10435749a4d3a447ad830471dd99706dfb567c77c8abf23e5e0fedd05dd27495

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_10435749a4d3a447ad830471dd99706dfb567c77c8abf23e5e0fedd05dd27495.html
Size 113KB
Sample260913-a1zb4ach39
SHA256 10435749a4d3a447ad830471dd99706dfb567c77c8abf23e5e0fedd05dd27495
MD5 893a19e341102aa8f87c00d081bdeb8c
SHA1 f0eafdcc4bfd5204cf1b406e28967cce5a2556c1
SHA512 701b17a4089fe14a46bcaeaddcd1a01f19695b2a509144e150fba3328e72ab90f8ad7cb24d68d86f494af31221d663b0397523643fab941bf622756ac5c2202f
SSDEEP 1536:gCxAYn+hMwsORy/SfUhyjqwlcQmTta+oCxshpNbEaolbEaoVC52U+FHx:5CcQv+ADNdoldoVC9+FHx
TLSH
T106B3B58711204CFAEFA51DB3459B086B3C2C1437AC0791B9E3FD8F972B5696E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4240	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338318502916622"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{C152B5A4-0738-4766-B9D8-CE8705C75848}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3676	msedge.exe
3676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1328 wrote to memory of 2192	1328	msedge.exe	86
PID 1328 wrote to memory of 1144	1328	msedge.exe	87
PID 1328 wrote to memory of 4240	1328	msedge.exe	88
PID 1328 wrote to memory of 1144	1328	msedge.exe	87
PID 1328 wrote to memory of 1144	1328	msedge.exe	87
PID 1328 wrote to memory of 2392	1328	msedge.exe	89
PID 1328 wrote to memory of 2392	1328	msedge.exe	89
PID 1328 wrote to memory of 2408	1328	msedge.exe	91
PID 1328 wrote to memory of 2408	1328	msedge.exe	91
PID 1328 wrote to memory of 4992	1328	msedge.exe	92
PID 1328 wrote to memory of 2408	1328	msedge.exe	91
PID 1328 wrote to memory of 4992	1328	msedge.exe	92
PID 1328 wrote to memory of 4992	1328	msedge.exe	92
PID 1328 wrote to memory of 4032	1328	msedge.exe	93
PID 1328 wrote to memory of 1348	1328	msedge.exe	94
PID 1328 wrote to memory of 4032	1328	msedge.exe	93
PID 1328 wrote to memory of 4032	1328	msedge.exe	93
PID 1328 wrote to memory of 1348	1328	msedge.exe	94
PID 1328 wrote to memory of 1348	1328	msedge.exe	94
PID 1328 wrote to memory of 4848	1328	msedge.exe	98
PID 1328 wrote to memory of 2312	1328	msedge.exe	99
PID 1328 wrote to memory of 4848	1328	msedge.exe	98
PID 1328 wrote to memory of 2312	1328	msedge.exe	99
PID 1328 wrote to memory of 2796	1328	msedge.exe	101
PID 1328 wrote to memory of 4260	1328	msedge.exe	106
PID 1328 wrote to memory of 3916	1328	msedge.exe	107
PID 1328 wrote to memory of 1640	1328	msedge.exe	108
PID 1328 wrote to memory of 4844	1328	msedge.exe	109
PID 1328 wrote to memory of 4844	1328	msedge.exe	109
PID 1328 wrote to memory of 1056	1328	msedge.exe	110
PID 1328 wrote to memory of 1056	1328	msedge.exe	110
PID 1328 wrote to memory of 3676	1328	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_10435749a4d3a447ad830471dd99706dfb567c77c8abf23e5e0fedd05dd27495.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x254,0x7ffcd1a9c188,0x7ffcd1a9c194,0x7ffcd1a9c1a0
