65c2ba623fcc2c5cc9fa1f9363eeef9e80286793a387ba3e109c82a080041a5d

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_65c2ba623fcc2c5cc9fa1f9363eeef9e80286793a387ba3e109c82a080041a5d.html
Size 6KB
Sample260913-dc448azhmg
SHA256 65c2ba623fcc2c5cc9fa1f9363eeef9e80286793a387ba3e109c82a080041a5d
MD5 d7fc8e2cbefe6d160d3f002b09fd110e
SHA1 81ef31f48dc2c3f86c580be10a42b6918d66e9fe
SHA512 75ed8f23e28e13d8f62be7074d5c3fa90c66a602eeac65d8696102568a770d9f347ac8a787979a3ae9e5d2f826bf10393220f68620418599b082d1d6db17cd86
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ691EcE8XECgUdDhQoKDejCPJu:zWLJlxeCf80WhtKDejCxu
TLSH
T1BFE1A55A9E4C853F410005DBF0A16A1CD89B487BD312D8A6FCFF412E3FD9EAA45375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338209529850756"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{562AFA6F-33F3-4E62-9EEF-C6359EF5FA1A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe
5008	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5008 wrote to memory of 4364	5008	msedge.exe	86
PID 5008 wrote to memory of 1300	5008	msedge.exe	87
PID 5008 wrote to memory of 4112	5008	msedge.exe	88
PID 5008 wrote to memory of 4112	5008	msedge.exe	88
PID 5008 wrote to memory of 4112	5008	msedge.exe	88
PID 5008 wrote to memory of 4488	5008	msedge.exe	89
PID 5008 wrote to memory of 4488	5008	msedge.exe	89
PID 5008 wrote to memory of 4644	5008	msedge.exe	91
PID 5008 wrote to memory of 4644	5008	msedge.exe	91
PID 5008 wrote to memory of 4644	5008	msedge.exe	91
PID 5008 wrote to memory of 5020	5008	msedge.exe	92
PID 5008 wrote to memory of 5020	5008	msedge.exe	92
PID 5008 wrote to memory of 5020	5008	msedge.exe	92
PID 5008 wrote to memory of 2396	5008	msedge.exe	93
PID 5008 wrote to memory of 4652	5008	msedge.exe	94
PID 5008 wrote to memory of 2396	5008	msedge.exe	93
PID 5008 wrote to memory of 2396	5008	msedge.exe	93
PID 5008 wrote to memory of 4652	5008	msedge.exe	94
PID 5008 wrote to memory of 4652	5008	msedge.exe	94
PID 5008 wrote to memory of 4324	5008	msedge.exe	98
PID 5008 wrote to memory of 368	5008	msedge.exe	99
PID 5008 wrote to memory of 4324	5008	msedge.exe	98
PID 5008 wrote to memory of 368	5008	msedge.exe	99
PID 5008 wrote to memory of 1012	5008	msedge.exe	101
PID 5008 wrote to memory of 2832	5008	msedge.exe	106
PID 5008 wrote to memory of 2212	5008	msedge.exe	107
PID 5008 wrote to memory of 3824	5008	msedge.exe	108
PID 5008 wrote to memory of 3104	5008	msedge.exe	109
PID 5008 wrote to memory of 3104	5008	msedge.exe	109
PID 5008 wrote to memory of 1860	5008	msedge.exe	110
PID 5008 wrote to memory of 1860	5008	msedge.exe	110
PID 5008 wrote to memory of 4608	5008	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_65c2ba623fcc2c5cc9fa1f9363eeef9e80286793a387ba3e109c82a080041a5d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8f63ec188,0x7ff8f63ec194,0x7ff8f63ec1a0
