46fca352cc497125dafe18f4a1cdbaef0c52d06debdf145417433029911cc9e9

Analysis

max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_46fca352cc497125dafe18f4a1cdbaef0c52d06debdf145417433029911cc9e9.html
Size 4KB
Sample260912-2ej4tsbb27
SHA256 46fca352cc497125dafe18f4a1cdbaef0c52d06debdf145417433029911cc9e9
MD5 3515e42663ea1c345132f3653d02d2f9
SHA1 074280ebc64129c0403f6cb9675cf57f6c9604e2
SHA512 00496ddf495e74db43a78f1b0093361449e82c1ea7b7932aaa5d4920f86d218ace9b1fde260e439e1382f062cb011deca8fa31f1a38f2ae7eee94a254dceb513
SSDEEP 96:nItDJYtoAJS8ffKH1NPIX4rDIcQ0ucq4o5nZak6660S5I7BmaL:IVJYtoA1ffqzr/IcQ0ybQmoaL
TLSH
T16C81F975778670399BE110EA907BAB18753E9214340B8072E7AEFCD13D60A5E8096ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4176	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338316860306213"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{2DDD2465-B1C5-4D8C-888E-B54C52CAA321}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 3872	2160	msedge.exe	86
PID 2160 wrote to memory of 4176	2160	msedge.exe	88
PID 2160 wrote to memory of 4932	2160	msedge.exe	89
PID 2160 wrote to memory of 4932	2160	msedge.exe	89
PID 2160 wrote to memory of 4932	2160	msedge.exe	89
PID 2160 wrote to memory of 2140	2160	msedge.exe	91
PID 2160 wrote to memory of 2140	2160	msedge.exe	91
PID 2160 wrote to memory of 1896	2160	msedge.exe	92
PID 2160 wrote to memory of 2996	2160	msedge.exe	93
PID 2160 wrote to memory of 1896	2160	msedge.exe	92
PID 2160 wrote to memory of 1896	2160	msedge.exe	92
PID 2160 wrote to memory of 2996	2160	msedge.exe	93
PID 2160 wrote to memory of 2996	2160	msedge.exe	93
PID 2160 wrote to memory of 2236	2160	msedge.exe	94
PID 2160 wrote to memory of 3968	2160	msedge.exe	95
PID 2160 wrote to memory of 2236	2160	msedge.exe	94
PID 2160 wrote to memory of 2236	2160	msedge.exe	94
PID 2160 wrote to memory of 3968	2160	msedge.exe	95
PID 2160 wrote to memory of 3968	2160	msedge.exe	95
PID 2160 wrote to memory of 4636	2160	msedge.exe	102
PID 2160 wrote to memory of 3740	2160	msedge.exe	103
PID 2160 wrote to memory of 4636	2160	msedge.exe	102
PID 2160 wrote to memory of 3740	2160	msedge.exe	103
PID 2160 wrote to memory of 3764	2160	msedge.exe	105
PID 2160 wrote to memory of 2344	2160	msedge.exe	114
PID 2160 wrote to memory of 4508	2160	msedge.exe	115
PID 2160 wrote to memory of 408	2160	msedge.exe	116
PID 2160 wrote to memory of 2284	2160	msedge.exe	117
PID 2160 wrote to memory of 2284	2160	msedge.exe	117
PID 2160 wrote to memory of 3384	2160	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_46fca352cc497125dafe18f4a1cdbaef0c52d06debdf145417433029911cc9e9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa124ec188,0x7ffa124ec194,0x7ffa124ec1a0
