2d33787f429787efd217e9ffae602533ef32766736dfdb33dc16acbc045c9ba0

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 07:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2d33787f429787efd217e9ffae602533ef32766736dfdb33dc16acbc045c9ba0.html
Size 112KB
Sample260912-jamp2stwe1
SHA256 2d33787f429787efd217e9ffae602533ef32766736dfdb33dc16acbc045c9ba0
MD5 9d8631767c8681f3365cbf1dc61c11c3
SHA1 c6c837f0cb25bc4e86c1ced33746c0dd0bce1f9e
SHA512 3921bf8024fbbe5b7e3edf286d040b818962b5f6216df139e49534bb3ea6e57a11114f9a369ae6d16a2b179c4cf5e4c1845703ae63be3597977b8b6fd391ea07
SSDEEP 1536:jPxLYn+hj2VMjPRLC1qspljFTtnNooFD2DvqKbEaoJbEaoCMiqTru0l:DnKlvNTD6vqKdoJdoCMiqTru0l
TLSH
T140B3B58751205CF9EFA40DB3469F086B3C2C5437AC5390B9E3ED8F972B56DAE0346269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2624	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338173805755962"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{F6266F7F-9F67-4D41-AF0C-92B7D455A364}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1672 wrote to memory of 4680	1672	msedge.exe	84
PID 1672 wrote to memory of 2624	1672	msedge.exe	85
PID 1672 wrote to memory of 2644	1672	msedge.exe	86
PID 1672 wrote to memory of 2644	1672	msedge.exe	86
PID 1672 wrote to memory of 2644	1672	msedge.exe	86
PID 1672 wrote to memory of 4988	1672	msedge.exe	88
PID 1672 wrote to memory of 4988	1672	msedge.exe	88
PID 1672 wrote to memory of 800	1672	msedge.exe	89
PID 1672 wrote to memory of 1596	1672	msedge.exe	90
PID 1672 wrote to memory of 800	1672	msedge.exe	89
PID 1672 wrote to memory of 800	1672	msedge.exe	89
PID 1672 wrote to memory of 1596	1672	msedge.exe	90
PID 1672 wrote to memory of 1596	1672	msedge.exe	90
PID 1672 wrote to memory of 1612	1672	msedge.exe	91
PID 1672 wrote to memory of 1612	1672	msedge.exe	91
PID 1672 wrote to memory of 1612	1672	msedge.exe	91
PID 1672 wrote to memory of 4616	1672	msedge.exe	92
PID 1672 wrote to memory of 4616	1672	msedge.exe	92
PID 1672 wrote to memory of 4616	1672	msedge.exe	92
PID 1672 wrote to memory of 4852	1672	msedge.exe	97
PID 1672 wrote to memory of 2380	1672	msedge.exe	98
PID 1672 wrote to memory of 4852	1672	msedge.exe	97
PID 1672 wrote to memory of 2380	1672	msedge.exe	98
PID 1672 wrote to memory of 4948	1672	msedge.exe	100
PID 1672 wrote to memory of 2852	1672	msedge.exe	105
PID 1672 wrote to memory of 4780	1672	msedge.exe	106
PID 1672 wrote to memory of 2256	1672	msedge.exe	107
PID 1672 wrote to memory of 4000	1672	msedge.exe	108
PID 1672 wrote to memory of 4000	1672	msedge.exe	108
PID 1672 wrote to memory of 3544	1672	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2d33787f429787efd217e9ffae602533ef32766736dfdb33dc16acbc045c9ba0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffbc930c188,0x7ffbc930c194,0x7ffbc930c1a0
