ee31d3beefb141c14af4307467d50c8a258bf2afc76e11667358343a138f1bc2

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ee31d3beefb141c14af4307467d50c8a258bf2afc76e11667358343a138f1bc2.html
Size 104KB
Sample260913-b16a3sdd85
SHA256 ee31d3beefb141c14af4307467d50c8a258bf2afc76e11667358343a138f1bc2
MD5 2255bef193f579fb370553d2221b6abb
SHA1 f4f322c4359e8839e67d966b7480a15b540a96ac
SHA512 baa99d44d5c8d0b51b8a7db8a9a3c21582e3913553e94a55fdfb2c2a670dc4d2a5de6c1e8165d7c46eea55418168f71589823deb1bfbaad0d22718b8d53f83c0
SSDEEP 1536:9mx8Yn+hC+T+7R5VFp2Zf9SlmQyTtDNo9xwqo3bEaoabEaow:MeCwQKNt53doadow
TLSH
T136A3938701205CFAEFA049B3425B58673D2C5437BC5791B9E3FD8FA72B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338311582613401"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{CE1C8F33-402B-46D5-9EC9-0DDD3B37D0CC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3500	msedge.exe
3500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 2964	4296	msedge.exe	83
PID 4296 wrote to memory of 5060	4296	msedge.exe	84
PID 4296 wrote to memory of 1060	4296	msedge.exe	85
PID 4296 wrote to memory of 1404	4296	msedge.exe	86
PID 4296 wrote to memory of 1060	4296	msedge.exe	85
PID 4296 wrote to memory of 1060	4296	msedge.exe	85
PID 4296 wrote to memory of 1404	4296	msedge.exe	86
PID 4296 wrote to memory of 3404	4296	msedge.exe	87
PID 4296 wrote to memory of 3404	4296	msedge.exe	87
PID 4296 wrote to memory of 3404	4296	msedge.exe	87
PID 4296 wrote to memory of 2928	4296	msedge.exe	88
PID 4296 wrote to memory of 2928	4296	msedge.exe	88
PID 4296 wrote to memory of 2928	4296	msedge.exe	88
PID 4296 wrote to memory of 1312	4296	msedge.exe	90
PID 4296 wrote to memory of 1248	4296	msedge.exe	91
PID 4296 wrote to memory of 1312	4296	msedge.exe	90
PID 4296 wrote to memory of 1312	4296	msedge.exe	90
PID 4296 wrote to memory of 1248	4296	msedge.exe	91
PID 4296 wrote to memory of 1248	4296	msedge.exe	91
PID 4296 wrote to memory of 4616	4296	msedge.exe	95
PID 4296 wrote to memory of 3904	4296	msedge.exe	96
PID 4296 wrote to memory of 4616	4296	msedge.exe	95
PID 4296 wrote to memory of 3904	4296	msedge.exe	96
PID 4296 wrote to memory of 4008	4296	msedge.exe	99
PID 4296 wrote to memory of 2516	4296	msedge.exe	104
PID 4296 wrote to memory of 2296	4296	msedge.exe	105
PID 4296 wrote to memory of 4380	4296	msedge.exe	106
PID 4296 wrote to memory of 2324	4296	msedge.exe	107
PID 4296 wrote to memory of 2324	4296	msedge.exe	107
PID 4296 wrote to memory of 3500	4296	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ee31d3beefb141c14af4307467d50c8a258bf2afc76e11667358343a138f1bc2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff952b6c188,0x7ff952b6c194,0x7ff952b6c1a0
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,16597803790765417862,7421693848371516343,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,15307211707770624797,3229153126064718723,262144 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:2
