dc646d3b3a707f163631de0c33257ffa984de03a0fe7f98d8ae5ce6937cc2d4a

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_dc646d3b3a707f163631de0c33257ffa984de03a0fe7f98d8ae5ce6937cc2d4a.html
Size 110KB
Sample260912-p65hmacb78
SHA256 dc646d3b3a707f163631de0c33257ffa984de03a0fe7f98d8ae5ce6937cc2d4a
MD5 3b0746902bd4a56199d968a4b9f90fab
SHA1 91f3451c618addb2c2a89f69881492f399e0e019
SHA512 9fcbf3d8f9794d79b63d9fe3904141b3db6949de131e0e443b8771c810790225006094a3cb3490a356b564b4a3f055186ebf64083add23eec927d42a03325977
SSDEEP 1536:imx1Yn+hS1s4RY9XoWzGYXbHWlfQ6TtDNoGxUSHHbEaoXbEaofVVCObAXK:7NkQqN8SHdoXdofVQFK
TLSH
T11EB3B48741204CFAEFA04DB3459F486B3D2C5437AC4791B9E3FD8F972B5296E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4708	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338337457220306"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{43D8CBDF-7A8E-41B2-9580-74C2C9E46B74}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
232	msedge.exe
232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5028 wrote to memory of 1772	5028	msedge.exe	85
PID 5028 wrote to memory of 4708	5028	msedge.exe	86
PID 5028 wrote to memory of 2312	5028	msedge.exe	87
PID 5028 wrote to memory of 2312	5028	msedge.exe	87
PID 5028 wrote to memory of 2312	5028	msedge.exe	87
PID 5028 wrote to memory of 3264	5028	msedge.exe	88
PID 5028 wrote to memory of 3264	5028	msedge.exe	88
PID 5028 wrote to memory of 4864	5028	msedge.exe	90
PID 5028 wrote to memory of 4864	5028	msedge.exe	90
PID 5028 wrote to memory of 4864	5028	msedge.exe	90
PID 5028 wrote to memory of 4904	5028	msedge.exe	91
PID 5028 wrote to memory of 4904	5028	msedge.exe	91
PID 5028 wrote to memory of 4904	5028	msedge.exe	91
PID 5028 wrote to memory of 4012	5028	msedge.exe	92
PID 5028 wrote to memory of 860	5028	msedge.exe	93
PID 5028 wrote to memory of 4012	5028	msedge.exe	92
PID 5028 wrote to memory of 4012	5028	msedge.exe	92
PID 5028 wrote to memory of 860	5028	msedge.exe	93
PID 5028 wrote to memory of 860	5028	msedge.exe	93
PID 5028 wrote to memory of 4968	5028	msedge.exe	97
PID 5028 wrote to memory of 4968	5028	msedge.exe	97
PID 5028 wrote to memory of 2452	5028	msedge.exe	98
PID 5028 wrote to memory of 2452	5028	msedge.exe	98
PID 5028 wrote to memory of 3048	5028	msedge.exe	100
PID 5028 wrote to memory of 2948	5028	msedge.exe	105
PID 5028 wrote to memory of 4132	5028	msedge.exe	106
PID 5028 wrote to memory of 4948	5028	msedge.exe	107
PID 5028 wrote to memory of 2348	5028	msedge.exe	108
PID 5028 wrote to memory of 2348	5028	msedge.exe	108
PID 5028 wrote to memory of 3412	5028	msedge.exe	109
PID 5028 wrote to memory of 3412	5028	msedge.exe	109
PID 5028 wrote to memory of 232	5028	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_dc646d3b3a707f163631de0c33257ffa984de03a0fe7f98d8ae5ce6937cc2d4a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb74ebc188,0x7ffb74ebc194,0x7ffb74ebc1a0
