bbf669ef32ea5b837ed01c022fc24390b9794e86c3e792d3100e1ee1f87b1dc8

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_bbf669ef32ea5b837ed01c022fc24390b9794e86c3e792d3100e1ee1f87b1dc8.html
Size 6KB
Sample260913-dclb4ssxcw
SHA256 bbf669ef32ea5b837ed01c022fc24390b9794e86c3e792d3100e1ee1f87b1dc8
MD5 ca77ec698de4a1bc25fd6f1508195f90
SHA1 9d77389f7e19f974c2029ca4ed81a1f06862bbf6
SHA512 d4987213f5c298ee4a5dc91935a0f341f99ed003525dd0c626b6765e6412a411bc8f24552a8de10fd248d36e862df7b6873b85d69daa92fd9cffbe91af095395
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69FEcE8XECgUdDhQoKDejCPJu:zWLJlxe6f80WhtKDejCxu
TLSH
T1C4E1B55A9E4C853F410005DBF0A16A1CD89B447BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5056	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338209700296451"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{2A6E4CB0-E1DB-4CFE-8C50-9DC2B86A1CD6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2688	msedge.exe
2688	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2972 wrote to memory of 3620	2972	msedge.exe	83
PID 2972 wrote to memory of 5056	2972	msedge.exe	84
PID 2972 wrote to memory of 1992	2972	msedge.exe	85
PID 2972 wrote to memory of 1992	2972	msedge.exe	85
PID 2972 wrote to memory of 1992	2972	msedge.exe	85
PID 2972 wrote to memory of 2460	2972	msedge.exe	87
PID 2972 wrote to memory of 2460	2972	msedge.exe	87
PID 2972 wrote to memory of 1948	2972	msedge.exe	88
PID 2972 wrote to memory of 4820	2972	msedge.exe	89
PID 2972 wrote to memory of 1948	2972	msedge.exe	88
PID 2972 wrote to memory of 1948	2972	msedge.exe	88
PID 2972 wrote to memory of 4820	2972	msedge.exe	89
PID 2972 wrote to memory of 4820	2972	msedge.exe	89
PID 2972 wrote to memory of 3316	2972	msedge.exe	90
PID 2972 wrote to memory of 4920	2972	msedge.exe	91
PID 2972 wrote to memory of 3316	2972	msedge.exe	90
PID 2972 wrote to memory of 3316	2972	msedge.exe	90
PID 2972 wrote to memory of 4920	2972	msedge.exe	91
PID 2972 wrote to memory of 4920	2972	msedge.exe	91
PID 2972 wrote to memory of 2964	2972	msedge.exe	96
PID 2972 wrote to memory of 4208	2972	msedge.exe	97
PID 2972 wrote to memory of 2964	2972	msedge.exe	96
PID 2972 wrote to memory of 4208	2972	msedge.exe	97
PID 2972 wrote to memory of 3140	2972	msedge.exe	99
PID 2972 wrote to memory of 2148	2972	msedge.exe	104
PID 2972 wrote to memory of 3376	2972	msedge.exe	105
PID 2972 wrote to memory of 4892	2972	msedge.exe	106
PID 2972 wrote to memory of 3244	2972	msedge.exe	107
PID 2972 wrote to memory of 3244	2972	msedge.exe	107
PID 2972 wrote to memory of 3472	2972	msedge.exe	108
PID 2972 wrote to memory of 3472	2972	msedge.exe	108
PID 2972 wrote to memory of 5000	2972	msedge.exe	109
PID 2972 wrote to memory of 5000	2972	msedge.exe	109
PID 2972 wrote to memory of 2688	2972	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bbf669ef32ea5b837ed01c022fc24390b9794e86c3e792d3100e1ee1f87b1dc8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe4ffac188,0x7ffe4ffac194,0x7ffe4ffac1a0
