76ad4ea21e45368cf36792cb9d2666eff4b384255bd9e7d100dc3b6798466bfa

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_76ad4ea21e45368cf36792cb9d2666eff4b384255bd9e7d100dc3b6798466bfa.html
Size 11KB
Sample260912-2bxkrawfne
SHA256 76ad4ea21e45368cf36792cb9d2666eff4b384255bd9e7d100dc3b6798466bfa
MD5 3c0b203f6c74b23908ac9a22ddb17641
SHA1 a1c45a2bd1566e43ba3dfd768bc4a977369093c3
SHA512 8b4b8e80c14a17e55f262b6585c69956d599daf3a0ac982546a56eed4f48f3003491ad60c6e0829695d5389a164d8e3591951afaec1a581cf9089c3ced081112
SSDEEP 192:z+h859Wq7VAuuIadLR6VDrl1QJpqzE7I4vtfJY1DuVoLOMjlp5LR6VDrl1IzE7Gw:z+a59nGIaRIVDrsJpqstfJJVoLOUJIVR
TLSH
T1D132D56B6D1CDC1D5B020ACCAC5B3A0E50CE563AE5CC69ACDAEDCE1C01F66DC4B29547
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1660	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338208978370399"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{5507B141-978A-4F68-B420-F2370671B88E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4144 wrote to memory of 4432	4144	msedge.exe	84
PID 4144 wrote to memory of 1660	4144	msedge.exe	85
PID 4144 wrote to memory of 5004	4144	msedge.exe	86
PID 4144 wrote to memory of 5004	4144	msedge.exe	86
PID 4144 wrote to memory of 5004	4144	msedge.exe	86
PID 4144 wrote to memory of 3224	4144	msedge.exe	87
PID 4144 wrote to memory of 3224	4144	msedge.exe	87
PID 4144 wrote to memory of 3192	4144	msedge.exe	88
PID 4144 wrote to memory of 1724	4144	msedge.exe	89
PID 4144 wrote to memory of 3192	4144	msedge.exe	88
PID 4144 wrote to memory of 3192	4144	msedge.exe	88
PID 4144 wrote to memory of 1724	4144	msedge.exe	89
PID 4144 wrote to memory of 1724	4144	msedge.exe	89
PID 4144 wrote to memory of 436	4144	msedge.exe	90
PID 4144 wrote to memory of 436	4144	msedge.exe	90
PID 4144 wrote to memory of 436	4144	msedge.exe	90
PID 4144 wrote to memory of 4000	4144	msedge.exe	91
PID 4144 wrote to memory of 4000	4144	msedge.exe	91
PID 4144 wrote to memory of 4000	4144	msedge.exe	91
PID 4144 wrote to memory of 3956	4144	msedge.exe	96
PID 4144 wrote to memory of 2600	4144	msedge.exe	97
PID 4144 wrote to memory of 3956	4144	msedge.exe	96
PID 4144 wrote to memory of 2600	4144	msedge.exe	97
PID 4144 wrote to memory of 1888	4144	msedge.exe	99
PID 4144 wrote to memory of 1664	4144	msedge.exe	105
PID 4144 wrote to memory of 4204	4144	msedge.exe	106
PID 4144 wrote to memory of 2580	4144	msedge.exe	107
PID 4144 wrote to memory of 4560	4144	msedge.exe	108
PID 4144 wrote to memory of 4560	4144	msedge.exe	108
PID 4144 wrote to memory of 3412	4144	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_76ad4ea21e45368cf36792cb9d2666eff4b384255bd9e7d100dc3b6798466bfa.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffb410fc188,0x7ffb410fc194,0x7ffb410fc1a0