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,14078203247597525841,14256184264007781770,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1384171734616189733,1078914035695449870,262144 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,3317069978248586848,8379993295338827834,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,15852760343648513596,17971054124669380530,2097152 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,13126596716371869291,17216187557627363048,2097152 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,13883009943513983909,9428190783275055310,2097152 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,12958071121518570959,16986320303076380941,2097152 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,875548595404132551,5914865562024487845,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,10208845000201105602,8154334804104243575,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4155167661568609241,13918445130982180723,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4155167661568609241,13918445130982180723,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,10083359084681451679,7686505388310374652,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,17311513526944865838,7319593469585860059,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,15141418052353258651,11833382968818716590,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,2259512752535605921,14593691293052864241,524288 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,13226425926231787224,4641863778132427332,262144 --field-trial-handle=2260,i,10848443434870621298,7719510500457921204,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 712805a7ddfdf4ff793039e5f3c7527b1b397aef43edcc6567ebc6d37d21f2bb
MD5 ecec80d3f07438973de8ed823969d76e
SHA1 e188d9be2d4ce424aaf76c7abc54212a7fd1e78f
SHA512 2144b949f0ccc5d3c75d8d1a9a8e6ecb7a71563f1893640b6daef17c9753c76f4e8a6ad22458c03f8bdefd55ddccbd36f9403168bfeac0ffdcee48b842a5feaa
TLSH
T166613DC9554080AAF7E84574B5DB0D8F36F4899DD6B31ED20564E634FBCFB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587bb3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587bb3.TMP
Size 3KB
SHA256 f8e2f121d4c365f342f2ad2717d2e1cd9f9b85f57483636a2dcb19a8e95cc2ac
MD5 8488009dfe916db6a1ecfd977427d175
SHA1 2a75b187a1d5919f399854a39dfa6e435db4e62b
SHA512 9deaa4c7a43099a7e07acc6819a0a9eb26a9f5f55bc6a98700a7e3f522a0a6f363f6d78f1896918217e336b3ec8dbe6366dcd583757a41b21d8748b9e3a8ec3b
TLSH
T1D4615EC9994040AAFBE84574B5DB0D8F36F4899DD6B31ED20568E634FBCFB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e003763f498da571e5c2b425b9318eb9371d601ff9b9d81a912c76f6676f4f98
MD5 08689f4a6266d596a88d7dd970d6a2d2
SHA1 8845ce61698c6a184b408f0ac329fdd22801ccf1
SHA512 8cda7b8ab1ceb513895324db569d1398ec32c11fb9cbf2eb6aac0c47c564512e4e599034034ab5ae85bd3ae2c8fdbac6ea615bd3f54b2f0881b6016c42f12d25
TLSH
T18411AFF7C3E585AE891156F05A28AE1BDE2D0506431C7C2AC9E4EF2B93F3075E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 da50a7096896bdcf1e79ee06e636802607e0a8fc86201c644a037acda738f863
MD5 05d1ad9921dac8cfc1c69b578b520ee5