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,7756181868463623960,2671540656356471715,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,15740549678728987017,17447021803084963406,262144 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,14900083511010579850,2276004710904538325,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,322009214553399386,2994102113790437532,2097152 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,10082986608680661950,17372426101537760090,2097152 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,2334522931681201255,17990358685210117905,2097152 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,5909892104666971840,2467988220052290346,2097152 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,5436916673037936028,11383508435622410885,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,16818992203959096178,6322734913079542826,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,13899189724686026353,135597466215439085,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,13899189724686026353,135597466215439085,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,1668525737384237599,15538497145931863850,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,1297393162097165123,14795259984109604666,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,15359046644598391843,7278924489671335925,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,4231273390171660901,9912195422645573097,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,11231372610941031256,9034832324556816429,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,18065325083018034311,16838008853771645488,524288 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4456,i,13356959408276633633,14805250775482835399,262144 --field-trial-handle=2276,i,3345446255688718877,9758810017483205005,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2688

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 073e86d5f24bc929a4ac4caf1e01a406f855218c89ff7e861963d86eb9fe9913
MD5 f2582242ccabe402116391d33ff05474
SHA1 93fa686d1d70eb2b70f05881999e2d5ac35d3572
SHA512 b80b389bfc5b1e115e618ae2e903503313adc372b3eea73d580bf613a9f8363dbcc82fd338042a2232c47898e89a0e04fe4e764e88db2e3e8a30e36bd5077976
TLSH
T1EDE026A544CACB2EA340664B41A85B4C8281374FA7DC7B0A1B44C8D8B046464F3C66A4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 82fa048356d1c7d2a1fe8d107ab000f072bb2092e8dffb918adac1e63b959b84
MD5 1e359b24d86832862b7334c8728be09f
SHA1 5bb99d1be82211f5f1810ef86521a52aa15a51fc
SHA512 0bbe4a622db8c27417cc6f2afeecc2bf75c8780edb19c70a0605f5e2dfead095f62691c20e7bb9def76feb36767ff5284ff959c87409e505fe9a26f3adf9046c
TLSH
T1BA516483A79CC675DB6C04BB45C388CBB538C7F8E44B8F4A5B94D8795742349B2E0274
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59624a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59624a.TMP
Size 2KB
SHA256 c5212db7acdf65cf1403812e0d28e7fe7e564164aaf5f65766dee9cd09b96652
MD5 11e9868db4ec9c926dc783ed78b43032
SHA1 9442dda1dbf57d3bbd6796b865a2a48ee41829d0
SHA512 a302281050b96e1f8590f60237f9755be8ba7203469c4057d2f82445268df300a6d6846a8291f0c63852ea11755cee495550a2e952602435fc4f0291c6414e76
TLSH
T158517383A78CC675CB6804BB48C388CBB538C7F8E44B8F4A5B94C8795742309B2E0234
