540e7f400786bc6788febc4f899c5e077cfc5cbe392167def2c11d9c6c11d1dc

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 06:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_540e7f400786bc6788febc4f899c5e077cfc5cbe392167def2c11d9c6c11d1dc.html
Size 40KB
Sample260913-hkshlsvye1
SHA256 540e7f400786bc6788febc4f899c5e077cfc5cbe392167def2c11d9c6c11d1dc
MD5 4b52cedf9936dba64ed00e30414fa4cc
SHA1 caa5040d094722348eecdd29fc7f9987910bd9bc
SHA512 a599c3ef3551554c20d187895d16f9150119daceafb8da79aa849f16e503f3aa9b01ed1a899458979d454103e17e06fcfa7ebeeabfde829a1d61d6ee4c213ac6
SSDEEP 384:lJ5Ekw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8/W1SJY2:7Hw8hW8VgJG8yJML132
TLSH
T1CE139464B9C222230133637D9FA79608FB74512B820653407EBC27EA1FF1954D5AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5096	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337916782619898"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{54DC997B-B004-436D-BB81-06301FAD4C47}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4236 wrote to memory of 4612	4236	msedge.exe	84
PID 4236 wrote to memory of 5096	4236	msedge.exe	85
PID 4236 wrote to memory of 684	4236	msedge.exe	86
PID 4236 wrote to memory of 684	4236	msedge.exe	86
PID 4236 wrote to memory of 684	4236	msedge.exe	86
PID 4236 wrote to memory of 4520	4236	msedge.exe	87
PID 4236 wrote to memory of 4520	4236	msedge.exe	87
PID 4236 wrote to memory of 1532	4236	msedge.exe	89
PID 4236 wrote to memory of 1532	4236	msedge.exe	89
PID 4236 wrote to memory of 1148	4236	msedge.exe	90
PID 4236 wrote to memory of 1532	4236	msedge.exe	89
PID 4236 wrote to memory of 1148	4236	msedge.exe	90
PID 4236 wrote to memory of 1148	4236	msedge.exe	90
PID 4236 wrote to memory of 1124	4236	msedge.exe	91
PID 4236 wrote to memory of 1124	4236	msedge.exe	91
PID 4236 wrote to memory of 1124	4236	msedge.exe	91
PID 4236 wrote to memory of 2652	4236	msedge.exe	92
PID 4236 wrote to memory of 2652	4236	msedge.exe	92
PID 4236 wrote to memory of 2652	4236	msedge.exe	92
PID 4236 wrote to memory of 4300	4236	msedge.exe	96
PID 4236 wrote to memory of 4300	4236	msedge.exe	96
PID 4236 wrote to memory of 2328	4236	msedge.exe	97
PID 4236 wrote to memory of 2328	4236	msedge.exe	97
PID 4236 wrote to memory of 4668	4236	msedge.exe	99
PID 4236 wrote to memory of 2052	4236	msedge.exe	105
PID 4236 wrote to memory of 2868	4236	msedge.exe	106
PID 4236 wrote to memory of 1752	4236	msedge.exe	107
PID 4236 wrote to memory of 3344	4236	msedge.exe	108
PID 4236 wrote to memory of 3344	4236	msedge.exe	108
PID 4236 wrote to memory of 4976	4236	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_540e7f400786bc6788febc4f899c5e077cfc5cbe392167def2c11d9c6c11d1dc.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x274,0x7ffa2084c188,0x7ffa2084c194,0x7ffa2084c1a0