SHA1 9e2265d7644f63c0b4bfb4c8b23c9fb687588f56
SHA512 a7d27300b76e108ba192462b26ece4d0e15e700a362fc6dd650b5cb3129208b32bf86766196091279f5a5b875bfe7297d49ad1bec275d64678f8f7dc396a5578
SSDEEP 192:sxZzR3Wm/f8sp9IdpdDHW6+WNGY3RDoeIgrJ:sxZzkm/f8sp+5HbG+9
TLSH
T16B12A6156E28A57B8CCBE21DBA257F53E6F9403261901E58EAFC961C05F7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b4890e30c3dfbe93906d87ea3f64ca4b35ed9343ed0ff717509028f36058ad2f
MD5 147128ad06f966ca2acb44a5580d5470
SHA1 c199f0f912030db6df34b79a44e86850341c6e0c
SHA512 270dc5ab5bd3c234c1552522f2d26ff43dc802605a3a51f8689820288ef56a3433bc083ca9dd9e1ea4558761e9eac3461ba640c3ce97922b80be2d34c77e6609
SSDEEP 192:sxZzR3Wm/f8sRP9IdpHDHW6+WNGY3FDoeIg5qYJ:sxZzkm/f8s5+jHbGKJ
TLSH
T19122B7566E28697B8CCBE21DFA157F53E6F9403261911E48AAFCDA1C05F7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 667468111b97cf229a403b2d57ae3efe7dc5b2c52ade1fc772bed3ece6f3f2f7
MD5 19893f677a54cd09d71591a8908951c0
SHA1 9515a9b72128dd5b9ee06e3faa6676afe49f2eaa
SHA512 b159c20e96930d2b92ed1a5d21f329987536acef22a1fad16ad1aa1f87d4d1dc31491772536c530a9b1ae965f1d0dcc5712592cbe5fb3243c71686b56f673524
SSDEEP 192:sxZzR3Wm/f8sRF9IdpdDHW6+WNGY3RDoeIg5qyJ:sxZzkm/f8sP+5HbG+X
TLSH
T1EC22A5166E38A57B8CCAE21DFA257F43E6F9403261911E48EAFC961C05F76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 802df46fdad02c0299164297307eaa6915ce66aa3447276de0ff6b487fb59c53
MD5 f7fb043aefa3f4a4d683eef5342354ed
SHA1 e48f25f472f95d08532267b18f496797a11d7442
SHA512 bec1129cf4c4b2464d1b3feaa82dff05a8e1f44feed010ccf3d74012ec7195d074f36a995c875843c4bdb6ca0e4de5ee163162bf2c8f7a1c2706f71267b8ff6f
SSDEEP 192:sxZzR3Wm/f8sRP9IdpdDHW6+WNGY3qDoeIg5qYJ:sxZzkm/f8s5+5HbGZJ
TLSH
T1C722B6556E28697B8CCBE21DFA157F43E6F9403261911E58AAFCDA1C05F7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 607dd372442f2dc83137156a282b782ddb2d9e9c821bd2df78d9afd906505983
MD5 794514332a45fc42a77c7262a9b1fdfe
SHA1 0b2d7a83d9635a47097a907d792e3fa3d44f8ab6
SHA512 5c049d948858dd512cce16bf021df20b7a32db822fcc7b99851e7303a361a312a26f474cb8b365248ce576c10a36052a168d4cf1387ec915ef8587d244cc6988
SSDEEP 768:WG30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72lrolZM/:WG30AbSWvS2l9u1jaLmLZ12ec
TLSH
T12AC2EB3B640CCB7E4FC01A9DDC6AAF9B6E9C02C7A6548D4047FA984C02D77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 87a2b17cf5e9013c686a0181cc4ca328655b155d6dee6227f40fabb30c91bd24
MD5 b81af06330e1c1730cffb62bab959e9a
SHA1 b0770c52bf25bb8bf19c6d50879a252824fd2897
SHA512 0d30fd93f2043b01716001c68dd790470b4ed8f568053f6a662929f05659dac6385e190f182f91f852e6942813e487d50f59ceb6d9e216749cfad6875e03487c
SSDEEP 48:KgJIdK6YQ3yVbIxKM4MYCI/KrqkzyseRqOEoD:KgJSK6YCmbmKM47CgKrqSa
TLSH
T1B2911E1136BA1710397E6A098464872A6642B5B33019F62F7BFD10B79E6BF081DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4fd6110-325e-407f-8216-c85f04d492a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d4fd6110-325e-407f-8216-c85f04d492a6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 346281ae013509dae4b69acc58752a51cb830dc9678a4d00d459a5663afd325a
