9698531468853672b796865314a7541800395118059897431b9bd4cbadabe29d

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9698531468853672b796865314a7541800395118059897431b9bd4cbadabe29d.html
Size 1.2MB
Sample260912-yqk9gstdqa
SHA256 9698531468853672b796865314a7541800395118059897431b9bd4cbadabe29d
MD5 dc5549e33a57905cdf087ea9aa0debcc
SHA1 ae6ffc897d21a852ce118913299375663f3a07be
SHA512 9db241977d0bd9f9461d3603c08d43015e0b0116c1711c1995535172d1a7c5645c44badf57b72a07d027cec7e6cfb11d6dc47fd84700c95b3ae7b9f2d4c9b38f
SSDEEP 12288:nCeSXyMTNrjTEY0+kC6bhxs7jGDWGw/2h7Wp:nCRyyjT3kC6bhxsKWtO1Wp
TLSH
T1B545C7DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1416	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338262812403958"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{B0168B23-AE25-47C3-BAE8-B4478404479D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2584	msedge.exe
2584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 1412	4604	msedge.exe	85
PID 4604 wrote to memory of 1416	4604	msedge.exe	86
PID 4604 wrote to memory of 2080	4604	msedge.exe	87
PID 4604 wrote to memory of 2080	4604	msedge.exe	87
PID 4604 wrote to memory of 2080	4604	msedge.exe	87
PID 4604 wrote to memory of 4892	4604	msedge.exe	88
PID 4604 wrote to memory of 4892	4604	msedge.exe	88
PID 4604 wrote to memory of 3396	4604	msedge.exe	89
PID 4604 wrote to memory of 3996	4604	msedge.exe	90
PID 4604 wrote to memory of 3396	4604	msedge.exe	89
PID 4604 wrote to memory of 3396	4604	msedge.exe	89
PID 4604 wrote to memory of 3996	4604	msedge.exe	90
PID 4604 wrote to memory of 3996	4604	msedge.exe	90
PID 4604 wrote to memory of 4516	4604	msedge.exe	92
PID 4604 wrote to memory of 4516	4604	msedge.exe	92
PID 4604 wrote to memory of 4516	4604	msedge.exe	92
PID 4604 wrote to memory of 556	4604	msedge.exe	93
PID 4604 wrote to memory of 556	4604	msedge.exe	93
PID 4604 wrote to memory of 556	4604	msedge.exe	93
PID 4604 wrote to memory of 868	4604	msedge.exe	94
PID 4604 wrote to memory of 868	4604	msedge.exe	94
PID 4604 wrote to memory of 868	4604	msedge.exe	94
PID 4604 wrote to memory of 4816	4604	msedge.exe	99
PID 4604 wrote to memory of 1524	4604	msedge.exe	100
PID 4604 wrote to memory of 4816	4604	msedge.exe	99
PID 4604 wrote to memory of 1524	4604	msedge.exe	100
PID 4604 wrote to memory of 1100	4604	msedge.exe	102
PID 4604 wrote to memory of 536	4604	msedge.exe	111
PID 4604 wrote to memory of 2036	4604	msedge.exe	112
PID 4604 wrote to memory of 3712	4604	msedge.exe	113
PID 4604 wrote to memory of 4196	4604	msedge.exe	115
PID 4604 wrote to memory of 4196	4604	msedge.exe	115
PID 4604 wrote to memory of 3248	4604	msedge.exe	116
PID 4604 wrote to memory of 3248	4604	msedge.exe	116
PID 4604 wrote to memory of 2584	4604	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9698531468853672b796865314a7541800395118059897431b9bd4cbadabe29d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff6d6dc188,0x7fff6d6dc194,0x7fff6d6dc1a0
