cb1902d64efc48d1e9fb72806ef37f1840d39ae00c496ba9fb2b829dd84f0c63

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_cb1902d64efc48d1e9fb72806ef37f1840d39ae00c496ba9fb2b829dd84f0c63.html
Size 105KB
Sample260913-bdql4sdb22
SHA256 cb1902d64efc48d1e9fb72806ef37f1840d39ae00c496ba9fb2b829dd84f0c63
MD5 515c45f45b57800965227374b0cf3bf2
SHA1 483313e888bbde8dddac38fea992cc50f70d1bfe
SHA512 bee5bc528a803edadb3899c52b41b074dfaa5b903e2f08013562d8234c5dbedf3bb7ba1707347157a45a20356f5641bff435c410155c3260619341a43f3f397f
SSDEEP 1536:HJmx2Yn+hhssWR3KA89h3mY5ClqTQlTtVNomxtpaRoSOZPbEaoFbEaoHU:HYQpTQdN1pUoSOZPdoFdoHU
TLSH
T131B3938701204CFAEFA049B3455B586B3C2C5437BC5791B9E3FD8FA72B51DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3636	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338386012053628"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{E7DEB810-5EAC-43AF-838C-C1D580FF657D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
884	msedge.exe
884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 2612	3056	msedge.exe	83
PID 3056 wrote to memory of 3636	3056	msedge.exe	84
PID 3056 wrote to memory of 3188	3056	msedge.exe	86
PID 3056 wrote to memory of 3188	3056	msedge.exe	86
PID 3056 wrote to memory of 4680	3056	msedge.exe	87
PID 3056 wrote to memory of 3740	3056	msedge.exe	88
PID 3056 wrote to memory of 4680	3056	msedge.exe	87
PID 3056 wrote to memory of 4680	3056	msedge.exe	87
PID 3056 wrote to memory of 3740	3056	msedge.exe	88
PID 3056 wrote to memory of 3740	3056	msedge.exe	88
PID 3056 wrote to memory of 4476	3056	msedge.exe	85
PID 3056 wrote to memory of 4476	3056	msedge.exe	85
PID 3056 wrote to memory of 4476	3056	msedge.exe	85
PID 3056 wrote to memory of 1368	3056	msedge.exe	90
PID 3056 wrote to memory of 3776	3056	msedge.exe	91
PID 3056 wrote to memory of 1368	3056	msedge.exe	90
PID 3056 wrote to memory of 1368	3056	msedge.exe	90
PID 3056 wrote to memory of 3776	3056	msedge.exe	91
PID 3056 wrote to memory of 3776	3056	msedge.exe	91
PID 3056 wrote to memory of 1640	3056	msedge.exe	95
PID 3056 wrote to memory of 4260	3056	msedge.exe	96
PID 3056 wrote to memory of 1640	3056	msedge.exe	95
PID 3056 wrote to memory of 4260	3056	msedge.exe	96
PID 3056 wrote to memory of 2108	3056	msedge.exe	99
PID 3056 wrote to memory of 2784	3056	msedge.exe	105
PID 3056 wrote to memory of 4392	3056	msedge.exe	106
PID 3056 wrote to memory of 1320	3056	msedge.exe	107
PID 3056 wrote to memory of 4564	3056	msedge.exe	108
PID 3056 wrote to memory of 4564	3056	msedge.exe	108
PID 3056 wrote to memory of 5112	3056	msedge.exe	109
PID 3056 wrote to memory of 5112	3056	msedge.exe	109
PID 3056 wrote to memory of 884	3056	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cb1902d64efc48d1e9fb72806ef37f1840d39ae00c496ba9fb2b829dd84f0c63.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x248,0x7ffa4f2cc188,0x7ffa4f2cc194,0x7ffa4f2cc1a0
