1d21be41a1a5096235bc5ac772fc8dc092a132aeab28a9066a18d2582f499371

Analysis

max time kernel
148s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_1d21be41a1a5096235bc5ac772fc8dc092a132aeab28a9066a18d2582f499371.html
Size 110KB
Sample260913-a6c12sch99
SHA256 1d21be41a1a5096235bc5ac772fc8dc092a132aeab28a9066a18d2582f499371
MD5 8c9568ea5efdf3b8ce9f1dc308ac9d06
SHA1 5573f75892c1535cc6ddcfd74ecd6779a4b23338
SHA512 3ff43aae431a5f6b8b994e21f3a8cdf179e2699996d4082213b88e747ac20279eaca86aea94a554677a9eb4d720db4ba9e01bcca1c729d05dca7f350b7403b55
SSDEEP 1536:0PxgYn+heasGRl2xAdlsYkhl4QDTtFNoGxyOzpbEaojbEaoR8Sf300J:auZQjNqipdojdoR8Sf300J
TLSH
T16AB3B68751204CF9EFA15DB3459B086B3C2C1437AC4791B9E3FD8F972B52DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2140	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338322647332856"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{2F4A2106-A98B-434F-9267-C4151B643058}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
976	msedge.exe
976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 4992	2356	msedge.exe	86
PID 2356 wrote to memory of 2140	2356	msedge.exe	88
PID 2356 wrote to memory of 1264	2356	msedge.exe	89
PID 2356 wrote to memory of 1264	2356	msedge.exe	89
PID 2356 wrote to memory of 1264	2356	msedge.exe	89
PID 2356 wrote to memory of 2640	2356	msedge.exe	90
PID 2356 wrote to memory of 2640	2356	msedge.exe	90
PID 2356 wrote to memory of 2604	2356	msedge.exe	91
PID 2356 wrote to memory of 4720	2356	msedge.exe	92
PID 2356 wrote to memory of 2604	2356	msedge.exe	91
PID 2356 wrote to memory of 2604	2356	msedge.exe	91
PID 2356 wrote to memory of 4720	2356	msedge.exe	92
PID 2356 wrote to memory of 4720	2356	msedge.exe	92
PID 2356 wrote to memory of 4336	2356	msedge.exe	93
PID 2356 wrote to memory of 4336	2356	msedge.exe	93
PID 2356 wrote to memory of 5072	2356	msedge.exe	94
PID 2356 wrote to memory of 4336	2356	msedge.exe	93
PID 2356 wrote to memory of 5072	2356	msedge.exe	94
PID 2356 wrote to memory of 5072	2356	msedge.exe	94
PID 2356 wrote to memory of 1728	2356	msedge.exe	100
PID 2356 wrote to memory of 2676	2356	msedge.exe	101
PID 2356 wrote to memory of 1728	2356	msedge.exe	100
PID 2356 wrote to memory of 2676	2356	msedge.exe	101
PID 2356 wrote to memory of 4832	2356	msedge.exe	103
PID 2356 wrote to memory of 4996	2356	msedge.exe	114
PID 2356 wrote to memory of 640	2356	msedge.exe	115
PID 2356 wrote to memory of 3908	2356	msedge.exe	116
PID 2356 wrote to memory of 4748	2356	msedge.exe	117
PID 2356 wrote to memory of 4748	2356	msedge.exe	117
PID 2356 wrote to memory of 4504	2356	msedge.exe	118
PID 2356 wrote to memory of 4504	2356	msedge.exe	118
PID 2356 wrote to memory of 976	2356	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_1d21be41a1a5096235bc5ac772fc8dc092a132aeab28a9066a18d2582f499371.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa124ec188,0x7ffa124ec194,0x7ffa124ec1a0