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,7983485178282626824,7114305350018282330,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,15717348698989359128,12676973575207698100,262144 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,17143031795905262382,10005582289535468244,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,3298918372252424847,9211358972828305912,2097152 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8946836171734066100,5346719892972699264,2097152 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,1523032152482433450,8809113505492602465,2097152 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,8165339425545347000,3949241481195888954,2097152 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,4380982436134926490,2997049950715836239,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2504179372063290641,10723238523343905228,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,3830372004439376234,16139189822504086816,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,3830372004439376234,16139189822504086816,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11364733752673616962,7233369711825611175,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,10357830593415926514,11560106920694059651,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,16153646682746386328,17230749201444090562,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,7566150247628030444,1529874401879772290,524288 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,1585297241609510972,8861356233979937851,262144 --field-trial-handle=2392,i,17965578062997079242,5885415158787681512,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3544

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2540

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ac7d28d82751a517ec8ae8e85a217dff3fdfa353ac025f4a4bf76b78831bcd8a
MD5 e9fd921bec18441c90cc52f227f1ed07
SHA1 d70546a40163525361d6086422a4d20aa176f0c1
SHA512 083e3475520214e5d62cd079723c749aed75b787729aa82c2ba2d447457e10741fd4ad98763f5d1185ebb773140d6463f4d10c8443f6bd847e956c5dfe68daf8
TLSH
T1B151A5C027D8A278F79480B086D921B371F885BB3D875F0B00E4F9795A0EB2A5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5929a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5929a6.TMP
Size 2KB
SHA256 4a0f2008dbf7281f8443782d8b12abb3b46419914032b0aabf8060681709c8d4
MD5 48b644067453cfe56977dc08e5198fc7
SHA1 b79d0367dd6dc6e9586f00d580d417572da53670
SHA512 52fec83c5858c85ef2621f1ec2926a59e3a71164e1c2b6424daeaaf4a6e79a24be19818340f2c4eaa013205cc9a6394d22f6dea46aef0e686ef8eba458bd2d92
TLSH
T1A05185C467D8A678F79484B086D921B371F885BB3C875F0B00E8F9795A0EB2A5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5b0d92b5385a1cf189c54ca6411c0a74f3dda992efb7bf5ee8a0d20a088fdd1c
MD5 b12fc44a463513aa50f97ac82cdb728e
SHA1 1a41b050ef56c55af5b00106a44bcdcaac05721b
SHA512 bf18a6ee59b552df1c8f91fba75df4071e1f62c816b5a13180a6961ee2bd2d2990aa9fa99086e18f3643d012652344d8b4313c7d843e26180afdaa1b8d4c9fa3
TLSH
T16E419BB3C3D4866DC91116F09B28AE1ADE2D0A4642283C56C9E4EF5FA3F24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ab80536a6e6f54fa98380574b882ae6055563df25302e9a778acd4f76f332f69
MD5 c29ec02d13aef3ed9c43ca85808c9ba4
SHA1 829165e818c8850beca7b4b6207079f67ef1c647
SHA512 e491657d27061251ac885be7ba174c7c3b0fda445d32370a71b1c364d496aff50f70cc8474d8ba2514f887689ffe98322f0401cf7ddd17cf8676f6a9a78567b8
