434b4a1246e7771c7d466a56593c10b25b97093987df542a6cd0d764f5cbfdd9

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_434b4a1246e7771c7d466a56593c10b25b97093987df542a6cd0d764f5cbfdd9.html
Size 129KB
Sample260912-xzcs2avydx
SHA256 434b4a1246e7771c7d466a56593c10b25b97093987df542a6cd0d764f5cbfdd9
MD5 fe7741126c3f1c37ed43f5279a01f37b
SHA1 e13a36065260f564b4154a1b6afeda9f10b4ad01
SHA512 5a63137d0624a75ce534391e42c36ec983191a2a4213dacf322ad11af9c4a45c5a558ba4eff10a687f5db0c2a28ac672dafa1477682c6e9051ec7999abde393d
SSDEEP 1536:o+xMYn+h75sdRNPiDul1WWlwQWTtvNolxvmk3bEao+bEaoVueI88PkrL:heLQCNKd3do+doVueI88PkrL
TLSH
T1AED395A313604CF5FFE81DB345EA096F382D1837A80250B9D3EECE969F6792E0345959
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4476	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338260289049434"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{39F23F31-348E-406D-AF13-32C572A88CC6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 4972	536	msedge.exe	84
PID 536 wrote to memory of 4476	536	msedge.exe	85
PID 536 wrote to memory of 1636	536	msedge.exe	86
PID 536 wrote to memory of 1636	536	msedge.exe	86
PID 536 wrote to memory of 1636	536	msedge.exe	86
PID 536 wrote to memory of 1068	536	msedge.exe	87
PID 536 wrote to memory of 1068	536	msedge.exe	87
PID 536 wrote to memory of 4296	536	msedge.exe	88
PID 536 wrote to memory of 4804	536	msedge.exe	89
PID 536 wrote to memory of 4296	536	msedge.exe	88
PID 536 wrote to memory of 4296	536	msedge.exe	88
PID 536 wrote to memory of 4804	536	msedge.exe	89
PID 536 wrote to memory of 4804	536	msedge.exe	89
PID 536 wrote to memory of 2220	536	msedge.exe	90
PID 536 wrote to memory of 2220	536	msedge.exe	90
PID 536 wrote to memory of 2220	536	msedge.exe	90
PID 536 wrote to memory of 2308	536	msedge.exe	91
PID 536 wrote to memory of 2308	536	msedge.exe	91
PID 536 wrote to memory of 2308	536	msedge.exe	91
PID 536 wrote to memory of 2008	536	msedge.exe	96
PID 536 wrote to memory of 3500	536	msedge.exe	97
PID 536 wrote to memory of 2008	536	msedge.exe	96
PID 536 wrote to memory of 3500	536	msedge.exe	97
PID 536 wrote to memory of 2228	536	msedge.exe	99
PID 536 wrote to memory of 4196	536	msedge.exe	105
PID 536 wrote to memory of 3528	536	msedge.exe	106
PID 536 wrote to memory of 2732	536	msedge.exe	107
PID 536 wrote to memory of 4608	536	msedge.exe	108
PID 536 wrote to memory of 4608	536	msedge.exe	108
PID 536 wrote to memory of 4904	536	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_434b4a1246e7771c7d466a56593c10b25b97093987df542a6cd0d764f5cbfdd9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff941c5c188,0x7ff941c5c194,0x7ff941c5c1a0
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,14604451614621405456,5061423977040232992,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8096871721851339861,4354830222662520559,262144 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,4994704004769955385,14078706630836803389,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,15927076124685985264,4009106664244618846,2097152 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4513744136599458639,9464661931509670820,2097152 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,11772356802445697997,11652607375438517818,2097152 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,12838887848167366620,5466979728215937763,2097152 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:2