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,12168911223251624828,9544473375951431194,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,5176298320326492030,1366933319127407019,262144 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,12348614565213383492,15656100938155215462,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,3971325345512595964,11593102794067483610,2097152 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,17718895840007805574,7787865557503571654,2097152 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,15655525079675289368,12581609904947517475,2097152 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,7040835329028639937,15721284395585504523,2097152 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17894450021163381217,15672834516788550222,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,14691934241073073268,9313047755841020731,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3336,i,9377485908622659103,3582040696733994175,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3336,i,9377485908622659103,3582040696733994175,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,1343419130757907426,13095875596032523822,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,2517294808288917346,11718199478469121820,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,15109514968132884205,7207598614223531050,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,14639842017740469798,18264215221402700113,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,8887652572245995888,10297925690976668464,524288 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,8522528227521040224,14095909390818865069,262144 --field-trial-handle=2248,i,12027498278557101437,8140163836353308110,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b78e3f73c2e5800a42bb278f359c185da4e71439f109f556c71605ed83e8a73b
MD5 4931265b5704a4267852b4a820d8bbe7
SHA1 10cc1ab7bacafd4ffcd2a506add5bed4316a8a5e
SHA512 1b2d58f413b1c9e3a3845b637bc8a2c310e0d32c559955abf5e533462d7f1ef11b8daa39d496e4397fb246a91415033873b2cd3276710462d49a1f1c8067f202
TLSH
T1C6616D4BC5B34263FBD88BF2C5E42187BA3B7E821A930D1E11A8E4B9840FB370C151E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5944cf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5944cf.TMP
Size 3KB
SHA256 24263ee28bb75547059a682aea5f55045254e3f6166ece75b20bc0ecc3a72716
MD5 4e07ed16f80bcb17ba46b864aa1e1b17
SHA1 7cb1ea6db2eff9c61144d7bb3bfc83bcd9a163a4
SHA512 11df62ae9ffb7abfec232b65402b8602a42925350b8e5b50a1dbc8cf629ee026c7b0e6b84dcfef96ca453c51e6c9f242fc8da2232d9fdfb7a77e74be6023e289
TLSH
T147613D4BC6B34263FBD897F1D5E42187BA3B7E821A935D1E11A8E475440F7374C151E0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 48463489a4921340c7e6f19c4837e7c2bdd9234523c1e50ca13ac1a235ee5049
MD5 e9acaeb7e4ec5e0de14167e720f8c6a7
SHA1 0070d75f52afc24d325ad32860b616a7fb4377b6
SHA512 3b5b6eb4f09fb2da644962c9ca2843ded2cb4858e808becca056ae77c8450c4e051594c7ec9073f9c438b69119dd7b1e02d2ce530842c1775409d5c169c42667
TLSH
T1AE218FB3C3D886BE890556F46A24AE27CE1D0646432C3C5589E4EF1B93F34B5D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9e3a9d164170483cad4c28778093eb44b79f637e6ca809f08b9bba51af05e207
