4d25331dac420d13932d993d0f899b33da00ac5f0518fad70c9168606465d98e

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4d25331dac420d13932d993d0f899b33da00ac5f0518fad70c9168606465d98e.html
Size 72KB
Sample260912-tlcpbsbq21
SHA256 4d25331dac420d13932d993d0f899b33da00ac5f0518fad70c9168606465d98e
MD5 0be69da14042bb02bbaef691b440f607
SHA1 59a372d3ee00017e3db4921cbb46bb3524365ce3
SHA512 7548ae718ecf4a29c5df58f394a7ce7e4ae61565fe0196ecc0cee998108dd0a140ce0ea64f6b8023eb01bda1470ff9a47aa32c893e5907cc1f91ba841b8dba71
SSDEEP 1536:qdwwdm9w3uGbFRJWZ8T7OWfQ9QSgiiuLtsA7J61:qN+aQjgiiuq1
TLSH
T1CB73941A02100CBAEE1715E2A4549B5E3F6E133BB0072179E3FC1FA73BDADD9451A16B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3820	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338244398992378"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{45DF7847-D5DA-4487-9A76-2C519343E018}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3324 wrote to memory of 3476	3324	msedge.exe	86
PID 3324 wrote to memory of 3820	3324	msedge.exe	87
PID 3324 wrote to memory of 3740	3324	msedge.exe	88
PID 3324 wrote to memory of 3740	3324	msedge.exe	88
PID 3324 wrote to memory of 3740	3324	msedge.exe	88
PID 3324 wrote to memory of 4796	3324	msedge.exe	89
PID 3324 wrote to memory of 4796	3324	msedge.exe	89
PID 3324 wrote to memory of 2408	3324	msedge.exe	91
PID 3324 wrote to memory of 3440	3324	msedge.exe	92
PID 3324 wrote to memory of 2408	3324	msedge.exe	91
PID 3324 wrote to memory of 2408	3324	msedge.exe	91
PID 3324 wrote to memory of 3440	3324	msedge.exe	92
PID 3324 wrote to memory of 3440	3324	msedge.exe	92
PID 3324 wrote to memory of 3680	3324	msedge.exe	93
PID 3324 wrote to memory of 3012	3324	msedge.exe	94
PID 3324 wrote to memory of 3680	3324	msedge.exe	93
PID 3324 wrote to memory of 3680	3324	msedge.exe	93
PID 3324 wrote to memory of 3012	3324	msedge.exe	94
PID 3324 wrote to memory of 3012	3324	msedge.exe	94
PID 3324 wrote to memory of 3448	3324	msedge.exe	99
PID 3324 wrote to memory of 3448	3324	msedge.exe	99
PID 3324 wrote to memory of 4324	3324	msedge.exe	100
PID 3324 wrote to memory of 4324	3324	msedge.exe	100
PID 3324 wrote to memory of 1064	3324	msedge.exe	104
PID 3324 wrote to memory of 4064	3324	msedge.exe	110
PID 3324 wrote to memory of 2836	3324	msedge.exe	111
PID 3324 wrote to memory of 3172	3324	msedge.exe	112
PID 3324 wrote to memory of 3472	3324	msedge.exe	113
PID 3324 wrote to memory of 3472	3324	msedge.exe	113
PID 3324 wrote to memory of 2324	3324	msedge.exe	114
PID 3324 wrote to memory of 2324	3324	msedge.exe	114
PID 3324 wrote to memory of 1832	3324	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4d25331dac420d13932d993d0f899b33da00ac5f0518fad70c9168606465d98e.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb4560c188,0x7ffb4560c194,0x7ffb4560c1a0