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,15503633867578046665,15534143446706336033,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,3090129665526067467,12692759056116536193,262144 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,1359277687107764249,17670385346911919344,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,11961295341530557014,17518027084654064504,2097152 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,15341584634475916020,17433619753746179743,2097152 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,6287000954990087304,12592108487283680759,2097152 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,14843521802863988050,3494175999376796619,2097152 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,10098938140328819654,1274857999762953698,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,4097273321624074734,7695683856681490972,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,13743553562688966368,9025252664733277840,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,13743553562688966368,9025252664733277840,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,17577702202966355677,5684648113202216033,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,14774839571655435114,482883898594483499,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,15701073169488190092,9399716192646640022,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,11594227970157000696,12130558743971890513,524288 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5908,i,8508668052413743188,5140990969507573449,262144 --field-trial-handle=2228,i,16320493185672784392,16829377464082042310,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3412

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cb056998e7cde12cc5438631324df5ba92fcf8b0f20aa614d59c335f4df4548e
MD5 4c74f0fbb3d2cd567aeac000d6d4555f
SHA1 3a9e994c2a63aecc9e70c7d8960b689dbec55a4f
SHA512 3e4c5c66a44154bd07bcb0379a0c612de7780f1fbea8f39188e884bf73174d4ddb52db62ed0fd4140ba8d33b984a16da8eab27ab6d8fd3b81729ff8be4d272a5
TLSH
T1CD61C58D82A0468DF7D8613092ECD0EB3AFE8D62B5B34F9122E6D7B51C06F45B80C48C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594e36.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594e36.TMP
Size 3KB
SHA256 38cbbdd6ecc33d4021fc712b37f83ad7e88e96865bdc57a78356330bf5ad3ac4
MD5 031cc564b69b6bac471979e744f39e55
SHA1 1e708591b7c7cf6fc53b60313d5883dd4d88d6ba
SHA512 d4f4f234b6eafc91fcb3863b29e4824ed7a4b7fd13379a3cbb8dc753958cf04229c0ae6e1492b9fe8c0e9c9ff9655cc3af03d60f3e3460e452f4fa473765601d
TLSH
T19861A58981A0459DF7D8613096E8D0EB3AFE8D62B5B35F9222E6D7B51C06F54B81C48C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3e469a3e79b92020046b971fb048f4b1b0a952c41fa0a43476f5f2b786451d79
MD5 21af1f1b57aa63c8dae0e4e8ecf92e4a
SHA1 a5dad0659233be8017c66c41449904c7258f7679
SHA512 aba46f80ffbb75675fb6634979b61f28241ffbbcb7e0febb65198cf727277200b69684989d73000a2335f428611d5f67286ddb4bbbee925af903efcba09f40f7
TLSH
T1E5216BB7C3E586AE8D1556F0AA24AE2BCE1D0A06422C7C1689E4AF1B93F3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0b9d32c2fd2d7d58b554c04c99f573f302332c5fb0919706096f839e4ddc6522
MD5 b8924f59da5000e8066bdf3b3960f591
SHA1 e66dcbec90696402e417135e6cf0ccc13c515864
SHA512 62ad835326dce58c433df1f86ee043f5d41208e89bea7b58d7fd6d35f0bfcc9715c0ea2a57fb217d234d27c43ba0a1bdafd3c7c912e10918940c717af63c5e85