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,6685235117032262140,17891757679724259872,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,13229240770031555431,5913585648819628658,262144 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,9329848911226683694,1769324844364594657,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,3367010662594423313,18078164609552929816,2097152 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10153128408707540044,9503886538096918106,2097152 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,16516003391796182904,3198467974009807274,2097152 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,10535474367201124046,7170930593193719583,2097152 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3712,i,6845590653548590612,566627872777003373,2097152 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,16102645583890082088,5038727863329460358,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,15282701408647648639,3591823198757798470,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,1669277417659803182,8797294073914637061,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,1669277417659803182,8797294073914637061,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,8425492598251521356,2416511267954271394,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,10272401439128271238,14663814936274616929,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,1085944941745885267,12347253461912115690,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,15522371860031463426,12121723909738066045,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,14129152284072523304,5152135175902850191,524288 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,9710148686709557044,5383690095595370289,262144 --field-trial-handle=2224,i,765668409624593283,8110490853973634321,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f7bfbd2db2d7f5b54af43cba1cb7ed4b2f6da95b4d9f23b5c2b875eddbc29dd9
MD5 629ed1fc80525f0d31674acd2f836cde
SHA1 25b31c691339d1b16db557437194896de0ec2a7f
SHA512 4a3d94a627686e57cd42e0e5cf6f9b360ff4135a8c0fd999412df8ad87d1a1d6fbbc177830409d32ff0e83c006386705ef3493a189350703129ebdfc0c59a387
TLSH
T19A613D8181E2446DF7A5C973D2F91E8B3E35994199932D4222BBFF758C0BF85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e4ae.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e4ae.TMP
Size 3KB
SHA256 aad6c1bc3318af6945b226d3eefdd96cac632f867ccd9c155eeaddd62b1ee63e
MD5 2d47ccb1409f22167a6e68c7705b392c
SHA1 192c64a22846ce9f02905966cb9fc06a60449c54
SHA512 2affd8eb45cf0e83037ffdb4d79b703a2153ef649de916961467e9d85d74951380a1c9707e016e3a62182c95b032a85d6840a5748d6a8296a15f6de6ad7786ce
TLSH
T166613D8181D2446DF7A5C973D2F91E8B3E35994098932D4221BBFF758C0BF85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 151a33d257819a547c7dde2ec9f26135f15eda248143b59ec9ab27c37e3111c3
MD5 25201090d7c0d83912d5ecf4d0246dd0
SHA1 52528bfaf3849dc4b2a1ed366a79492d6302d836
SHA512 8b6bd689f8c1741a5ccef8dd747da2d04b3198ffe3732b0d482aebf7b088701e0dda950950dfbfdbce6b89d51d16bfc5c1b9eab5e63e724c059b478daf569724
TLSH
T14031ACF7C3E4967E890117F05A24AE1BCD2D0A16422C3C56C9E5EF5B93E25B1E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1cc6eae93dcedbfa3d673f504ee69408f76cc9ed1850cfdeb9e45faf7e597f40
MD5 cad9450799023becf48d82cd2546bd49