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,5084064761136852765,1317050148119805758,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,17106420011216302701,709538784411612163,262144 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,17770219456831925758,15421693125090311726,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,1355924959461012812,4979958895098098475,2097152 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,8826329792774810217,10994226124150900933,2097152 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,13981615582493793251,9584466690867453184,2097152 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,12234408927599955488,267112215712061436,2097152 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,527881545531804394,12308123099492759373,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,15030887492633008314,9714891630419640063,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,18017002193983620509,17319714033170413960,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,18017002193983620509,17319714033170413960,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,5019192350635199754,13451138416894874778,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,10279440398963714826,12924402177359704384,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,11765761450096026668,17677776570023489760,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,15875566325423210596,8300474668413355207,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7399316440472125981,15024385489494303097,524288 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5148,i,12042357749467354131,4072055044255286696,262144 --field-trial-handle=2192,i,5011479254897636266,2930658642256381958,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:232

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b65845efd78cc93410d2ea57b91243b511dd873e68711687daec8ae8fc9b1121
MD5 457bb2b967de29c2f8ac15d9fb77308e
SHA1 a82aa6c7db256f3f43f6d8da2593530f1399a552
SHA512 9ee59d5e91837bf7c2888cf8b7e70ad76bcd3a29b7f58f67601f126f0b63cd024da4217739c2e227f98ee94d8f3f889551fab48c9d01c2bf187e57642c721674
TLSH
T1A4519481D3924598F7E6A470D2ECD5A7B6BC4483E983DE4AC5F4F6BEDA0A3806025340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5907c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5907c6.TMP
Size 2KB
SHA256 dfd7db7a8ca2f3c915b9147b38228329d6b7ea3876e2b5fe08f127b1761a7b8c
MD5 715082d63f7da9da52388c5447e17c41
SHA1 bfb9c5a40fb5fe16672d503af011eb9cfbcb0778
SHA512 cde428c4d7b6d428be68f2080bd5d0a01d0867628fd40ebf26fd4d9824e4ce3017a98afa8bc18c6c4fc1facc306b06e00b1ef9ecb4911c309eac4c3ce592faed
TLSH
T1B1519481D3924598F7E6A470D2ECD1A7B6BC44C3E983DE4AC5F5F6FEDA0A3806024340
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 400cd2715618dedd3c213410c8acfce15cf972d4503979f16d411cabb4351668
MD5 1d87bb57c8bef2d09c254ccb951ea7f7
SHA1 e6fc5153cb2078cc2722af888a8d97f8c5bbdc9d
SHA512 13e72cdc05f2368e7384c4411cd024081da00541e1296de74418489bada2c4cfac6c1268a73d65c193b4eba5139bab2f7907e830bc027467e7474e8bf109eb37
TLSH
T1B341BCB3C3D8867E890156F0AB246E2BDE2D0A06426C3C16C9E4EF1F63F24B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 78a136c5f2a35f9929f90cdddbcfdea8d8bd02f0651239794d13df31a7c713e9
MD5 77510385e20cf854c63dc57590e6973c
SHA1 da4216c8a0ea386f239771d8653a56995308eb77
SHA512 de351b7dd2597e826f5b5f820109768dcbd7ded198a2b15136e7f8a12daa225882e36745ac643e6962ac62e346b299f010f203934a0863a1a3a51d4c05ffd036
SSDEEP 192:sxZARBW6/fUs6EHIdpdlHW6+WNGYrbV+IIgrJ:sxZAW6/fUs6EIbHbGwz9
TLSH
T1B612A8566E38A97B8CC7D20DBB15BF53D6F9503261941E58EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 108f5a24dafae8220d92d997ee74c6156d7ae9e0b0d145d22365217af00e6d0b