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,2601836336052617306,2429545806822813577,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,8364789979422922276,10072510185423600927,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,16214602545382185944,8948290695658184575,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,16214602545382185944,8948290695658184575,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,4206926324363356496,10434512263241739084,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,6629395091233153934,16075764442870077542,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,13190309715133738994,17773120529353787793,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,7959077879136961271,13423481344423218940,524288 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5068,i,15905394444606063137,16773582565936949378,262144 --field-trial-handle=2384,i,6108647257463541349,16169908125498722157,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

16b79d8e-e660-4d44-a529-c599f5330594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\16b79d8e-e660-4d44-a529-c599f5330594.tmp
Size 11KB
SHA256 c8d2d8c50dfd26a6fa96f48285c5b9750ecdd980361bb556eef035ab65794acd
MD5 138627de92b13a30a677dd2f0e826792
SHA1 d3757c753b970f8765364f7a9835d54bd26a0472
SHA512 0af7775dd205b87843e83fabb80a06242d021b58cd1e9cc74dac28ba60a34d2898a977565f062861aa81d1945c4c6157d30e0e1229afe474a7c2d94f4c27a3c2
SSDEEP 192:uEKCsNRkfXQdrnHC7jGQmiU1+e+cM4bcX5hQDP1fjzorLogXXbKoPyh/5HEYU8:fZsNCPeTivi8ZcDQX5+DtH80gXm5LvU8
TLSH
T12C421930ACB8AC674EE7A685B1463613AEB85127D6883F84D7FC5F1C01DF69C530A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0bfd37d9827210f68b80e9e8f23a3a61ea59124fee0b0830188c4e4c511115c7
MD5 406d5209da9e53ebc6e7e51dafa39fc3
SHA1 11c4ad856b6197a0abca1fc5a0ef13080483ddff
SHA512 736dd7bcd333f7b443a3e88ed14b0015c335a845938483aba6cb031f340f3870e8c4d0ba9b1f5e55b46650378903317383c4f07214dcb4d9071ef07bee2f2043
TLSH
T1BE5192B908AB6451D77EEF7093DD22ABF63097F177937D03A6AAC574A7373009105044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f325.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f325.TMP
Size 3KB
SHA256 203621d2d001b7baf04ec48aa33d110fd0228eff67deae130287e584d3b0283d
MD5 7e2e500c59545667e72f5b82dce24686
SHA1 c42bef1d2c12a6289da2c2215a051cdfa9f4a286
SHA512 6670e1733ca5ee44f007ddcf5da1557f44e99e7060d675469ec5d49af3508c6af31f658123657b0826e43dd9c1c27bad0d4dd0c0424171ef9a108ebddfa7f318
TLSH
T1AE5192B908AB6451D77EEF7093DD22ABF63097F177937D03A6AAC574A7373009145044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bb50e4260be328bd17da5db71d9f012dba6394f78ea742a28bee7e1502342e41
MD5 1111cd485fff92c988469d4dcaeaa017
SHA1 49bde4cf60351be2740a7976a3373076cf6a9a68
SHA512 966fb1c21fbb95cc0ad2c8cf50937f06f7d421a47d4d391ef2988139e32779558c29f5c5fc35eeb9b03bc67a22a1e044b151d87bd29092f475026b86561fd639
TLSH
T11D41C1B3C3E5877E8D0156F05B246E17DD2D0A1A422C3C16C9E5AF1F63E25B0D20199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 99d5a021022aeb7ef94fc2111e67c788777815f06bfd327bc0ab0081a3d05dd0
MD5 2794067bd8270f640a2f5f4bf84eea17
SHA1 f11833a75d714ebef605784146a93745563e5a2d
SHA512 bd332db5d35bd9a3652438dfee5b92edc16dd6844a58f65bf4a84f72c8b4f710b8726d7a8972d712c77153aebdc25a1ab9c667c4e18b64493f104360e8912440
