8088ddf55302ac306bd21ab400667b9fb41e3d4b2219ae70032b085b0b5b4712

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8088ddf55302ac306bd21ab400667b9fb41e3d4b2219ae70032b085b0b5b4712.html
Size 1.2MB
Sample260912-ye8weagg34
SHA256 8088ddf55302ac306bd21ab400667b9fb41e3d4b2219ae70032b085b0b5b4712
MD5 e6a584b852edf7e93c753bc3e5df8934
SHA1 540e373078ddcaaee4e63ac09bff6eb58f550979
SHA512 4168846a317eaa07ebebf36d8f1243024b2051c64fd63b6b03d1c8370396f994bee5f0cb42f3205ee1a03792a44086fbb01b97b7e81bbdac0f3737d91a5e22bd
SSDEEP 12288:vCeSXyMTNrjTEY0+kC6bhxs7jGYLH+DZ934WF:vCRyyjT3kC6bhxshLH+DZKWF
TLSH
T1BE45C7DB9231717FF833A8B596C8A949F3988CC1E5164AB5BC70A61343EBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4496	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338370356324773"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{4DD3636B-ADA1-4A46-8117-4F7AAEC92E8E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1900 wrote to memory of 1692	1900	msedge.exe	84
PID 1900 wrote to memory of 4496	1900	msedge.exe	85
PID 1900 wrote to memory of 1820	1900	msedge.exe	86
PID 1900 wrote to memory of 1820	1900	msedge.exe	86
PID 1900 wrote to memory of 1820	1900	msedge.exe	86
PID 1900 wrote to memory of 4464	1900	msedge.exe	88
PID 1900 wrote to memory of 4464	1900	msedge.exe	88
PID 1900 wrote to memory of 3840	1900	msedge.exe	89
PID 1900 wrote to memory of 2436	1900	msedge.exe	90
PID 1900 wrote to memory of 3840	1900	msedge.exe	89
PID 1900 wrote to memory of 3840	1900	msedge.exe	89
PID 1900 wrote to memory of 2436	1900	msedge.exe	90
PID 1900 wrote to memory of 2436	1900	msedge.exe	90
PID 1900 wrote to memory of 2284	1900	msedge.exe	91
PID 1900 wrote to memory of 3988	1900	msedge.exe	92
PID 1900 wrote to memory of 2284	1900	msedge.exe	91
PID 1900 wrote to memory of 2284	1900	msedge.exe	91
PID 1900 wrote to memory of 3988	1900	msedge.exe	92
PID 1900 wrote to memory of 3988	1900	msedge.exe	92
PID 1900 wrote to memory of 1356	1900	msedge.exe	93
PID 1900 wrote to memory of 1356	1900	msedge.exe	93
PID 1900 wrote to memory of 1356	1900	msedge.exe	93
PID 1900 wrote to memory of 3304	1900	msedge.exe	98
PID 1900 wrote to memory of 3476	1900	msedge.exe	99
PID 1900 wrote to memory of 3304	1900	msedge.exe	98
PID 1900 wrote to memory of 3476	1900	msedge.exe	99
PID 1900 wrote to memory of 4640	1900	msedge.exe	101
PID 1900 wrote to memory of 1076	1900	msedge.exe	108
PID 1900 wrote to memory of 1924	1900	msedge.exe	109
PID 1900 wrote to memory of 1224	1900	msedge.exe	110
PID 1900 wrote to memory of 1876	1900	msedge.exe	111
PID 1900 wrote to memory of 1876	1900	msedge.exe	111
PID 1900 wrote to memory of 3920	1900	msedge.exe	112
PID 1900 wrote to memory of 3920	1900	msedge.exe	112
PID 1900 wrote to memory of 4336	1900	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8088ddf55302ac306bd21ab400667b9fb41e3d4b2219ae70032b085b0b5b4712.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x250,0x7ffa229fc188,0x7ffa229fc194,0x7ffa229fc1a0