MD5 44e97a039ea2fd910461130456a3c83f
SHA1 9336ac295f72c9f41c066d9c3285530ef119164c
SHA512 9dbd788328e94f2c2f69c0a5991cf7352f39f1c91f31d2915a6b2d3e21494c897c501db9c9a076824f6b70a19e19321ade31f2e16781d166b7bfa7c52653fe1a
SSDEEP 384:3ZcIDsNgZovpuseu9iX5F8+RM2YoWi7O6R2FeoAh7Ugoy:/DyvCaagWei7TRPVR
TLSH
T195827D365C745C3B49F7E291F40B36139EB890A79BC91F80D9EDAB2E05EA5D40317D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 600b7c3815b7307f59f02379dff3ee16731a010d057e0c158cd1c9d66025bf3e
MD5 3aa22af3c3fc1eb165610599e58bf9e0
SHA1 40c625947b0a3fe42ad2116c402d12de04cc8618
SHA512 9453ac0cbf6d1bcccf5f0dcdede9f54ffb79e45e26198ba686983fbe31ad61fb83744d3d2ab2b7a465e63ca11c01d69f262570b33aaf6a7ed0ce0dc8f1702809
SSDEEP 192:LONy6AmwprQmiUysgf6siX5F7Y+DJJineNU6:LONy6ipde6siX5F8+SeNU6
TLSH
T16102F935AC686C7B89F2AE55B58B37239FA5116BEA942F84C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d3c9f923df6a1d042eb6b3dc62ef419f5f9dbf47a93cfe55c34029a7ee7c7a32
MD5 f9b72bb34c9405923095089a3f8f392d
SHA1 2fb822b5d0abe33a9bb6798970a22fd720e01bd0
SHA512 c8c869b11167343c2b9ecae51d165a682f7ea9b99c0f8f55b64fa40ce61903a087617f58af58c0d231d1855b58240a3bcb7a4934fff4ce4f86fdce2de1483f60
SSDEEP 384:UZcIDsNgAovpu2eu9iX5F8+RM2YoWi7O6R2FeoAh7Ugoy:SDPv4aagWei7TRPVR
TLSH
T131828D365C746C3B49F7E291F50A36139EF890A79BC91F80D9ECAB2E05EA5940317D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8009a2928720e5a9197e1963a15d92b3e36b94312a3c6547ec66d9f21d682d71
MD5 1ffd9a3bd5b256e898c91bfd617faf41
SHA1 5960a16fca08cdad27ef4c0e147cf01ca94ac5d3
SHA512 3c3752d7e22212a9e13f05a9243725e8959d428657a449290860b3ce87d85b812fac615c1d9f1f51906ae51241f2c4b23da0b9c83465e988987da5e7dedb49c1
SSDEEP 384:viFiZcIRdsNg8TUNTUlIlAovpu2eu9iX5F8+RM2YoUi7O6R2FeoAh7Ugoy:6FQD1wgBv4aagWsi7TRPVR
TLSH
T145A26D335CA49C3F9DBAAB95F50A32139EF940A7CAC56F90D6DC9B2E01A75D80307D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7443cf9fa387cc85006c6edac87e953f3e2d69e7b500ba57317e44b61e1d3bd2
MD5 4a938cba23389fa6d7c7282da160265c
SHA1 0f41803bfce73be420711574426c9a19d55c18af
SHA512 584a23e1b3c7bc05271cebb668856dbe7af3cfc6075bb44d2e5ace4f9eff452a481a1e87429be95f36e7303007d30c7b735733dfc1bd456d301aba03f284fee5
SSDEEP 192:LONB6AmwpFQmiUys/fKsiX5F7Y+DFM2Pwo2lRs//U6:LONB6ipjBKsiX5F8+RM2YoUiU6
TLSH
T1A9122C35A8646C7F4DE3A591F04736239EA4516BEF886F94C9EC2B2C02EF59C4707D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8faa5b9eea1fe4809089d8974bbf2776cbb6a7bed944823b0b79d2d8e29e04e5
MD5 a9befa3b252f7ed17fc0092f562477a5
SHA1 1a68569ca8b817681f00e2da8040ae27304b7521
SHA512 4b524fcc939b31bac5bb85dbac45603416161e8b5bdd693c494d57f8f3db0e4e918f943c5e7e89e9d3be5431bd31d046d5f13c3650389054a65dc41b0dee98fa
TLSH
T1B7411A58B7F91158B3B76F169BF6A86D887B7D672E07D49D00110E4F0A63A40C8A1733
MD5 SHA1 SHA512 TLSH

Submit Download