SSDEEP 192:sxZtlWF/fRs7gIdpdMHW6+WNGYgUaQIgrJ:sxZtMF/fRs7hyHbGo9
TLSH
T19812B7526E28A97B8CCBD20DBB257F53E6FD543251951E48EBFC861C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e2872bf50115e3197d6546e1bc0ad165b9f3734f5c9c58a56ac0a88fe7300d6c
MD5 daaaf72167a94e638ae48d508fdbb31e
SHA1 b039905da377c1358b077af622cde6f8da77d0d2
SHA512 6506d76f54c524fce2c076cc24046312054629750bbfd3bd00c7a183ed45e9ad8ec1a70ecb16568d27a2f0a5c638dfe1bb72cff4e9c161767a1b5a15d06702f1
SSDEEP 192:sxZtlWF/fRssgIdpHMHW6+WNGYg/aQIg5GNJ:sxZtMF/fRsshsHbG9A
TLSH
T10622B852AE28697B8CCBD20DBB157F53E6FD543251951E48EBFCC61C05E6ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 92704f1fcda6cb6924623942b7a837ce67647bfc5e3d1b7e3b3f57a1628b7457
MD5 e292d1ad03cc3db9872df6d24884413b
SHA1 74d5a8a4980a0b8ff8b5a82971d75f3fb024c81a
SHA512 514f2c0d8efc7f41552853b7128134f9d1b35e1a69a946bff9dfd582026dd61ba368cf2da67ec3ee1f4a92d297942370b047f00387f14f37be31c9afec227790
SSDEEP 192:sxZtlWF/fRssgIdpdMHW6+WNGYgAaQIg5GNJ:sxZtMF/fRsshyHbGEA
TLSH
T13922A752AE28697B8CCBD20DBB157F53E6FD543251951E48EBFCCA1C05E6ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f19187a94e07d424bad952e4cbb878ec175ea6331dda24f9c8da430ab8655819
MD5 3e1f8d3c2df127f7174c466b8183c74d
SHA1 008323f7095074d169db053e9f0b625a43d6ee01
SHA512 51cd8f2e11f5a76d638a0ab25124bf9d65d1c72538c3e599b489c62e7ff0fbccc3cee8a089ba9339b3dd741ec798fdb6618b32ae234061551ccb9f2e216a246e
SSDEEP 192:sxZtlWF/fRsjgIdpdMHW6+WNGYgUaQIg5GvJ:sxZtMF/fRsjhyHbGoC
TLSH
T1AE22C752AE28A97B8CCBD20DBB15BF53D6FD543251951E48EBFC861C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 854716489a8e6b5ccad41c86bb460e3d2dbdb8b19ac722e2f308d18cf610353a
MD5 19b0e0d25c6ccaeccd4f590b77f286a1
SHA1 676c1203eee5514497dee5dd6e7212b48a09e9a5
SHA512 74ba8c050788764e702a26c18953dc1e628481b5beb0f6b9513aec09604b2926e5568aa912d193fc683e309a5944198b8c969c9c149e60907f86f737a8142b45
SSDEEP 768:EVichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzXrohGb:EVichfPWvPZplu1jan+LKgzE8b
TLSH
T1BEC2E93B644CCB7E4FC01A5DDD5A6F9B7EA802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 108ad72e768b55d8ebdae0442fb7ac17fe11b2e681f4d0db28d1ffedd5e949dc
MD5 93f96c7a0b37312544fdb62987fdddd9
SHA1 a7cc9097c504e5fe3ab8d5c6440626fafb0f4675
SHA512 9dafc65ae1779dee40ccd5ae886443bb18c2f36cdb5f242ee516e69af1bb3c32cb3d2021d2df3f7fa5b2cc51e30820332739d8ce1c4f1837c5ad4b693cd79aed
SSDEEP 96:KjeX0QeEkxVwFsfIxKn4f+x7WO9IkS60wKVa6sAK9mmeZeK6Mv:ceX0QeEk7wF0Ia4f+tWO9IkSPa3BO
TLSH
T1B4B16010717A020038BD2558E562872E564236B3305CE72FBFBC51E69E6BE091FFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 84c8d0b2da5bbb4f811489655da3968327b5b32b37143626d8b677dc1b450aa6
MD5 0d7bdafcc37557798c02b8a34e57a45f
SHA1 421eeee57657f65e83329d7d967af0be3def9a5b
SHA512 ed53435a76db3eb233cc9ac539eca666ccc119beb63fe84eed2f3d074e3d631fff389e053c985a00972b734f9a6b78d3a0ba9775e9a7e6136bdc94e9d64d6de6
SSDEEP 192:uLzDsNlrQWrPLT1KphvYNlQmiU1ixQ4BGYX59ezXCHjzor4RyOX+eQkH1Lr/5gU8:csNlrvrPl650qfBGYX5EOv8bOX3KU8
TLSH
T1A8321936E978BC3B4DD3A150B44B3613AFA8542B9A882F54D7ED1F1C01DF29C530A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ce4751cfc5e6abbd641dcadd48662509eb71048cd0cc4b0813b9cd4a70844fbc