MD5 fd68944e20ccfe8b4ccaeab25af03510
SHA1 ec08363ff8cb78c123af13192c01a211185e1ecc
SHA512 1c37ffc57ef984b9b560efd8b73850a454be0d980def6e5cf3cae061875bb324774198fe6eb4b36b62db6a1fe171c701f049123c13dbdb07f240e958df629124
SSDEEP 192:sxZARBW6/fUsZ9EHIdpdlHW6+WNGYrbV+IIg5xJ:sxZAW6/fUsZ9EIbHbGwz9
TLSH
T13322A8566E38A97B8CCBD20DBB15BF53D6F9503261941E58EAFC861C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 03dd9feb493909db3d6a8e5f4119b70517262172cfc954d10129b77c3b463de0
MD5 c0a04c92a14b3ba79448803b8ff887d7
SHA1 3c5972c3982b236641eaf6351ad2c975260a571f
SHA512 7a724ffc7cae74c7ad635587dcea8d197a4ac686b3c3154ff1d02beaf546978937e4e6446c1369ecf040fbc509e8810479c5c8af73e5b7541d6b22048cf57ad9
SSDEEP 192:sxZARBW6/fUsZ9bHIdpHlHW6+WNGYrGV+IIg5rJ:sxZAW6/fUsZ9bIFHbG3zz
TLSH
T1EE22B9566E28697B8CCBD20DBB15BF53D6F9503261941F58EAFCC61C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a35ded8f49bf217239b3a630bab12f04ea38d9a7c5574a6dc83d368dfe8b073a
MD5 1bb670f75946192e2b565b7fbc9d794e
SHA1 cf9fe1d49f0cf8fa01755e3f197dbef7d22ad678
SHA512 987827cc12742514de65b73a79b2093789928ef49f1295a01abca3f33471bb77b7dc44b5ea8046d8e5320ee4d3506b98dc81c93e43da1254cce2eb591c9a27bf
SSDEEP 192:sxZARBW6/fUsZ9bHIdpdlHW6+WNGYrnV+IIg5rJ:sxZAW6/fUsZ9bIbHbGKzz
TLSH
T1C922B9566E28A97B8CCBD20DBB157F53E6F9503261941E58EAFCC61C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 22d94d662e6de75fa2877f1d6bc9f72a5d92e16549dd5293ef42645d8b23ae83
MD5 f85b660fb68f261d2674029c269c5037
SHA1 5045650b4c1c1d0141a5c6e139c25cfcd375d79f
SHA512 b8c56557bde8434fd583a203793ad9144d7cc52bd2363984a3fc83882c66ed095a2f1c4eebf76b539f933ff9ff8aff72f35cf5a3b01f1cd532f974dea4b5a53e
SSDEEP 768:why4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbKroR3y:why4J/DWvbtBhu1jajiLm0bhVy
TLSH
T1E0C2FA3B644CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 73be4e8cdf4ab7814d4fa5579033237afc928c108bf1a6ecdffc68e24aaac542
MD5 b32e6be33c098dcb3c5d25bf67f0d3e9
SHA1 cbffd4e331db6e3fa4c7cfb07a842733722c5096
SHA512 b91b71cb35827a0ca27377074399d9e4ad686505a4a54788b225b4735623d500665d498caaa28773d09570ea2a0b1d218ef55128ad13d4ee0586697db0259596
SSDEEP 48:KIDI1Ks04jyLaFoUaYoZbED0ISMZK9w1qZxCJY7coqyLQ5QIQVQpQzQ3QLQkbQ3A:KIDCKs0+eZeKCMKGn2KY/Az
TLSH
T10591DC4432BF020139BD2988C1B6871F12413677715DEA2B7FBD40A59A6FE082EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc6de016-8fbd-456e-abb1-8d439f22a488.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fc6de016-8fbd-456e-abb1-8d439f22a488.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 9735923ab0a115d771867c2f821d1afa60a0d822cfc4f3e67e744f41483a5d36
MD5 44f8e8e4f47fd8da34db5037359ae407
SHA1 1b71077944f8f28babda1747998aa43ed5f14abf
SHA512 ea8053f56b529571259daea08eec95077a1617474cc45c72d5068a3eedd6f85f12b717ffa109218d65420bc301756cdac6b391bf3491d29326bda7940eb53491
SSDEEP 192:uAH8BsN6UdIQiIqulDZEFQmiU10YPw4HX58gZ0jzorTJrXHNxUP7/MznmyiXI:6sN6UOr3+ZeeY/HX58Ek8TJrXtcQKFXI
TLSH
T112524A3AA878AD3B5DE7A185F1063603AFB54067D7882F44DAEC5B1D01DE69C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 182ba8c8f8f1133f97e610e79d744c3f65e6698ead84da7c83c3968ec0bd984f
MD5 cec3d74ccaeb9419d1d67eafa68f1f9d
SHA1 9ca7261488fb74261748f2ebfc5a69d44c599f2d
SHA512 c5b26dac5d42fb4c9f0b19b711810d3bcc08b9bf1b1c43cabe03a508bbe8cbfbd3b8a3fa1820f7ea6070c8990ba3d29bb41427cdbea26d1e0fe4134708648b07