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,9118890732584018800,16870082061324760736,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,6859093670228463206,2281447845755470119,262144 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,13695600072662452726,11524898492600783729,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,8035760603951378970,7769747186157328613,2097152 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,694225250681908581,12560156540977856179,2097152 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,6542721112494071342,10307695349125071013,2097152 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,9648589050874331757,13512815052162795012,2097152 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,1243534777010028775,5880010325823387878,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,369971655512544009,14057615206435955269,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,11563591960132086960,5939201797272989096,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,11563591960132086960,5939201797272989096,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,9383888355062445382,6707145153486659375,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,13109360188616713952,1140551243031792107,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,7553471633228982449,13053190969883460295,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,15139113224145470440,6771339999194646195,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9386108677316197966,2181932763264096683,524288 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,10651973034645180369,9424681091003169974,262144 --field-trial-handle=2256,i,6071689433900603864,17897746454530399872,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1832

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 08e15bd56fddaab9c9d787bacf37fdcdea542ec2d83c552d7de0674f15b2e57f
MD5 5ba26a5073e29e5b9fb0da4ab92c23bc
SHA1 589a079c536bc392cfd76233c419e0b1887424c2
SHA512 2ef31d96ca89088ee3f117d03f3ccac16da1e73f6fb2f92e742cf040b2f01b78652746e4e93ac994c94b736758cfad64f9bfa03839e326668014a3af2ab0f0fc
TLSH
T103510DC256916895F3A810F2D1EF138335BD85A25A477E431398C8FC59C7B1F819C25F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cf80.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58cf80.TMP
Size 2KB
SHA256 bfcdc55dd3328f11a741f8072162abfd559c59b65fc94fb1dc1997e604acff52
MD5 e14bb5fd30ee6e8de5377a0124285dbb
SHA1 7723e6f71e073bdd93351dcd93bc9aeeb4f5ba9e
SHA512 052a865a8188d3c371f3645cca2fcf759d72805bfdfcb321678b991982e4c6b5fa1dd2ebbabcfe1a2ac71961ce37da206819b537d720b31c900e78912a83864e
TLSH
T1F0510CC25691A895F3A810F2D1EF138736BD85A25A867E831398C8FC48C7B1F819C25F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 016fc411fa8bd0f3609b7abff5b6265d0e73832de6909322032c171c11aab163
MD5 069b2453cb50bec9a91fb5fa08fe7359
SHA1 9e54d0a87532abb8918df66bb1d67e4fa496be83
SHA512 8a88dc0357c8103e556f30787eaa15ab721c3a5107eb1a08a0ba32de7df352fd98edec95d8f6490c118213a939fd9d0ef41e1afa4fd1f3296bb8578d84f3b253
TLSH
T1CB41BFB7C3D4837ED80256F05B257E26DD1E095A42283C1AC8E9EF9F63E24B1D20265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d5fe6e0ca584564a5735ad7dd5e1bd10e090ca7dfc990f32009231b85107d980
