e9175df625e8ccba0ad89a36d4630be26c2107fb62786987b398574b30e89de5

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e9175df625e8ccba0ad89a36d4630be26c2107fb62786987b398574b30e89de5.html
Size 104KB
Sample260913-bmvbna1xft
SHA256 e9175df625e8ccba0ad89a36d4630be26c2107fb62786987b398574b30e89de5
MD5 33ecfaa80b904e3c00cda057bfd07851
SHA1 e9bd8755df6f73219fc45d438b33aebce380f19e
SHA512 5bf44f797d3ff3329e4cee79a5d6d98cbde6074d7228d6d1cc0605b9957cce37a18743e72e52e789e338b319d9b7be06f008c4467e100f99534d001e0a104609
SSDEEP 1536:8PxuYn+h5J7sGREk15zKFdfH6h6lo0BTtzNoH0KMrmbEaoabEaoM:SAj0/NwYmdoadoM
TLSH
T188A3928741205CFAEFA049B2465B48673D2C1437FC5791B9E3FD8FA72B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2916	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338197389665103"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{5DFD2E19-0806-49C9-9AE7-91CCD4580C09}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3824 wrote to memory of 4768	3824	msedge.exe	83
PID 3824 wrote to memory of 2916	3824	msedge.exe	84
PID 3824 wrote to memory of 4576	3824	msedge.exe	85
PID 3824 wrote to memory of 4576	3824	msedge.exe	85
PID 3824 wrote to memory of 4576	3824	msedge.exe	85
PID 3824 wrote to memory of 3960	3824	msedge.exe	86
PID 3824 wrote to memory of 3960	3824	msedge.exe	86
PID 3824 wrote to memory of 4748	3824	msedge.exe	88
PID 3824 wrote to memory of 4052	3824	msedge.exe	89
PID 3824 wrote to memory of 4748	3824	msedge.exe	88
PID 3824 wrote to memory of 4748	3824	msedge.exe	88
PID 3824 wrote to memory of 4052	3824	msedge.exe	89
PID 3824 wrote to memory of 4052	3824	msedge.exe	89
PID 3824 wrote to memory of 4932	3824	msedge.exe	90
PID 3824 wrote to memory of 1932	3824	msedge.exe	91
PID 3824 wrote to memory of 4932	3824	msedge.exe	90
PID 3824 wrote to memory of 4932	3824	msedge.exe	90
PID 3824 wrote to memory of 1932	3824	msedge.exe	91
PID 3824 wrote to memory of 1932	3824	msedge.exe	91
PID 3824 wrote to memory of 4840	3824	msedge.exe	95
PID 3824 wrote to memory of 4504	3824	msedge.exe	96
PID 3824 wrote to memory of 4840	3824	msedge.exe	95
PID 3824 wrote to memory of 4504	3824	msedge.exe	96
PID 3824 wrote to memory of 1672	3824	msedge.exe	99
PID 3824 wrote to memory of 3996	3824	msedge.exe	105
PID 3824 wrote to memory of 3808	3824	msedge.exe	106
PID 3824 wrote to memory of 4360	3824	msedge.exe	107
PID 3824 wrote to memory of 4284	3824	msedge.exe	108
PID 3824 wrote to memory of 4284	3824	msedge.exe	108
PID 3824 wrote to memory of 4652	3824	msedge.exe	109
PID 3824 wrote to memory of 4652	3824	msedge.exe	109
PID 3824 wrote to memory of 3620	3824	msedge.exe	110
PID 3824 wrote to memory of 3620	3824	msedge.exe	110
PID 3824 wrote to memory of 3188	3824	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e9175df625e8ccba0ad89a36d4630be26c2107fb62786987b398574b30e89de5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,15120713700807916280,2227774869467903690,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,16244603162965921087,16691211398017252581,262144 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,14855735117158089591,243145225830044075,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,9739886592700695268,7357605901774863272,2097152 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,16626711901132512804,2697464011525809509,2097152 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,17885163507088528877,16735914006608401177,2097152 