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,5427658624770233791,16778723434722051609,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,14770202216577971701,15595716623947545602,262144 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,6282259247265300587,10110607742904404452,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,3537843915671153400,8449079949355732653,2097152 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,817762790948574522,15715434484373933566,2097152 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,6440339303666355931,8108403583055780595,2097152 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,2852803823542600118,2099366645705869067,2097152 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,16864921924479235031,3391676314908789372,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14631492810523637248,10949858758877718371,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,2286952864287089591,17517052286617409414,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,2286952864287089591,17517052286617409414,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,9871575662130027220,3741005122746931584,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,3070616860675791131,8885483632573227626,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,2357509030383294241,10988157825828639420,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,12011963832267850275,11728564551828090479,524288 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3208,i,7494599725262091083,4414345956512955300,262144 --field-trial-handle=2228,i,9728436319617006758,878927191612703640,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

0b6d5797-31d8-4802-8606-f8e8990d7272.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b6d5797-31d8-4802-8606-f8e8990d7272.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4ffd4ae28bd6c7cc0467b26adbcead4d7e792f8fb4b952d3b51b47d402b2454a
MD5 50e5665625d21d9b60e66dce14c03282
SHA1 3b34e83fd684fa8cbf878e4e6a485dd704b707dc
SHA512 accb3df135798f4a0f5204b2ed553ea8bf8b1dfad425dc8006740290a9de89c25ee4237ed2b04eb3f72c9f440bdfe2821ad54d117c6b6351046e3cb527b097c8
TLSH
T140510882DDB040D8FBD941F081FDD08F36FB4D8149832EA2FC5BCAB85636760924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e22d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e22d.TMP
Size 3KB
SHA256 4a37df2ba3d4102aeaa320ad3506d6a29690daf4b266c740377ac235cf7e5653
MD5 40ce650bbf0a7850d381315fe8be39e7
SHA1 e3e74fa1524dbf3e89056a13480efb56b3f84393
SHA512 0320ca2b78d5efaa218269c2e1962bc1ac3c8ad263d28855857bb0b3262b61ce161c535556934f7458dc8534d5c5736b2d709ddedb7cbc025ac8aa449660c496
TLSH
T154510882DDB040D8FBC940F081FDD08F36F74C8149832E92FC6BCAB86636764924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f3004bd6b82767e706809e63a7006afd5aec4418ce554df92ae35b1194030c87
MD5 3e7cdc442c5e0a4e0342d7bab7335b93
SHA1 8b5136659edf3d370169475cbbd1568860dccb19
SHA512 e6f192a40032966c74f2ee8a98cdcfab9ed9909db0128f1b4bbed5de292ee4b59c72b390b2f0de013b139c75c0dd06ff4d290e7de3c606111efc4093144fab6b
TLSH
T13021BEF3C3D586AD890556F05A24AE1BDE1D091A82283C16DDE4EF6BD3E3071E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 64b28c938693819ad71e11cb9bddfe24a9a75a0a377e499159108faf9f7dbed1
MD5 386d9b8d7407ddec486206270015fce3
SHA1 13bd902aebeaf1fed3a870d719c0d12f18081a58
SHA512 13b4cb35bf4289a3adbefb98759afa87d0e2b6ccf1dbbe7ef25e3c1a572af8af7af8d1edeeb4cab7a5dc089678f129e50d3f87dc9a4cfbefd3b5dfbb20988bec