MD5 181edccb8cc2d20b3b3fd309d5130354
SHA1 e6fe6706ac25776c267d4b6c5673e35032d89b21
SHA512 3f4c14c5101866c2571b33d78ebd273fdcf164de0d4dfac2f40cfa4c131c3cddec293d5eb764e1d815d8867d5008c67b89cd6f4e10e84af85d3608bd803c75f9
SSDEEP 192:sxZJRCW8/f1s2dPIdpdOHW6+WNGYYBaSbsEIgrJ:sxZJ78/f1s8goHbGfB9
TLSH
T1E722A6116E38A57B8CCBD209BB15BF53E6F9503251D51E58AAFC8A2C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3f8618f56bd2ac4305b8e38e123d902edc6d6861a2357e1d8fb34d80ed0a6b53
MD5 441e2d9ff3f22d5e13b1d984fec9012b
SHA1 e4b11cfcf2bf8f46567dec630b29ba80d803e91f
SHA512 bea77b173f7869139238fe2559c883c5d989b1ae907e3ef29df0ea232acd539ed7af59958d470ab6fc5e53ddfb599046f4c2797e6daf632a22e61f0914d3e190
SSDEEP 192:sxZJRCW8/f1sNdPIdpdOHW6+WNGYYBbSbsEIg5WJ:sxZJ78/f1s/goHbGfCQ
TLSH
T1B022B7116E38657B8CCBE209BB55BF53E6F9503251D51E48AAFCCA2C04E76CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ad4f25dbb7827d32ffbaba400c4bbb04ad9f90a6de19289cddc3f69629625417
MD5 53e4a38b67797ec37ca35170e113d358
SHA1 1281df88bf7af9ec14b832f4ea06fad2e3b5506b
SHA512 825a16cdc71e4225b616ddf8ccd8df912dbc21e563f4444d4ca752f6601fd1aafa545f1e885c3e18518816486dbf84e7dc8ed81ed5826e296ed9493e06292b49
SSDEEP 192:sxZJRCW8/f1sNdPIdpHOHW6+WNGYYBTSbsEIg5WJ:sxZJ78/f1s/guHbGfKQ
TLSH
T10C22B8126E38657B8CCBE21DBB55BF53E6F9503251D11E48AAFCCA2C05E76CD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4e971c53ef0c0ced1162a99fbe131075d51bb80b8d37bf9d384e1849c9289e73
MD5 8ae8aba283f849b851362f27553091f2
SHA1 08d7aafd2df66317c3f057469ef716159d89f7a8
SHA512 6e2188a820ad4e659c4e604d0ba2751cf55c61f299430ac35576953abaf84d3c6641e4535976fcc1ffd3a37081780408886ca1072892323fa4913871d2d8a5e7
SSDEEP 192:sxZJRCW8/f1szdPIdpdOHW6+WNGYYBaSbsEIg50J:sxZJ78/f1sZgoHbGfBS
TLSH
T1EA22B7116E38657B8CCBD21DBB55BF53E6F9503251D51E58AAFC8A2C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d00bb00bab0d503a3b20353860c362060bcab1d345f27f4b12300e099bb2151a
MD5 8ab3950b584bf1a5df095b9ef2530921
SHA1 a01b1f28d93dbe0e908b2abdcb32b0511f97a61a
SHA512 585aa224c76170270bf4b5074d4ed53368447083413506618baed702a4a5cdce317f93936c85b5489c5e79c27ff7a9fcdead4f2d353d8073d364bbe897bda64d
SSDEEP 768:fUyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXIropaDb:fUyYR7jWv3NpBu1ja/CL8OXza
TLSH
T133C2E93B640DCB7E4FC01A9DDC5A6F973E9802C7A654894047FA994C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f39afb4ec201f194076067cd76bcd2923f8f2dafcfd066250833bf5a088d90b6
MD5 7980a86e06e4c2becd6460790a47a0b9
SHA1 8a4cbc81bc21364b3ea2c9fcef38383892e35cd5
SHA512 44f7d33467aeac2d6fafa801c8492c75caad324a3a635a41ebc07a52f34b42d28cc74a4a84f4d09b9ffd1edbbeecc87a2a30cf80565500fecb7ab68bde6edaf9
SSDEEP 48:KgFk51Hznob7+7ISNoK9t1foxt4Yuf1lyLuJkomscVbgnoISAVK9k12VxOFYfgcr:KY+4K/K6ud2K2U6uTyK4o64xUYR
TLSH
T15A91A01375B7430039BE258890B497AA464231F37014EA2EBFBD09E58D6EE185FFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3a8230e13a039f270839eb83ae6cf5666e9cf7ce3b8abe53c0343d5e1238ce74
