fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8.html
Size 139KB
Sample260913-cb94eade99
SHA256 fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8
MD5 d5286dbc8ec07fe72e9b9f3f428bb6fb
SHA1 e0b001267660a62c014e3f3f37cc497d6bc70f0c
SHA512 0d18aadc9bb9645e0c0d43793b6247f56ded9500fa5d896038ab1e8fb4bf49840b77c0e7e5ac8f52d2faedf1adcffff04b3234ea4ef4f7d1413b055bacc9ce90
SSDEEP 1536:IPxaYn+h4w+2Rv+fwzlB6etenl7QDTtkNocx5L6KTbEaoQbEaowVP6Gy2xZoNQV:28iQSN7uKTdoQdowp6DuZWQV
TLSH
T1A6D3849763608CE4EFFC19B349D6096F3C2E0537980250B8D3ED8E969FBB91D0349999
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3496	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338321026010718"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{4C804744-6C96-4862-95B6-BC660FA2DCD0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3704	msedge.exe
3704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe
1940	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1940 wrote to memory of 1704	1940	msedge.exe	85
PID 1940 wrote to memory of 3496	1940	msedge.exe	86
PID 1940 wrote to memory of 1168	1940	msedge.exe	87
PID 1940 wrote to memory of 1096	1940	msedge.exe	88
PID 1940 wrote to memory of 1168	1940	msedge.exe	87
PID 1940 wrote to memory of 1168	1940	msedge.exe	87
PID 1940 wrote to memory of 1096	1940	msedge.exe	88
PID 1940 wrote to memory of 664	1940	msedge.exe	89
PID 1940 wrote to memory of 664	1940	msedge.exe	89
PID 1940 wrote to memory of 664	1940	msedge.exe	89
PID 1940 wrote to memory of 5008	1940	msedge.exe	90
PID 1940 wrote to memory of 5008	1940	msedge.exe	90
PID 1940 wrote to memory of 5008	1940	msedge.exe	90
PID 1940 wrote to memory of 4612	1940	msedge.exe	91
PID 1940 wrote to memory of 4612	1940	msedge.exe	91
PID 1940 wrote to memory of 4612	1940	msedge.exe	91
PID 1940 wrote to memory of 1268	1940	msedge.exe	92
PID 1940 wrote to memory of 1268	1940	msedge.exe	92
PID 1940 wrote to memory of 1268	1940	msedge.exe	92
PID 1940 wrote to memory of 2992	1940	msedge.exe	97
PID 1940 wrote to memory of 4792	1940	msedge.exe	98
PID 1940 wrote to memory of 2992	1940	msedge.exe	97
PID 1940 wrote to memory of 4792	1940	msedge.exe	98
PID 1940 wrote to memory of 4392	1940	msedge.exe	100
PID 1940 wrote to memory of 900	1940	msedge.exe	105
PID 1940 wrote to memory of 1164	1940	msedge.exe	106
PID 1940 wrote to memory of 4648	1940	msedge.exe	107
PID 1940 wrote to memory of 4744	1940	msedge.exe	108
PID 1940 wrote to memory of 4744	1940	msedge.exe	108
PID 1940 wrote to memory of 4392	1940	msedge.exe	109
PID 1940 wrote to memory of 4392	1940	msedge.exe	109
PID 1940 wrote to memory of 3704	1940	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd5ca1c188,0x7ffd5ca1c194,0x7ffd5ca1c1a0
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,2723967360306148272,3839029325969512022,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,1613714473733720056,1891146029560440861,262144 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:2