SSDEEP 192:sxZBlWK/fSs6MqIdpd1pHW6+WNGYapYONIgrJ:sxZBMK/fSs6chHbG99
TLSH
T1E912B712AE38A97B8CCBD20DBB25BF53E6F9503251951E58EAFC861C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 34c9ffc7ed4c6a7393b608366c073809eee30b5edec3a8713d403689c73961eb
MD5 d266b8702bf045cd7d594235fd90ed46
SHA1 a0843935fe115dc32264ab25b65c8a181deff7fd
SHA512 fd77e520435d5fea0f1f0b4e6d9c2f05ed35fafc51ec4c7af0eb8ef80cd08b99d1bee130779c8315cbb98fc7ed13275548bb87407611139450bd09003c032b06
SSDEEP 192:sxZBlWK/fSsZMqIdpd1pHW6+WNGYapHONIg5ZLJ:sxZBMK/fSsZchHbGE5
TLSH
T16522C952AE38A97B8CCBE20DBB55BF53E6F9503251911E58EAFC861C05E76CD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cbdc7e8390ad8d3c66f385b2044b353d45a226968f6d9f8ff3c0bfe060fca8f4
MD5 cb16b50a4bb0ec51c1032e3f615ea4ed
SHA1 32fd857c28ab7011a670497dd857431caf2f7f51
SHA512 41620991241ad63d608b5b61593cc8c9dbe18325c6bd1a33fa7862f9334fd17cf63da9656f3285234d042d39c12bedc689fa6f4bb400b14d3fcbf59e4adc4dbe
SSDEEP 192:sxZBlWK/fSsZMqIdpH1pHW6+WNGYapCONIg5ZLJ:sxZBMK/fSsZczHbGH5
TLSH
T19522D952AE38A97B8CC7E20DBB55BF53E6F9503251911E48EAFC861C05E7ACD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 07c558f734efd83831201d1bbf901a8407147afb70d584d9d4cbcf0602d17914
MD5 17d325c7babd8bae48eacaebb872d3f1
SHA1 5f347fa657d1dfb59c99e7a7268779bd9c6b5016
SHA512 b5d69102295ee0f459b5b9feabc4d2dd6df46144e8d7f2f60ea00332b82aedc5cca67aef5ef86901d69022103961791c71718038814e4544a9edf7cc8601ba67
SSDEEP 192:sxZBlWK/fSsGMqIdpd1pHW6+WNGYapYONIg5ZRJ:sxZBMK/fSsGchHbG9H
TLSH
T11522B812AE38A97B8CCBD21DBB65BF53E5F9103251951E58EAFC861C05E76CD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9f72cfbaf660a11a8008a128c4acac67ec44a30988c4ee04f955f3929f84e84b
MD5 f8d51d1985fd253bd3c9c57a1b6913e7
SHA1 8c2e5caa4c7184129b388b1ad08c7ce4078a63d8
SHA512 cebeec9636ea53927f61b82ffb96189f484b806eac8b715c33f3d4804dbc63fd4197069f2f9d0bb4aa13661a58eeab36236d633612b7e4c7b263fa495cf9b1f7
SSDEEP 768:muWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Fro4dfecmRo:muWPcLKWvKeEeu1jaClLiF7+4dWcmRo
TLSH
T13DC2EB3B640CCB7E5FC01E9DDC5A6FA76E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 de31b866782d7884e76ed335cc0097c407a70736d4e9408eea98d1a3ba52bfe9
MD5 cb5c6ec8d4108b90a0def5629b805041
SHA1 77f42ac92e0e4418c6d722392f0eacd07bf3abdb
SHA512 e99f96f2b3d9ecd712c6b358a8d2142d4ec875bd5b8b93994937909e18eea399aac70ef46f9f4c9218c2cf9667228fc63e56fd52e1185d4df6b07386d37968af
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yL5IVpz3Lkb10JF3jXYbLuLISdYK9912:KU0wKBeiiZCoKP626qoKHqv
TLSH
T17AA1E00530B702413CBE299985B58B1A524335F33018E62BBFBD54D69E6FE055EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 eee628af9b5076ecef3ca49a4c00b175117f307884ff3bd061aa1be0b5aef4ad
MD5 ea15fe782d1c693ea8162eb5f0a38919
SHA1 96933b6d9bfc3bdde480bd42b267a51639f61e75
SHA512 0f592da1a35cc07c3f4712e5f139f858aeb48fbe9b2f50cd26a9947e89d7907dce5407db312f7c8dea78be5438f467b3b5ed6eccd2b140b3967cf1a96d72e57f
SSDEEP 384:WsNXiwE7b1159VzIGmQ2msMEidV7O6R2Feo+h7UI:WeWR9ZT2xlin7TRt1
TLSH