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,470921059359037926,5412109140780674884,262144 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,5965529809229820408,10768882941667950294,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,537520953531120037,17855303971436196916,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,18117162457731778664,14194416728319315748,2097152 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9323116950479731196,1785659840023590433,2097152 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,9095919525079297346,11199710140134894538,2097152 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,14142399193290461746,16481959124092938741,2097152 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,293641879620379193,4607331000994520888,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5795951453934205721,14974476745411816492,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,11749656248029829436,11612568405804728669,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,11749656248029829436,11612568405804728669,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,13556322461739644148,3641343891723788244,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,15169996242691547135,3891908456736366213,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,8548973307450546327,9392168811002080011,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,13490217377756239294,3133413634196300894,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,10517320031784368282,4946811535528696127,524288 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5236,i,2293080567877915955,8897608929046983639,262144 --field-trial-handle=2212,i,8591643867214595722,4226387695226199236,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c64618a91f65a6bd4c319d75c50896ce6e50e46e6fab03b7372c5e059516ce97
MD5 d5326d8760effdf15393211217103c26
SHA1 1e27694912c0dc17c794edae0f4fdb5fc950ab81
SHA512 dd020588ad79be0b6784cdfc0e2f8c6faa0c071d4734bd267ddd17aa645d6cb695801bace4049e7285dc8692139c90d8a99fdd6375beadaeaab9d27422577a41
TLSH
T1D5613ACDD142848AF7980075D2DAE4E732B25DA169B39FD338E4E3FD9C07F00A918008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bf82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bf82.TMP
Size 3KB
SHA256 90d72c05036a78817a2e2fe74181da2bfc3d1cbbea6d5f3bfcb2bf4f893b0e61
MD5 8acab67d477893c01b97737120c61d58
SHA1 57b057312af1bc0b72d18d1a898bbb608b844616
SHA512 470fdc15eaddb0886fd6932a5f7e09ebd3a71ea2d33f5aaefc64d41af8152f19f3ccf6c7d82a6510ab6c2b56a62204933372342c41797d7b2fd7eede2f826c37
TLSH
T151613ACDD1428489F7980075D2DAE4E732B25CA168B39FD338E4D3FD9C07F40A918008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c4af1b8b27a354ea8cbd765e86f2a15ccfe0f898facf727ca8cfc292e1d0d195
MD5 2e24b7742ae10b5178a6606f2cacc741
SHA1 922011fe277f92a829876b978d4679bb9f438a60
SHA512 d28f470a50792c65fca573517b6684cbe6175ef15e7c9dc28797fea773862ffd1b7859e9ed4ad4312900f8afe189f96dda89246ecbf5c2042a10902cb5562670
TLSH