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,12318901438264930804,16704419915290238312,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,13209418400917739507,7411401784019883407,2097152 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,7396679282025291568,16467192253148656898,2097152 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,9779387260648096842,12335744242992680677,2097152 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,6135601904752414829,12474502650587021184,2097152 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,17574100950834498661,7698397570529280718,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4168159901042190,2024665941009498394,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,18070840633495209095,2116845554021319126,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,18070840633495209095,2116845554021319126,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,12880677283668332326,1692882023246975572,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,11884254820950757695,8714613044845626571,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,8628684919684268956,8029902469563850654,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,1392163392883720627,7229295170011546901,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,13922502539402939612,10968040059389850085,524288 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,5871516024501191676,1565256026342419233,262144 --field-trial-handle=2856,i,8236886637570216930,10130912017868194035,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2b8e75e1f9792a58fa2bcbfec3c95d7c427ab11990648526f31f36aefa859895
MD5 d447b26a9dd47c2fde865dc010ac01ca
SHA1 3c13b391efdf0b6821c86a62b0e059ee774552e0
SHA512 ad403c7b10a8c094d40d694a243eafcd41f0e9ae1219f940a3c6459ce9fe8d8861d9693ee09409d2ea0badcaf174a6c276a56100c12138e27e898ed9f5943134
TLSH
T171616D8CD45CC5E4DBA543BC54F2D183B230D8B5718B3F611AA6E879AB2FF07B020868
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fcba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fcba.TMP
Size 3KB
SHA256 199480a6d51b6de934d555a73841864434b14a3b119ad292a7482a0a616540e2
MD5 227d8638289a2df7c784dd1c951f03ea
SHA1 9c086112c3b3e6ad31c8849abe3131b267af32ab
SHA512 c6bd3c5ec4f3fe4da875e199e20ba7b65755ae2e15a3d39b91bc1dfc8f4ddf6887def8534e70a0b4a4c0f232e88a66475fb562ffbfc7f47a3ab1f8dc837cc719
TLSH
T178615E9CD45CC5E4DBA542BC94F2D183B230D8B5718B3F6119A6D879AB2FF47B021868
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7af10cb24b8e25c5b6f5d3cfb39eba3fbcf5532bc0292d107fce72eef59a5b24
MD5 1fdd22c371ca9c4da60501a8769a15e4
SHA1 4edc02126e179767789c6ae1b8a9000dc658fc6c
SHA512 1dcee23db31e05c1c46bc232164ad00b5a4c7df401f404f84dbfcf2e112df93fb4f2ab0828a964637c177cf199c654a24b8bba84dabec3185b89065f15dc16ba
TLSH
T126418BB3C3D8877E890156F0AB286E1BDD2D0A16522C3C56C9E4EF1F67E24B4D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 12bf9dd762ce48e0cb6b9c7f627cf01c755ede3a1427cdb688ad583153040853
MD5 995dbee977a4f7c085158f9ae4b54eac
SHA1 f6e50ceed5b484c06d97efefd4dc2161c02f5e6d
SHA512 ffc60fbaface56eeb32fa23c2e98e923646387d7ae1d3a4ccb538635b79973533d5a3a947d40ad5676b86911a56726f895e60074476e8581397a577e1a4f2dac
