajNWWC
TLSH
T1D245C6DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338257047084449"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{B84F7D0A-042B-4525-976B-50FC1E03015B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3296	msedge.exe
3296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 2532	4888	msedge.exe	84
PID 4888 wrote to memory of 4696	4888	msedge.exe	85
PID 4888 wrote to memory of 4604	4888	msedge.exe	86
PID 4888 wrote to memory of 4696	4888	msedge.exe	85
PID 4888 wrote to memory of 4696	4888	msedge.exe	85
PID 4888 wrote to memory of 3132	4888	msedge.exe	87
PID 4888 wrote to memory of 3132	4888	msedge.exe	87
PID 4888 wrote to memory of 3724	4888	msedge.exe	89
PID 4888 wrote to memory of 3724	4888	msedge.exe	89
PID 4888 wrote to memory of 3724	4888	msedge.exe	89
PID 4888 wrote to memory of 1368	4888	msedge.exe	90
PID 4888 wrote to memory of 1368	4888	msedge.exe	90
PID 4888 wrote to memory of 1368	4888	msedge.exe	90
PID 4888 wrote to memory of 5052	4888	msedge.exe	91
PID 4888 wrote to memory of 5052	4888	msedge.exe	91
PID 4888 wrote to memory of 5052	4888	msedge.exe	91
PID 4888 wrote to memory of 3896	4888	msedge.exe	92
PID 4888 wrote to memory of 3896	4888	msedge.exe	92
PID 4888 wrote to memory of 3896	4888	msedge.exe	92
PID 4888 wrote to memory of 1188	4888	msedge.exe	93
PID 4888 wrote to memory of 1188	4888	msedge.exe	93
PID 4888 wrote to memory of 1188	4888	msedge.exe	93
PID 4888 wrote to memory of 1840	4888	msedge.exe	98
PID 4888 wrote to memory of 2472	4888	msedge.exe	99
PID 4888 wrote to memory of 1840	4888	msedge.exe	98
PID 4888 wrote to memory of 2472	4888	msedge.exe	99
PID 4888 wrote to memory of 412	4888	msedge.exe	101
PID 4888 wrote to memory of 2828	4888	msedge.exe	106
PID 4888 wrote to memory of 3168	4888	msedge.exe	107
PID 4888 wrote to memory of 2404	4888	msedge.exe	108
PID 4888 wrote to memory of 3324	4888	msedge.exe	109
PID 4888 wrote to memory of 3324	4888	msedge.exe	109
PID 4888 wrote to memory of 2380	4888	msedge.exe	110
PID 4888 wrote to memory of 2380	4888	msedge.exe	110
PID 4888 wrote to memory of 3296	4888	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_19a2d21e981bfc942988256cebcb371c193c3070dc07f69a2c5deec013a3fcad.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2f0,0x7fff16cec188,0x7fff16cec194,0x7fff16cec1a0
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1908,i,14951047269182499021,2527768158327402119,262144 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,6845989885012586401,5535244033002771407,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,2433898222361775972,16087514590790163380,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=1916,i,4805894469539717218,11621983624812438147,2097152 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,5761466169125770364,1087578216151260316,2097152 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,11336499115664918362,6436513212111052232,2097152 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,853340802525387230,451456148919706179,2097152 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5104,i,1064784756400724665,17211640853904532703,2097152 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,1861413775740982536,2165910177503821289,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,14643761117753360116,636332583147571084,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,6733384178413117729,15151292662867019092,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,6733384178413117729,15151292662867019092,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,11981625691953666272,8362237987044290538,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,4652413853012316838,6024174492368295205,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,12750811322091371025,3682242301951168059,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,4405296810251279348,12335845965748481029,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=4008 