b086a1c88bdb5fb4888121c2a58a94553d8a168780c78462d64ff4e256008279

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b086a1c88bdb5fb4888121c2a58a94553d8a168780c78462d64ff4e256008279.html
Size 1.2MB
Sample260912-wthawsff46
SHA256 b086a1c88bdb5fb4888121c2a58a94553d8a168780c78462d64ff4e256008279
MD5 7c655f5fe8a1376838447aa6cff80f08
SHA1 949c5115d6985595320b1ccf9828fa6602eef5a9
SHA512 b41cc5213b302e73133c6ed68a8b93149e251b95375039685e14779766da4fb0ebd7f57a25cd9a275cfbab7d527c5daf40a8de8091c473016600876b654babe1
SSDEEP 12288:LCeSXyMTNrjTEY0+kC6bhxs7jbeLUIXcLBWZ:LCRyyjT3kC6bhxs6LzyBWZ
TLSH
T1FB45C7DB9231717FF833A8B596C8A949F3988CC1E5164AB5BC70A61343EBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4824	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338362594833521"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{ABF711BB-88FB-4808-B17D-15251CB990C6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4880 wrote to memory of 3852	4880	msedge.exe	85
PID 4880 wrote to memory of 4824	4880	msedge.exe	86
PID 4880 wrote to memory of 4384	4880	msedge.exe	87
PID 4880 wrote to memory of 1140	4880	msedge.exe	88
PID 4880 wrote to memory of 4384	4880	msedge.exe	87
PID 4880 wrote to memory of 4384	4880	msedge.exe	87
PID 4880 wrote to memory of 1140	4880	msedge.exe	88
PID 4880 wrote to memory of 1876	4880	msedge.exe	89
PID 4880 wrote to memory of 1876	4880	msedge.exe	89
PID 4880 wrote to memory of 1876	4880	msedge.exe	89
PID 4880 wrote to memory of 3872	4880	msedge.exe	90
PID 4880 wrote to memory of 3872	4880	msedge.exe	90
PID 4880 wrote to memory of 3872	4880	msedge.exe	90
PID 4880 wrote to memory of 4688	4880	msedge.exe	91
PID 4880 wrote to memory of 4688	4880	msedge.exe	91
PID 4880 wrote to memory of 4688	4880	msedge.exe	91
PID 4880 wrote to memory of 964	4880	msedge.exe	92
PID 4880 wrote to memory of 964	4880	msedge.exe	92
PID 4880 wrote to memory of 964	4880	msedge.exe	92
PID 4880 wrote to memory of 3176	4880	msedge.exe	94
PID 4880 wrote to memory of 3176	4880	msedge.exe	94
PID 4880 wrote to memory of 3176	4880	msedge.exe	94
PID 4880 wrote to memory of 896	4880	msedge.exe	98
PID 4880 wrote to memory of 3828	4880	msedge.exe	99
PID 4880 wrote to memory of 896	4880	msedge.exe	98
PID 4880 wrote to memory of 3828	4880	msedge.exe	99
PID 4880 wrote to memory of 2684	4880	msedge.exe	101
PID 4880 wrote to memory of 3600	4880	msedge.exe	106
PID 4880 wrote to memory of 3844	4880	msedge.exe	107
PID 4880 wrote to memory of 1920	4880	msedge.exe	108
PID 4880 wrote to memory of 1008	4880	msedge.exe	109
PID 4880 wrote to memory of 1008	4880	msedge.exe	109
PID 4880 wrote to memory of 2676	4880	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b086a1c88bdb5fb4888121c2a58a94553d8a168780c78462d64ff4e256008279.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd5092c188,0x7ffd5092c194,0x7ffd5092c1a0