SSDEEP 192:sxZdR8WE/fRsC4sIdpdlHW6+WNGYYBa9YIgrJ:sxZd5E/fRsb13HbGfp9
TLSH
T10E12B8116E28A57B8CCBE20DFB55BF53D5F95032A1D51E58EAFC861C04E6ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 920c2065bec595193c0d8141eb236735ab4a6bc9f04ac868aa3d11d369da253e
MD5 a0e4912d84f420f03ec2b31dd0725da4
SHA1 ae21530744ae5fa1d06408b65e1c7f1b7bb96c10
SHA512 b3c5480bee6cabee9c02ec65a551a1dc26a0d121ecff5f3c882c41918f5dfb481aeb4fcf1e7fcfa247ad82e0a5de2254b15cc4f14cef720119d607c13ec4c9f4
SSDEEP 192:sxZdR8WE/fRs5LsIdpHlHW6+WNGYYBs9YIg54J:sxZd5E/fRsp1FHbGf32
TLSH
T18C22B8156E28657B8CCBE20DFB55BF53E6F95032A1D11E58EAFC861C05E66CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 cbd0ef780dd3045d81dea951d71b87d36d814d8685fba44dda6b35d95cf0d320
MD5 f881869722fa79fe88c240b50a7018f8
SHA1 16ff85f92accb848b68476eff53d78c506c80c84
SHA512 1e95992ccba41604ba75e49a4e88084b44d7682898c4aefdd0d0e74bf877754e109967ddd0ccdb3b81af65019addf443255ffcdec6abf009ad6c738d9c987d19
SSDEEP 192:sxZdR8WE/fRs54sIdpdlHW6+WNGYYBa9YIg5SJ:sxZd5E/fRsm13HbGfp8
TLSH
T1AD22B8156E28657B8CCBE21DFB55BF53E6F95032A1D11E58EAFC861C04E66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5464528bd20e80730aed125aaa2d0941361b65182d3d1870f3c9e3ac42fa1d4a
MD5 5b6a05e2c2e6aff9416007f930bb97bd
SHA1 a3a98302b8297343effd067219db221078318f53
SHA512 0892d65c938d46f4e3ec69552f8ad59f915a4ac0a33ef96afdcbf67821e00330bbd885e719a38dafb7dcc2c401ade87d22f1061607ad3a7ebd66e98a6c7fa2e0
SSDEEP 192:sxZdR8WE/fRs5LsIdpdlHW6+WNGYYB/9YIg54J:sxZd5E/fRsp13HbGfm2
TLSH
T12522B8156E28657B8CCBE20DBB55BF53E6F95032A1D11E58EAFCC61C05E66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5b4752cf2897dbc74a0147707081a4559a0b49ec79286e340eeaf6381cd5c990
MD5 f409b8b688a7909b7cfa29156bf506a5
SHA1 07b7c11aa41186ebf291da91eb9b026ec1390738
SHA512 f195841e84ef9a115c4fab19ca67213cf6e256f33932b3e32debeb58a5aac3595770a2abf186d344cc11334639df39a45206bbb43008133d818a54b549284fd8
SSDEEP 768:KvyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXQropeFO:KvyYR7jWv3NpBu1ja/CL8OX7p
TLSH
T160C2E83B640DCB7E4FC01A9DDC5A6FDB3E9802C7A6548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 41ebf008f516c7f9cbc7f8e59f3b3f6517544b5e3348046a38513ca380b8d82e
MD5 23faea130f526080d5c69efb53a29db2
SHA1 fd2cb41523fd6b0c053368afa5303059d715184a
SHA512 f9c93ccb9a93790d417a21bfde06ce4f4d3dd6c2814a015db290e80c9c177f0bdd33a33da8247dc7b12fdd9fc364804ba9970448e9c39ca72c59ff03bb797b5b
SSDEEP 48:KgTW3Td1FGbV4tISTGK9D1xGxbWYgBzXyLbef7F99ebtAFISbeK9r1pexzOYo5tk:KYggKtW6SMYKJq6LSKAYit
TLSH
T16991221031B70305387D35589362873E2642B6B73419FA3BBBBC50A68E6BE585CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab6daac7-701c-468f-8cb7-097a1b489e27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ab6daac7-701c-468f-8cb7-097a1b489e27.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 60e1f3b8d7ebca7f2719e34f4288108e58f27685939b32ff98f37a38ee416a50
MD5 f108970a0b5b72ce1c0e7a0f1a850335
SHA1 cae7dac6848f81553b96557aab84c4e039c43bd6
SHA512 85f1ca4a6e8afab37f31033210da5ab0feb84dc56d49d592abaf851a5718cdd2fcb1f82006fde0a047844a4fbe61cd92f34a4d9df9c788464b3a10962b5c00db
