c292244b2d603745bb7c20321b176e613a668cb7999de5718f7983a817fe7bd8

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c292244b2d603745bb7c20321b176e613a668cb7999de5718f7983a817fe7bd8.html
Size 134KB
Sample260913-c6al2aea82
SHA256 c292244b2d603745bb7c20321b176e613a668cb7999de5718f7983a817fe7bd8
MD5 3ce4bf979c11e019d0d3edfc9223b2e9
SHA1 2e20c125c20cf0c53db0a76846fe869789d192aa
SHA512 feeceef25b608d97c75e9283fba0ef2a3822ef24029443c30a0cf88e86345a6b4e5d8db23928f9518686a17e54ac75fb8c686efaafa3db377e8c811bc5754250
SSDEEP 3072:qJCQvNwEBdoAdo+cx6i9pWbHgC95gC0Lj6jXs1:qkQvNhBdoAdo+cx6G
TLSH
T1EDD3B5A753204CF5EFF819B349D6096F3C2D0437980250B9E3EDCE965FA796D03099AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338309864022667"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{2E1AAA7B-3DDF-4333-B56F-E8E462398951}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
584	msedge.exe
584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4660 wrote to memory of 4284	4660	msedge.exe	88
PID 4660 wrote to memory of 3248	4660	msedge.exe	89
PID 4660 wrote to memory of 2336	4660	msedge.exe	90
PID 4660 wrote to memory of 2336	4660	msedge.exe	90
PID 4660 wrote to memory of 2336	4660	msedge.exe	90
PID 4660 wrote to memory of 4344	4660	msedge.exe	91
PID 4660 wrote to memory of 4344	4660	msedge.exe	91
PID 4660 wrote to memory of 2224	4660	msedge.exe	92
PID 4660 wrote to memory of 2224	4660	msedge.exe	92
PID 4660 wrote to memory of 2224	4660	msedge.exe	92
PID 4660 wrote to memory of 3308	4660	msedge.exe	93
PID 4660 wrote to memory of 3308	4660	msedge.exe	93
PID 4660 wrote to memory of 3308	4660	msedge.exe	93
PID 4660 wrote to memory of 3972	4660	msedge.exe	95
PID 4660 wrote to memory of 3972	4660	msedge.exe	95
PID 4660 wrote to memory of 3972	4660	msedge.exe	95
PID 4660 wrote to memory of 3584	4660	msedge.exe	96
PID 4660 wrote to memory of 3584	4660	msedge.exe	96
PID 4660 wrote to memory of 3584	4660	msedge.exe	96
PID 4660 wrote to memory of 4560	4660	msedge.exe	99
PID 4660 wrote to memory of 1528	4660	msedge.exe	100
PID 4660 wrote to memory of 4560	4660	msedge.exe	99
PID 4660 wrote to memory of 1528	4660	msedge.exe	100
PID 4660 wrote to memory of 2232	4660	msedge.exe	102
PID 4660 wrote to memory of 1148	4660	msedge.exe	107
PID 4660 wrote to memory of 2440	4660	msedge.exe	108
PID 4660 wrote to memory of 4240	4660	msedge.exe	109
PID 4660 wrote to memory of 3816	4660	msedge.exe	110
PID 4660 wrote to memory of 3816	4660	msedge.exe	110
PID 4660 wrote to memory of 3932	4660	msedge.exe	111
PID 4660 wrote to memory of 3932	4660	msedge.exe	111
PID 4660 wrote to memory of 4788	4660	msedge.exe	112
PID 4660 wrote to memory of 4788	4660	msedge.exe	112
PID 4660 wrote to memory of 584	4660	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c292244b2d603745bb7c20321b176e613a668cb7999de5718f7983a817fe7bd8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff744ac188,0x7fff744ac194,0x7fff744ac1a0
