ac9df7b00ba6b09717c3fc9de39b03e896a3f9da6bc2666d05d5accb5f9d1bb5

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ac9df7b00ba6b09717c3fc9de39b03e896a3f9da6bc2666d05d5accb5f9d1bb5.html
Size 105KB
Sample260913-d7pm1sef44
SHA256 ac9df7b00ba6b09717c3fc9de39b03e896a3f9da6bc2666d05d5accb5f9d1bb5
MD5 2e3f205b9b398e2b1ffcdb42adef5832
SHA1 fdf4b7f332fb05c8f9f59468ded3fb1ccb49b8aa
SHA512 02f9929dba968a331a88970f8677ce96f130c0508b426c81975743f02c23f83b6c84c0ac37aae29f53405ca982e3ba8bdd0abe7cefa95cd6ba5292588a5831f5
SSDEEP 1536:7mxYYn+h67RdRrNcuhqwHNyMl9QPTtXNocx2ib4NbEaoWbEaom:K6oQhNAW4NdoWdom
TLSH
T19BB3938701205CFAEFA049B2425B58673D2C5437BC5791B9E3FD8FA72B41DAE034A279
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2952	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338295645782145"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{5D6CB572-71E4-471C-9DB3-5A432356B844}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe
4916	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4916 wrote to memory of 4548	4916	msedge.exe	85
PID 4916 wrote to memory of 2952	4916	msedge.exe	86
PID 4916 wrote to memory of 4328	4916	msedge.exe	88
PID 4916 wrote to memory of 4328	4916	msedge.exe	88
PID 4916 wrote to memory of 4888	4916	msedge.exe	87
PID 4916 wrote to memory of 4888	4916	msedge.exe	87
PID 4916 wrote to memory of 4888	4916	msedge.exe	87
PID 4916 wrote to memory of 2100	4916	msedge.exe	90
PID 4916 wrote to memory of 2100	4916	msedge.exe	90
PID 4916 wrote to memory of 2100	4916	msedge.exe	90
PID 4916 wrote to memory of 3848	4916	msedge.exe	91
PID 4916 wrote to memory of 3848	4916	msedge.exe	91
PID 4916 wrote to memory of 3848	4916	msedge.exe	91
PID 4916 wrote to memory of 4960	4916	msedge.exe	93
PID 4916 wrote to memory of 4960	4916	msedge.exe	93
PID 4916 wrote to memory of 4960	4916	msedge.exe	93
PID 4916 wrote to memory of 4632	4916	msedge.exe	92
PID 4916 wrote to memory of 4632	4916	msedge.exe	92
PID 4916 wrote to memory of 4632	4916	msedge.exe	92
PID 4916 wrote to memory of 4564	4916	msedge.exe	97
PID 4916 wrote to memory of 4564	4916	msedge.exe	97
PID 4916 wrote to memory of 2316	4916	msedge.exe	98
PID 4916 wrote to memory of 2316	4916	msedge.exe	98
PID 4916 wrote to memory of 2768	4916	msedge.exe	100
PID 4916 wrote to memory of 928	4916	msedge.exe	105
PID 4916 wrote to memory of 3356	4916	msedge.exe	106
PID 4916 wrote to memory of 1104	4916	msedge.exe	107
PID 4916 wrote to memory of 2228	4916	msedge.exe	108
PID 4916 wrote to memory of 2228	4916	msedge.exe	108
PID 4916 wrote to memory of 4992	4916	msedge.exe	109
PID 4916 wrote to memory of 4992	4916	msedge.exe	109
PID 4916 wrote to memory of 4840	4916	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ac9df7b00ba6b09717c3fc9de39b03e896a3f9da6bc2666d05d5accb5f9d1bb5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb74ebc188,0x7ffb74ebc194,0x7ffb74ebc1a0