MD5 009502208be9f616b6c8db93bf83494e
SHA1 a2dd22d211640746cb4aa65ef02f557b80b3b9f9
SHA512 5c6c46626643a3a0c4d779b7031f68de9b92fd4c1974871f82c04815b439df3729d8c0c133e19b63b92384f1f917ca77ee9723e5b17cfd91a4ec7aaaca8fa5b5
SSDEEP 384:MqZcIW4WAsNqpZhLi5tkQX5+Dt68xXuzMd7O6R2FeoDh7UIoZ:HZ7pdMPkDHgMd7TRmt+
TLSH
T159928E31ACB8AC375DF6E185B5463213EEF8506796C95F80D6EC6F2D00DA699130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 188574b891a3bd88d45777f224cd142e1942d2c08d8f425ac87a1c274f55e126
MD5 c9a4dd156e6f08e1b50cdd725fbfe7ae
SHA1 64f33cac96438a03a668ec25f6f3b04fa115ec32
SHA512 b8503438a346935139efa14e0a50cc08fb8afe401991af3506f9ac87775a3ce4da0e0122126e6c66cd65f47dac66c168b2a6e479429ae8a3c7d3c786f60d3690
SSDEEP 192:EONs6nnHGQmiUyIUQYcX5hQDP12jzor21mfMcv0U6:EONs6nCQQNX5+Dt68DsU6
TLSH
T1C002CA34ACB87C7B9AF3AD49B4862713AF95213B95952BC4DAE81E1D00D765C2306933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3f31acb21ea766d1563388d30132f513fbe8419bafb48e2542fd8330f3fe14e3
MD5 cc862f86eba06ec2b91894b70cd351b0
SHA1 39c053afce17a750100a91e9eaf05ffd39c1b221
SHA512 2eca43c3e77772950f6ce9ef26ee51cd84b0448f83980326d144800b73ed241ba26add2827ef5120e173ecb78748826124bb83f1b3c9df4fbfe94f698366276b
SSDEEP 384:7ZcIyWAsNqpZhLi5tkQX5+Dt68xXuzMd7O6R2FeoDh7UIoZ:jy7pdMPkDHcMd7TRmt+
TLSH
T1BB828E315CB8AC775DF6E185B4463613AFF8506796C91F80D6ECAF2D00DABA9130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 829d6754ac2ea429d998e4846b4eade44bf5f8ef0a8a41203e5def8015328e82
MD5 71f35ca368f9c1e02a26e8d813cf5c82
SHA1 2b0cd3c1521c5f017059e5b98b20265004d713dd
SHA512 8a0cdefee77648c268c7953555084f1630d17bb90c2f3d9eb30966d573dba2f4c93fd54cf8b55faa506342997cdd63e284d02c6ea189c73e93c53bacf69ebfdc
SSDEEP 384:DZcIyWAsNquZhLiftkQX5+Dt68xXuzMd7O6R2FeoDh7UIoZ:by7UdmPkDHcMd7TRmt+
TLSH
T1E7828E315CB8AC775DF6E185B4463613AFF8506796C92F80D6ECAF2D00DA6A9130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6651678457722326d34427d20523dfff65bfdfcb2a7a7035b761d64e308a993a
MD5 f85a604502b9f0cae13f7a5ffb96e007
SHA1 9f6d90178270aab55661465cd6b6bc139e194fb1
SHA512 6dd2a93fb93da9f0ef356a028b2ca4f3222ba7f7475d9ee2a2752912d7fcd7e67d907553ada80681767954f0b22cee79e886fc32e7bb002eea2aa0090d7c0a84
SSDEEP 192:EONb6nnHGQmiUyZUkYcX5hQDP12jzor21mxXucg3C/5dU6:EONb6nCvkNX5+Dt68xXuXMdU6
TLSH
T19912FC31A8B8AC675EE3A595B0473213AFA51137D6497FC0D6EC2E2C01DF66C6309D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0afc00ae-db5b-4cff-b0c4-6527225e7597.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0afc00ae-db5b-4cff-b0c4-6527225e7597.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 f2efb93e4b0c82517600e10ab20a575e6b18763b2b174502b19b7688d7e5dcac
MD5 3d6f7320f18105f06ff92e675f20f1f2
SHA1 31651e164f85d20066f4a5613ecc788ee083fbf6
SHA512 9c27374e8cd19111df218480d76345630c2de5bf0cc4c13489707b004f958f87e9e155a08ef69cf67bfd5d5c5c8d372a8d1548e5bd94ac5a2008671696e7b8f3
TLSH
T115514B58AAE51148B3B76E5E9FF6B46E487FBD632F06955D10100E4F0A23B41C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download