hxxps://downloadjennymod[.]org/

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 17:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://downloadjennymod.org/
Sample260913-vphv7aha75

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337930286711536"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{D6D6D9F1-6E55-4175-B899-B7DD3B81F5D9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{B088EB36-ADE5-4F89-B196-E9E7783ABF58}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
752	msedge.exe
752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 3252	1164	msedge.exe	84
PID 1164 wrote to memory of 1208	1164	msedge.exe	85
PID 1164 wrote to memory of 4508	1164	msedge.exe	86
PID 1164 wrote to memory of 4508	1164	msedge.exe	86
PID 1164 wrote to memory of 4508	1164	msedge.exe	86
PID 1164 wrote to memory of 4440	1164	msedge.exe	87
PID 1164 wrote to memory of 4440	1164	msedge.exe	87
PID 1164 wrote to memory of 5016	1164	msedge.exe	89
PID 1164 wrote to memory of 5016	1164	msedge.exe	89
PID 1164 wrote to memory of 2136	1164	msedge.exe	90
PID 1164 wrote to memory of 5016	1164	msedge.exe	89
PID 1164 wrote to memory of 2136	1164	msedge.exe	90
PID 1164 wrote to memory of 2136	1164	msedge.exe	90
PID 1164 wrote to memory of 2224	1164	msedge.exe	91
PID 1164 wrote to memory of 2224	1164	msedge.exe	91
PID 1164 wrote to memory of 2224	1164	msedge.exe	91
PID 1164 wrote to memory of 4252	1164	msedge.exe	92
PID 1164 wrote to memory of 4252	1164	msedge.exe	92
PID 1164 wrote to memory of 4252	1164	msedge.exe	92
PID 1164 wrote to memory of 4612	1164	msedge.exe	96
PID 1164 wrote to memory of 4900	1164	msedge.exe	97
PID 1164 wrote to memory of 4612	1164	msedge.exe	96
PID 1164 wrote to memory of 4900	1164	msedge.exe	97
PID 1164 wrote to memory of 2440	1164	msedge.exe	98
PID 1164 wrote to memory of 2544	1164	msedge.exe	99
PID 1164 wrote to memory of 2544	1164	msedge.exe	99
PID 1164 wrote to memory of 2376	1164	msedge.exe	102
PID 1164 wrote to memory of 2352	1164	msedge.exe	107
PID 1164 wrote to memory of 2484	1164	msedge.exe	108
PID 1164 wrote to memory of 4124	1164	msedge.exe	109
PID 1164 wrote to memory of 436	1164	msedge.exe	110
PID 1164 wrote to memory of 436	1164	msedge.exe	110
PID 1164 wrote to memory of 3748	1164	msedge.exe	111
PID 1164 wrote to memory of 3748	1164	msedge.exe	111
PID 1164 wrote to memory of 752	1164	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://downloadjennymod.org/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffad580c188,0x7ffad580c194,0x7ffad580c1a0
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,14978073398652266661,8229368385820042716,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,3245760126448983015,16608058358574031569,262144 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,10070676930736541391,3177475521081601597,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,9984528978932139907,6176348567306567799,2097152 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,8146977428175411817,3732046523005410453,2097152 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,12212132449429786619,5099556406734456084,2097152 