MD5 edf7df42bfe846725879b70fde8379a0
SHA1 ab01cedbaaa79c7029634592fb99db565f3f9800
SHA512 87dd056b4b36442089010529aa53f8a013323bbc6046cfe92bb265d328e0ec1c10613903bc4a8341914a19e9c50fa1d55bbf58b30bebeb3d91f00c839f99663c
SSDEEP 192:sxZBRpWl/fQspjIdpdGHW6+WNGY3RmFIgrJ:sxZByl/fQsp8EHbGv9
TLSH
T17D12C8516E28A57B8CCBE21DBB257F53E6F95032A1D41E48AAFCD61C04E66DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 60e07324a75030bd30e62ba3bf0f501c20e2ae5ca332204e04a1e5dcda563724
MD5 b97564b315a73cb59666744130d7b334
SHA1 f12918938b46e03be5f90fe65337d03311ef3fc4
SHA512 82770af3802c8189277c42caf2d5b547c941e657fae51ee1210dd77d92ae72ff103fd520c8603d3d902f5f149f36293ad13beedabe75ce7eca8e0e9a2a90f0d9
SSDEEP 192:sxZBRpWl/fQs/VIdpHGHW6+WNGY3QmFIg5uJ:sxZByl/fQs/mmHbGSo
TLSH
T13D22D8526E38A97B8CCBE21DBB55BF53E6F9503291901E48AAFCDA1C05E77CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e66fd146acf18f4cebeb0c0b0f020ba9b3b87af1da59231703642f5b4f240c9c
MD5 2ee5b64141b501d787a1457a1dd4d41a
SHA1 18807c95ed70f8b64766d2b53505405cc03f9547
SHA512 cade193a93303d8c9ace8c03bf7a55c3e2c080c90518b71147305470453c0b76fbfd4503dc8b483c914616fec850caaba213bb1396c22f925fefa60ee91fc3c2
SSDEEP 192:sxZBRpWl/fQs/VIdpdGHW6+WNGY3gmFIg5uJ:sxZByl/fQs/mEHbGeo
TLSH
T19922D7526E28A97B8CCBE20DBB55BF53E6F9503291941E48AAFCDA1C05E76CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1df49e6ee06c1b81003287f4d55a4a4c4294bcbb2a9e17dd23e80cbff9dd8a95
MD5 a19ac2901badeb19b9b8d9f420ef7b50
SHA1 71a9feb37adc0bbedf7a17854256be51e297cac9
SHA512 0bf8879e160b229d59168d375c5027aff1a8b6056cc5347339239e7ea8dde1e058d06c80cbaa3ddb806e6173bf56190a0b1b6f5de44acbbee79f29b4ae0995f1
SSDEEP 192:sxZBRpWl/fQsLjIdpdGHW6+WNGY3RmFIg58J:sxZByl/fQsL8EHbGva
TLSH
T14D22D8516E38A97B8CCBE21DBB157F53E6F9503291D41E54AAFCDA1C04E66CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 852cbabc083e5d7bcb21cc675af0ec23d4efb2c68a2a8dba258733243c7b1fb4
MD5 a40ae1f86843f23672cfab69e7b8d8e5
SHA1 d1b6ec36d7f721b70dc50b732d7ebc90c08ccd99
SHA512 33bb3fbf625315b657fcbcffb8d4bf400d5bcda3495c395203d090c3072059de4414decfb413dfd8792c0d6211dd77e1fb538c6d30b50b3fc0e2b15a881d9aff
SSDEEP 768:5T30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72KrolZMM:5T30AbSWvS2l9u1jaLmLZ12hH
TLSH
T185C2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796589D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3beb71f0535955bed626ee0736777329af88b89d4dbf0c86533ecf6c60b272b2
MD5 5189a682ecdc93d5c871081f8e126da6
SHA1 352f2f7cf853d13c90605a7c48cdbd9a259ced8d
SHA512 d50bc8212ee69eca51543d1e755a0c702648fc2544fc0d84b76c5a9c2c2636459e8b7d01a57734e90657cd4fa5d83a0929dfb752fc5f54125b4803f9051be595
SSDEEP 48:KgHIdK0UInyxQIfK9+8tFI1K+gQnyN9Iv:KgHmK0UqSQgK9+SFmK+gCm9g
TLSH
T14CA11F1131BF0640397E2A0995B58B2E524271B33118EA2F7BFE50E69E67F481DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e4b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e4b9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8630d2e5c25efacf0ba356b59dafaba8899b40509c2d2424986d7f8a52d7f434