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,16873789752485749102,5133790353967867948,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,11503432084294904668,6712983807862543372,262144 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,1085088512634140434,4823642059784903731,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,16662010663528094564,3695534984269421889,2097152 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,75256206830524801,8958818609700421710,2097152 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4104,i,7098004154449303525,13269918571573068454,2097152 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,1712907503693801734,1197584581749263675,2097152 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:2
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4888,i,1500466453752493960,163442192034791431,2097152 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,11013720286371513183,1175045553400356731,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,2570685383232762451,9946741128038752063,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,15238962752388083627,18220195667460506363,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,15238962752388083627,18220195667460506363,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,8432472192910971014,11772410155945737036,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,4485768373567383493,11792919604789617966,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,3819977716069155182,15043418598353367601,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,5223376587854749515,2596865777751749367,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,3224314713837300060,2308063591135737292,524288 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,18026126139055495407,9321320154925223038,262144 --field-trial-handle=2300,i,3338470248510171941,3475448123206302157,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 747b5400d0b96f81b49ebfb894acb5bc0a58abd3a89de73037426534ddbd8b58
MD5 147e5428676666dd8207cdaf2211a2e6
SHA1 6cd4e9d09b4a3478d22d25455aa4ed7fa52008cf
SHA512 c6228854f490c6a42d85b0b4c0048bcd9e955ab800dd321282a5618594b044f08c43aebc174a23bcecaff59a0dea4a5b088a9a20ed4c91302789089bb6adf228
TLSH
T177613E07A492E1D3FBDADA354CC3A2A7B230E68DD6871E138DA0D878F446FB050442CE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dc22.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dc22.TMP
Size 3KB
SHA256 ce927050021484f6c1491f4fd997306b3808d69410b6c2862865c4f128e5a6f3
MD5 1398a40f3515b709668cd2dea44e1079
SHA1 4bec6ca0c5a7938e6b69aec88a1e3123950d6650
SHA512 e58d5bba00d8a0a2fb208739109aa5d17f829f959c19593c4b107b61bf84daaa87681d6d99391d1e9ce1f154a31d4effe66514005c24ab2e70d91cb17e1c79c6
TLSH
T19D613E07A592E1D3FBDADA354CD3A267B230E68DD6865E138DA0C878F446FB050442CE
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 45daf467e18c9b425727015cfcc56d6cf89efd376af6d7be193634da52ebec21
MD5 e84f74641f24f0d05a123c24ad7f0498
SHA1 f3ffe295528346bb0baf97a9567669492f7a6db3
SHA512 c43fd9058498d04f5800d96ae487f0de8b8d019eba08ac0b40e3e7054c59665215e8cb4ebee3b9f31c1d285dd2547f5bc54839d589f91b244f3ecf2caba20f7c