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,17030494872281575705,15666980798856820055,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,144443993597243937,12870810988289689074,262144 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,2188325035064538626,10108540948971449036,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,9425920878370748022,17823159640787246920,2097152 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,11961071905110420428,3923857585158205833,2097152 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,10286126931419853568,8678968990570086725,2097152 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,10055613811537960531,6404819722805325530,2097152 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1408948307599139909,4274777363099189008,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,16748498524165475232,6424738325064727159,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,813826824834551094,13980955303177138212,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,813826824834551094,13980955303177138212,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,182924462605515728,700640739259189574,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,1245080989709044620,6397365061947715581,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,10119715580979863651,6997742036929070728,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,3550687675364913231,3389894492885801044,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,11560340886325822953,11052383799621913554,524288 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,12986737155402554206,10982818333108428660,262144 --field-trial-handle=2288,i,8379885095129524441,12484710508838060521,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f8244eb13fb996548f04512b6eafc4e78e87342db23f4bf42787c69dd7993573
MD5 405fbfc56d457fa5191f83ab08acb594
SHA1 a80d98bca2640a6ad52d0b6149deba3723c4d471
SHA512 f28a1dc15b0167176cfd52fca49a4efab75931fc22ed4e5213805a46124f0587a4b8cb968a2995785aefa142d7bc629d90e6173f030323b063a142b37fd45efb
TLSH
T1B0E07D850CD9C22EEAD2E54B43689F0C83C0374FD2CC6B9A374085CC72458D4F2C3A94
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 52ec860770920dd3e44a9cc06b9be61c55be416288e9a3db3cc720666c074b71
MD5 423d3e6e62f4ca774c1e613097ba63ae
SHA1 a096ec49a8696adc8e5cd3a26c9e7c7746907bdb
SHA512 2835074e5f9932e1cbd4cb505a847bd7ce9e4d74fe192fb945b276aedeff9e4d5282670ae9867c2adf48a685d9f57007b19f2eda460a3130b5053ea6f7d8189b
TLSH
T1E2613EC9554040AAFBE84574B5DB0D8F36F4899DD6B31ED20564EA34FBCFB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587af7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587af7.TMP
Size 3KB
SHA256 6f6ad971fd3e6bcf7d4add5ee9b1bf751005fd718d6e16ae9c7f3bf51d017de8
MD5 1303ffd2e073198eeba23f951a0c810c
SHA1 f30e2e9805c267ded8e868d18e2cf66c2bfad068
SHA512 e0f6cd94a5a522cca906e1bae5da095f3a27127419a2d539e9609c15a0f991869d90d950b488519d23ec1f3173369a9c5fce5cf71dd3e8672d4940a562bc9dce
TLSH
T1F3615EC9594040AAF7E84574B5DB0D8F36F4899DD6B31EE20564E634FBCFB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 16d9142365999c3d12f42e36b9ac25e2055441984901cabdf58b04d701e0a347
MD5 096f055a76c3bd17b6c3a7283506d6c7
SHA1 7e2d36a7b8d8801eb7b4f5626a1c21bbb77cab88