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,12009642198692146348,12753850899082360569,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,9524555575266372408,10810356636747128758,262144 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,9470695592021195476,17506064094942723152,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,18432021618163504781,5931214717242785524,2097152 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3348,i,16573188304119450828,12163060100860151781,2097152 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,1364549254122430594,7635954716367260635,2097152 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,4533286121070037999,14411883163863793855,2097152 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,10505582892044815676,17226863221909915699,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,2797359812629346174,15471782674199892325,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,626360882014557725,8487028170334405108,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,626360882014557725,8487028170334405108,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,5221695081955336781,11205482588276494651,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,981542642173508945,9217528100896827307,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,1392822239263132108,8440087421810245869,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,5432759542116808689,6461987233615003079,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,5176311371301249994,12056486684446574833,524288 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,8741076861589899270,10401982242156408390,262144 --field-trial-handle=3004,i,12871324038218955330,7799757476858321822,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ac00a011a85eed72d5dd37656402ffe903311f3676d0c3ab6760ba78d22e78e0
MD5 4e12405c4cf14d38c4e050467f845436
SHA1 b33ffa7ce6eb964f622f3c20a074d5d1bee9ad27
SHA512 8506e4a27054ac601f1f05299f489f6e2be528af2ae9d1933d59ffbafc8658747e46cacef4adb0cb689ede756c560a3b3dabc63fec4b0f6eb562bb645f76d89e
TLSH
T1EE5178C741524C60F796C3B7A3F649E3BA34CAC75D9F2E520484ECFA8846FD4C08014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a89f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a89f.TMP
Size 3KB
SHA256 dc8e35f39169c0dce85c038123a1fadb8c73b3fd1d748f437145e3629774d18a
MD5 2df32c7a4e147f583fd41e602c98ce47
SHA1 80837d0c2346e1938fa9a2cb6b58f84de1fdbdf6
SHA512 846c2a547edd808bbc8bf10a3fb3f2ae2140453ed3339af17500f1406a9fe412cff8db40bc8a191aed1e589f8b67557a88eebca1fee5285ce2515df9dfbed115
TLSH
T10E5166C741524C60F796D3B7A3F689E7BA34CAC71D9F2E520484ECFA894AFD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7f5c4e26189861d711bcfc681e01b5c7a1488d1aa211e2df6ac38b4615f9af99
MD5 c22c17a59ed1e4a28c5f193046ae1c18
SHA1 7a762971ca7bf1ab26da697b0680a6308b321208
SHA512 9bd700aa4e1e7083ef29031d6758e3e164e97c9c541d142ea9f70b3bebad4a68263b8ac722287cf9e8b16da770b867b773fdda25106fd8b2f5d5a2a97c396e82