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,12293279940868072661,7763925594942962702,524288 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3456,i,14747034821398240466,12521279307109471317,262144 --field-trial-handle=2068,i,3195410232937237755,3059369183789736030,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7ac0be1c88f789b27183bf5d89be643400c30a6984d9ff15c5dd4e728a97bde5
MD5 186d06faa27707433a42d8b78007d201
SHA1 0e54c41903ed93c27867d9c6f3e24176ba8926e7
SHA512 9afbdb6680d93495998eba13dd4e2fec39aeb1026137ec52cca7169d4db2b793d8354fc7eb023d046df0dba207b356793bca1abd8d1e85c47d7086a5ca21abff
TLSH
T139512F42ED5082BBFFAC6EF18AE4A687363AE9F815431D3A04E4D6FA97563B0450C094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f40f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f40f.TMP
Size 2KB
SHA256 68f3e955c31262ed0ecb16eac34d9fbd9614fb1b2472b16e625bc587178cf238
MD5 7215b047747df31cff1c92fd94a08321
SHA1 a4e224bf1bd0755a6283948b6393f3aa0ee6df70
SHA512 6adb2993b07774c1bea45aedbf497bc950af8a498d899e2d883d3524cb309c1a0e83a4bee86a339f91ea74472e263d91025b75348122c5e00d0f9f38bfc2611c
TLSH
T17E514046ED5082BBFFAC6EF18EE4A687363AE5F815431D3A04E4D7FA9B563B4050C094
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3c4a95649788be19c5344ac0becf68bc609076cd662c2efb096a1d9a30e4a174
MD5 0b5f707d43ede413f821d83af0adfc4d
SHA1 31a01036cd10beef434fa44fa856f6a990100e65
SHA512 b12d0a5be207e8c801d62984a936b127a39dab265119fef0fcc1bdf15e4ced1a5b41461ca92629ff158b667536bd4b3cdb482e9f0bfb2b949c8f986de54729de
TLSH
T1E531BDF7C3D486BE881116F05B286E2BCD2D0A16422C3C1689E5EF6FA7F2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7f0b0644a719ccfa13f83a67db94bba34fc6746eb0e8a6ce55e41b2f5a399120
MD5 85fc9f588c18ed86b1a1db04015b73fe
SHA1 4be7931be9566bc3f38b534b67f50d33bad46a66
SHA512 44c7d9299a4846f4c29e2f373d9b2491791cdd751df15117f76e01c05183485c28f2a7a4165e8b5b3726356e2446bcd8b7b493f0ae99896d715af8002561e6a5
SSDEEP 192:sxZFR6WA/fjsklnIdpdnHW6+WNGYYBa2gIgrJ:sxZFvA/fjsKoNHbGfU9
TLSH
T13712C8516E38A57B8CCBE20DBB25BF53EAF9503251D01E58EAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4c0ae171825e9ba7e25d295a680dc7c3bd336c1d4510f3d3900c32f0bbf4bbe0
MD5 670ce35d6d42cdae3c52249538a4e079
SHA1 59271246cfd7b579c07334b1956738fc0c0f379f
SHA512 7edb1b332ee294f53427d36aef22a1f3d647a865034f703a7d0b44916719320dbcd58e622860af655e43a44e1c596819ec378f00c2b5a5b51e9d320f6507f533
SSDEEP 192:sxZFR6WA/fjsKSnIdpHnHW6+WNGYYB12gIg5KJ:sxZFvA/fjsboHHbGfN4
TLSH
T1AA22C8516E38657B8CCBE21DBB55BF53EAF9503251901E58AAFCCA1C05E76CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dde9f6c5518d70fabca287df3b38222abfbacfc85f70872eef64e05fee755636
MD5 51c5bb2dc54a3fff19daf8a20eed27cc
SHA1 46e38efe2e3d562a4d8584a69221e1b8e5ea86c9
SHA512 1b082f387c43e65daf5116193949bbe999586912b6cf0ab95c9c1bf533c8c191b17f1db98018896acc9a5bb74e4ed36ae4ad36d940517e203862b148052c9837
SSDEEP 192:sxZFR6WA/fjsKSnIdpdnHW6+WNGYYBL2gIg5KJ:sxZFvA/fjsboNHbGfv4
TLSH
T17D22A7516E38A57B8CCBE20DBB55BF53EAF9503251901E58AAFCCA1C05E76CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 eae09e992918b64c7203a8e5351f6c5b9413a4cc6b6cc02d0b040dfdb03bdfb0
MD5 c00e19e5a919cbb8ea5adb2ff2fd8e34
SHA1 2d0b92379f9544b78f5c103491fd1992a1f8a66b
SHA512 bd0edaff73a797f1a45ade8f80073ec72169d8beaf9512defddb7d467c9447b160420b637cb1ae6e27c49ed6a201035a704fb8f2bbeccff2783f96b0718125f3
SSDEEP 192:sxZFR6WA/fjsKlnIdpdnHW6+WNGYYBa2gIg5oJ:sxZFvA/fjswoNHbGfUq
TLSH
T12B22C8516E38A57B8CCBE20DBB55BF53EAF9503251D01E58EAFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b3e7a2758b49347d003652ee11f4140962db24715f0677a7476cb00faa620d54