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,13497073562316469467,9498056806711110687,2097152 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15980563330558458761,15306423921681840394,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,8477580482322958484,1843497219667262619,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,5983749218837875082,15462459201291823815,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,6164562021006476181,8880203442864667239,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,14864628952439805835,1038865109052533541,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,14864628952439805835,1038865109052533541,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,16317687880912676918,12863007119216345509,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,15273474676178140388,17168746623355736459,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,12800208748340349603,11711769236771701020,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,62582567589692915,5932482680559406686,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=764,i,9952482305719476384,9887507423204519917,524288 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5460,i,6049663811062518670,9428720318069025546,262144 --field-trial-handle=2260,i,16038797152352337248,1192168712736229159,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7a5f2f008be8bfb5e09bbdb3bcd1578a06d1e930c6c24866608b42accc123049
MD5 828234f532a9e4407e91cb9dff516bc9
SHA1 ef103a02d9c31b274a4cd54083c6582ff3623efb
SHA512 4c5867f054096303e7cb2949de2f63f17b26cc2ba715aa04d39fd2ee9b93b328c960d195deab6c5bfbbc3080e5b5713344f90335407c6ce2530d02534ee70538
TLSH
T1C271935189D0277FFB5C7C716AE530A732F59988C897AE322677CC789A0E3920A7074C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 76af4e01e05f9f55df1942042cc23c38c5376e45aa9966718ae6e96e270e7c03
MD5 e762b4e3fabbce9c1d69153085e3943a
SHA1 ac3a4d7ba466330e6ebcd22a22dccd102934a838
SHA512 c47262410e1253fbdcac3c109ca7982cbc357a5ab2df1b8d24bb872e5fe56f1b07e2e736549784acb69446c8e3ec18150c9791b6dc1cef024f9ad31c4d18479d
TLSH
T18171949049D1276FF72C7C716AE5306732F59988D893AE722577CC799A0E3520A7074C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5951df.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5951df.TMP
Size 3KB
SHA256 f2dce35b6b1104c4241abb8e81dd998ae8d2492514fcd58d25de75822a83a487
MD5 31646e77e36d556af45e67a598d4f1fb
SHA1 5e0264d5ccaa6d0e0140890d39e8c5293e6aa5a7
SHA512 9f66ec633ed30476322a2b2463af7cafde7f8d8be9989db1ad32cbed0e7c77e5afb4462ac1ca30527f7c07a52a30e949eade5d131d6a6a15a8541f02e11c26c1
TLSH
T1D5615E5189C153BFF75CBC71A5E630BB36F69A84C883AE6254B7CC798A0E7524A3170C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 f05819505dfc9c0c6b26d035839af3ecb64f297fb2dac6c66860ef7b2266722b
MD5 fb129ebcfff4b7f9b63550b9955dbf66
SHA1 8798e2f124071095d3ff310a9200cf319c3300ca
SHA512 57d744500acd55343fd23f21bbec41aad75bfe6a94f80173e447c3ea349f70036fb649c9cbad643f94dc79bffd221acd324dd5f1c1461ecba3ca5baab1712571
SSDEEP 192:D73XejvwZp0Ja0ozetfsba8ovaubaidZ6jf7o:D73XejvwZpQa0ozetfsG8ovauWidZ6j8
TLSH