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,5894822032108827739,5460089037449470278,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,6304725930647964132,1648029635854969355,262144 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,11552518525346982131,1726692201514081535,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,8979085835877219457,2407192379899910780,2097152 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10727685646257866941,414938499500229926,2097152 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,354769789625134825,12928218303436406825,2097152 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,5608449685931601075,15406644524846852187,2097152 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:2
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3596,i,9672524049322402509,8706908646786092430,2097152 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,4027471786987450290,17116049836249598311,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,214828660078985717,10556027382108331984,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,2751343818584626604,3061308703404926848,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,2751343818584626604,3061308703404926848,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,14174768960040114261,16949131567840258504,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,3985036526487890389,14547886327005903574,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,8581412647579052917,10292229796041950980,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,879700842324417312,9831966658399760127,524288 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6304,i,6642356642054302452,713704598671002280,262144 --field-trial-handle=2372,i,1433128091677884518,15001990855187037830,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7dd86c72b5d782e74a9430bb51c37e7a83949abd17142b17b4b103a12c2fc3f3
MD5 a8642e374966f40a5b5794e5bf659924
SHA1 ce2f68614ba95a7c097e3118a9168a001e4c2ce8
SHA512 37f0a23134255c94e1eb3a82fa15037fd8edc1cdc5a2196cbfcd614f3bb1d381300b13e53889f5853f34fcc1d2fcfb2d80eac92e12ae43c502c5060f2db17ea0
TLSH
T15B517170DE608098FF9841BA94D00DBB353677A024739F3B1EBCCAF848363D549C8042
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59097c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59097c.TMP
Size 2KB
SHA256 01d348b08d8d7cbf95d24cc4d03558d868e6e1bbe8627ea0be09cb1292600562
MD5 6f926f7680a3453ef13ccd6a0f78071f
SHA1 4160f1b4b0b966355b8b08085e4e3464be5cb0ce
SHA512 c87565d35d3c2e250589fbf018c4b78f8afdab014d1d9f6306d6cc69fc81a1cb3cb22ef4e4a7515021096831a5f1307cb2ea6392b23bbbc8e1d4686c1867f6a8
TLSH
T10E516070DE6080A8FF8941BA98D01DBB353677A024739F3B1DBCCAF849363D549C8042
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0cd7513e36c39dc5e09d228cdb7e316602d4b7b415c7fac446f40bc2c8094a9f
MD5 f01c5edb11369f72d297e3d33c2a1dbc
SHA1 3d527451d4a2cadb11346aba94627847186a5bcf
SHA512 e57d845c85206d6231d1a860666138d5901bb69cfe6a218ad7328806978aae1dfc5f9bed6801d7bc6e733be81a03ac9bb7fe03b8902b195f213364b08aeee124
TLSH
T1BE41E1F3C3C4866EC90116F05A28AE3BDE2D0A16422C3C15CDE8EF5B97E2471D20265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b452af0995a04faab9c289c066b59fe918fb44b81ecc60844469da6a01a31560
MD5 2af8b9346192663d8948704295f065e9
SHA1 274a4f4e93dda28e658476b5d1bfde7ac5da9bd5
SHA512 f210d2a678e4e9d98cd0fd620c82bd580ff1c6ebc6c3c4dadd6a63790eeef8c1bb30b4bff817c39feab1841e43fee47a12448bfd3c68ee4a526354da42e11a88