SHA1 cc80253cda31b86a4d6b2412623abd3419d9f773
SHA512 1901683ed4b0b28287f95ef9c06a623b413896f5deab2644b8cbd07706b60ef4c4bb9aa455be50eb2e90db6c8c011c4739d7bbe5abc0ecaf2fe90d5318b64387
SSDEEP 192:sxZvR3WO/fns05IdpdeHW6+WNGYRPRTCIgrJ:sxZvcO/fns0S8HbGmk9
TLSH
T12E12B8526E24A57B8CCBD61DFA25BF53D6F95032A1911E58EAFCC61C04E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 716a68e41d152a2b952c2a182d9dce37e5051f4f5ee8103e031aed19a4785c7a
MD5 2901cbb9855080705eba4a18b088fbfd
SHA1 06ad0aa9a484b83ec9d86ee4a0456d9104856719
SHA512 37563ae2692ca6b3c378553e28c11b487f3abb0248e3a57d17fc976baf67a967935fd1b760398612b371b862818c6e71523a6b3b83177d6308e171b5bac27326
SSDEEP 192:sxZvR3WO/fnsd5IdpHeHW6+WNGYRP0TCIg5oJ:sxZvcO/fnsdS+HbGmHS
TLSH
T10222C9526E34697B8CCBE61DFA15BF53D6F9503261901E58A6FCCA1C05E6ACD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4ee7c70593092ea3023a48662d1d336306da61d26799d79044437b2dab9505a8
MD5 4d354fddc26880170b7e5f70a92a86d1
SHA1 eccfebea009f9c8e552f65f54dba898d7156efa9
SHA512 ec5f5ef3f92dc361a3a1ceb9897481322ae4a4397e49f1a3ba1fca228e8f83596e8330a23dc72dcb6e58e120f1b578d10a5c33f251f7a0f1cf8104a773d918a3
SSDEEP 192:sxZvR3WO/fnsd5IdpdeHW6+WNGYRPtTCIg5oJ:sxZvcO/fnsdS8HbGmwS
TLSH
T11E22C8516E34697B8CCBE61DFA15BF03D6F95032A1911E58A6FCCA1C05E6ACD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e1b4d502a66f518c049e40de8180d99c440923190a3e6ff3170b2c6c9fdb2cad
MD5 9fc1d4f8c96869e74164a42e25ae3e81
SHA1 4792b818379c8816f39797db3a74ff8e3ea20ea5
SHA512 3748b20af3b71c2ab809343f0d4385e9e528dd7ca5b030fecf2d08306ad3f27fc9e24add7a91c9112f6986439f042ae06ace5ed1d5186c218b46917ec3d286e5
SSDEEP 192:sxZvR3WO/fns65IdpdeHW6+WNGYRPRTCIg5CJ:sxZvcO/fns6S8HbGmko
TLSH
T1F822A7526E38A57B8CCBD61DFA15BF53D6FD5032A1D11E58AAFC861C04E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 90ac27127fa0ce6279a04303b3209703fbb8c794f95c94fbb697a0678ddd23ad
MD5 46a966f8a68e85ca3999a3f5b05dd4fa
SHA1 a1e85e011e2eb8975600a9560df40c29b5027fa1
SHA512 a8ebdc51746af18ed69d3723fabccc176a6119255391a8b8a8814825ce0f756af1ff2ab7481de35aae95afcfcf29d939bddb774766112342f5d342cb5c4c6721
SSDEEP 768:syK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3ProI+Gk:syK9uzYWvcQWsu1ja0HL7Q3cI+Gk
TLSH
T12FC2FA3F640CCB7E5FC01A9DDC5A6F973E9802D7A6584D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9a0d51ab9d5775b3d0f8871f2534bbfe227fd826ab1212823181815338ea2e53
MD5 50c3ed4a26f2fc00a859df39bdc7147d
SHA1 8a640d73f8ec0e22c94c6aefaac2e0bd9a4b67ef
SHA512 16b02042df7bb5cd600ddaca785023703c30ea3dc1f2c37a7fc870c47d204d173fc3c48518ccdd17fef135e1e1f77ac711651a48d2098910c0166710f6e57d14
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBUZiKV:Xpns+
TLSH
T19891045530BB12417DBE254880A5971EA24171F33458FA2FBF7D14A24E6BE084EFF8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0601890d-11f5-415a-b798-41abdbaa8d06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0601890d-11f5-415a-b798-41abdbaa8d06.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6611ffe6cdd5e14601c6f0d9a8bc43ff571da3e62317846d2636d54595c9035f
MD5 603ad73d02a4b1c627bd8432bc53efdc
SHA1 ac074c2b514e1b7f6bc4bf8de39c821679875c5b