SHA512 3ee1aa87277d0b72ea4a7e314bd1b43a35b35e25300028fd8782cb3c850dd3df0f3b5001453dbf324543bec107b40dcd364d732a4c0f0b47e9979580db6f0247
TLSH
T10A3180F7C3D4877E890156F0AB24AE2BCD1C0A46822C3C16C9E5AF1B67E64B0D1015AF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 29e867c0d202188c916ef4afcbc6579ef7f60505a807492dc0dd16976cb14893
MD5 db1ea39b5388eb8c0f375eb0b38a6f24
SHA1 9b38d6e3d4e45c9cd945ccd02d83ad756848014f
SHA512 d59eff8836dadb0e2d683a512e63b5219ac1c81915b7dd30370c7d631a5652bb7e353055ddb4b48cf722ec20632fc590dcf698f0835d0e85c7816f2126746413
SSDEEP 192:sxZSRLWm/fjsFCIdpdiHW6+WNGY3RA4IgrJ:sxZSsm/fjsFr4HbGI9
TLSH
T10212B7126E28A97B8CCBD21DFB25BF53E6F9503261941E58E6FC861C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 40e63e46239c6575a19989b6528d7ed7010a6fc09097caf59eda6e752efa6371
MD5 fa48364d0c7984f9086905c835e39a22
SHA1 07ff9b7a95da5a5ac8f8d7eff808401d5270b3f1
SHA512 484aa680e8407212fc88cae408cacac530a15f5fa969ed7157e4787f7e4a359a1e2ff848a4e561682dfd89d23518236eb25060369d523584ccd635b61218b1eb
SSDEEP 192:sxZSRLWm/fjssCIdpdiHW6+WNGY3RA4Ig5lJ:sxZSsm/fjssr4HbGIN
TLSH
T1EB22C7166E28A97B8CCBD21DFB25BF43E6F9503261941E58E6FC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2ac64dd998e4f1290a60132fcd047bd3058f722f035f48d8f0964ca55c16fecf
MD5 97434860f2bcf2d2bfd01355dace5136
SHA1 2de1672905413115cc42a70f117913c0faa94d9e
SHA512 4efba0038fe7c2f8209389be0d32d1963e46042a81287d79d4b58b6a35e9ad9876146e42c4bae8c545e70137e854e83f6f41e09fa9d4236b5fc2be5c9cefdba7
SSDEEP 192:sxZSRLWm/fjsGCIdpdiHW6+WNGY31A4Ig5PJ:sxZSsm/fjsGr4HbGKD
TLSH
T14D22C7166E28697B8CCBE21DFB25BF43E6F9503261951E58A6FCC61C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 810c0942a97e0beec5d43383b705a933ac47174549df6c07b4e2cde30ed31bf1
MD5 e5010ef8413cd3528701c02776d7cd14
SHA1 5c557cf2d247d28dbf22782e9f6f46ab6de12f83
SHA512 466a4c64d501422855a892ee3f422a2ef561b761f0565246ca9a9ed4cbf9be253704dffd69e902b565d182d3373ab61df92275896c1e92a1321998903bd201d3
SSDEEP 192:sxZSRLWm/fjsGCIdpHiHW6+WNGY3irA4Ig5PJ:sxZSsm/fjsGrCHbGZlD
TLSH
T15022D8166E28697B8CCBE21DFB25BF53E6F9503261941E58A6FCC61C05E7ACE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7271b80d613e131aa52f73428bb7c639c2165cf759f4f277abd5f1495fd68237
MD5 9d1c4cd513af5e4bff89be3863db7bd0
SHA1 ea8994daa57524a729a4cb4074d3ead8f7eb4e05
SHA512 2559cf2b5b7ca0accf825e455df3b6084f32616e0b0787556d0048a76615e6072f7c384c147258bb53c11e7197e1fe5171a88848f203a54d7a3f344030f0502c
SSDEEP 768:Fv30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72irolZMb:Fv30AbSWvS2l9u1jaLmLZ125Q
TLSH
T10AC2EB3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4047FA944C02D77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 311e530319f719e6d81cf6dc32ea79128d901f2a9123561053ec88c4f8f496f6
MD5 d1175b5e0e272a56768f1d2edc1d5f5b
SHA1 f6c2895157a2bb316df79f1f775d0689bc57149d
SHA512 226adabc1a7d06e96dce850dc183922cacf01ecc6e72ce4c26914ef7ffe967f06e16f09fa1330d6c59d6ed8ed5d862cada26ba17669c3e4b979b57cf72e437ea
SSDEEP 48:KgJIdK6YQ3yVbIxKM4MOrYfLBpZ2Tp29IEL2KRTZF2VjmGO1rnyhX:KgJSK6YCmbmKM4rMgKtOWSX
TLSH