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,17034437887496199805,8943671363290304050,2097152 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,6684222613164702125,8991439964353604524,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10601021477505271892,10529922822572579877,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,5241864257369644299,16246751115374919817,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,5241864257369644299,16246751115374919817,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,15353440284099690497,2819314021699485339,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,4661882319475851449,10896096729834140334,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,16361130700031113636,167186222223226935,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,16195036409980859435,3462364683845989848,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,2857407468100623917,4270898363021774441,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,17560363690048011816,6014318158245861795,524288 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,15567463459957772626,11175239109521307623,262144 --field-trial-handle=2308,i,1126821263903642430,12179757278063877798,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3188

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4e912ba0-3978-41f5-9c22-3d6c962ee1d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e912ba0-3978-41f5-9c22-3d6c962ee1d1.tmp
Size 11KB
SHA256 e414e9c2c730d22c25c5feafffbffd3a2bfe1b7dfb6ab308228f4854c4af6477
MD5 1921afc746a2d6c3179c8c49df59636d
SHA1 8e4289a40a70c03f9f5fd28adf96db7dadb6c500
SHA512 5c760b63c9a3d234d1c17b7a29be52eea22429fa7985d0ef5476432e29c907d526441dec74510a3e89c4444c25bf836875df8c8ed0b75a4a5a27f77ac6d13516
SSDEEP 192:ukxAZsNcLQoPhPlDZzCQmiU1gL9P4HX58gZejzorxJgXA7R+2rUP3g/PIU8:osNcLPPhlZSe9gHX58EC8xJgXw+2S9U8
TLSH
T1DF423932A978AC275DE2A145B0473203AFF8511BDB892F94D6EC6B1C01DF2AC630ED17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0d3d84a2d695c01cdc8c93fb3edee15b167097383355ab63d098658448d09482
MD5 2731582cddde1db712411016a627ad83
SHA1 91a3dbd055248d571cf395131fe5a9fe71b2c27c
SHA512 3148228a83f670699f04c8a6c6079966c5b664c9a81e49418be04e10eedb263569976c09e231a0f4e4cfeac8684d65cf5e718f380c0c5fb63f98b201edbe4670
TLSH
T185E07D8444CBC63EA250669741A8570CD2C0774FF3CCBA0A3B7089DD7003060B6C7AF4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3660fb95b5f561b52a7baa6eaa320f447e4c98aaf46397978d32801e1e9ee10b
MD5 2cf8ba38d85305fe645bf9a845d6fde0
SHA1 e586c14a8e29b85fdbb0b3c8dd7f8d02bb155401
SHA512 4c0eab44f2410882ccfce94038fced9b2e251370c2dbe1e6c173f32872e13eaeddd37415ae8ba8f132ccfef74ada64a2e56a22b268eb8bf428ed3ee4b9e18753
TLSH
T194611E86E48E4463DBB491FD9DE12CCB3938C6F046AB1D5A0398D8795F27F5272B015C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59579c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59579c.TMP
Size 3KB
SHA256 1900f5d935306c12d244ee6d11d4c7384eae66bc53f71600a423d64896d091a6
MD5 503122f3fa1dbd818f65ae7d4227ed22
SHA1 87c6ed146e75b774e4061428bbbeda77637796a6
SHA512 1b60ba07123f6b413767f128c09dec515379bcefd07761ebcfcca4aa41c3df738e6f86e1f17dee3093dd30c204fef49b7a008682ddd1c3a00a26d7633dd6ecd0
TLSH
T134612E86E48E4463DBB491FD9DE12CCB3938C6F046AB5D5A0398D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 da1c38186fdacc201bd547e7300a9691b84231bc10567a88888e1c6f65eb9d28