SHA512 346cc356b249a0880b73bdfc528059d5c67370343b427d8daa044d3ac69513162a6c88557533939fe1b7ffd2d30b08a5ae52577c7542791d4c824eac3e8c302d
SSDEEP 384:QZcIksNTnwEYZ/XOjTV+WOiGewjE+22esa+VYrtd7UV1oj:ukOIenzODjEl2ehgIWU
TLSH
T1FB827C326D745C7798E7E691F98772138EFC80A7D6C92B94D5DC5F0C04DAAA8130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8fd5357044d5bb81476f1601516c3e59ade9ba9964773e199d1e8e138005184b
MD5 a503632b48eed882f88bf020d75d9d5b
SHA1 7af08b1862e532857f94a376435585be64ade58d
SHA512 1010aa0f72012bbf55014db4a7dddcf97ed5820f1e5a4fa95bc28e9bbf50faf2d8e7b0950d407faa7706d934fde81394a18e1d7b4a38f61160b8161debf20893
SSDEEP 384:qZcIksNTSwEYZ/XOjTV+WOiGewjE+22esa+VYrtd7UV1oj:IkZIenzODjEl2ehgIWU
TLSH
T135827C726D345C7798E7E691F98772138EFC80A7D6C92B9091DC5F0C04DAAAC130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 6168906a216eb2f6dc919e11df1c5ad77c7649adbdc3c86f4080343e6b12a772
MD5 e633a69a1ecd356db9164fec856a1c9c
SHA1 f9bbc5b2729e5fb6f22c90726c2d123fc6f21ccc
SHA512 1cf0f77c85b2734362b6b66a6f3c445b0de68cca9a72e3cd186d0379bf89d7ea3f029c09f552cd05505a9592e7904d6aeb4fc05c49c889cde7c72130f1f11219
SSDEEP 384:QiFiZcI3+sNt8TUNTUlIlSwEYZ/XOjTV+WOiGewjE+2Kesa+VYrtd7UV1oj:rFQO4wgWIenzODjElKehgIWU
TLSH
T10BA25B735D649D7BADEBDB85F94A3213CEF840A7D5D5AA90E2CC5E0C009A6DC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 384eddda44040ce4aab819fa8765e48b3560fdaedf520bfc177190b2f106ca06
MD5 5a6bc3739d2948b9f8c0622d08c8a996
SHA1 b08ebb84a0563991f24b76526cda5983a5694ca3
SHA512 72bc8c63f4051eb851f8bb4adabf4747354d5bbcae0feb8c23c3680dae251d321386ff5dcbcaec8e296a83111eec299e49f326fd9821699c30b45b312dad0b3e
SSDEEP 192:SONu6ygpQmiUyaNtOCTVg5WOiR0KzP7AU6:SONu6lHVtOCTV+WOiGUcU6
TLSH
T10702C734BC687CB79DB3AE06F48B37179FA8116BE9552B84DAD81E1C01D766C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1d061dd22c4dbaac5246caecbffa33bff228b4cbb229b2d2c4e1b5dc56db2325
MD5 64960efa2afaaa344ba20d468c6e14c7
SHA1 442d0dccb4c98e5ce5be7b5834f5bf2024d5dc91
SHA512 5c880e8a64fb20e28621641e2fbea8283305e5ea58c5a15cb0a4654ca8d70fa7c2893a8da0ce55807d3689519e69504f2856ef828051db7010dd26cf537413b1
SSDEEP 192:SONu6ymQmiUyLNlOCTVg5WOiR0ewjE+2x3Us/mcU6:SONu6dWlOCTV+WOiGewjE+2ieU6
TLSH
T1D0120935B8786C775DE3A645F48732139EA84167DA867F90D5DC2F1C01DFAAC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 636738f64e4ca6f22768a3f865a9181774e7b9b5c16d1315805dcc01122cfe30
MD5 1224371b489e66bd154ad81769fa5386
SHA1 e7c5f49ac7e3eff9feb1039f614fde998b436b9d
SHA512 ee6dc08238b3df36217abe3b4c9ad9df4df7279f8057a87394643c86bdced07da56a0a764263f6c04d912912e74e0c45ff96c50292fb4f25588764fdf0086d4a
SSDEEP 384:6sNTEwEYd/XOjTV+WOiGewjE+22esa+VYrtd7UVV:6/QenzODjEl2ehgIe
TLSH
T1F5624B367934AC779DA7A691F94B32138EF840A7D6892F9495DC1F0C05CE6EC230B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a04089f7d061060183a0062450c003c54707e0391f836f804a132e444a0e6bc7
MD5 7aa6354f694fb098d5a6f5ff99e71e32
SHA1 c4aed67b5a7c038fd2b96dfbc5ed0e7c803b5dfc
SHA512 4cbfb14f4d4d8e7f4f5bcb40bb2afc395d6b822f4beeb67ed741c501b552e1790a375b56c78843734165ceb060c124f95f40e66288236a7a4f9e8d54a651a0b1
TLSH
T1D3413B58B6F91148B3B76E5A9FF6A86E487A7C772E06D49D00110E4E0623B41DCB1B3B
MD5 SHA1 SHA512 TLSH

Submit Download