T11691EF1472BA5700397F29088275871B2251B5B33459FA3F7BF910A29E6BF090DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5cea7db2e2e9dad46fa6ca6e5ee0fda1fd463f275d269e1d5b7c17d453960583
MD5 2d1587d3e874285011da0c82c3287b7a
SHA1 83979961779edb9f1914cf6ba9bab025dbdf669f
SHA512 2e412ad9a6eebecb5471c5176aa6216df24705dae512e7e5ea1394df4ac578e0fd9eebb590e53f31b16dece8e1bf08a0f88244cd81ab835671cf2dcb2a611898
SSDEEP 384:bqZcIEq7sNn/QpuufS9iX5F8+RM2YoIe7O6R2FeoPh7UroW:0bH5WagWQe7TRyep
TLSH
T11B928D3268B89C3B89F7E166F50B36139EBC506797C96F84D4EC5B2E04DA9D4030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d0b3f187cbc7889e2a326395a8637c678ea7d09a557a86e96bd1b6d8a217fdb3
MD5 1224866705e23dda7537e202b49eeb8d
SHA1 df7a0c1f1b81c2e17c11a7b713ae4e3286fc2e2f
SHA512 32f13ed72ffa8dd2c351caa525fc0e0d1d932c668dc9df71de7f20a519ccafd0f1f19a143d31d5dbf090d98b52fc2a66fe2d775f6cfdb973de9120cbbf123250
SSDEEP 192:LONy6AmwprQmiUyZZ6siX5F7Y+DJJizeNU6:LONy6ipdo6siX5F8+SCNU6
TLSH
T13002EA35AD686C7B89F3AE55B54B3B239FA5116BEA942F84C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c094b7a26bbe7ff36c18719a5d6170b0cbffbc288e007183ae62e4cf5d72ec44
MD5 f831e3a45f0abbeb5f5cea50d3c16fd3
SHA1 d756ed4d1a4374b98729296be4bffffeb867af07
SHA512 3fc6af631ae8915266b651c4525cdf59cd19373f6e661904ca775901ae3316f22714b7995eb1880ca03c2537c08eeff34130e9e866fd508e2cbc5eeb2a8b5582
SSDEEP 192:LONy6AmwpkQmiUyOZOsiX5F7Y+DFM2Pwo6lRA/fU6:LONy6ip0vOsiX5F8+RM2YoIeU6
TLSH
T195123D36B8646C3B4DE3A561F04736239EA8512BDF887F94C4EC1B2C06DF598430AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8bf37e2f83112c630231768b80407a772d57195e58d4674f0bf88d7bee056ac8
MD5 e45c35a47d262ee606935e234c886b06
SHA1 63fc1cbb0dc7d53b87625b335e4ccc5307ab71ab
SHA512 a103d6608e162394a1b91e51ba4f3f2e260c698d53eb6c9ead72848d0abb810bd84563689c7744fcf011ff89d3048753bb290e0ed2c53b1f5f26177a07aeed84
SSDEEP 384:FZcIJsNnCQpuOfS9iX5F8+RM2Yome7O6R2FeoPh7UroW:9JONWagWOe7TRyep
TLSH
T106828D3368B89C3B99F7E165F44B3A139EFC506797C92F84D4EC5B2E05DA9A4030AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 18a56bcbcc9990f23ab7b4a435dd9f02390e7ab22d253bd58812b82340fd0a2b
MD5 1dbb1e5c4634c4220958664d8c86cdbf
SHA1 143e1cccebdf4cf48740fea299d44bbac84f0c60
SHA512 870df35d7efd15cfb7a07863b90b5d56974dea1c08d8504d80a03b5773e5bd3a953f2f2abb8420f9c0c3e3b21b4f0b3edfbf780434262b9310336845d4b2b0a1
SSDEEP 384:xZcIJsNn/QpuufS9iX5F8+RM2Yome7O6R2FeoPh7UroW:ZJH5WagWOe7TRyep
TLSH
T1C7828D3268B49C3B99F7E565F44B3A139EF8506797C92F84D4FC5B2E05DA9A4030AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05f9bcc1-a80b-4e17-a84b-8e2bbe55ee7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05f9bcc1-a80b-4e17-a84b-8e2bbe55ee7f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f8c7d25d4196fad0fbb0be09543d5d4d09093bac431f7ed3a476fd886037d293
MD5 8c508d845223e7207b8c1627bca3ddb0
SHA1 e3b86d9ba07a6d882f44d00b0581d8bcd53dd88f
SHA512 b8917d0c71a8c80bcc69c682f6215095b01d581aa42983351c4516f263da49806069d7c10d1afe59ce31f1d58aa2e4af3e3f93911686919847d2d46e72677fda
TLSH
T1E8413899B6FA2148B3B76E5A9BF7986D453AB8372E06D49E10010D4F4A63B44C871733
MD5 SHA1 SHA512 TLSH

Submit Download