T1DF5159B7C2D4877E891256F09A246E2ADE2C0A56422C3C5689F4AF1F67F25B0D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c8e483fcea07bccfb73d29da3ed6eaf1534994abb10bd3d657a24da9afe8d905
MD5 8fbe32e8fecd265edd9f3bf0f5ee95b5
SHA1 f26c92f6ab98be7ea0c1fcdc340f502d4c08d2e2
SHA512 69e6530d196ca840cb5e7cd3ed937eb2eb1411f4761220a51e10abc725e405b8a2e50c00d21fee82fe38098487e6b8da9302caff63603081255f25cce5b30c2a
SSDEEP 192:sxZDRzWu/fzsfRIdpdWHW6+WNGY3Rn9IgrJ:sxZDgu/fzsfasHbGs9
TLSH
T11112B8126E28A53B8CCBE21DBB15BF53E6FD5032A1951E58B6FC861C05EBADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8954af4811c14f0d661714e7d7a1789d83e98fe4eab442c57532ecbde5eb100b
MD5 35150e92ca833c3f9eaecd17a7d3669f
SHA1 562d8e03d396dfaec70242387b56a48496bb42e5
SHA512 73b17c2e261e3a384af1aeedde2e2489bdef318d79824e7e45db80dc5e33646b72e818b81495b9e467696e9bb85750ae9484be333338ad9d5a33f38b83239427
SSDEEP 192:sxZDRzWu/fzs9RIdpHWHW6+WNGY37n9Ig5zJ:sxZDgu/fzs9a2HbGcb
TLSH
T10D22C8566E28697B8CCBE21DBA15BF53E6FD503261911F48A6FC861C05EBACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f0547548013b246f1390905d31f23ff1912a12e6e1f2b0bba1d6976db1e3681b
MD5 76727ad380e899a6143b529eca2c9035
SHA1 65b95702437cf07764ca5148efec4e78634906d6
SHA512 0ee2326ab172b4baeb76cf2d593d259cc99243fe20ae9e11549a61bfb2a6f7f9eef310627472a7b6b966efd4c56f1c2908ec9d68f5437e9472b71c08b2b906b7
SSDEEP 192:sxZDRzWu/fzs9RIdpdWHW6+WNGY3wn9Ig5zJ:sxZDgu/fzs9asHbGTb
TLSH
T16E22C7166E28A93B8CCBE21DBB15BF53E6FD503261951F48A6FC861C05EBACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 62c1bcfb2b9283cf209568acd075f50dfc0f7801108ac95324a95de1cbd01ab4
MD5 4e2b054b078e474ecccef1b7688babd6
SHA1 df177e2f67529433aaf9140b9ea7a9dec905fb1c
SHA512 7ebff95682512df1ec07b5b6ea431eecb45be3d29b0ae71de6946cc8ab489c2999fc7f26faa5a2c455590cdb243d03ab976326e4b6eeaf5aeae73575b1575c8f
SSDEEP 192:sxZDRzWu/fzspRIdpdWHW6+WNGY3Rn9Ig5JJ:sxZDgu/fzspasHbGs1
TLSH
T1F422C8166E38A53B8CCBE21DBB15BF53E6FD5032A1951E58A6FC861C05EB6CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f012dbd6ccc9bfc14cb1e4f170eb534041db041d46fa61fabc371dbef83f3163
MD5 4724f83b667be1168528fb49e19634ac
SHA1 b970792fcbab780ec1cb9a69ee9bf71b8bf3d8aa
SHA512 7e61f681b5bc361cf729f1691ec2d912cdb587f1cdc2c9082529294b19dbed7735ea321c7478a85cc0ae85435e2b81cad7ddca2223ac1c64b45f129ae8e7cdd8
SSDEEP 768:4E30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72frolZMH:4E30AbSWvS2l9u1jaLmLZ12Mo
TLSH
T1F0C2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3860608af2c9ed59fe0d53f93d36b59956cec978d2ac4675e473a5e50c8d0af0
MD5 cc4733f2d31701ab2c88dcd749e4d65a
SHA1 0f2016d7d73a5decf32164625837e1418827df1c
SHA512 bf20b5034a9d1d047bbd3ce2e6d44699f83de964a253aa8e9c407af3a75ea403c8c70af3e48f67413f33ad449e401e4b71410b77cdedcd7ffb586bed80826275
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLlEZVnTHIbbebIStIK9N1/IxNYYO/OE:Kwj2KcQey+0K7CI9eKOoK+3GKEkJ
TLSH
T1A5B1460171BB521038BE694C82B19B6F528132A33016E66F7FBD10799E2BE590DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d45cd58a8554721f635448d1627de8dd225ba6506557cd1210d0ec38ed536f3f