SSDEEP 192:sxZYRzW0L/fUYs0csIdpdvHW6+WNGY36aZMIgrJ:sxZYYi/f3s0ydHbGX59
TLSH
T1FA12C7526E28A93B8CCBD21DBA65BF53D6F9503261D11E58EAFC861C04E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 591b592367d98d16f3c9b407d897e2e5ec12542c0d8819f72c950b6ae44d3d66
MD5 ff2a996c2ec6f1b0fd7c36091e403590
SHA1 18bb61da1367eea66e1ac96427a94d05a54c5080
SHA512 65542556909699f261f95af133fe4c8ecaab6f4a9b0bdb5f52dc680d97aff08f390010090db7a341957276707acd6daea7ef92d72629e0ec8ef2521ebeb95d81
SSDEEP 192:sxZYRzW0L/fUYs8csIdpdvHW6+WNGY36WZMIg5CJ:sxZYYi/f3s8ydHbGX94
TLSH
T11022D8556E28693B8CCBE20DBA65BF53E6F9503261D01E58E6FCC61C05E6ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 35905b3e4d47eb91fe7a3809e2a427778ed4993112641c2db1f9a8c2d168798c
MD5 3c3ebab9a8b3fa1a7f1b1142faa76296
SHA1 901a91a7d631fa7acb6fce1c6e85f346c8e302fb
SHA512 c1450d8f8f5c7d9f5452e04e884fb636f5401430d6de38c20c39857d9d58409672660f52e8a40c8f5dfbd5b575656f31599a575b92ba97160ed569ddbd9d92e5
SSDEEP 192:sxZYRzW0L/fUYs8csIdpHvHW6+WNGY36KZMIg5CJ:sxZYYi/f3s8yPHbGXJ4
TLSH
T11922D8566E28693B8CCBE21DBA65BF53E6F9503261D01E58A6FCC61C05E7ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4c7acef6fb3afeeb837e77c17ebe90121a52fd78da183a792e1781f15d58e75a
MD5 41f3cdf6448b2ee5c3b7842372a55e64
SHA1 bc258085f69b561d80f591b303cef6f2f69bf81d
SHA512 6c4ccdcddfdb75ed141b61be9b72655d43c04fe9c2151815dcb9d8a09b308a1bf6c4150a0b71b3c48fab9dd4eb2a144dc17702e18418b90a23f7d4b9b260bee0
SSDEEP 192:sxZYRzW0L/fUYspcsIdpdvHW6+WNGY36aZMIg5QJ:sxZYYi/f3spydHbGX5q
TLSH
T1E622C7566E28693B4CCBD21DBA65BF53D6FD503261D01E58EAFC861C04E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3b7780d762b5c3f726ace44ebe4dd92045eca01cfe3952a52eca3d6eb4b1755f
MD5 452988fa459aac311307663e8a6b61a6
SHA1 f11dfc6f40637ad6a036734d414511fb35a52576
SHA512 83192787fb36131c4cddbe02a80efb1ca6f66ffba3438c1d5b18debe93a1cfe29ac0223a41bac1998a3690132b089e3e1c4e531e4d714ba3fc9834b6d7f8aa5c
SSDEEP 768:zfKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/UroB0:zfKlm7QWvUYe0u1ja8/L/E//B0
TLSH
T140C20A3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fbd83c58a8b2b3f2769dc9a37bfa90a625f90ef0861d00ec2f5144b97694ef82
MD5 ab876e1be10f9ef9a9619b03a1a74e31
SHA1 4d094c51b16f453ee4f165b2a1c02b8c57edaee7
SHA512 c4ee078219b9e3204f8ca1a28f234e960004f2b6788ca46524a7b4c13fbc4e3aa3efbd2424c52b2d49c52d8279a735cb414727ddf478582d39a440476030a4a7
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yLAPGKQ6uvbG9mISivK9+1Evx4/YF2eL:K8Y4KBm++HiKocL/2KQwGicgKZ+1
TLSH
T1E1C1FE4130BB024439BE25889075975E52423173355CFABBFFBE00A68A6BE541EFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a687.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a687.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c69e7e04bc7567a10294d1844edcd8d511f2568e3103c4aa15bd4bc698f7ef7c
MD5 47b6a38b9c4cc4d7b620d798b65f0191
SHA1 75ad92cefde1ebd890b6ddf54fb1ea83e3141b81
SHA512 94140de7cb1e5bdb0ce031c5d17434acb68e87693a87623774e20c68de87f1a6281d7fe98ab52e38ba67a086f04672083b31aac56db6c0d768d54542a4ab7c18
SSDEEP 384:1ZcISsN0jVerbAeLh//kXxYoDH7O6R2FeojwoA:NSk9/c7H7TR7T
TLSH