SSDEEP 384:+ZcIIsNJrYrKtDBpimJ2QX5+DtL84r9X6+2GzY67O6R2FeoNfof:8IS9Bpv9kDtx6lGzY67TRmo
TLSH
T197828E356C78AC3699FBE156F48A36139EF95063E7C85B80D5EC6F1D018DAA8131AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7fe6c1c9ba493efeb76ad57c23a636ad75c067c245cd83111ff81faad5fc4a73
MD5 7cbaff622178d18bc8d9cbd1257ea885
SHA1 17b96d8135e90a497038447f86b9f8b48d0eb069
SHA512 f99f131156b539de09c5199a973c94e97f340d8c1e62fbe8a0962d87704e314783947e357d097b3923e5ebd0e7a80fbb8cb586954632e5f966f20582d5d9a519
SSDEEP 384:8iFiZcIEisNr8TUNTUlIlaYrKtDBpimJ2QX5+DtL84r9X6+2hzY67O6R2FeoNfof:nFQF2wgs9Bpv9kDtx6lhzY67TRmo
TLSH
T127A26D325CA8DC3BDEFA9A95F54A3213DEF55063D6C5AB80E6DC5F1D008A5DC130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e916ace03611d59c5d4673ff7ce4d4fcb4feed90342b69406fae19a0da9185ed
MD5 72c00185db8761efca61b6508b98d5b9
SHA1 c925e6c0624795740772796ee972e13652033356
SHA512 7b7e89199cd14d054eefbcbc705273d3d22fc4a6fbb8c5287bcf837a3a04fa17bf6588ea95535aa7697acaa2226494741888c0fa066f2ae6618e4735bcdaf361
SSDEEP 192:EONY6nnHGQmiUysgQYcX5hQDP17jzor4reMczw0U6:EONY6nCEQNX5+DtL84rOzRU6
TLSH
T15F02DA35BCB87C6BCFF76D45B0863213AFA5203BA5956B80DAE85A1D109769C2306933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 1016574875f9f810c4fe5505529be3b74475cfe36c888abcc2d1e6b4a8f2869e
MD5 97adbe3ecf8171d852ccdc1d5beff0b3
SHA1 fa364f72911de4b56dbd4588b05044f01e7bfd18
SHA512 40fa01cffe9bf4d016ec5fd0df3d8700002d8edb3c1bf9c6b207605b49a66793bcc82e667001be5ee01da702d52a453ad0422b9228bd1e5bd700636c672fe9af
SSDEEP 384:osNJsrKtDBpieJ2QX5+DtL84r9X6+2GzY67O6R2FeoNb:oyBpb9kDtx6lGzY67TR2
TLSH
T1FA624B35B878AC278EEB9596F04A32539EF5506796C82F80D6EC5F1D01CE69C230AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cd1f40e6f548f41f74a22250cd52abcf5ba502c34a51a8739a5efdb6314bc7e9
MD5 058d1eb7e36b459b52ee41a03776431e
SHA1 27459435bbc6458973f4d5fb1c7355b99492b16f
SHA512 69407bf717b422019ec91f9c7f7b1c8b688681a4228120abd43bd94192dded41fd59a1f9cffdb52d79d79e4776f6e80a0f0d6cbdde2b2f8900884d8e0ffb394b
SSDEEP 384:AZcIIsNJaYrKtDBpimJ2QX5+DtL84r9X6+2GzY67O6R2FeoNfof:+IJ9Bpv9kDtx6lGzY67TRmo
TLSH
T138828E356C78AC3799FBE156F44A36139EF95063E7C85B80D5EC6F1E0189AA8131AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0785c51ce618a9ea11f62ba9373747da3f69887dd97d6163b100dbbac3fdc07d
MD5 05f8f5038673d70f3eac947727b9cb5d
SHA1 ce022acfd40d79b3241bfd4d47abaa17006d482c
SHA512 7eb2c0821d631f9a2d562cb779ce7ca87829fec96a080c575cf87389331c9f9ae15570d07ba510d9e895a90a6f310440fdf1c5cdf0ae3f4137ad653e9220c09c
SSDEEP 192:EONk6nnH4QmiUyGgiYcX5hQDP17jzor4r9X4x+2yug3zu/56U6:EONk6n4QiNX5+DtL84r9X6+22zY6U6
TLSH
T11F122C35F8B4BC278EE66591B08731139EA55127EB887BC0D6EC1E1C01DE66C634ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7c36ad768a3e9eab8799b7ac484c3239d2c0a2ac08812f1b136fbe9fe20bc4e6
MD5 2c0619ee18b7b67fd80e756b8e95e2c5
SHA1 b5449090fa265cfd9b4a874a0c26b81889196d64
SHA512 99d6ba2ec91b524bec1c14a4dc8101a8dadfc3b804d0e552b43d7b9890bd16119fc269c69be9a67e33f0fc89a3692265ed5f1ddafd80be3f376865d2c363090c
TLSH
T12D41184CAAEA1048B3B76F165BF7A86E487BB9732D16D18D10110E4F0A23F40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download