SSDEEP 192:uAH8BsN6UdIQiIqulDZEvQmiU10YPw4HX58gZ0jzorTJrXHNxUP7/MznmyiXI:6sN6UOr3+Z0eY/HX58Ek8TJrXtcQKFXI
TLSH
T156524A3AA878AC3B5DE7A285F1063603AFB54067D7882F44DAEC5B1D01DE69C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5baddfd51bd08bc98cfe366f6282208520203d852176da85ee702b14bfdd0742
MD5 a17c8b7612ac39aa2abb60d029863503
SHA1 205043537df8ee8a4397074fdd2b96d3712d88f3
SHA512 815c37ef7abd2f784d971212ebae5455db9aa14b8e154b959d122390ea1ace2ec57494557181c7d57f24952b7822879ecc501b3197e99fa7ebbee1567a6d5153
SSDEEP 384:VZcInsN6U1r3+ZeeY/HX58Ek8TJrXtcQ7O6R2Feouh7UPo3:tnA3+jYvaciQ7TRZas
TLSH
T1CD828D36A878AD375DF7E185B44A36039EF9806397C96F40D6EC5B1E00CEA98130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 459e728d469368a37c3d9b6a16a210fe7ee7625d38b50cd57dba26af2b93c73c
MD5 73159ee0bc2cb429c9374e3f00e262c2
SHA1 24ff0dcab15722ef077154f0dc39b1600ae5acf5
SHA512 7912a829a39edd5fb965380eed379287dc9c5acf5010e3d215d7ed3c33c01e730eaa68b081272adbaa6b30f630fa3b46074247fa07bd2db63a52212d1f79c2c2
SSDEEP 192:1ONE6wlDgQmiUyhzW4X58gZ0jzorTJfDlUjU6:1ONE6kg6W4X58Ek8TJJGU6
TLSH
T1C102E939E9687C7B8EF2AD09F48727139FE5116BE6552F44CAE81B1D00DB65C1306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 9b14ebd15d35d5e1a5e74a72fd9bf56568cf748e42a361ae69eb77a4570c9a44
MD5 bc082936acc23572b3ce716f62cdd51a
SHA1 de1007884d6d38e585c87917fbc1b37632fce36e
SHA512 cea5cd6d4cc559338f09aeadcb8a110c3f3dbe2aa8369754a38c1d6a6f512c80a449f66ff15230c131bd0bd50cc92140152ef4261b1be5e581f66e6a08d1bcb9
SSDEEP 384:OsN6U7r3+ZeeY/HX58Ek8TJrXtcQ7O6R2Feouh7UD:Oi3+jYvaciQ7TRZm
TLSH
T1E2625B36A878AD374EE7A145B00A3613AEF9506797892F51D7EC5F1E00CE698130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b8feb02c569f76cde8f94ea1f018fc948f75f0669644f782bf7875be530b8b2b
MD5 6533f4090c538f1d1e5fc963bb3dbab8
SHA1 bc5b76614075a87e63792458729f25da42bded99
SHA512 c3d92f3c3fc7bf14825d0bba709f4cec7c435a2964454b2cb291722178276ad4f984c9f28162e61d52edcdcd92dda97896c7fe080d91169c3e7f36fbbd6c197d
SSDEEP 384:5iFiZcIpJsNf8TUNTUlIl1r3+ZeeY/HX58Ek8TJrXt6Q7O6R2Feouh7UPo3:QFQvKwgz3+jYvacsQ7TRZas
TLSH
T148A27E7398A8DD3BADFBD685F54A32039EF940A3D685AF50E7DC5F1E009A598030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ef91423ad9a651949952986395f10056e50ea1f2fbabfd491991222710c23e31
MD5 137347c0f0183f157aa5f1aaca1a7487
SHA1 75176a30150e9bbcc955ed8b50fcf46d505933a2
SHA512 4c83dae6f45b8faed4c2c97cb6e360707344809802634f6def25ebdc81d2f09e0dab0b13c90cc5a1d43351d272d171e8f3ebb409d3da8e130e9b09a55e007da9
SSDEEP 192:1ONI6wlDiQmiUyIxzd4X58gZ0jzorTJrXHNwve7/MU6:1ONI6keX9d4X58Ek8TJrXtLQU6
TLSH
T194121936E578AC3B5EE3A545B0873103AFA54127EA896F90D6EC1B1D01DE65C530EC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cb1ab1a-67ab-413b-8958-9f8ce95f5db3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0cb1ab1a-67ab-413b-8958-9f8ce95f5db3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8e74e888e2947a5423a629568d543664cc96e49bf89e4b9495a7e8adc6d5959e
MD5 56dfcef55e639b679163ddb0f7684126
SHA1 d030d73f3547edd0719941d15c8b5a524bf538f7
SHA512 900da8dda413eea688a5af037843bafa97b3db0589d95e5cc370d27b45ee1c60d2f2a78af165cdb977078df6c0d5f779c5488c68d9a59eff2de651330ebf01c4
TLSH
T13C412758AAED0148B3B66F57AFF3A86D487FBC772E06D59E10010E4E4A22A00C861737
MD5 SHA1 SHA512 TLSH

Submit Download