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,10861347129614010816,8322002934419105080,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,3830242214811408932,8475800851608740511,262144 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,2687701636051422531,10294414349144002843,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,14208669969590449544,593995715629617911,2097152 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,7276601839501472022,9642679489406069085,2097152 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,11327952248253392446,1304906376174629120,2097152 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,4225610852228544781,10857664010213450186,2097152 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,13412796720040611112,15229783359753725045,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,17930652900810532361,7342138768343525533,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12321016945062877814,7317788824508077264,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12321016945062877814,7317788824508077264,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,11010404356899593846,10194286467681792018,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,17562488145602960131,6962015322961703535,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,2085517718298989759,14831744204009966596,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4028,i,11416028773113703565,10019967136168216983,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,330009056048201160,3862834225921098761,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,5362860632397308689,2981136205895559815,524288 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,11242852885801467458,12192505732159922717,262144 --field-trial-handle=2308,i,1936970741239286656,11261659175150685398,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 92131ade5111d1f2577e7ef747b3642c2516d8e976a71a91060a5f432d0792d5
MD5 f9ec8b3e0829a9d4bff4b9ed85e7ccaa
SHA1 3eeb3026976e50a4b9a757a84acad9ce949e9416
SHA512 8d93e0b458fd887a4e7840df9da13169dcf36bb67de1fe3b81f9ec8d5111c29ed9afb60e93df6ac71a32acb4a2b1d8db0f3fed409702ff7f8519504b5d36ebdf
TLSH
T132E026842AC8C3AEF2806747C1A897CCC3813B4F93CCBB1B1BC0C98D70C3040B282691
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c094af62920a14bd3b87de9d7d662a64ddcb9a29899fa4949d4ce4ce19348f0a
MD5 c5a2b97c1b733fd01ee28070268060e0
SHA1 6beafa18c076229f785128194fa6b62a7005f12c
SHA512 e5a4a1e3bf7302cc943681cd0578af66dc4d4e07414e9bb758cf65d87ee6c78a738951b7818a1162408a9c5ee00eafea2883437ec4670fce3bf8c4b8dbab2b2c
TLSH
T1FF51CA499698A9A5F7A81C7942F5A38B373869C1DDC72E371CACF93C7F8A3965102240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59068e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59068e.TMP
Size 2KB
SHA256 c49633488cc2bc713df8826c3d643fe2744b70bb176e0e652e4f2d79c3b3060d
MD5 8b35eaaa473a93a4c2bfc8def9ff1224
SHA1 62fcb733b8305ac845ce2a683dd7371806b35ecd
SHA512 6985ec47c39ffa9d1a4d863db7e24c316543ce0d29cd731b9b37174571f5cc05b3b4ba2dad13c5829848ce8e02c39b1e2dd89d333f83498bcda9dabf8d2ac265
TLSH
T10951CC499688A865F7A81C7942F5A38B373869C1DDC72E371CDCF97C7F8A3865106240
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9328d8253d3cd2e81c8dd24a3fec5d6dbeceeff39755174c4316296eab8e5193