TLSH
T1D1418BB7C7D48B6E890157F49B246E16CE1D1A1A522C3C56C9E8EF1F63E28B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e32674641fd0bcf74e653cf3085c5640da177496271911412e59a960a28ebe04
MD5 10244204364d3971b2a721fb6ba164b1
SHA1 09a8477fee477cfc0798b68436a6e078af03e4b9
SHA512 052cbdff98adb7a62c6f4467870b960061651a957c541540eee69949355d2f1fd439218628b15ed7d5c24422795d2bbf1e0a9e0e9de10adfa068f61593d723df
SSDEEP 192:sxZkRnWX/fypsZrIdpdlHW6+WNGY36aO68eYIgrJ:sxZk4X/fGsZ0bHbGX689
TLSH
T1C912B9566E28657B8CCBD20DBA25BF53D5F95032A1D01E98EAFCC61C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 efee4c01a77e74cc18e7dbaf299ecdeccbb7ec1fbc1dd9c5a8d35e40d55a8e63
MD5 27acd88609dce0c0b20239ff0dedcb1a
SHA1 8ad55b9514ee303bae688f29c865fbcb29a3b939
SHA512 6a0919143c23b11ba37a715dba89f832c4d241ec8217809e46e888d560bbb5d6ed47ed968b398dbb6160f116e057d9b4c63634e73e16235925597136c75a3e09
SSDEEP 192:sxZkRnWX/fypssrIdpdlHW6+WNGY36aO68eYIg5QJ:sxZk4X/fGss0bHbGX68G
TLSH
T12422C8566E28697B8CCBD21DBA15BF53D6FD5032A1D01E98A6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 32e7ff4da7d3863841e47a54afcb1d606827f5f436c66ae74c0f0d4380d9ad08
MD5 bc9ecd3cb44ad38cfba002a61cb90a99
SHA1 768b925ecacf10fb314d69717ba30e4e8208a8bf
SHA512 12ab8abf861ca49588eb4fa40896c95bc6c2367efa8a32598345fd3baa0ec19331ffc5e7606b219115b9e9e82ff618b1d6eb48d58b93d7f55eac3d9c2afc2fc7
SSDEEP 192:sxZkRnWX/fypsArIdpdlHW6+WNGY36QO68eYIg5CJ:sxZk4X/fGsA0bHbGXQ8E
TLSH
T1FA22C9566E28697B8CCBD20DBA15BF53E6F95032A1D11E98B6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 17a515bf9a767cada66640ec153e9823c15f0616c04b6783dc62904820b6e253
MD5 b01c99d37647171905e9b5bee76306df
SHA1 1609b6cdb424c52fb570bfd6ff4d43c27d5ae8ac
SHA512 709da2ac2cdbb750d185c88f10002bd56c1cfe0abc4e22f2012bc55e45b2d525cf755b85e7e7327656c208b5847aa056c6489e77189a4364578a05b97b73b402
SSDEEP 192:sxZkRnWX/fypsArIdpHlHW6+WNGY36UO68eYIg5CJ:sxZk4X/fGsA0FHbGXc8E
TLSH
T12922C9566E28697B8CCBD21DBA15BF53E6F95032A1D01F88A6FCC61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fe35baf13e32fe53abd2e15807eb4a62d118f2ede79795f143615625264be102
MD5 aff0407e68878bb611c0cacc980353c8
SHA1 c545267374139b7819d40dbd554a55cc21e674aa
SHA512 62744ba4e345cc595750f68dfc6071d42e9598859a36e03f55e99884ab6517a89b104a64ccfde3ddd2475576df2ac0b709640b3f686a9012f8012e4687035852
SSDEEP 768:6oKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/9roxo:6oKlm7QWvUYe0u1ja8/L/E/2xo
TLSH
T1F9C2FB2B740CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 54b4bccbb8687627c19371e25164f44e4b769284e32244d16a3e99a455db9fad
MD5 4bc00775e0dfc0c86d01c8033018c2ba
SHA1 89105baf217cc29b81a3a966932372b2219a26f4
SHA512 6f9d795923d0ad1f9bfa49239474b8ec67244ddd37b3df2481217434b8fab65f041100755184fae284dfe85150827516a118e985abf8ee93925ae73968a429fa
SSDEEP 384:xZcIfXsNXQUKb+r0h//iDkEYoBB7O6R2FeoKVoS:ZfX+4/aDpZB7TR5l
TLSH