MD5 119f3ce0482313a16db9f4c151fc8868
SHA1 087c379dc503ac134f3d14bf7010cf4d41b0a058
SHA512 b50a1e18deb5e7d642dd7cca7c33a1c8e5391f7b63041440a299b2927a47163cb813f51aa8f8a9033d32cf787fcc4aa6b7d4a3ebd6288c15e612c803d162f009
SSDEEP 768:luyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvX6rop7Ot:luyYR7jWv3NpBu1ja/CL8OXxA
TLSH
T10EC2E92B644DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 df9789dce009873ca2f42063003606d2a2c5f2fda9872781af2f3e3341245e0f
MD5 02e07ee623c1dc721eb46a77643619ba
SHA1 d16e11ddf6e4b36507b1fb6da9a85fc168bbff3c
SHA512 7f857076989c524ce82d80c9e3f7e19e715bafd61f88b2f755e5cfa2e9a5575e817e845ede0c5cafeb9aa1ebc1fd3b8c5b31baa300e17022311f71bca41a14cf
SSDEEP 48:KglEZVnTHIbbebIStIK9N1/IxNYYO/VFyLeZ04WcMFbwX4ISQFK901GFx+VYvws4:KIygK3KmWNKKuIFD6KIAKOhKKKwm
TLSH
T19FC1E24031BB064539BE39849474871A55813277306AF52BBFBD08A28D6FE1C4DFF4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d1fa6a8250aad94528a0e30f32ed935ac3d411cd8f6ffc77f90cc6ee686bff80
MD5 ae6876f12444c38275d377f552160b0d
SHA1 7916892fbf01cdb631a85fe697b1bc1f4dd8a6fb
SHA512 63b0dc4b6cf132cab7d9702b04f6a1680d717510733045cb38c546f558909a7659ea5ad98f1016704ff6927079ba4f6c78a11850cf9cd6e637857d1c088f8510
SSDEEP 384:8ZcIC6sN+CYNiTm3QX5+DtQODEB7xe7O6R2FeopzoS:q7FNhwkDeOQdxe7TRKp
TLSH
T15F927E316C78AC7B5DEBD156F48632179EB8506796CC6F80D5ECAF2D00D9A68230BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8fea28273faf635c1289003932ed5e026b18d78a2389fd1f98c656ffa3d773d0
MD5 5fe129f1719f5bbf07058afbe236862b
SHA1 be973ba297b0726a622d215502f2b0786002ba18
SHA512 bc6e39c25a70182aaa5e28ffc201ae796158a1de21ebb0f453347c69d79985fe414e9a992ab72b9d075b1b1aa7098dd08629da18298958645bbc9ebe777d65dd
SSDEEP 192:EONT6nnHGQmiUyngQYcX5hQDP1QOD1McTUmU6:EONT6nCvQNX5+DtQOD1QmU6
TLSH
T1D002EA34BCA97C7B8EF76D59B48633139FA4213BE5946B80DAE85E1C00D765C2306C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 920dd8d197725c4fc0927b6222a5933bd6114310c91f92168c8c742e9e61779a
MD5 6e1d218efa66620c0bd490a8268373dc
SHA1 bc6f895d384ca8144f3c65ce9b7f0f1c342fa0c0
SHA512 52aed965a99e6d6726357684655445bad8d4463574be29b65bd3e040e70e115488c7ab00534f20772e59c213512b178e52cd32c598e0b6b68679ec34c93fa34c
SSDEEP 384:yZcI0sN+CYNiTm3QX5+DtQODEBhxe7O6R2FeopzoS:A0FNhwkDeOQzxe7TRKp
TLSH
T180827D315C78AC7B5DEB9196F48632179EB9506797C86B80D5ECAF2D00D9A68230BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 71ed65912deabcf9a1e050c88df11a5a689238ac9c724b4479f100c2eb480fdb
MD5 b5bc1dda07c46670f233a7189553feb6
SHA1 155c6c29298613a8e4454af4f2b9af832afe637b
SHA512 7d071dff5ca66057a6236193a7dff815f521e63549c9620bf04db314c50d461a070158332f98f6b6ce094ce327129aa69f3b8a1d14c7987d54c324fce0007e35
SSDEEP 192:EONH6nnHzQmiUy7gFYcX5hQDP1QODEzNKUg3X/5eU6:EONH6nFRFNX5+DtQODEBGxeU6
TLSH
T190121B31ADA8BC7B5EE65591F08732139EA51127E6897FC0D5EC6E1C01DEAAC230AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 089266a38d6a0fcd4728c4fc604154f3d2bf00e407236553b39d833f1f5e6178
MD5 64102c389c4566ba9f2deace5050a702
SHA1 40358f66aae56fa479563f810c6e67a192645171
SHA512 71c4a4fde29542a2493208147f5af059519e84d5c97ee50ec52d87064f7d0afe3965fda91abf6a8e246d18653ef6675cf1adfd8e2a1d0fa9795a7d18996e5de4
SSDEEP 384:vZcI0sN+TYNiCm3QX5+DtQODEBhxe7O6R2FeopzoS:n0CNcwkDeOQzxe7TRKp
TLSH
T17A828E315C78AC7B5DFB9196F48632179EB9506797C86B80D5ECAF2D00D9AA8230BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 374a79f85f73c52d349d064fc38bffddec4f4a2d0e96677e13c953a5ad8eaf1e
MD5 1661b8bfbf1759bd72ab5ecde5a3eed6
SHA1 0c2764b337d61bf3feb00c5ffda47451187f419b
SHA512 d7ae959a0c1a44ea3d3e36270412499f2cce61fa4298f59b0bb9746ed3d8d17705f45b55c66b838e48810b6e84726686a47a7c4e586c97e65000232c0101cb89
TLSH
T143412D58A6F91148B7777E4AABF7B86D487FB9672E06809E10110E4F0A23F40DD61737
MD5 SHA1 SHA512 TLSH

Submit Download