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,617780948316567942,16799269537302993803,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,16700594322833384564,10180095677213186414,262144 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,14605015017872300288,17178280100292692187,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,10783938595891320100,6206170844049477448,2097152 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,1817817557070099823,15859921711221201654,2097152 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,4169178834129754139,9345654436259498106,2097152 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,11711559701372725999,3402916344814201109,2097152 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,596674607466777325,7376114789095576196,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,18284403455479760762,17799202804824745686,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,8297285187403319810,359116962365110807,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,8297285187403319810,359116962365110807,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,14868023669486679564,604875230777001390,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,485697013211539447,17385111732071546805,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,10802186589013009677,17918950130993650020,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1016,i,13036846084711109217,16001961996441226545,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,1730108387018794367,12486582764775800286,524288 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5200,i,1577796108032805813,1134001537304018339,262144 --field-trial-handle=2272,i,14309416027908843322,7965948406864042888,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 77f7b3f3e4e46925d62c4db46d4211676ef0ceccd12643176d50a8db48aa4f80
MD5 2e6317e3efd2673f50879be1d96b1826
SHA1 38085cdd6f3220ed7933fad76db0bea7375d1474
SHA512 2a2f56f601654d9b77ff4ca35181f7bb87deb98ef77da614a9909bc3ec2e3b6b657012d689c18ecb865f6cc9051e28b3946b017fae9c3e93c198ef1e46554a64
TLSH
T156519481D3924598F7E6A470D2ECD5A7B6BC4483E983DE4AC5F4F6FEDA0A3806025340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590759.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590759.TMP
Size 2KB
SHA256 5006cd21e744d6fcabc2fde247054203f547fd1d46bdb55331c6e1aa8636a853
MD5 fb0fcc4198f591443147106a6dfe7b04
SHA1 f92773c07c59ff2ea253f135045db5c6f307cd88
SHA512 1510edf2aa71fec20a3269c41df4e758d79560a936841de137ed1c0a82161df80fd10f0724614f94f65ebfbda2a01f85c2327d130cfd6c89435cf3c6ead27b64
TLSH
T1A55195C1D3924598F7E6A470D2DCD5A7B6BC44C3E983DE4AC5F9F6BED90A3806024340
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4ba60a02534644e3b1054bbe5c4c667fe5a7787478d134a9f094a4f905dbafd3
MD5 d6bf06a4f57d80aa8e8b778756e8e500
SHA1 f64d9413f695f35674c2fe3d70be3c50221bc6fc
SHA512 90f2140be7a1358f2b0ad88a9c674f4e6a5b08a71e6d01fa96e294f5b17332eb04b4d176699cf6a340a32b22a479152be07645ca11a43e757dfe238db3818f4a
TLSH
T15B319DB7C3D8C67E890156F05A246E27CE1D0A46922C3C5AC9E4EF2BA7F24B4D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6ad99510bc50c49ddc8b7652c270f6d69bc661ebf19b1d73d7534f62712e35e5
MD5 40af0c8f62663dd8f13343632f197729
SHA1 212a9adf3b2675837c6d688b6d06d5deecc4980e
SHA512 18c7a65970d12f2bdbb2ed465fbf233c8e74c0d5da1b22b80be93044e1788a3671a7711899d9bdcd9cf08db3a7946c8db840f987d2420f6f5e17d14f979d1477
SSDEEP 192:sxZBRsWt/fSsiOzIdpdaHW6+WNGYrbYFDIgrJ:sxZBBt/fSsijcHbGX9
TLSH
T16112A7527E28A57B8CCBE20DBB557F13D6F9503251941E58EAFC8A1C04E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 019f3d71d5f9edda798281cb9bb893d750725ddc2159e1b6402b33bae482727f