SSDEEP 192:sxZYRuW6/fPsa0TZIdpd8HW6+WNGYYBa8VXIgrJ:sxZYP6/fPs1G2HbGfD9
TLSH
T1001296116E38657B8CCBE609BA15BF53E5F9503251951E58BAFCCA1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85e2b9bd35283e139216719ae67270d36299a1ff04cf39de67413e96f6a31769
MD5 92a027bff95aeca3db390f5052403e60
SHA1 5ed3980755d7ee2d6fca04d5f72b2e56f5235fab
SHA512 b15ee5facb22903d1d7746ea4efeddb8d29d8b906d507c0e3be1315ecd95cc64e59f247907c1b67165373d2487910f69892ff441e79d5b4da20daa2426196ff7
SSDEEP 192:sxZYRuW6/fPsmKTZIdpH8HW6+WNGYYBa8VXIg5TJ:sxZYP6/fPsHGcHbGfD3
TLSH
T1332296516E28657B8CCBE60DFA55BF53E6F9503251911E48A6FCCA1C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1616bea63869c9ca5ee9c7d618638739890d9482febb96c4c879a98bb1111fd8
MD5 e8101726af832fc9123b319b5025e929
SHA1 79b7dfc88c3c38863e1e2ee98345b5b2a6062d0b
SHA512 0ee58d70cabf99175700937e6c8d993213743eece42272ed62ff61fb1aacdf9fff72f7563b419b803b5df92d76c29626b361c4e60c975f04070413d980ac8a72
SSDEEP 192:sxZYRuW6/fPsmKTZIdpd8HW6+WNGYYBN8VXIg5TJ:sxZYP6/fPsHG2HbGfq3
TLSH
T10422A6116E28657B8CCBE609BB15BF53E6F9503251951E48B6FCCB1C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1abc8c1554bfa0a2701467a2713db171780cd047cc74d6aaeef3bc8da84243ed
MD5 f61b93758090a034dd1a9e4b1b2c8437
SHA1 dbfe8776b55da65d9663f11ac274c1518786adf5
SHA512 e0e73f86e895903e4559eedfe46dedb51851d17fd5431ede618684cf15143b32219c99f35f6c84d42182721c7cf1fcec68c3f15c521cceb086e7b71ef477ded1
SSDEEP 192:sxZYRuW6/fPsm0TZIdpd8HW6+WNGYYBa8VXIg5pJ:sxZYP6/fPsxG2HbGfDR
TLSH
T1D022A6116E38657B8CCBE209BB55BF53E6F9503251951E48FAFC8A1C04E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4789884e940ec55c7a3179095c3f8c42140166441ea579b77285c07b138a55e6
MD5 a577e3fc4e8e0ccfb60e911160518b2c
SHA1 f5ecab671efb8c5494b28eee278010cbe07287b0
SHA512 125dbd90d60c10b3fc11e3247c11c126871af27e3c25488e057c28aa2fd467b9e7df507089e2dc77ba33a7df0b452bc6a2b87fcaaa2136a2489df0fbbd221798
SSDEEP 768:CnyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXxropCLe:CnyYR7jWv3NpBu1ja/CL8OXKb
TLSH
T19EC2E92B640DCB7E4FC01E9DDC5A6FDB2E9802C796548D4047FA994C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 21c171c18e4382559d082f514a53252c856b95dd17b64d82f94440322cd12ab2
MD5 3c4ad09b3a3eeb26301d598f3fcc0a12
SHA1 6ec2462622b52ef5c3489d983827bf52296e4b0e
SHA512 ad6c31671a8f03184ca94fff24f91e641dc1494032048bc3088c01b0f8fb02a369eca7f4ca6be175374822cf292c43f45e1f34af2ea96ef91f5f94f7f3f951da
SSDEEP 48:KgvSbvRxRqbpkZIS/qK9f1VqxP6YcdfDyLVUplXD34brOrIS94K9d1P4x9oYePl/:KAkgKdaOiKMK7KkCEKTqKOJqKiI5
TLSH
T17DC1FE5036BB165178BD299886B68B1B124132773119F63BBFBC11B19E7EE044CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 791d54cf78b42cada671a1e30f091516e63b293a8e18f8f01a39226920b6c6a7
MD5 8dfec24a2edce9697ff932a9554d6617
SHA1 fb670a43a6ae63d7f886b364eb77462a6ea84156
SHA512 a77a7c1b1613bbfb6bb8313ad1221e6068d6f208a13903ced163f8847b5b82664a4784dc840a58a9da31c2dfe587ab8e84ffc0a87003f471bfe7b43239af1a88
SSDEEP 192:uwCsNRk6XQdrnHC7jGQmiU1+e+cM4bcX5hQDP1fjzorLogXXbKoPyh/5HEYU8:UsNCyeTivi8ZcDQX5+DtH80gXm5LvU8
TLSH
T1E5421931ACB8AC674EE3A585B5463613AEB85127D6883F84D7FC1F1C01DF69C530A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 fb9ea331bff503f83e6bd73ef6c97c5abea5356c9e585865b3d0e74d83ebc375
MD5 8c4886f6b00288cac26a122ffdc9f037
SHA1 363d2c66e9cc65937d37531e6d6d68aadd50f6c6
SHA512 44bfa2b8db9bc5606c9d415a80242ad8ea4134c6a97d69ebea9e942b32744b910d36d12f73edbac03987285103991a30712f849cb961c4728db58aeef4970448