MD5 2d03f1f234caf6b7fd538d2221fcc1d4
SHA1 b86224105eabb842686b3a3f5a39417af7ee48c2
SHA512 4f19ea9de5970143266d0d5f6d1e3d68ccfe7b30d04bada7e3c444c1108a7fe141f1bd141de343bdae15676472b90605525d769b344e0bbdba63940b8e7e623f
SSDEEP 192:LJONY6DphnqQmiUytA9wGYX59ezXCHjzor4RyOX+emkIILr/5gU6:lONY61kn9wGYX5EOv8bOX9KU6
TLSH
T10112F836E8B8BC6B1DD2A551B44B35139FA8512BEB896F50D7EC2F2C01DF58C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b2ec5d337487b0147216857fb88c18dfbfa5dc023afad9d3ab26d74ae70aad72
MD5 9742bb4d81a9bdbec3b65a1a8ea2b1c1
SHA1 d0499f95b66ab021be2a537c8dfa62a0048ed11b
SHA512 8f066f4e729d03fad0aeb385218958da1631198496bfd0c1a788ef8866f802e7fedcae561b816818ecc72cd4712a236fb2ba7788322700abc2e7a6e14a383765
SSDEEP 384:lZcIJsNlbZvrPl650qfBGYX5EOv8bOX3K7O6R2Feomh7Udo4:dJOdPwzpGYuO2e3K7TRtc7
TLSH
T123828D3298B4AC775DE7A151B54A36139FF8902B9BC96F40D7ED5F2D00DE698030B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6edd952b63bd2fd90a885209d537a5b87e5dd6defbcccec68f52df5cfe191441
MD5 6eaac05b430ef032ada167ab1706b36b
SHA1 f0c323955635558ef6e66bad7ee9b411b950604a
SHA512 8666cba4c65bbee08d5eb5abb4b835df5157cce94035a107b3a5a3dd3ff4352faf22d945377afdca5d7ff5aafdee1e02eea53faf70798cb6425aad8e2f27d66b
SSDEEP 384:3FiZcIVLsN/8TUNTUlIlbZvrPl650qfBGYX5EOv8bOXOK7O6R2Feomh7Udo4:3FQF6wg1dPwzpGYuO2eOK7TRtc7
TLSH
T17EA27E7388B4DC7B6DEB9651F94A36139EF85067CAC9AF50E3DD5F2D009A198030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3f7f46a1c168d0dd1b203a63335c6075bb5d48e38e87277121ea2dcdc3dbd794
MD5 5f0cb69ffd1d0eab9de751cdc3b1282a
SHA1 e7cdc1c714d92cadbfd0c31cf36a6cc91ed1b651
SHA512 2fcbe0815de82a289b7f16343c5522d1847aecd33aeb5d2ab1fc67d471b680835afcbd05973d419365e301e5b595622369bbb98765e7f2eee49ad5b7b76c6312
SSDEEP 192:LJONS6DphmqQmiUy5Aq8wGYX59ezXCHjzor4Rukk7QgU6:lONS619RRwGYX5EOv8RhU6
TLSH
T1E002D735A878BCBB4EE3AE45B54B36139FE8202BAA956F44D6EC1F1C00D764C1306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 677bd7c50c60e18e498d877340abbc28ae20d2d4b86646313a140ddf0183be40
MD5 f27cd22a468c8543cef046868f414f3d
SHA1 ddaf132f6c21621d74bcc1ca5ff78e93d395089e
SHA512 72835400d1fafab6ac6866d241077dfe5709e21302923562d6e57d6e965b7845438abf5fe37ae3c3099fb5cd8e4a5d5abcdf2a1f42a04f0585a756a7f53253ca
SSDEEP 192:uLzDsNlrQWrPLT1KphvYN1QmiU1ixQ4BGYX59ezXCHjzor4RyOX+eQkH1Lr/5gU8:csNlrvrPl65oqfBGYX5EOv8bOX3KU8
TLSH
T14E321A36E978BC3B4DD36150B44B3613AFA8542B9A882F54D7ED1F1C01DF29C530A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0291302-2390-4876-9e53-3786051d2226.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c0291302-2390-4876-9e53-3786051d2226.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8259e95bbec865844a8c0582d9f21564d4eefec5ccdcaad1ea0d00f540fbb752
MD5 220481fec61a5ba708453bc9a4e416fa
SHA1 6d7046d3cc400eccfcda2ddf469aacb6442527fa
SHA512 3791bdc8e3aa1eb241f0845c7a22be49d6e67c91d94c3f8e2152bd082899e4fac37f177e078f5e9d7ffed4b5cd499cfeaf204778a80cc6c2b3b406c5a35821c2
TLSH
T17D41169CBAFA1104B3B36F5AAFF6A86E447A79731E06D55D10010E4E0A22A40D872B37
MD5 SHA1 SHA512 TLSH

Submit Download