MD5 69ab9e41f8bc56ff036e9e18a028b755
SHA1 b0b16b138328db42f4e07d6c19a84b380bd685bd
SHA512 731816fc428ea364ee722bd78f6cba679444b5a88237feb7e59e1da5cd27262267f2f401d75d5cec0a3ea8f632ebe5ab65ab0e83871c5a7567ee85fca2b58cea
SSDEEP 192:sxZBRsWt/fSsYOzIdpHaHW6+WNGYr8YFDIg5RJ:sxZBBt/fSsYj6HbGcx
TLSH
T1EC22C7527E28A97B8CCBE20DBB55BF13D6F9503251941E58AAFC8A1C05E7ACD231740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a3a5c6101796dce6727ff4d86c0b5d62580732bd9e5238b307992536589bd7f7
MD5 0e499cfbedd97f16f6954a93cec6739e
SHA1 7131ce360ee237ea735876545dca70fa64d5b8c5
SHA512 8d96f112c20e8a467b334a1f595d3f3e65add593a4c2d89714c8fb07e10a076ba1b1ef4936b669208780d907449eea90a8842c3ffb8c11a635051c9ed18306ef
SSDEEP 192:sxZBRsWt/fSsYOzIdpdaHW6+WNGYr4YFDIg5RJ:sxZBBt/fSsYjcHbGEx
TLSH
T16222B7527E28A97B8CCBE20DBB557F13D6F9503251941E58AAFC8A1C05E7ACD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6aee245b9420652d223ce46c18fdcf977b40259fb210a388cc6aa9554e442d88
MD5 fb13b9f7a3b8eb65369c1ed0da9b9f0f
SHA1 5572f2c5e3a2824408eb24b2c2bf951523306bdd
SHA512 ddbabffc6ded6a89a8e17febbc0b584440b44c4fb5d5f0cd6b1424e08288f0792666c8d3eb471529c2c36dca585ab0f74857500327d8dfa0e94be852317bcde8
SSDEEP 192:sxZBRsWt/fSseOzIdpdaHW6+WNGYrbYFDIg5DJ:sxZBBt/fSsejcHbGXv
TLSH
T18022A7527E28A97B8CCBE209BB55BF13D6F9503251941E54AAFC8A1C04E6ADD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bb49b028393c9adc1a8c613e67c2a5371dadfebbed06912bb8b20157d3526504
MD5 4815ee8455009ad7a4b7b3f6f6ba3de4
SHA1 b463a0037c0e561dcd18393bc9c59e1a46abc6ba
SHA512 ac0ae62f23a45b7b7fb20a1fe0400819e2360e40d7775090559ba156941dea0e067613d489232a51a4a19284a0a672a562fce06418db5a0cfcdf46bac86c40aa
SSDEEP 768:XAy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbgroRNi:XAy4J/DWvbtBhu1jajiLm0brPi
TLSH
T148C2FB3B684CCB7E4FC00A9DDD5E6F973E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d08bd57a9706488618e3779298450558714b02135fbed4deaa84f7644f693618
MD5 07b440d38b24b79e089f42bd8712276b
SHA1 16e43776b4c695ea9c40c51d0dced9af925ce3e9
SHA512 37efae7a8d522ccba1ad567c5696b9c60071c0f708602f9fc642d3993160b81ab17e7976904a228223d8db34fad3a9deda5e161030c00374c270194b1bf03035
SSDEEP 48:KIDI1Ks04jyLaFoUaYoZbED0ISMZK9w1qZxCJY7coqyLQ5QIQVQpQzQ3QLQkbQ38:KIDCKs0+eZeKCMKGn2KY/c
TLSH
T14091DF4431BF060139BD29888172C72B02423677715DEA2B7FBD4065DA6FE082EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6a6c9e1a5c76e05adcb858532d24f89d83c93603938ad06ef60a2dcc5530d95c
MD5 e10798bf4c9944d5842042dbf55f38fc
SHA1 95f1f93311f7644fc163e5191521a243f1572566
SHA512 d9bd99abbb592e4ee9f6e2d89777b0e8fb9c12e27f1c0e0ecbe2e5319973d01492468dc19617f38af67fa87eb44b9399364b08aac90f7bf06bad183232f014fc
SSDEEP 192:uUDrsNUUynQnlDZbzQmiU12ES4HX58gZ0jzorTJrXHNTUPb/vLU8:FsNb8IZprdHX58Ek8TJrXtKTLU8
TLSH
T12D421835F978AC3B5EE2A184B1463203AFF94067D6892F94D7EC1F1C05DE2AC531A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0ffdfe090b2cf44286f415e739d63882f5828cb104e6b3d9882cff0a3238b391
MD5 7f560513fc1080c1307ada6da132e415
SHA1 d3f9a62f88b2e3ee41bf53e13c6cd6f4eff559ed
SHA512 e1e32b8a0d15311996ba0fd50c354f2e9d0ec93433f1c6aae4a51bf626d57cd2750fe8371bce08df4e197009995e8db64c2d6f94ef2b9bafee1b17f0fe86131a