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,16504019619836699354,6095818797028171586,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,12896691068523634278,5989175923159794607,2097152 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,15911822153536139595,2546811175433114794,2097152 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,11881817298595939348,17683558735271003315,2097152 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4124,i,12331701727377891594,10271225195547247147,2097152 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,15766637478462677692,12275191243945000781,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,4696099124943836715,4584028391081808046,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,2893202530221589884,12673213481791725024,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,2893202530221589884,12673213481791725024,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,16691782048065701158,7583210724841718546,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,6536075597500585901,1631392405063773355,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,8815474400000161288,15261763735627749965,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,13281410583561842631,3229397335556661669,524288 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,793896658933220587,1573739862838125326,262144 --field-trial-handle=2808,i,18089201964704422424,3691415657026760982,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fa6b0f7f438ca301d109a5201f64a6e7a0837b9705bc746f991ce3b80c47868f
MD5 bb0180c08b281b94bd4127bc8c4c89d3
SHA1 961b5534a5c955fe5fd16440d853570177b73aa7
SHA512 f584820d80b4752051aa3af17a777b395cd016733f1521768043c014d9e0a458c0b0fc32dd4bcb6d0959771c49fe4c3eb387380aeb0d56648ca392945a9dc1dd
TLSH
T1E961D6802287837EF773607441DE11CF3E3558C9188B2F21C0E5E978B88F765A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a340.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a340.TMP
Size 3KB
SHA256 0cea393200a3dfe9bd95e7f6f21d64cb1da5e26ec1a9bdcca10760abdb3f0038
MD5 6f9409433dbfec04130c46ed57d08840
SHA1 fa6c44da669d54b39172b5e2ac647a46ab1475d4
SHA512 10f383b7c334154cd6fa659c6c98efa4c5f403708ad1ffe4aa0ef0d6a00ec3408bbee802be111e628cf3c2d02fa19093f106d38add34f3b87b0ba7df8573d5f6
TLSH
T18E61C5812287837EFBB3607481DE11CF3E3458C9188B2F22C0E5D578B88F755A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5d74250a8b575ffbd5cd4f56acb0216c63576c967ea16c4967f11256cfd16434
MD5 eb0ec3191acd4227935cb41108df296c
SHA1 48ea7e57551ff37747a22869d0751a624296b4e5
SHA512 440ca61f9d567bad58e0735c7165c2eea69ef241821fe28b1c5ad49151ba78a53aba4f080a6cec40629386caaa2a6d10907a515505dc5766b9b125ddd91eb55e
TLSH
T113417EB7C3D48B7E890156F05B256E2BDE1C0A46822C3D16C9E4AF1FA7F24B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fd1e5a6e511441f7cf7b356c4e63787b7ed5ca5af4a361bb76d3609365b3e3c0
MD5 c34bb98b1c573046261ee1e12681c829
SHA1 996cff93852d4a5df012f41e42d0ad76c530c1aa