TLSH
T17F31ACF7C3E48A6E880116F05A24AE2BDD2D0A17422C3C2689E4EF2F97F2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0e4b3bc39264240c53054a230b5b40c25a70bc323d70f459919eba05c7f6f27b
MD5 aa4ee91574d6160fe3de83d8ba0cde17
SHA1 ea234ee0f49c82844824ddfd0b36168e4ec12e20
SHA512 14085b240aab7ac532059c44b335be75655e0bcf993a0bf8c63bec700de93fa77f4b156bb996d1b72b99fad836b79e72f9706b749c39afafc887c703b723d917
SSDEEP 192:sxZzRokWu/fQsBCIdpdiHW6+WNGYRPRI2IgrJ:sxZzGu/fQsBrkHbGmV9
TLSH
T12112B7156E38A97B8CCBE20DBA25BF53D6F9503261D51E48EBFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1703be3b9ab23cab5459875c672d7dd2ed51c461c8c97a1bc2843f2ecf13b27c
MD5 58a9058d67fe7883eb0c418619a3eece
SHA1 9ea5a1539927073b2aeef346322e5741187de537
SHA512 bb490bdfa477393c6314a7b47fe93534e4fe985086a5046844aa4c77b9c47ca17dd6a933b342e99b4769608ab81d260275dccd2b6d39cf024e994eaa4f830534
SSDEEP 192:sxZzRokWu/fQs2jCIdpHiHW6+WNGYRPjI2Ig5zJ:sxZzGu/fQsQrCHbGmrf
TLSH
T13F22B8166E38697B8CCBE21DBA25BF53E6F9503261D11E48A7FC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 77f7cb47eb235fa687ed400254a7d51f1e7a1171c8d8927be07d0d6df0983a9c
MD5 482c2d206c1311d184a0ea640789eae4
SHA1 11fbb32168957b95e95d39a8403838ca4aa8d08c
SHA512 3e435cc9c943d546738e6722fc0d0f49169470754372e430ba38cc9d9d7e7b136fa4882f03588390c46504f7891a4de53c096b61dbdaefe65f93f05801939e7e
SSDEEP 192:sxZzRokWu/fQssCIdpdiHW6+WNGYRPRI2Ig5JJ:sxZzGu/fQssrkHbGmVJ
TLSH
T16C22B7156E38A97B8CCBE20DBB25BF53D6F95032A1D51E48ABFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b7426d3fc58a32bd9bd09c27c4b2b731e8dbe0072d346728ed62618bbc89f321
MD5 e892f4f741140647e2e9ca4c8bbe16cd
SHA1 7d8893dc0e7b5009a4d12492d34e7675e6293aa8
SHA512 4195fca39a15a7b1271a48da74a4db451a6f03936060225f8a56a227aecc5d0278daaeaa9309564ec28c26a7818d33db71b2df3891a8832afe65854d639134c3
SSDEEP 192:sxZzRokWu/fQs2jCIdpdiHW6+WNGYRPUI2Ig5zJ:sxZzGu/fQsQrkHbGmSf
TLSH
T1E722B7156E28697B8CCBE20DBB25BF53E6F9503261D51E48ABFC861C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6594c64a02f02828bc40048112f74b7b64bb8796dee4e52d1dac358adf73470b
MD5 13485032044c27ea00c7b0e5480ff602
SHA1 1efb19a3a58f09611f578edbd2a54a0b518d0ac7
SHA512 715298850538d106fc341e7ef46bf1c13c0037a92ac01d987eea4937415634cdb3a1d442fc9b284074cf4b2104446a36e8933314e3b3907d035b6a787baf9df2
SSDEEP 768:fbK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3IroZ+bi:fbK9uzYWvcQWsu1ja0HL7Q3zZ+bi
TLSH
T1E1C2F93F640DCB7E4FC01A9DDC5A6F972E9802D7A6688D4047FA984C02C77EE52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 34d2095cc605596bcdc1c011b61a8b0c13a9cacc709d9e21b82297da9b1c2c08
MD5 a1ae64cc646105e395bddc32b8d49730
SHA1 ec7244f91ca13514cacc79f34f3228dd6bdbdee7
SHA512 0f789bf3070ef6e042ecbebfd9d82f20229751fc46d16502d95febe204b8a97691f78ead8bcc72a741bb4ce0d8168f48eac7a706d5b24810caad800c0ca1c959
SSDEEP 48:K0mImDmHjNl12blo9ISj2K9T1B2xLmYwRDnyLDmHjNl12blo9ISj2K9T1B2xLmYW:K0mBIIKpyWK4IK5S+iIKXKb
TLSH
T1E991CD8631BB120078BDB95C80E4971B128175733118EA6ABFBD1075CE6EE584CFE8DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cd9dbc1346c303f607adbbfd7b8b0bcb4dbd3b19b563287e4d8cc8ef0f21dc16