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f67c11a-2d0e-4b4c-be45-3ed7f2442f8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f67c11a-2d0e-4b4c-be45-3ed7f2442f8a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 de430120a3d68aa3a4b71bc1ae9a0921217eca60b26ae4e978fc08bc6b579e63
MD5 5ef926c9cb5b5012304ad2b90b8264bb
SHA1 b4ac103d26b465285d6d459629b18f321b1ab0ac
SHA512 1cc079fbb2ab865480f521092f47bddf7e96d65e076d9001fb1b1370e8abe0a7b8924dd95c02b0a2fc0c060be9ad0b4e1219eeb13d929d2d99ff9111d8f5cf33
TLSH
T147218FF7C3D586BE8D0156F06A34AE17CE1D0616822C3C5999E4EF1B93F24B5E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a2aaf54fc3fae1c65727e23b5d4d8d453cbfc396965762bda01a6e9b62f0ee0c
MD5 d7269239f67f6cdfeeaf5347f5b32b46
SHA1 28db465595460a4163c79d5581795ed67f5cd8b8
SHA512 6213d3ec6dc1bd87ef939854853165b8673a1cbe068c7819a751bc3d535102ee353b56c917fa774a27a0c27006342ae0c5e3918fa5d51007240caae5f3dbd3f0
SSDEEP 192:sxZzRhW6/fesyAIdpdFHW6+WNGYrbzvIgrJ:sxZzK6/fesyB3HbG09
TLSH
T18112B852AE28A57B8CCBD20DBB29BF13D6F9503251D41E58EAFC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8d5a30bc16b7f3d58759c6da0056ae6232efe9748a450890b423ec7f7d190110
MD5 411dbcb6b67aeca10c63c29da0412dda
SHA1 34b59ffff4374dd31d6d7268ea4cf9169332e633
SHA512 280b24193a6230ff6d1cdd48d73117e7b6f3bb65bd6d3267a4cea99e3c52ab0ea2b0783caf953cdece45ac4eb2912dc14c473f47138dbe670836d04cd3d3c3b2
SSDEEP 192:sxZzRhW6/fesaAIdpdFHW6+WNGYrbzvIg5bJ:sxZzK6/fesaB3HbG07
TLSH
T16E22B852AE28A57B8CCBD20EBB19BF13D6F9503251D41E58AAFC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 04d00b689512f69b53afe2a33e9a42b0de93dbd19abcc2e182a05dec084fad4d
MD5 4acab4253382ad4772a4cfe4a62594ab
SHA1 ed4e49da03164a9a0b49d51b02d0c821e6f818fa
SHA512 59a32a81f47aa9bc493135389d3cc6bbd927d6db332358fa39b02825ee4abb90705a5af610af23918142cbffc940f616013231a8a3f3891fe1be8674c2ee6d1a
SSDEEP 192:sxZzRhW6/fesasIdpHFHW6+WNGYrDKzvIg55J:sxZzK6/fesa1lHbGuk9
TLSH
T1AE22B852AE38A97B8CCBD20EBB55BF13E6F9503251D41E48AAFCD61C05E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 eb99cdf6ed0780e401cda69db956e7fe7aab01c529ca62fc9f8b8eae512faaef
MD5 e3fb9f083699296805fad3007ccc003c
SHA1 c538ae7976900f3a3874471ebf5ee57f5e72775c
SHA512 f82aff6c35444b86588fc47447df0093438f29fe44ff7e7aeb2baf57920c4b03fd7397891d7853d6fa023cc9be05738309f7221b7030d3cd85c0a7f266e84c6a
SSDEEP 192:sxZzRhW6/fesasIdpdFHW6+WNGYr8zvIg55J:sxZzK6/fesa13HbGV9
TLSH
T14522B851AE28A97B8CCBD20EBB55BF13E6F9503251D41E44A6FCD61C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4feace90ba1d5f2711ae6e47226556f39e293bc981954499700fa03bf6061a21
MD5 aba2ede34af3917d7b56e507125d5ba6
SHA1 06597bc49517e28560dde802a204cba2112840b4
SHA512 e694225ccfbdba3c4ba89558162104ddba3ad6e73af72e04f013ecb57f4c0c134c0fa31c0135a087b635fc295ad7f48079fd28c6e4ec8e24e139c2c6c0d2326e
SSDEEP 768:sty4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbvroRDc:sty4J/DWvbtBhu1jajiLm0b8tc
TLSH
T192C20B3B684CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6a738f64c44c269d5f119db17e750502c80907b961055e2c0d76958d179ae985
MD5 599aedbe70e29fe0ab0d22da2bb3e60e
SHA1 00def8a183707e1e20d552b6706fb91f180fec76
SHA512 9f34b10ebdfb43978f615c4709b42974d293c29e1136607dc2b899ddc186901eec7cd429dd7f34ac58eefccceae6609382f71214ede2ce5f754fb740dd45d8d9