T10A828D716C78AC765DEBD151F44636138EB880A7A7C91F90D9DCBB2E02DA5D8030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 431a0024d447e2238da5e067c4bcfa3ae30a981986eb59586daf6fb350fb8329
MD5 111b0a8fdc666cd562720b5ff1426572
SHA1 1b7c2d6940fef6522870e3397fc095ea4ebfa12c
SHA512 781992d5fb26de02acd83a6c2d84d085e03b84f7b6dc0eff70c0718d38615e2e5b82e55c96e2aa2138953da5116aef19d160a8aa26752adb6efc8c2f329278f4
SSDEEP 384:uXsNXLUKbDr0h//iDkEYoBB7O6R2FeoKv:uX24/aDpZB7TRj
TLSH
T157625B717874AC369EA79591F04736139EB480AB9BC52F94DADC6F2E02DE5DC130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 252c3dcbf5b5069b69f5f6b232c406621eb3b8b0e104e900d58aeddd11cb86d3
MD5 41f4b9accbb1c4c3748082b0093e8a1b
SHA1 5c169a52f3dfa6c722e69e8e4cd740e713a11d26
SHA512 c3c65ffe9b425ade35c0bfe8e503b8ddaae1f4a667874659834d2b08672200dd210c9e29f77830c07c6b94368dd0c15492693e2776c3bc2314108502d5367336
SSDEEP 384:qFiZcIgVXsNp8TUNTUlIlRUKb+r0h//iDkEYoCB7O6R2FeoKVoS:qFQKXMwgy4/aDp6B7TR5l
TLSH
T184A27E725C64D83A9DFB9A51F54A36138EB480B7DBC5AF90E6DCAF2E01DA1D80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5c8608b0cf707bde06d3eb62e98d88978aae2a90c76f38d91af063966c1c7eb0
MD5 d8369bef280181219eb92854af94903a
SHA1 006f26c370f1c953538dca8587e77079e6f4a764
SHA512 55a756aa22faacb16412c896ce9e831dbc402f2a66bd5c92f9c731406fd5d05fcb6eed8c9f4ecedff21042826599ac6cfa7e9a06c7bbe5ccf1469786d44bd2a1
SSDEEP 384:IZcIfXsNXRUKb+r0h//iDkEYoBB7O6R2FeoKVoS:2fXx4/aDpZB7TR5l
TLSH
T102828D716C78AC365DEBD191F44636138EB880A7A7C91F90D9DCBB2E02DA5D8030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 86e58d94ad6c184731c83755b9a23cab90547b25a2bd76b9eb0da9b339791dad
MD5 325dc861ea7a12831f21e9ee8f92a46e
SHA1 ab353d7adaf3d73211a1d56168b1391420338a4e
SHA512 f3df1641a411ac7f6fe662885b7f5e681e370f74b72c4633a137cf0894e0599885809cf35201be36ebe2cc72727b9f6217d585f29a92a4c357b216fddfc2c8d8
SSDEEP 192:BONS6JU2QmiUykTUo//ihBjkGnPwosDZNxU/6fU6:BONS6+SLUo//iDkEYo2BU6
TLSH
T1A9122935B868AC7B5DD3A991F08376139E744067EB856F90D9DC2E2C02EF1AC530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 17fa8c6761b7a37922a8246964e05e79daa0b17ed77a19ee9fc25f3bad5e9483
MD5 f68ad1d3d6406050ca3748c3ecd8d60a
SHA1 d518fc7f87aa1b26cc03f3c8bdebfd53d9153e20
SHA512 a0adee27d6af3deaea6db4b2b0fc83cd31678f862e1128b0b0d6bddc222cc10e0e07447b52e1380a53ce3ff172818f607f479a001e2400ce213acd816c97ec49
SSDEEP 96:KqONkNQsjpfbUmjH5ih/cIPURHl8h4otop5daDNBKP4v+Y1xf//ojdMxMY+XhBjc:BONl6JUm0QmiUyeTso//ihBjU5BChGU6
TLSH
T15F02D638BC68BCBB8EE39E45F44777239FA4107B9A911F84DAD92E2D01D755C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bf9c7c2e921742970cedfc13b6b40238348d55ffda41e32f56dec3cdf215ba3b
MD5 df63604a0f13f85cdff99530753f6e3a
SHA1 8d6df2a85570a90267ba786a2d8ca56c52997f23
SHA512 dd18e39d26020d90c933b0a5e29dd3ae53c482699108ff4300f0f04b4dbc7c8e42b590b619a1bf8ac47137369044dddf4d0dd5beaa32ef90de9bf994872c9c42
TLSH
T160411C5CA6E9114CB3B77F5AABF7686E487B7D672E06D46D00110E4F0622A00CC71737
MD5 SHA1 SHA512 TLSH

Submit Download