MD5 74efffc6209a6f48522a92636aa191a9
SHA1 f7397d70f9d8cf1d40cd4c55796a2e10009a340e
SHA512 0d756ae97c74680e240440e6eadd5c72f077bffb38e38f7863a37b302829d61fe44a14be9248c520357e8cc1f77b01640e99cd9f227a35474a420a0dc2a17874
TLSH
T126417DB7C3D487BE890156F49B286E26CD1D0A5A422C3C16C9E4AF1F67F25B0D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2c5d79fffd272729be46e5a96416bc033c194a2cbe2ba4e4d897f6a84fc76009
MD5 487e76dbde1a26b51a7180423991e2eb
SHA1 f6442ea690330beb29fd14a04736797c885fa5b0
SHA512 e76e170f99a44a3d2318e8a5f8f33e04d33254d8fc1a0cb1889a8f50d36ffe495a92b5e8aa0f5e9491c77a20a1878d1bff401f47d2a185fb5b0bd444dab12b6a
SSDEEP 192:sxZbR0Wo/fls0xSQIdpdHHW6+WNGYapYGaIgrJ:sxZbVo/fls0xA5HbG69
TLSH
T19A12A7526E28A57B8CCBD20DBB157F53D6F95032A1D41E58EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fa40895075ce7fe6c4dab0b68f24628603dc7a41a839437ccdbf4110ce2d97ea
MD5 7185bb13732f1e2da6ca3c728a8dd173
SHA1 5c41ccd3075e9d99bfffbc15950e06e8ca995b24
SHA512 a79878035a4e58c022f2661bb64200a44978cead82d8cb7fd68075b518f6f08483f85ff88dcce6ae828bd116ed067aa62e890f11246698eb9ed164d5b664c63d
SSDEEP 192:sxZbR0Wo/flsZxSQIdpHHHW6+WNGYapFNGaIg5IJ:sxZbVo/flsZxAnHbGzjO
TLSH
T17922B9566E28697B8CCBE20DFB157F53E6F9503251A01E48A6FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f18a6c6cbedca0596928cd1b4cbc3f4a98a83932ce5e3edd211ddbab5a256889
MD5 cfc6eb32aaf1acdf6ab65f5a00b00dab
SHA1 d17f11166a8e5ad3a327d1a0f119167162743aa7
SHA512 bbcabd1d808c48e089384625efcd6bc89e5c3429074e50a2ad02f7c1604d0eef3b9f3e68bf560773e7234ee05d4f04638957e8c8d9f7349565664d8fbdd8eb86
SSDEEP 192:sxZbR0Wo/flsExSQIdpdHHW6+WNGYapYGaIg5iJ:sxZbVo/flsExA5HbG6k
TLSH
T19322A7566E28657B8CCBD20DBB15BF53D6F95032A1E41E48AAFC961C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2b0ae19b01299de5da56dcba362b8da9dc42dc4c9830f534d8ef64456b63ffc6
MD5 5823fedafa8cf248fcb66454c17f7706
SHA1 2dbd3ef74dcfd575346da348583dfa9423e02473
SHA512 f578b22b5ebb41b227ca9ea516de391bf863ee437a4b17cb98386823295aff7a149e3165aeecf2e2a227724473e5d65e268778360403e016b22c2436dc732cee
SSDEEP 192:sxZbR0Wo/flsZxSQIdpdHHW6+WNGYapYqGaIg5IJ:sxZbVo/flsZxA5HbGyuO
TLSH
T18522B8566E28697B8CCBE20DBB157F53E6F9503261D01E48A6FCD61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dead8d53ce36abf916e0e322c6eb1df3d96f27fb027b36b17d280f4b21da7f46
MD5 1fec7def5f9362423247988c994971a9
SHA1 f2f99fef05f81ff404d6c9d5bc89fbcee4ede12b
SHA512 7fc8e693b75d710f5107854c547036d2c748dc8ec1fad64bee551cf742ffecb77bd8888b2107e45c50ea398d81786b98604be95850095e642dac4b015d1828c0
SSDEEP 768:+iWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Zro4vfepmRM:+iWPcLKWvKeEeu1jaClLiF7S4vWpmRM
TLSH
T103C2EA2F640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 732fb514f5291a770510dab69f59c6ad8ecf1d6acfa9f7f31cf89e2a61ab7c84
MD5 05a0c96967278bb51f9968886a3f61da
SHA1 81ec5e148fba197eaeb7b47b7b78cf4c41a3c472
SHA512 1b4b8efa5f36a6757c8fcd92b935fb1ba331ad607d84e41a42f595fb457b5855f18204fbb7c0efaa6b597c8f6833703544de7c4af1397aea80d8d184b67dc2ac
SSDEEP 24:KB7EHsPITKbha1qSSpzSyXwyZPmPqE3w0gQo8GzIFqgKSThqMg1U6wSu+cHMityK:KsUITKda8/SyFFIlKGQ4XyNbIBKowET
TLSH