SSDEEP 192:sxZJR6W4/fzYstAwIdpdDHW6+WNGYapYEaIgrJ:sxZJD4/fzYstqVHbG09
TLSH
T1CD1297526E28A97B8CCBE20DBB55BF53D6F9503291E41E48AAFCC61C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bb6e4d9a781264c963398bef0637486af46a68277369dd9ffdb50d60447eec2d
MD5 a39b5369511537469c360d49e31dedf2
SHA1 011fbbf11bc998686f8b89747983fe520dd89e0e
SHA512 20ed24300b8ac33ccfbf2f5b43fdd5020c78265535f96ff5d8efcd838335d09dcbc4449f5db460478f5fa01ca3c740e329388e78c2e87d990d15416eae502849
SSDEEP 192:sxZJR6W4/fzYsGAwIdpdDHW6+WNGYapYEaIg58J:sxZJD4/fzYsGqVHbG0i
TLSH
T14B22A8526E28697B8CCBE20DBB55BF53D6F9503291E41E48AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f0afdc1452e7456b90489d4a86c466748c8482a7cec8e3349527409d7cb3bde0
MD5 d5e9a753012db6cb9099dcaafe479c1d
SHA1 3fc3e56ea4ca2e35a0960f14024c2337b1574683
SHA512 757c01a934c8b516fbe8ec8522207db9c6fd23638cad6b07b23fe141525b0979271a32b5d03af7eabf98f990fbade553ee4cb7329ad552ea2c67f4d8bb0de75a
SSDEEP 192:sxZJR6W4/fzYs4AwIdpHDHW6+WNGYapnEaIg5uJ:sxZJD4/fzYs4qjHbGRg
TLSH
T1E422B9526E28697B8CCBE20DBB55BF53D6F9503251A11E48AAFCCA1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 18e491d5b98c0f24c9cead33748e4160879b815bed2165128cf5cafe3a0b7b88
MD5 7bb0379e5df68c0fa81dea681b218bd1
SHA1 c6e6e10e9a937aafd901c94d3c75bef72c887bf3
SHA512 cb453f08f27a49e027d54861708a4d0a5f05e569c08d53f421f59c0668716fed8cebb1aadfa2930b9971a779fa3a38004a19845db95532206bbfcf6e161231d0
SSDEEP 192:sxZJR6W4/fzYs4AwIdpdDHW6+WNGYapNEaIg5uJ:sxZJD4/fzYs4qVHbG/g
TLSH
T1BE22B9516E28697B8CCBE20DBB55BF13D6F9503251A51E48AAFCCA1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 144b78c571d023354b665848d321b2352d3f69f4f502d0582c5767a4aba6d2ce
MD5 b912ccd086f541325e732bf90b183acf
SHA1 688317d433f252037e4e3bbf909f33b850e97c48
SHA512 0be484b5d7fc142a038158be276096665874199c21ba9565632bc7736eb2384ad20f4a727ca5c7086b852847d49c0b34039e3143a08a5d512a0779bebe2c9925
SSDEEP 768:2GWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7dro4vfeemRz:2GWPcLKWvKeEeu1jaClLiF7W4vWemRz
TLSH
T17FC2EB3B640CCB7E4FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 70da17c7a5091c269ec7696df0eb3dfba785f28c4af50832660e92e92ef79197
MD5 f20e1379884643a05d6193beefd5220d
SHA1 4223388a8ad9a63a43c4eaeb8fd35d2c76edaa96
SHA512 bda159ce4e10b63c92939056f1fbad8cac86ab98c81ed7a13374b2cbe9b26a6f9b640f92102c04dc3ed04a76de024fdb3cd3edbf8fd2efaef37a81ea6d1dc465
SSDEEP 48:K0XaDX5ZpCbBsxISnCK9n1NCxHSYE1XryL4neioS23bu1uIS63K9W1M3xAnY9eGg:KcMAK1qG2PuKUk3IAKJuGh
TLSH
T124919A40B1BB566039BD2D4882A0AB5D454136B3391CE63BBBBD04625D6BF590CFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

749e80c2-a62b-4b3c-adec-f1ae4f1dbb53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\749e80c2-a62b-4b3c-adec-f1ae4f1dbb53.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b1e73bd46ccbaa070f8a75ab0bedcc3ad221ce19155d38ab6194963163dfe643
MD5 f8d7f27e565b17ffe309e30d2d54534b
SHA1 4d3c28624a45ca4aa8c29b01bb2a97f268391e1b
SHA512 70d7079ff53da66db9ba0092c94fa680ab5f815aef9809dba5bcc99335e1f2a428bfe1523b736b02eca07327481d8fec104599b3f5ba46b512c04f113617b120