SSDEEP 384:3xFOasNa8TUNTUlIlPeTivi8ZcDQX5+DtH80gXmbLvU8:3xFPHwgUTygEkD9Q4LvU8
TLSH
T117521A329DA8D87B9EE79A85F54A3213DEB45067D984BF90E7EC4E1C00DB29C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 95e8776415a2eba38d07faa33358cf5bae3a037721d04cf3f946681bb4ecfe21
MD5 aead47715fff24b5fe4c55684b044d47
SHA1 9df79b63954a0c5f406de47938d0341ea6d92ca9
SHA512 50663fc3c3a7a701f61d6d5ae2c9967e167ce03b16036d49b61ab8c9a09e1e4703ac186496bd9e21e74293baf4db0ff8726cb4e9d598d9cd5daa44d3e7a8cb2e
SSDEEP 192:EONI6nnHGQmiUy+X+RQYcX5hQDP1fjzorLoaMcPRU6:EONI6nCNuRQNX5+DtH80C5U6
TLSH
T11802DA34ACB87CBB8EF7AD45B48636139FA4216BE5952B80DAF85F1C00D765C2306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 eccdce890ec9b01577896a8eb936b9612deade99329b4806b860a224fc7fc4bd
MD5 c52002cfca3671d0a4cc289424a5bb73
SHA1 ba9bf0538aaaeb854130f005bb38dad6b388907b
SHA512 5cf12a1c317ca36a3299c8bd31e951858e3a5d97c7e7676b89d7956cc92fe57ce4b679c2931175840d57913ba0c8559a5cbde94e5aaede88a9cb82a7499c46e3
SSDEEP 192:uwCsNRk6XQdrnHC7pQmiU1+e+cM4bcX5hQDP1fjzorLogXXbKoPyh/5HEYU8:UsNCyeTiz8ZcDQX5+DtH80gXm5LvU8
TLSH
T110421931ACB8AC674EE3A685B54A3613AEB85127D6883F84D7EC1F1C01DE69C530A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 b1464a606b3cb5cac907e0e05f686f40e728a15a5d7899ad027c169761710d71
MD5 c226368b72c6141bdf04c886a9852381
SHA1 046e4b57354a28fae755fd2126d86698cecf169b
SHA512 7e27ce46a119f0181d665e364ca15835fa81a9cc7eacc381339890cc96514de749b682545e43d8c13b59509e9d89e5932033ee1e3c439e8208c905fc068d7818
SSDEEP 384:3xFOasNB8TUNTUlIlPeTivi8ZcDQX5+DtH80gXm1LvU8:3xFPSwgUTygEkD9Q4LvU8
TLSH
T1BF621A3299A8D87B9EE79A85F54A3213EEF45067C984BF90E7EC4E1C009B1DC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0d657664f02cd23b330fe3f75b83f832a56915e710b91e83d97ed91ca5bb27de
MD5 060955ded674d6f5d9220a36e4985043
SHA1 7dca1f7403036b8ce824710de4597002ec0b7ccb
SHA512 b128155260d89b01103d3f5ef54c777a8428ef0c99ce32bf18cfc6275db9346f338123e2b0cb7aa64d0a187e61b37caf930c50af23c0a70b4590450bec3c41dd
SSDEEP 192:EON9x6nnHrQmiUy+p+RRYcX5hQDP1fjzorLogXXbKGg3h/5HEYU6:EON76n9NgRRNX5+DtH80gXmhLvU6
TLSH
T11B120B31A8A8EC671EE3A995B48731139EA55127E6897FC0D6FC1F1C01EF65C130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 980d1e197fcb1e8ccc5c082bcacf06bd3ae5a411c903a23328a2633887144f76
MD5 a5ac90b1d41c99b038114f4b4a51598b
SHA1 3bb956f3b62a0e1b8afd238918c5cfb161cd6efb
SHA512 642b4bbf7188d24cf4ecf35b84b2b6e8975a535270cbe3c2de5c75e0f65cf165716093673656b72cdbcab065ad01443b7ff17bb9b417bfd872ca1f0f72d84e68
SSDEEP 384:3xFiZcIqasNB8TUNTUlIlEeTivi8ZcDQX5+DtH80gXm1Lvsa+VYXd7UsoA:3xFQrSwgFTygEkD9Q4Lvhgu1/
TLSH
T150A25C729DA4D87B9DE79B82F94A32139EF85067D5C8BB90E7EC5F1C009A6980307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b8b59ff-e0d5-437b-94dc-c52a6bd0cb41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b8b59ff-e0d5-437b-94dc-c52a6bd0cb41.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 867914e3bbc5e8eb568494d1485d46bfd840ef2b5e80d17b8f692625df3ba19e
MD5 1c0b23c8811049eb8213229227985fa2
SHA1 dfc17a698055f26132d4a000fe117beece6854cd
SHA512 08b2a8d13f1b66f4f1b971222ef824af60c5a9c8f96b30a1d52a795a0a65ed23dbb24944af9d7755b69ae9f5856e34b6dfd07d638749d56fe1355221042b82cf
TLSH
T1C4413B59A6FA1148B3B76E1AABF6A86D447FB9772E06D45D00110E4E0B62B40C862737
MD5 SHA1 SHA512 TLSH

Submit Download