T1A6D1CBF7C2E5C22D885A52F0EB146F2ADE1D29395B183C0AC5D8AE4FE7E14B0D24154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 68b0c812a3fe8ede70b3d0613c829b65cf40482157238ad15fe66f626fd194db
MD5 a57b8d79e029280ff5cb863e745f5fc8
SHA1 5ace3337b75cc6a0fb10c499e816e64bc9dd4daf
SHA512 fc8d1cdf8814fa7985635a328da955bcc0cafb128d6e469b2cdda7ffcf71b18d48e1f091e7a9cdbed7a5ca5316e9b944416c9543fc2a28e3a73f2d81f12b66c2
SSDEEP 192:sxZbRSWob/fxsBX/rcIdpnSHW6+WNscS/YapswDGIgrJ:sxZbTob/fxsh/5SHbu/Di9
TLSH
T1BC22B8526E38A93B8CC7D20DBA25BF13E6F9503295D51E58EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ca1f949c6893c4dd92c1c16cff3e840a2e268f0ab265ea072394a28b6de5e898
MD5 ad81186dae1b57767825a52fe7b11193
SHA1 6ee1d3ca56222cd107ed166baf051b0ad9c31a4b
SHA512 dc8ea2ce370a2670148377ed947ac09125f732fc95c126a943c0d47f36c5ea5b873187ce460a72022b7b65a9ffb3234074fe066ffb4fd524a13622b634c1f068
SSDEEP 192:sxZbRSWob/fxsNXhrcIdpnSHW6+WNscS/YappwDGIg5QJ:sxZbTob/fxsFh5SHbu/kiy
TLSH
T17B22B752AE28AD7B9CC7E20DBB15BF13E6F9503295D11E58A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e8476ca426b034d2fff5c33d9a7fd96142676951983c72fffce85892baacfb4f
MD5 58e224482ff92d48c2f1bf56c1f1bb16
SHA1 d87e069b49969de77c5a7a86c93b9232c52ce10b
SHA512 8910aac51d8b65a4fa6128c10ce1a35b117efd910779fbbbc38ec9c78c7e7fbeca1a639603155cca95b7a8e084c0caaaae2cdee6ed6bb2c10148928ed0468ef5
SSDEEP 192:sxZbRSWob/fxsNXhrcIdpRSHW6+WNscS/YapFwDGIg5QJ:sxZbTob/fxsFh5kHbu/oiy
TLSH
T1D722B852AE386D7B9CC7E20DBA15BF13E6F9503295911E58A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9529be3b204aebb2a0a04ddf0144c0b9f88ee7422b7a9fb0e2f22c0b0d76ba2f
MD5 b4aee233624920c8c20d3ccd6becd11e
SHA1 4e533336731c023950d890b40b837c7c01933834
SHA512 d797fc9a533ea623f432831af06fcee71b308a6c5dbf1c1524b0b4a34833eddbe6ab94496d937aba9e9cdb45ee9ed986a41da0338c18071bfbaf8668105ed963
SSDEEP 192:sxZbRSWob/fxsNX/rcIdpnSHW6+WNscS/YapswDGIg56J:sxZbTob/fxsF/5SHbu/DiI
TLSH
T1E722A812AE38A97B8CC6D20DBB15BF13E6F9503295D51E58A6FC962C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 eed7852211d27af21f2410f7ae1b6c8e3288ec5cdcb48c87b3eb89577f073204
MD5 67add0b23d9c8964a1a684a324d5f98c
SHA1 23f6aa1b45f65c1aadc891a49c9aa24f2a23d72d
SHA512 5635445230949968a6d0fd7cc3ec3ff9088a7adde856ad64ba99850e8e3876606005fde4fe86a772546cde50bfa3daf1b63fdd6a053d5e42dc395725ba2b20c2
SSDEEP 768:2+WPcLKWvKece8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Vro45StmRRb:2+WPcLKWvKeceu1jaClLiF7u45StmRd
TLSH
T10CC2EA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 52194035d68408a7d54c21c4770402f29e449dfd62f34f0c01e84e89e8902d27
MD5 956d76f7ba2369af9d77fd1d1c949524
SHA1 da3a8e72ee16e01c8bf00e26ea8a1c0dbf04fc21
SHA512 dd50ed0a94020fb600522f5cef0bf9fbdd31a8ee67129eb059452db7088c0b14e6417736d03165960a2e41313aadfbdfcfd9eafff075c8ab91936ec68ebef254
TLSH
T1B4A0041403CC1105C55043747DD50FD53314CF10DD53071371D07154DD70554CDDD511
MD5 SHA1 SHA512 TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 765B
SHA256 bfc4e70adec9b73eaf039be85ee4ed92c0e166e0d5389d6c9bc538db0faaabc8
MD5 0914ddd2e4531f8b13a1152b4cf5c0e2
SHA1 5a7de192566f83c5972f75e317cc471c269e9195
SHA512 82aadf277495cc6dd34182802ace6bbf590bc39c4bb31f609a9a92477e165d1b2470ec117a243d9a2917c8e89edd2e8c32343d23bee7e77a1e24a0f4e60307fc