T19F625B32AC78AC375EA3A949F4073A239DF5816796C92F90E5DC5B1D00DF3A82307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b6f6235fac2494d246fc5e49a0e19a3996902b0319d717588a02d5106eccc9fa
MD5 826ad3a09b6f7a130b0f407991a7caf9
SHA1 2d5a58fc3175c7d41ce7975f9d166df8d40d18a5
SHA512 2504c9314010d13887caea8a6ab814966150b48c4761bd83d2e064db7dd001daa1914a0a30a386906f8c965e87ddcd73a08eb7c6cc40ec0d79829abccbdee412
SSDEEP 384:pZcIvsNXmwE7b1159VzIGmQ2msMEidV7O6R2Feo+h7UZoZ:hveWR9ZT2xlin7TRto+
TLSH
T1A7829D729C78AC776EA7A548F8063A139DF9816397C86F50E4DCAB1E00DF3A81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b032f2d9a9194052c8dc9f60da2254948129fa568f4cde5216985cd232f35d8d
MD5 f92cacfbd2ae65624af08b2c2768e29b
SHA1 b87a80e6c55f247afb6183a42f16dcc1403e4ae2
SHA512 7d56f76972ec1ae3847e152294c6a42a503b9cf6ecdcd18d1a298288aed52fa33ac2a4e06921a6f3863e81c64219106269841f35055d01aedbd64601f7b7560b
SSDEEP 384:yqZcI0VsNXmwE7b1159VzIGmQ2msMkfidV7O6R2Feo+h7UZoZ:lyeWR9ZT2xRfin7TRto+
TLSH
T168929D729CB8AC375EE3A549F9063A139DF9816396C86E50E4DCAB1E00DF2A81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c48d075383d9c4e08905be2213387541b3487f3cff419fbdfa325b699c88b062
MD5 a60573b17632eff489422eac5b0c3e0f
SHA1 34374f17ea561c8c8f273a8122baf7f0f3487ec5
SHA512 5450a3a5d02a411801672114cea098eab0dd5dcc3be00578587e76cff50c3a2754be31dec8b6e678a39f2c8c5b4be787a73b28849b7bd32bb001f90c400fbfee
SSDEEP 96:3qONk2Qsjpfe/tyng7X5ih/cIPURHl8h4otop5AYDCNBnP9ZvEI0IG2jbb0DqssC:aONe6IE7QmiUyxCTPuIGmQ2mdC7st1U6
TLSH
T15D02E939ACB87CA7DFE3AD48F4872B239EA5112BA5952F94D9D81A1D00DB25C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 e669a2c35f1a5d614ad90be6e7295339575b87c4bdd52696dfe8ad93cbae969e
MD5 b5691eadbe8356744784c3de3fc334bb
SHA1 aca71b12117a9755a068b33f032420a01d3bf2c9
SHA512 8cd6d5b8f26bf3e37da98ff2c0a6fa9f356557c3c1b0f8a25389ddcc44a2d44b44786a5a1355331fa644e8b6216ddbc9ff2bf564540162c3e996967dd3735708
SSDEEP 384:WsNXiwE7b1P59VzIGmQ2msMEidV7O6R2Feo+h7UI:WeW39ZT2xlin7TRt1
TLSH
T1D7625B32AC78AC375EA3A959F4073A239DF5816796C92F90E5DC5B1D00DF3A81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4f9180ec65aaf010aabbc3c0f8086abc9d8ec7af212bfc419ededdc5b0703fe4
MD5 2af8ff72518048f69e5b554f83d022e8
SHA1 2572f6e726391d64b14c7726d18e7ec4e4941a4a
SHA512 8dd177a50a02b7275e83c1bfb03ec206b39856ed97790ce7902c6d5b3bd95abc534a0facffc31c1e216e3550c2e9fcebe379e3f75bc85d24056b22ec706800ab
SSDEEP 192:aON66IE3QmiUy8CTnuIGmQ2msMs27HA/qVU6:aON66DZ0nuIGmQ2msMFHdVU6
TLSH
T1AE12FA36DCB8AC6B5F93A944F4833A239DA58227E6C57F90D5DC2A1D00EF25C2307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12321dd3-7a17-42e0-95ee-64ec83d005ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\12321dd3-7a17-42e0-95ee-64ec83d005ac.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 24fcdcd96667dc2e14471d637887054964987888a5a3b270fb0f33e5cc824c97
MD5 62ee07298ee0db46b5e1cf451909e09a
SHA1 d0034b032310da474551fb29a0e8f28bc7520d1c
SHA512 0e24fa7afc42cf5e02e9240fc70e1cddf62d96370fd4f3a0872aa1b2b7b0a7283107b25abe8b9659e3d7850798b054a0d6ca31be5394e7058731f5bf6129a6ba
TLSH
T150410758A6E91104B777BF4AABF2A96E447FB8371F07D59D00110E4E0763A44C8A2B37
MD5 SHA1 SHA512 TLSH

Submit Download