MD5 abc411bb56e7d5750e4180226e20669d
SHA1 5f14d5f382ba7b12bc60b085b2441783f9ef6192
SHA512 180e67afa88b8bf3d16f17f089dc930cf5c7413d7270d8956f3c5e7e8d8db104e7687ea7103a57653f9aa99dc9bdcae9d7464569402139e9c6d35ef6f19583af
SSDEEP 384:W7iFiZcI/mgsNH8TUNTUlIlR7puc0Z9iX5FC/8TXX1i+2AL7O6R2Feo5ol:WWFQ/lSwg3wXauMclAL7TRuW
TLSH
T1FDA26D735CA8CC3A9DF7EA46F54A35139EB94057CA89AF90D6DC5B1D01961D8130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0481c672ad0777f7c2f8fc6c557a94f86c4cdaa579df611ca18022656f071c9d
MD5 08f044dada3a1ff772259cc36d5fc4d8
SHA1 bbce4c1100f6925a5257f25cdef0dde398863131
SHA512 5978fa4ee50377440290156dd8cb977043e7523b15b92370baa3dd60c1062577aa856a87393a2a99d262c9ecc668db25a62f27e74924fb6ff98e2c16b03a7655
SSDEEP 192:LONv6AmwprQmiUyS46siX5FC3jzor9mylJiAMU6:LONv6ipda6siX5FC/8TiVU6
TLSH
T1C202FB35AC786C7F8EF2AE45B18737135F99116BEB942F84CAE81B2D01D729C1306932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3bcbc7b696baed428e1df3a73f349fc5466dd9bdddb975287bccefe223b9ad1d
MD5 aeab34488b73058ce3e7232bf8bbe816
SHA1 a7de9b3cb8abc60f4fee22b31636a0051c051eb9
SHA512 4d42f9f26ea8af2ac5ce38f71fc4e6ae7ce4fa31b6c948bb4d7accd43d4dacd49e09d765a261524b4346740312d2e8e4b408e872c0f74dbf2bd3e2000575b361
SSDEEP 192:LONo6AmwpQQmiUyE4bsiX5FC3jzor9myXXXFi+2AlRB/lU6:LONo6ipQKbsiX5FC/8TXX1i+26LU6
TLSH
T128121C36A878AC3F4DE2F555B08735139FA94217DB897F94D9EC2B2C01DB69C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ef6a5a2f7f33bb4cf58b1b4d304332606e534dd1a2c218ec9cd4e686c0514aac
MD5 2d117af76bd7d9d551cd50184170b8a3
SHA1 eb9fafc2631d9356b85c02cf8506c7ec35b59fd9
SHA512 c098f8727782b9ce4f2add86f947d990444a27654014b66ab270d691fcc962738a858917a8464639f4c93845a40705f83b80defca16f91b0857131a3873cbed9
SSDEEP 384:NZcIusN9R7puc0Z9iX5FC/8TXX1i+24L7O6R2Feo5ol:VuQwXauMcl4L7TRuW
TLSH
T1AF829D726C789C3A59F7E146B54B35139FB88057DBC92F80D9EC6B2D01D6694130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e98543bed79425f4aec04bd82e5107b65a5bfccc59e61e689200f58d645ff5bd
MD5 0b2fa04babf71951dbd2bf395c16e85b
SHA1 a26b4f4f3c27dc2a5f15c26b56d4cc30262541a1
SHA512 c025d9550a08b3b6894d0897e477c51e529d86abca691180d5996fa5813f6448380ca4561526b82d6969769cc578d917317d52f8a2d272c2d4dd19c7761201b8
SSDEEP 384:YZcIusN9Q7pug0Z9iX5FC/8TXX1i+24L7O6R2Feo5ol:muFQXauMcl4L7TRuW
TLSH
T12A829D726C789C3A59F7E246B44B35139FB88057DBC96F80D9EC6B2D05DA6A4130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41c44d68-6227-4f54-acbc-72c0bbfdf2e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\41c44d68-6227-4f54-acbc-72c0bbfdf2e6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 24b4f94c86163f0d5979f1a6446dfba80f94e472c9761e72b907e225dcb57cec
MD5 88f2035b05dc753a4b6b1af20a17acf3
SHA1 4b758a6178c9b7e2c87ea54ee73d2b6aac47a9f7
SHA512 ec7f05b4c5b0f28364b535e73c04445cd40839a84f17aed93efa9e390bb74a911c848784386e1d68a221de49a667feae1ee29ffc91af7d70e3da26f568658e95
TLSH
T14A410959B6FE1158B3B76E5AABF6A86D487FB8332E07D16D10110D4E4A27B00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download