MD5 c513fe03f490913f1b7b5ed8766d2ea5
SHA1 26ec997efea45311f67d2880494837ee50f8a685
SHA512 35ccd0bfe14f95f72579e3f6394938336adb96b5a65b0101970f502be1a00be45ce13648906029afc2b266ab433da0018ec938e248224f0ee0165a47eec5ea25
TLSH
T1CE414FB7C3E88A7E891156F09B646E1ACE1D0A56423C3C16C9E5AF2F53E24B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 015854a32a0db35081b89f41e5f7c40c436b921abea57911477050f7d1ea9aff
MD5 76a36d037e82a139ab7a8e1cfcb5ffd9
SHA1 6e1fe6bffc9d5ff4f235e4b07c1bc69f7a60ace3
SHA512 7a6b17747f0edbd29e1f5b8032560c8434106f17d824eb5837187ffd20edfe833d88ddc8ff6905c8e0bb017ab3f888f6118b3564dec2c128afe54cf1e77f32fb
SSDEEP 192:sxZORiWX/fkscn3IdpdxHW6+WNGYrbpRCHIgrJ:sxZOfX/fksuY/HbGt9
TLSH
T19D12B7526E28A57B8CCBD20DBB15BF53D6F9503251941E98EAFCD61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1e2d6d836d066ca8f4c39bad9515a3ca4c52c6ab9c3ce1388c7c557ef4176687
MD5 fa749ace78f228bb390005ed7f74cf10
SHA1 56ac8c4c1fba7068bd429c945f7276fce3b18818
SHA512 e718a25c2bcf1a6326aa9685d60782e09427e022c8faffefb0eca57646f898ed7cbc4ff3a6651c7640e10e1f936c40dfe0c8f798673e39a09843e240b4c341b6
SSDEEP 192:sxZORiWX/fksSn3IdpdxHW6+WNGYrIpRCHIg5tJ:sxZOfX/fks0Y/HbGqt
TLSH
T19822C852AE38A97B8CCBE20DBB157F53E6F9503251941E58AAFCD61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e727a288f295b1036dea3ba5648751d593d7f3350be90185d56ee9fffbc560a2
MD5 5b8579c65c27344c7388739949b450b2
SHA1 cf8947d1ca9e3340cfda3ea95781d206fcb1df93
SHA512 1b1634eee15a85c6fb50843d38240f3559aad9a65a671fe980992366c76d9162139f331ab7925249db410bc3722b5d322f0d3249f504a57d44df4b527a0df449
SSDEEP 192:sxZORiWX/fksSn3IdpHxHW6+WNGYrepRCHIg5tJ:sxZOfX/fks0YRHbG4t
TLSH
T14422C952AE38A97B8CCBE60DBB15BF53D6F9503251901E58AAFCD61C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 70c3d3db523b5dc40d5748861c7c6a02143a75491d9e05af4b298febe105f1bd
MD5 c71df327e5968c4526e77c5692c1f276
SHA1 8e7bbc910e521af601ffc4ad9e447a909d38adc7
SHA512 a78cb0a110f299e5aab252f183be95ecbe29e8ec3bb5e46aaeb4ef0e112733df6ea13bac7701f0eb6ae1cda5a9ad5e6026e65048670ea2971c92820eb615dc54
SSDEEP 192:sxZORiWX/fksRn3IdpdxHW6+WNGYrbpRCHIg5PJ:sxZOfX/fks5Y/HbGtr
TLSH
T13F22B652AE38A97B8CCBD209BB15BF53D6F9503251941E98AAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 193627bff23ade4565db65429243c519b3734d8da157684472907f58c61b6497
MD5 f37dd7a319a38fbbd3287fa041ed51b9
SHA1 06705c0ce7a028c1a0b3438c32c8cc27db10f4a8
SHA512 9464145081925dd31d8e8cda832c7559fe53f1a54611e700dd4734c876a858adc47998e71db6c4053d23c5b28abe30ce3e3eb819ac7272301205e51664052c2e
SSDEEP 768:Hky4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb8roRJj:Hky4J/DWvbtBhu1jajiLm0bnfj
TLSH
T108C2FB3F644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 98c84c783f3cfc5621cc1d3b7c1c755df0d8a224d5246b5ec39450c00229becd
MD5 cb2019dad9b61b9d41d72a9748898b10
SHA1 8a4e5c11f018ed2c789221c6d2919b475944a6bb
SHA512 a10cebac18368e136916482a9fc37a3ee43feab0085c160f53f717900f572c7f41568b65a831ea434131d69ee62bd37f97065d22410804c3b5ab998a5f093c2f
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLIS7aIvKrKQUytF0JFrTDGdzCtIQFGKLDTPGPdWi:KIDCKs0+iSlaMKrKJC2YKnq9
TLSH
T12E91548571BF0211387E29589472D71E624177737158E62B7FB85472AE6BE080EFC8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2915853a-e216-4fe8-8481-17870f9876cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2915853a-e216-4fe8-8481-17870f9876cb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d46f5043b8c7098c7e499947ca3891d02fc19818aca6e9dd4defc401e77a53f3