MD5 cc19bcc9040f4010c992a5262fda39b9
SHA1 ea54255ff4bd5e6e02985e088261ebe223393165
SHA512 d83263e6be87dcf694ba950799d1eef69e4dee4d11be1ebbad42cc2242cc313029de6cad6e8d4d84b46bc9870dab89142eb7c438f781e49f66fd11c1c3f42c87
SSDEEP 384:uqZcInosN4OH2puUdY9iX5FlS82YoGH7O6R2Feolh7UNop:Zos2DcaYOH7TRcUG
TLSH
T179928D32A874AC3B58E6E155F54B36139EFC906797C91F80D9ED5B2E00DE5D8030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c6d1f28ea050fdb39ee8c2bd29d400309b965ff4df65ab95a06575d846003213
MD5 9119f8627faf67cf9616fa6a97fa857d
SHA1 4e366cbc29d94f147651ea6c3735b05d61130a88
SHA512 4c543a553573e3a8a2892942892b3dabb77551fceb7a16da0646349866973392e8370e93b8d23aa460bdc8d06264bc0ca78be7970d884e1e58adcec65031cdcd
SSDEEP 96:gqONkoQsjpfuMVwptaL5ih/cIPURHl8h4otop5PiCDVBIPuva6zx8X5Fx+xKYv6P:LONU6AmwprQmiUyBr6siX5FliJitJU6
TLSH
T1FB02FA35AD786C7B8DF3AE45B48B37235FA5117BE6942F44CAE81B2D01D769C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c237127b06c94e13576f9244475c93668e61235644c4e9ece647b677e419d3d9
MD5 6f7a6758efdcd386ebb093158cd4c257
SHA1 58f583f32433e531b1bcab51472fda5061c61380
SHA512 e5fa1bb57d42f1e31f8e6baacfab113aac9dcb8f91bfeff4c16662e5687d0d20006e99c47d406e5b4408853d3a312291d9272132f17dd1ddf496b3b041b5106b
SSDEEP 384:lZcIusN4DH2puPdY9iX5FlS82YokH7O6R2Feolh7UNop:duz2CcaYMH7TRcUG
TLSH
T153827C3268786C3B59E6E155F44B36139EFC90A7A7C91F80D8ED5B2E05DE5E4030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 99d0124e4821147338a92298679a21c2ee94052137a0321470dced45076ca3e7
MD5 027353bb82fbe6b3efad9b7d4ce8fe20
SHA1 d713113e96d58ea46f7bb77acbc66adadcb80f17
SHA512 cbb6c0af83c7f261aeee6ad4f55c216e932537ce1c2a7983dda8804ff0b88c8a3ce7d54352a0ff2eb23ea8be25a576603639a7eb8bdd537da8455e5166a21de5
SSDEEP 384:BZcIusN4OH2puUdY9iX5FlS82YokH7O6R2Feolh7UNop:Jus2DcaYMH7TRcUG
TLSH
T1D5828C3268786C3B59E6E155F44B36139EFC90A797C91F80D8ED5B2E05DEAE4030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 82f66480605344a6317db9b0d88814d1df50009d0ffbc251c1a43ede83d6f762
MD5 415b7ee23378f8586f1fcb4c2d2447f3
SHA1 024336877b0bbaee8bc6bf949bd946c230e12edd
SHA512 fe5bc4abf57d8b449a97cd824e9a61b01d10428acdcac1819f8a9e09327afeb257ba5aabcbb48b638555a77b4728835ce3ab621670bc9ce1242c592e6e4c37b4
SSDEEP 192:LONx6Amwp/QmiUy6FrosiX5FlS82Pwo6lRer/8U6:LONx6ipBVosiX5FlS82YoIHU6
TLSH
T13D122B36B8786C3F4DD3A594F08735139EA85127DB496F84C9EC1B2D01DF5EC530A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11a05e0a-71df-465b-bd6d-0cd247f94c63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\11a05e0a-71df-465b-bd6d-0cd247f94c63.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bebd2159e34439e07dbbad8188411dc7a5de1441a4f010c13c6f6ec86aaabbc1
MD5 06c599c1f78986e8781ee0ee5f08fafd
SHA1 6df43561f73a1fac95d85940c287f27b8ec52ddc
SHA512 137ea84c408ac1a25f6ed69fe6f0aa49e34e524474396452f03327611eac54b79d130359b95262d113d21fc5810ca2cb63f049463958c02a9c4171d6fe210afd
TLSH
T13741FA58AAF92108F7B76E1AABF6A86D487EBD772F06D55D00110D4E0A33B01CD62737
MD5 SHA1 SHA512 TLSH

Submit Download