TLSH
T12A0121C0B29800C4BF89A542D21A464394A13BFA120D9E35131E40F0DF84C1E0F2ED54
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 272eedfcba42b0ee4700e65851535149b81a7e1c374467414d8a18aa63de13f7
MD5 1038b1e46c825cff1b3fda687ccaa154
SHA1 ba988d5522dc4dc67c19ffad65d2c2114a342406
SHA512 14c366ef16d6f3d84234a305b479b666c11d0c6529e40b069cdead87bbaa36d262feadd15b29c64d928f71c013e623d8f4a817d9713cc5d9f273c0c5f2d0f10d
SSDEEP 384:7FiZcI1jsNP8TUNTUlIllsae1ZHVzIGmz73YNHissa+VYqd7UDou:7FQRCwg0LZgj4HishgxGt
TLSH
T19AC23AF248E7983AD9AE9747B77E2D138DBCC063B5846A50B7C85A0CCC961BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1049cd0cfec87d71166e421d9fcea8c3db24c634a5c27dc11972d112431c79f2
MD5 9d16f178eeaa7a1f67b55a842bdd28af
SHA1 d5044edb153732b488612771de52d56e8d13121b
SHA512 fd2ec820a7f98b543a4f8ba9249868676ab4d3f5e515ebc749132ce5298ebc21ec5042fce62497a9649ac8339051d35e5b55c08ff5c3e029e48a53f49315a3fa
SSDEEP 192:aON+6IE7QmiUyKfTPuIGmz7EmuC7svWuU6:aON+6Dt7PuIGmz7ZslU6
TLSH
T10702E739EC7C7C6B9FF3AD49F4876A236EA5112BE6952F84D9E81A0D00D725C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6b18778c0d2d6abc6580f8d4cfb95088e98e4b3dd97a790c059953734295b6bf
MD5 86c2fdad78160aad28ee40ea14df94c3
SHA1 9db1799312fa9f4598908449704195a380dcedc5
SHA512 1dc77096bb5be49837c925372520abcb028a8f01bbbed3aecd3ec37422320afe700b4badd1f26168d2dee0bb052704810eea7411d344469b391c501daae9adf3
SSDEEP 192:aONI6IENQmiUydfTnuIGmz7EmxYBeUD27Hy/PU6:aONI6DLOnuIGmz73YGHsU6
TLSH
T1431209369878BC2B9FE3A945F48739236DA54227DAC97F80D9DC2A1C01DF25C130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ea87c077f2f0c05e25152a183ed81cb18e85589ac023f0514e32915dea434fea
MD5 0ebe44c505b97dc0265740580e51c4b8
SHA1 fc15b91508946cc354c0a20f20b6f4c70c6e7faa
SHA512 319c2c2022c245578176d3e391487652046d0557987f6dabcdb9aae6fff0fed568d1fae24b2285ea941b47e73b4c94e1bfce569c7e20421c6858528f28518626
SSDEEP 384:ZZcINsN1Csae1FSVzIGmz73YMissa+VYqd7UDou:xNCWZgjTishgxGt
TLSH
T142827D319C78AC7A9DF3D685F94736139DB8916396C83F9495DDAB0D00DB298030BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 067f5f28ffccb57c38e06f0fe7239758456ab06149dcb8cfebb5a432e1685e72
MD5 fc4de1c7e68033f7bd5b2283f16721c4
SHA1 fd866df5f93a63322ba54db77c72352b0fc3db99
SHA512 d7b6096403f2d22cf9022ed9e3cf70b66374e20f2d0975e1c08b68318baae572050de41b976f1fc6d482a823d8dfe5e21c10341961b91a2dd1efcf4618a3b8a1
SSDEEP 384:PZcINsN1lsae1ZSVzIGmz73YAissa+VYqd7UDou:HNNOZgjlishgxGt
TLSH
T175826C719C78AC7A9DF3A685F9473A139DB8916396CC2F9495DCAB0D00DB298030BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cde94ed-f0de-4f1e-9829-4338b6a08a65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8cde94ed-f0de-4f1e-9829-4338b6a08a65.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88a44a0d2d87f6368d2c8913953c6da184491547fa3e14a91c5f933b90ca2e42
MD5 67f6f13b6937dd542419d8b76c1f7f12
SHA1 967fb7eb3d8df675d4bb4fe07d59bdb9b072f87c
SHA512 bd8e763ecd141cc1d27d2492dfec30fc0344821d73f114424cd228f4d7792ed15729fd5826e5d2b4fac76781ec701e9734c2b13ffa59a66caa657793c2689bfb
TLSH
T190412788A6FD1108B3B76F569BF7A96D887F78362F0BC49D00110E4E4626A40CC71777
MD5 SHA1 SHA512 TLSH

Submit Download