MD5 1ae926962039fbbbde70e5850864a866
SHA1 7752ff9c8a9303eb432999f94c4387d55eb1873b
SHA512 4bf31770d13b116ad7e4c081b6cabb6204b30ca6c849295cc091345002a3d479b9ed9e5a7cb7a3e8f647a21811b4f4aa4449dcc7156e80e4a148d38e2a70a9bb
SSDEEP 192:ukxAZsNcLQoPhPlDZzFQmiU1gL9P4HX58gZejzorxJgXA7R+2rUP3g/PIU8:osNcLPPhlZHe9gHX58EC8xJgXw+2S9U8
TLSH
T1B5423932A978AC275DE2A145B0473203AFF8511BDB892F94D6EC6B1C01DF2AC631ED17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 de55d88f3f1d4ab4a8f7433fe59eebf8e7b02fcac8b6e77afba1332ea1208dbe
MD5 f07004c0f503ab99ad17f01f6ee6e91e
SHA1 0fb22ac316d0c98b855764fe6659f1ca9a84671e
SHA512 5fefb0523d84399cea05c6d10db802d42d70c8e9a4ea03251dd68593771d390dd1a397f2420a39bcd5dde5024207dc9d869bf2fd33cb9370a3e9a8a8272f46af
SSDEEP 192:1ONO6wlDgQmiUyeuW4X58gZejzorxJlDl3hFU6:1ONO6kgQW4X58EC8xJLrU6
TLSH
T15502F935F8787C6B8EF3AE09B48727139FE5112BE6552F84CAE81A1D00D765C230AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 ecf24e88c756e1fc057f8554a0b20acf48c71859fa43f1f328da263be0783acd
MD5 1fee660aea90f08128aebf5578a19d09
SHA1 43d1dda42b6f546d0565cbcaac8e3f19f59851a8
SHA512 d67baba2891befc8a8c077092d3741d1d7d1e7f717f6e74ab1c86514b93a07de0c70b24cb679a293c56ed0b66b035b16dad1252fd93c7a5fabec3e57d973f651
SSDEEP 384:AsNcsPPhlZHe9gHX58EC8xJgXw+2S97O6R2FeoM7:AWPhlW+aHwlS97TRl
TLSH
T1A9625B32A878AD275DE7D446B44B3203AEF9915B87C92F94D6EC6F1D00DE69C630AD03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b491273d294670f7dec0ef14871eea1537a7ef65c8fe3d19971af7fc06e36791
MD5 a93d28a9e8fb09d4a4472c4d7562bcf6
SHA1 f222c3f7ada23fd557529ef3813d7cbf7e518273
SHA512 84bb3471f2eaefcc79984e5eed27aa4ef7639ea6a4e3b4f430e00e10bc78afaee1f4bce33dea296c431e8bb0c0e704d411524dfa45a44733968cc8e034ceb472
SSDEEP 384:GZcIosNcoPPhlZHe9gHX58EC8xJgXw+2S97O6R2FeoM8o7:UoiPhlW+aHwlS97TR6k
TLSH
T1F9828D72A878AD3658F6E046B44731039EFD905797C96F80D6ECAB1E00DEA98131BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 cadf7672c2a2f31a061e08a623be3e242f419189287fd35a810e535aa15ea28a
MD5 66bc0415160d547762fd96354ffc3aeb
SHA1 a382b12327717ce0cc923f9f1326dc43b3e3d98f
SHA512 310836dc57498138800ed70e119355b3e9a08260e5a57d6459eaad6ef8dae5568366bc842b1d68d327640940ae30e86ddd2e457866cd4d168ab8de3a931d337a
SSDEEP 384:XiFiZcI4usNU8TUNTUlIloPPhlZHe9gHX58EC8xJgXw+2G97O6R2FeoM8o7:SFQBNwg4PhlW+aHwlG97TR6k
TLSH
T119A28F7398A8DD3BADF6DA45F54A3103DEF98057C6C5AB90E7DCAF1D009A598130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2af7f523cd759f29e789b8c2c2dc12e25c1a2bca035d82b2289e87aacbdb840b
MD5 a0c7dd723c47c285b41a85e3a898b189
SHA1 42ced35312d8accfe13f7e9a4192955428af8d3c
SHA512 a7ed0fdf851447934a106a94dc2dd3fdcfead04b579d204d4f8ba257c4b09257719454cf3e5cd8af7dfb32a8b5c2833d24ae89b6149cb3dce81862b79b72b6e0
SSDEEP 192:1ONl6wlDJQmiUyPuA4X58gZejzorxJgXA7R+2mve3g/PIU6:1ONl6kn3A4X58EC8xJgXw+2p9U6
TLSH
T12A120936F478AC2B5DE2A545B08731039FE9521BDB896F90D6EC2A1C01DF65C530ED13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8c14759600ffbd391ec36b7cb24ce9c34f40db0ff26c5d2d28b396b594a30d56
MD5 2e8bac75accce4c2d0c9c2701e7e8632
SHA1 ef9b3c00a21b923ad6a1152dea2ce77d66bd75ee
SHA512 b12a249b629ee25abe295af4db9fa06044aaa626d32ebc99b3ea3c9fa4cd7075db1e5c8179e3778aae6ddd3a789c196f81c52676f23e640925beeaaa22055930
TLSH
T109411C5CAAFA1148B3B77E5A9FF7A96D487ABC371F06D55D10110E4E0A23A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download