SHA512 9771a817d0b6b8d04c79bc9431147a5b1f5cb642434dca512abce1ddc1cf5bbfc4f75f76c4b664c683304d3fb6d222edd476934465ae35002ea46f7080593161
SSDEEP 192:sxZBR9Wo/fFsTOIdpdcHW6+WNGYgU1lIgrJ:sxZBWo/fFsTfqHbG49
TLSH
T1C212B9156E28657B8CCBE20DBB15BF53D6F95032A1941E58EAFCC61C08E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 151b41cb38bd4bee7bffcf1beada53fde384d3322c76395606d349d1b468b58a
MD5 5ca0a3d2dcb4eba33da807aa193e15b9
SHA1 25e981226a695342856d9532c0b2d683e7500527
SHA512 a35d683c6ae2f84b7b95d0d5d36ab424125b5edcb62b8d79cbc721912436b4fce80a8c9d8b6aecf33c5364522f575ea9ca78c7ab6c2acfbc990a052921bcf725
SSDEEP 192:sxZBR9Wo/fFs/OIdpdcHW6+WNGYgU1lIg5PJ:sxZBWo/fFs/fqHbG4j
TLSH
T13B22B8166E28657B8CCBE20DBB15BF53D6F95031A1941F48AAFC861C08E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 35e959f9569de24377858ea26da8fba78d3198e7b35957b21cf96bea5fe04c87
MD5 a270b635cd4ea54ea745551e63fdb70c
SHA1 e1cc5322472ee1e58a0b4911c9e5d66476ff687f
SHA512 588e23243252674e0601d2777a9dd009d8972f8c9bf1d335431b5d96f876a3ddabc96dab98f74cfcb90fc9987cb5981c4d40704b730423759552ba781f6a482f
SSDEEP 192:sxZBR9Wo/fFshwDOIdpHcHW6+WNGYgQ1lIg5tJ:sxZBWo/fFshcf8HbGcV
TLSH
T1BC22B8566E28697B8CCBE20DBB15BF53E6F95032A1911F48AAFCC61C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8c1ca28ddf95f28732e3b2a467209db79d3a5912de606d829cc4415a282c12d7
MD5 45df886d52a023e0dce385621e524a1c
SHA1 39a6d4162ede297c4b38f05054b138e6495dac7b
SHA512 96abd2141d5664c9f77c7022f6ca5fb5bd30d7a3c648ff57ab312be4ee275824750059fd4cb316cd2804a5a67c08ec6be1f167dd21c88a268df35302092ea66d
SSDEEP 192:sxZBR9Wo/fFshwDOIdpdcHW6+WNGYgx1lIg5tJ:sxZBWo/fFshcfqHbGjV
TLSH
T17E22B9566E28697B8CCBE20DBB15BF53E6F95032A1951F48AAFCC61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5214fc951c60cc1ec5ff2603ac0f78bd29e6da92f47194f88a394211e38cabbb
MD5 23020054cdf18efe6374b359e14ecafa
SHA1 504cfc642075ba4ad1550f7cee825515d6f8afea
SHA512 98648868078286954d13580cd1d6d686b457752b3238b3ca2a30501e0d023a29091e348341e6e19e24f1456f9f41c9c7d398ec7aab481d474bfa13e45f1fef11
SSDEEP 768:GHichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzZro60L:GHichfPWvPZplu1jan+LKgzSDL
TLSH
T115C2F93B644CCB7E4FC01A9DDD1A6FD67E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5940d8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5940d8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 59e5a55208facec1ea743c054038245495fffd212e340ceb4a24a08b3723cde8
MD5 17518eabdcd98b770144fde1c8fe560e
SHA1 8a97f33581584e7d2bad94b837ad398f95ad92e7
SHA512 29892d6268cec228d678db2df71b028c8e54e5bdab4ba2cd2bdb142ae30838994dcfb16aed5d7cf966989e7084cb8a7b4cf1f3861e4500853f479c0d5b6db8e6
SSDEEP 384:zZcIjsNyeGX95RwWuBGYX5EGQUFv0M7O6R2Feo2h7Ufou:rjlX9QlGYuGQs0M7TRduR
TLSH
T105827D729CB8AC7B5DEBA156B44B3A035EFC5027EBC86F8095ED6B1D00DB6941307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a7c2757e423f4db368e9e6c01032740c4c8b1812221382b1970869e8502c2d61
MD5 a69c9e95a2dd170bea47e3dd36d93a10