MD5 80bc7d6d7168272bb4165e60983962b8
SHA1 a726563e09955f4fd093e2919902ef97c42dfe4b
SHA512 231971284d76e3c658a941b5c50ab0af572027b3782e732e0fd8d5fc3a26da1294f3ccbeed90c159fcf006fabf1ca1fc0e74b953ab74973968cfdf172f7df99a
SSDEEP 384:ijZcInsNk7wIapjluOjTVFDOmxjiwJrdZ37O6R2Feolh7U3o9:KnpyjnjOyjJhd97TRsuy
TLSH
T16A828D7268785C776DBB9246F84A36078EFC80A3D6892F90D1ED6F1D01DAA9C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 10e91ddb6c52becc4def0f42ac4adf06f1d948bedcf076560ca9b6d5a888fb2d
MD5 664f53bfd078eebb1b8a698428da8fd2
SHA1 d3497cbf8439c853009515b802a3aa3da20807f6
SHA512 323453853f5707c4c69177558f01a046c0f34d23221327abf09d5f345f5a1812f321fa62649361fcd3efc2c5251225a066c93eb6f9b6f7085c736f1273125275
SSDEEP 384:5uZcI4RsNkuwIaojluOjTVFDOmxjiwJr0Z37O6R2Feolh7U3o9:qeINjnjOyjJh097TRsuy
TLSH
T179928E7168786C776DFBA246F84636078EFC90A7D6892F8092ED5F1E01DAA5C1307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2427c2110eb74c4bc911339888fb74ceaf08601a64b4d4740450efa6cb9a10f4
MD5 0e3566dad67f63450f830fc1c0b68370
SHA1 6eb00231292f78226fb75a77a4a4fe31f384cdcd
SHA512 78ef30567734cef01b3b185651b28a8827323e85fb22d3990beab449db19fbffa857ce5f77a9544f1e38c6b8841179654dab1b53ce8dcc809641f383f6a7aa8d
SSDEEP 192:SONJ6ygpQmiUyFKtOCTVg+DO9m9zPgtU6:SONJ6lHFtOCTVFDOcoU6
TLSH
T1CF02D634BC782CBB9EA36E45F58B27139FA8116BDA552F84DAE81E1C01D765C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9525f359901c70cc215cd99b3d1dc38140e037736aadab863e5cc7210aeb3e07
MD5 9b6e0362a6453ca84e71c1c8a284cd0f
SHA1 4967285bf5b4c633f78c040ca790a5c8c0c25022
SHA512 27165e7376f2ff0a2d6d337c290e8b017c1efa266891c21ddf4b3ed9dc583288f07ac99f28c307f91aa63cbe86c7dd203ea6b6b7023b102294b0c151c572053e
SSDEEP 384:RjZcInsNkuwIaojluOjTVFDOmxjiwJrdZ37O6R2Feolh7U3o9:xnINjnjOyjJhd97TRsuy
TLSH
T1D0828D7268785C776DBBA246F84636078FFC80A7D6892F8091ED5F1D01DAA9C1307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2f25ecccc55e076c06e526cb2ea2d7160bc4ad75b749d0054b24997f4b17f7d4
MD5 b135e2d830d8b43db2be785f5a6e78cf
SHA1 e97671a12addeeab53c23cee60917c9dfa6451ff
SHA512 57a82deb2ec01899c91566ef7d2f9c4246c63f72e25d5df776e4393b70547eae9ab73c3fd259540109a24ab1903eb51353258ed3c79f06239411faa3ddc18519
SSDEEP 192:SONN6yJQmiUy7KQOCTVg+DO9mXxjv2FJSJru3UK+/Fr3U6:SONN6gNQOCTVFDOmxjiwJrHZ3U6
TLSH
T130121B35B87C6C776DA36585F48736179EA841A7DA467F80D1EC2E1C01EB65C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c4df518-613b-444d-9387-d41c1c2f4e41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3c4df518-613b-444d-9387-d41c1c2f4e41.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ee3a5c94e866903c3eac08ba3c99c0daab8bfce301cbd271f66c0a900901171a
MD5 6b01f909d7920b67ba7e4cfdc66e080e
SHA1 fa63ff7e287faf23495e97d162eb74f09f9c43f6
SHA512 3677aaa797cf74f7b79085e41b60c6fbb849bb09ef0a029cd8efeeb7126f3d81c44be17a28efe37df73234b1965e74d79f0e241da079e14bf60167476def7e21
TLSH
T147413D5CB6F91158B3B3AF5AABF6786E447F79772E06D49D00110E4E0662740C9A2733
MD5 SHA1 SHA512 TLSH

Submit Download