SSDEEP 384:zZcIusNBrK1Ss6zIGmhScxaGWiXVc7O6R2FeoUmoI:ruhd869WiXVc7TRYH
TLSH
T114828EB2AC78AC375AB7E085F8463A139DB9916397C95F80E8DC7B1E00DB658030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d1281a5873966af7f25744c90f54c5ca3e90f952d0ff9a82b39bec3bd8ea8967
MD5 257f6acc2e32b272cb7596ed857edc9b
SHA1 07387144a9e7736bd592a89e271534ccbf3b8354
SHA512 ec166c73f0327558ed4c91b8b9f816a9bb076dadb3c4c870678c4caaec988765a6de575d7486560e649201118df3a60c6401688d40cc26259a44f88989f0a7d1
SSDEEP 384:miFiZcILYsNT8TUNTUlIl+K17s6zIGmhScxaGNiXVc7O6R2FeoUmoI:NFQk6wgXS869NiXVc7TRYH
TLSH
T1BFA26EB39C68DC3BAEB7DA85F84636139DB54163C6C5AB90E6DC6F1E00DB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c53e37a3401ff1a5237d1bb38074fa3f94094b1cebb368552f349d04928f6c7c
MD5 ed7d24962fcb2b3831dc5884c27dbb87
SHA1 62fca2c214f114277c333b8da125f682b99d69cc
SHA512 684c1d52bbc3a6d65b7a5547878d93d31f2a9ddddfeb5df066a6d01dfc54cf7bdc6927701983d38fdcfdb8f055bea215907f994be08d1c823073a6225f5c81d3
SSDEEP 384:dqZcILYsNB+K17s6zIGmhScxaGwXiXVc7O6R2FeoUmoI:2kAS869wXiXVc7TRYH
TLSH
T1F0928DB2AC78AC379AF7E085F8463A139DB8915397C95F80A5DC7B1E00DB658130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 459444ce56a8c3384a47491bae7af5155908488b6d32f61c7d22490e84c16db6
MD5 0ed0044a59722b33ac4c7904878e37b1
SHA1 2abce064e2953a23c89aeaf3364610ecd110d69c
SHA512 8c0b79bbca05a4f9a8d0cb77ad4e717ab0fcb7424eb873dce9e5139f9ec2fbaa18ffc709d456dbeefc88d1d7722e20d180d981c12e0a6133c5fb1a19ba0363f2
SSDEEP 96:3qONk4Qsjpfe/tyng7X5ih/cIPURHl8h4otop5xYDpNBnP9ZvEI0IG2jb00eL0yd:aON86IE7QmiUykpTPuIGmheLNC7sVjU6
TLSH
T19802F935AC787C7B9EF3AD48B4877B236EA5113BE5952F80D9E81A1D00DB24C1306966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c8b46116961f9e0c41d39ae1d1016408b64006d2410fec99582207a43eb70a52
MD5 4b5ab34b2c4063aef742aa1562639f60
SHA1 734df3105834ae95415e07af74ec653c06b3a220
SHA512 993da10ad0e05fde2faa128028cbd5ff45a5193f92ae9f5844c542eb44deed88941b32ea9b32cd16eda44f39d5661fb9f75078937fa9788b7ac63f2316351dae
SSDEEP 384:mZcIusNB+K17s6zIGmhScxaGWiXVc7O6R2FeoUmoI:0uAS869WiXVc7TRYH
TLSH
T168828EB2AC78AC375AB7E085F8463A139DB9905397C95F80E9DC7B1E00DB658130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1aa93507cda2d64379fd0631509347b01a261845b0f9fe9f84536dd9fad2efe2
MD5 9388288c7c2f2ea29ddb833a1e2dff20
SHA1 2a011ed4b7b4bd88b68e97c94c0ed222d53a759c
SHA512 7e7d3d6c0833a365f98ee159aa1db8ac0a4c140256ffe1e56ed8e0448dd94abaf1a44b9d21c0b215bb80bc3d7c0445040a4b20179993d5b237c98d8a7cca3424
SSDEEP 192:aON06IE1QmiUyEpTmuIGmheLcxaFkA27HXg/CcU6:aON06DTlmuIGmhScxaGpHXVcU6
TLSH
T186120976EC78BC7B5EA3A884F4833A235DA55227D7897F80D5DC1A1D01EF25C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e69bbcf5a831f32f37fb444df0ee4d69cec04e846e30930634a2ecaa4b795af0
MD5 e98bb487b8a8e99dc00ff748999541b2
SHA1 db99472282a29941c061b2dc7bbef1d8c94426fd
SHA512 523e24324c2ccf396a8447075c904d96bb2e42f9fcab8e2dee6fa8b77c2850c7cfa9d6d179b13b5d2ccb10268befcd728143fb118f4eccceffe442c3b19d3b23
TLSH
T1C1412798B6FA1008B3B36E569BF6A86D487EB8772F0A944D00110E8F4A23B41CC71737
MD5 SHA1 SHA512 TLSH

Submit Download