SSDEEP 48:KIDI1Ks04jyLBQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyLcLq2EVlmb1YNISzmK9j/:KIDCKs0+yuwKbKO/0AKleel
TLSH
T1D091145530BB020539BE368D91F69B2E2241B6737119F62B7FBD50A19E2BE040DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 610a8edf8a32c9519f348e09a78072e210af751363e89cb28e9472e91810ac9c
MD5 6fbf92afa3d18c1db622cd5511dcfb90
SHA1 f24cf0c5b9ba1d8f7caf46ffc1727f0b39ca4087
SHA512 554fa2b28135dfeedec56385e6dea6a5e1405e4e01dc0747c908151ff71af3dfc99c7eca46399da4a80b2288666d2e86e585c66fab6e77bb45483c65fe921dfd
SSDEEP 384:ZZcI+sNC1DOZZ3dHHX58ET8AJeXXMn7O6R2Feo5LoN:x+IzXaNcn7TRSy
TLSH
T12C828D72A878AC7B5DF7D046F44A36039EF9906797C96F80D1FC7B2E0199A98130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8ece8a83d8b56d05710604eda5c51d17cecd875e138c27e3559efa36b49be2e6
MD5 85b52e336a7506c248d7e9280b3d064b
SHA1 e695e8e16bd957ce543ea8bf6468b2f53cea1af7
SHA512 ad49cdcb991b75fdd60095bb0d20f93fa2de6d5c3fac7a162f01bd276dba1202ea8ea48a2931b5c54acf08b863a49bee89b2f4ad4566fe8d6a76e36e901dc9cd
SSDEEP 384:bZcI+sNCyDOZZZdHHX58ET8AJeXXMn7O6R2Feo5LoN:D+DJXaNcn7TRSy
TLSH
T152827D72A878AC3B59F7D046F44636039EF9906797C96F80D5FC7B2E019AA98130AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c343e716ed7b6d5b5b5db5d30e2145c5450f794b513311942e5b81ef9b5c66c
MD5 3e891fa4b2df75c04a814d5c6e8beced
SHA1 5ef23cd9db92c725cacbb9f92d49bdfd4f77f0d4
SHA512 55e7494bd63787f166f3a313bd3ca6cb2315eb8f979393176b98ee38000be95c1744e0d9d6f65793641a3f5aa3146c53d34bcc1047aae1a1f30bf55768f33313
SSDEEP 192:1ONA6wlDgQmiUy6wW4X58gZDjzorAJaDlUFwoU6:1ONA6kgOW4X58ET8AJqtoU6
TLSH
T10F02E835F9787C6B8EF2AD0AF48727139FE5112BE6552F84C6E81A2D00D769C134AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 724ca2dac3fb5c6abdfc3a9d33b4e64d42a706060fef9acd759bb76e7a65bf65
MD5 a671197fa10bc4f15100b57b14054742
SHA1 ada0186402e1676121e65fe2078639c14231ad44
SHA512 898c9d74a0356a3dd76f6de2b9c7b48b32645e0ec8e39b611975ebc6c037f2cd52d3da6c19819012eb0bdc54ae7e03c00f8185041d3e2b0cac96da4c607433ed
SSDEEP 384:MFiZcIhQsNa8TUNTUlIlyDOZZZdHHX58ET8AJeXXGn7O6R2Feo5LoN:MFQOrwgfJXaNWn7TRSy
TLSH
T190A27E739878D93EADFAD546F44A3203DEF94067C6C5AB90E2EC6F2D009A598130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 775a57bb34bb29298a31f15f7fd3d47aec3ba2106058ef60d5077d4e972b4e9e
MD5 a3704b1ece3dca2a5f9b7e0904570ac6
SHA1 60021f828923659bc546941c8520a553386051a0
SHA512 389845297894f51cf3794021fdd6e622de7820e13445b0984a94035491fe03f93371731d58e425bc20e89f2db2b31ae00d9cca313b8dae066c32601c3b40d117
SSDEEP 192:1ONL6wlDIQmiUyow14X58gZDjzorAJeXxNqvej/jU6:1ONL6ko014X58ET8AJeXX9nU6
TLSH
T1E5120836E5B8BC2B5DE2A445F08732039EE55127EA897F90D6FC1B2C01DE65C530E923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 920e499396e473ce946250af2e1b1471da8552a76907109dc431088f7e55e0e7
MD5 e814bb6a0604cf1196747a8cd296cc64
SHA1 cab71a436a5006880382f5e118b81173abbb288b
SHA512 c4511f4f733027de326de2de98fb182670420856018665eaaf8c5251798b3b4fe400ea498f8f7ea88ac2d2ef53baae0076a627dedf02d9441b5861b6659ae595
TLSH
T1F0412959AAEE1158B3B77F569BF6A56D487ABD332E0AD05E00120E4F0623E40C970B37
MD5 SHA1 SHA512 TLSH

Submit Download