SHA1 b9000fdc7efedefec18b17b8ee9bdfc5467b883d
SHA512 bcdf8a7e144ddfb985f47469de6242376a362996f1f27e665d88dfc28ca5283368ecfe3e78bf8606e5cae41ad620f52d056e1b9623f5e0e461bdeee300d10c16
SSDEEP 384:ssNy/GX95PwWuBGYX5EGQUFr0M7O6R2Feo2h7Uh:s4X92lGYuGQG0M7TRdU
TLSH
T155625C36A8B8AC7B5EE7A555F40B3A139EF8502BDBC52F90D6ED1B1D00DB2981307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 03cd8069daa0b3bacc2489594348a0c96df0c15995324967bbc44fc321a4f9f3
MD5 210db5f6e28b8feb0a0577240e961073
SHA1 1ad8be4c06158a63a36f9904ee5921275045073f
SHA512 0da70589c7915bc8a8af0e58e8de75c47148e27a71d6d69f0603a8fbbd90515a0db75708e65c2135cf6321a7a04ac89e598edfa9cab50f1f816400ef1282bc1f
SSDEEP 192:LJONC6DphmqQmiUyEXq8wGYX59ezHC6mEkk70FaU6:lONC6193RwGYX5EG60YU6
TLSH
T1B802E939EC787C7B4DE3AE45B54B2B175FE8112BAB912F84D6E81A1D00D724C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9174bbc3519da6468687d0e7610677bfdd24d3fda8ea592fe36388e7766a9ade
MD5 2df729d602e9ea3a982e24a794ffd24f
SHA1 e6c21c37695296ea76979447313bc1b4df31b6df
SHA512 0910fb52fbfd2b0d36e59282136262e3a5351ab31e3cc11b0f3648c7052c1cefbc00a3cde66da1c1f7c7b8657f85b56036f502865546d793feaf583603bf769b
SSDEEP 192:LJONL6DphPqQmiUyVXJwGYX59ezHC6m4Une+qkII0n/5+U6:lONL61IsJwGYX5EGQUF70MU6
TLSH
T15D120B35D8B8BC7B5DD3A495B44739135EA8522BEB857F80D6EC2A1C01EF29C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 6a51277c7a70c23f64fd00b6cebc36732d12b8658e11dc2c7ced48d6cb9af88e
MD5 f770811028f00d4d8d6d0640b9ead014
SHA1 829f4884d65f013cef53bf18700e2a93d22fb950
SHA512 94fb1627122f26bd67e94e8fb40ef754060dc7aa4f8c52787afc9bff917de89855bf2d317195e20c158ca785674e01ce20b21be90bb83dc08428d851734d3b72
SSDEEP 384:riFiZcIzZsNK8TUNTUlIlLGX95RwWuBGYX5EGQUFt0M7O6R2Feo2h7Ufou:GFQlbwgoX9QlGYuGQY0M7TRduR
TLSH
T1BBA26C738CB8D87B5DFB9A85F94A3A138EF84067DAC5AB90E2DD5A1D00DB1D80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 394d23439f2205848ccfc056271742e71213d8fd6d726117c7616ba3b1898068
MD5 e21978147d58d3f6ef6e5a9e6d53f2d2
SHA1 84e8b2ec0b8d367574f72e9aba97322a77803426
SHA512 bcfd24e9afe2cedbab7312f66f95a33fb7edc5328a7fbc386755451ac39f4abe0f7809caa5e19011292ae9ed4cd300d5b5ab2ac1d2cce05cb7498174a332e3cb
SSDEEP 384:7ZcIjsNyLGX95RwWuBGYX5EGQUFv0M7O6R2Feo2h7Ufou:jjcX9QlGYuGQs0M7TRduR
TLSH
T139828D729CB8AC7B5DEBA156B44B3A039EFC5027A7C86F8095ED6B1D00DB6981307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da728720-8ef4-4c64-a706-d0ab6a7f663d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\da728720-8ef4-4c64-a706-d0ab6a7f663d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9f5b01629b2c8412d00b618735f5f6d6a9bd6a7ec5a1e1a2dcdd587ce6b7635e
MD5 ee31e0b714b9307b682890c75219437e
SHA1 223cc17156e76c01756155e596cc401d1cfb3db1
SHA512 f159e109e81466fba385d655f78393ccdd4f1017afe038241cc1e5a8d27782495f1e68b01c09ca63bfb3729377996d384f4dc9d648b6a980546239cd2f98adbc
TLSH
T17F414858A6FA1108B3B36E4AAFF6B56D487BB9772F06D09E10100D4F0662B40D9B1733
MD5 SHA1 SHA512 TLSH

Submit Download