T18B828E716874AC7A5DF7D095F48736039EB880A797C92F80D5ECBF2E01DA5A40307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7741c0338f7b5312428d199aa77e28dd7b96c274654e8befd99d1ccdce64887c
MD5 24a982a8aace7fd9eb303c087a8b5325
SHA1 0bd7823e76c9a2d6c62f82c1c395db433090df35
SHA512 2ddf46a9d9a78c5bcb5a1b2e2d29c90265e7f73fc931f77f94127dfc7aef803a5af703cd8ec67879b273a75b5ed0d40b1ddc8fe05aa4c36270aaab731882071c
SSDEEP 384:TZcISsN0KVerbAeLh//kXxYoDH7O6R2FeojwoA:LSp9/c7H7TR7T
TLSH
T138828E716874AC7A5DFBD095F48736039EB880A7A7C96F80D5ECBF2E01DA5940307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 25a133df39f21b6c3ee40c1e821e939f89500ffb27e68d752cceaeea0fe2a55d
MD5 6338c809006b02c96174eb49aba87b0a
SHA1 60c1181a76565112250814d065ff8f4fea3138bb
SHA512 0c839a29ae028bdf7ab23a615885412eb0c7ae70dae4c866b262a15df16ceec7b2739a24bac564b46a3785f1f8051459a86abc0bf507b1af996fc28f9ac06495
SSDEEP 96:KqONkvQsjpfbUmjH5ih/cIPURHl8h4otop5FaDlBKP4v+Y1xf//ojdpxBY6ywMd+:BOND6JUm0QmiUyGbso//gyweBCG4U6
TLSH
T19D02C839BC64B87B8EE3AE45B48777239FA4107BA6951F44DAE82E2D01D755C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e7e57e7b6a9a72f1205f8834521e4d8b4db630f48a722c0edb8336e1663a0805
MD5 b98a511c5106ac19c2b2b138576c6005
SHA1 ae974eb9ebf6884cc4023606e4d63618aebf054b
SHA512 8122d2b76bfa3f060548ae5ac734f9721589a7f3c5ceb7bcd9aa79a31370c05cefee3fea7b97efcdaba78e5144a73678bbe7fdc4ee0265f4803d85430316dd4d
SSDEEP 192:BON16JU5QmiUy0bJo//gywXFnPwoWNxa/kU6:BON16+XrJo//kXxYokHU6
TLSH
T1F5120935B868BC7B5DE3A595F08336139E644067EA856F80DADC2B1C02EF1AC5307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7f586501fc4bf30403db3d5fd7346936cb923e35c8b8b699e1122f8a69727189
MD5 4349eb8d3a6f03160d8564873d688cc4
SHA1 782aee993ea2c1cf1fdec121c3f96dfdd4895e9b
SHA512 6eb8b4c30d34f9f9e3466eef201aa239ae41bd5f6278f415cfa026661a113544163b47de31b3d52448ebb5a9aac990ce27121253d65032c84e23662e805aac16
SSDEEP 384:4iFiZcIH4sN88TUNTUlIlKVerbAeLh//kXxYoAH7O6R2FeojwoA:DFQYBwgr9/cIH7TR7T
TLSH
T1AAA26D7258A4D87B9DFBDA95F5863603CEB440A7D6C5AF80E6DCAF1E01DA4D80307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 bebe4eed00a5493f1017bed86429157342ed7af2e664090ef41b7c39d403cfb8
MD5 a3f2899f8a3ea86909996b8c308bdde4
SHA1 fddbeb780bab8eb45e3c5a27971bed26f5943114
SHA512 8e45d3f12d1310c4c3f8c2e5073327dc9a719e703566a9672af6320beb66697588ef0ae6d1d904964f70f097edb1c343a7aa9d45f2c5923220bf838e4a4139c9
SSDEEP 192:aQsN0ZbQye53sUb+8QmiU1Zsp04h//gywXFnPwoXaoa/kemO6R2IMMXorjD:rsN09Verb7CLh//kXxYoDH7O6R2FeojD
TLSH
T132625B357878AC7B4DE794A6F08736139EB440A797C92F84DAEC7F2E02DA5984307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0aed0609-ce3f-421b-8fe1-880be253d61d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0aed0609-ce3f-421b-8fe1-880be253d61d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 08a0c9659bfb50ed026e2b6bb54e9a3f14c929f425699aef6fd98e3a3ad78a1d
MD5 c9c17c2c74eedd2ad2ac16a8bd2f0a7a
SHA1 2022ae0c68768fc5370a1033786b58a17e89536b
SHA512 95a732faec0e165124b7a53a81e8ec5586bc51b5b6100807cd88dc3df6cffca39c9ebd2db661865b657106b8a5bb4f86eb42239e7ca96a8546b658a18039cad9
TLSH
T158411858A6F91148B3B77E1A5BF768AE487A7D772E06D05E10110E4F4B22A40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download