T15991CD5132BA124438BD291991B4872EB2413173361AF62F7FFC60A59E27F194DFE4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58ba47fc-2892-4922-837d-172b9088670d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\58ba47fc-2892-4922-837d-172b9088670d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f43f016589fd2cde1ff9a8e47dcf7adae8af7ddf862e3094586ce151b74b9c67
MD5 6b102dc829690da02e5b8b3639f5938e
SHA1 fb8f11dc044f386170cd5193d0c9443f33e1fcb6
SHA512 1ad5ffcbfe5bd94b82de1472d615ea0aaf4f3cce3e613dc927915905018fb18b305ee685affe12808aa58abc2c137b23e8c6ebe908ef8b6518e123de52093b1c
SSDEEP 384:piFiZcIuq5sN58TUNTUlIlmr0p1/MMzIGmh/qP44iz7O6R2FeoXh7U6oj:AFQrYwg9pOmeCg4iz7TRa/Q
TLSH
T13AA26D734CA89C3BAEF79A45F94A35139EF84167D6C5AB90E6CC6F1E00DB298030BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 727f0c58d84e6093d2d7e2d8962f31a44adef0af2d2aecffffbe78fc468e6dad
MD5 ff0ec1fb31b9fc9c0e08617fb097913a
SHA1 34cc55333f1e51cef93bfae9bcb3b0dcccfcc888
SHA512 931f381bb691dd28a123cb6a4384753c19c7117cf897c20d416d888cfd55d0543aa209f761efc9fff0a995cd0867a6bcc22289f946812a76e175ba47fe9d24fc
SSDEEP 192:aONZ6IE7QmiUyRiTPuIGmhQRx4LC7sU5U6:aONZ6DtfPuIGmh/UsoU6
TLSH
T11302F939ECB87C7B9FF3AE08F4877A235EA5112BA6952F84D5D85E1D00D724C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 54066d85a349f4587b2f3f17a7611182b841834f3fd8bd2b0b3297de37134123
MD5 432915690f0f343540003172df2e5d2e
SHA1 f8b555e157e8bfa51fe520e027a026d51a101e90
SHA512 ed9c902d0aa76fd3708e08b71f2e56133ee5e6cbb886ba148610cc4c26a22feffcc27d326eabca649089747a0eb410beda15a00b23fb20145596d6f7422396cd
SSDEEP 384:LZcI3sNnLr0p19UMzIGmh/qPSiz7O6R2FeoXh7U6oj:T3VpAmeCaiz7TRa/Q
TLSH
T13D828E729CB8AC3B5EF7E545F84A39135EF8816397C96F80D5DC6F1E00DA698030B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3118b0c258d4779f3b45581872c61a87f5da9d8dc36e5abb6f9680bd34bd15d8
MD5 ef80bf38869011e3423471f2c56295ca
SHA1 de459e0c0dab5c6cc1fe689c36ed62d1221e4389
SHA512 01236dd0798a0ad437cecb71d4d2293c51b3b25b10d17f7728ea2c3c0490a9d74bd1f886928332f4d35887df72cfa00af4955c000bbf87e832532ed1f32fd45e
SSDEEP 384:7ZcI3sNnmr0p1/MMzIGmh/qPSiz7O6R2FeoXh7U6oj:j34pOmeCaiz7TRa/Q
TLSH
T1C6828E725CB86C3B5EF7E505F84639139EF88163A7C96F80D5DCAF1E00DA698030B416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 384d37b28369c68e6671a4eb9113c4cdf279420aa41990bdcddfb017fbb5b3bc
MD5 a6ae777163a13d80326545be9fe35b49
SHA1 d668f51e814294d63a101fc05cc77a9b33822847
SHA512 fc4daa53608822f6db332dcb549fe0b2b1ae21c480cb6b698ce304f32718cfe393fb479eee9beaa8a3c35f8f5860ec95174772b51113692e5bf365c77557e22c
SSDEEP 192:aONy6IE8QmiUyBiTcuIGmhQRx4qPNeUm27Hf/jU6:aONy6DM1cuIGmh/qPhHzU6
TLSH
T11F121B7698B8BC7B9FA3A904F48739135DA54227E7C97F80D5DC2A1D00EF25C130B516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fc067343c0d5011d5eefbc771befab4ba1d817e2692fd31fcdffc321ac4882a8
MD5 c53b027660aef2db0b047834a1d1e4e4
SHA1 8ede5529ba7a71bd588d612543d10fa03e779f66
SHA512 3105a744337b5e752619851654d5f563e34dedaf70101243772ddc8b77b36be6599af5e69d348ffc3ca9c8ef9a7dfd8c93f0140954154cd7ac63f0f2c11ca973
TLSH
T1D0415B58AAEA1148B3B76E5A9BF6A96D487FB8772F07D05E00110D8F0623E41D871B37
MD5 SHA1 SHA512 TLSH

Submit Download