SSDEEP 192:uUDrsNUUynQnlDZb3QmiU12ES4HX58gZ0jzorTJrXHNTUPb/vLU8:FsNb8IZlrdHX58Ek8TJrXtKTLU8
TLSH
T1FA421836F978AC3B5DE2E184B1463203AFF94067D6892F94D6EC1F1C05DE2AC531A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c446042f87bece5054c597a7f30a47f6f59a9a0c5ffd360ba87b10d3b4d572a6
MD5 ebf0a25d586277c782d39785e22115b1
SHA1 df7f6b0f9915abf07ac0f29a559eca6bb5b6422b
SHA512 2e739c5d0b9c600a28723a43f7897ecc9e0056bdd02e1995df08474b65a3c75df89e8bf88bb63df2f5270987ff4d31b6d635c02e6f5936e3772bba9061c2cad4
SSDEEP 192:1ONE6wlDgQmiUyHUW4X58gZ0jzorTJfDl0jU6:1ONE6kgzW4X58Ek8TJJmU6
TLSH
T1BB02E938F9687C6B8EF2AE09F58727139FE5112BD6952F44CAE81B1D00DB65C2306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 f00729c55526c9cefd24b90100326e168a4c026eb78eca27d5cab721403beaa7
MD5 a244c80264e6c5e60f93767694b9e921
SHA1 282c798e6b75bef8f3ef25745838fe9da42a401f
SHA512 dfd4a076db2674ba1a22a534c073c9e69bfcfb64737208a684015a419bd323ee9058a147602cb8a358900ec04e79712dcb17433f18b4a69e8abbf6521464efe5
SSDEEP 192:uMDrsNUUL8QnlDZbzQmiU12ES4HX58gZ0jzorTJrXHNTUPb/vLznmydt:dsNbIIZprdHX58Ek8TJrXtKTLK4
TLSH
T121522936F878AD3B4DE6E185F2463603AEF98057C6892F84D6EC5F0E01DE29C131A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7e1fa3895c64d73b3a68e9cb2a3f6a721279df8a86a444576fd83271dee7066c
MD5 f246e2052cc50c362d8a79eac9c330aa
SHA1 d69893c6a84557b723a0fae04369ad9d025059a4
SHA512 485f026a10ce902a1b27a890ec0154b1c67c7765fc830d110884ab44d6c5812610790b29dca182af732df3a3263686413fac98cf59a07d35ae51d1f119cea04f
SSDEEP 384:TFiZcIgTsNl8TUNTUlIlfIZprdHX58Ek8TJrXtmTLsa+VYzlioid:TFQgQwgWHpac8TLhgD5
TLSH
T11FA25B3299A89D3F9DF6D781F94632039EF480A7C6C9AB94D7DC9F1D009A298030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1aa89c8d59bb80939e7a45e946ad6af418f7021c026325807681f006fe769728
MD5 5ed3376b31a8786003d9bd9716ef8883
SHA1 235be2c3cfc04899cae9df87890d8c089193206b
SHA512 70de0eb1efd1e06606b10d3773b25b7b0d8af13cbc506f386f932f191d4ddc37d4cdbb65aa8a557a0a6055fc3fb488a7d51758a283d372d4de6fd441aaf33122
SSDEEP 384:iZcIRsNbfIZprdHX58Ek8TJrXtKTLsa+VYzlioid:QRJHpac8TLhgD5
TLSH
T135826C31A978AD7B59F7E285F58632039EF8806792CD2F54C6EC9F1D00D96A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 308a2209d3e979e1cddd93f7115c84cfe5105480a3c0733bdcfffce822c52727
MD5 62263b25c4b263400473ea5109a2d08f
SHA1 b2fb61d01ce1378794da0f2759871b5a98cb790a
SHA512 b4b83258c49ada5d1df948aa9a595c14f36ab705dccfab2e0163448a204d03d338fffa371dec2fd4e41c18c5ea1dec8cbea533451daf7e675b23b4094a79b373
SSDEEP 192:1ONwh6wlDiQmiUyDU/4X58gZ0jzorTJrXHNZveb/vLU6:1ON+6keR/4X58Ek8TJrXtYTLU6
TLSH
T132120736F578BC2B5EE2A545B1873603AEE54127DB897F90D6EC1B1C01EE26C530E923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07b7334b-b27b-47ed-a8ba-102e03bf9631.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\07b7334b-b27b-47ed-a8ba-102e03bf9631.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0bb8a84e923e24596f463fccc8be7a2533a633e35164ef93bc530fea8ad51222
MD5 f5832e0f7f37bf15c61e2014952cc97d
SHA1 716b856ea841963fd64027cf2adc62b952ec06f7
SHA512 872e1978576b0729b1eae128be42595384ef73df4761189fb769bea4a4ea8a287ce7008f7ae80984039294208a65fe5e3eae295df01116596e5591b703c17dee
TLSH
T139412B58BBEA1058B3B76F56AFF6A86D447FB8372E0AD45D10120D4F0627A40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download