b38d1fd7d194a844d981a95e47666800fdd8e12e4c2329aa284370070a681186

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 06:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b38d1fd7d194a844d981a95e47666800fdd8e12e4c2329aa284370070a681186.html
Size 109KB
Sample260913-gr1bcscr91
SHA256 b38d1fd7d194a844d981a95e47666800fdd8e12e4c2329aa284370070a681186
MD5 d61c036f086dce34acd7036da982dd7c
SHA1 dea6b4ac01e6c9d216dd3f17f7bef00e55cd2bf8
SHA512 0b9b40d39abe8de084bd3eb8d9195b7a9c9c80069ed4f297c62f6a28ed2d9470d6b3ecc221929a84b8b2abdb10380b61098e0cc27435d679aed2d7554374a34f
SSDEEP 1536:oPx+Yn+hhwWRSH9v+yap0lCQ+TtnNoXx3+xqbEaodbEaoAH5I:WA1QwN0AqdoddoAHS
TLSH
T1ECB3A58711204CFAEFA45DB3459B086B3C2C5437BC4791B9E3FD8F972B519AE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3304	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337897677760606"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{AB2164B7-A423-4F63-A6E9-EB8C54B78339}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 4920	1752	msedge.exe	83
PID 1752 wrote to memory of 3304	1752	msedge.exe	84
PID 1752 wrote to memory of 3288	1752	msedge.exe	85
PID 1752 wrote to memory of 3288	1752	msedge.exe	85
PID 1752 wrote to memory of 3288	1752	msedge.exe	85
PID 1752 wrote to memory of 5060	1752	msedge.exe	87
PID 1752 wrote to memory of 5060	1752	msedge.exe	87
PID 1752 wrote to memory of 4664	1752	msedge.exe	88
PID 1752 wrote to memory of 3964	1752	msedge.exe	89
PID 1752 wrote to memory of 4664	1752	msedge.exe	88
PID 1752 wrote to memory of 4664	1752	msedge.exe	88
PID 1752 wrote to memory of 3964	1752	msedge.exe	89
PID 1752 wrote to memory of 3964	1752	msedge.exe	89
PID 1752 wrote to memory of 3108	1752	msedge.exe	90
PID 1752 wrote to memory of 3108	1752	msedge.exe	90
PID 1752 wrote to memory of 3108	1752	msedge.exe	90
PID 1752 wrote to memory of 2264	1752	msedge.exe	91
PID 1752 wrote to memory of 2264	1752	msedge.exe	91
PID 1752 wrote to memory of 2264	1752	msedge.exe	91
PID 1752 wrote to memory of 3640	1752	msedge.exe	96
PID 1752 wrote to memory of 3640	1752	msedge.exe	96
PID 1752 wrote to memory of 4844	1752	msedge.exe	97
PID 1752 wrote to memory of 4844	1752	msedge.exe	97
PID 1752 wrote to memory of 452	1752	msedge.exe	99
PID 1752 wrote to memory of 1876	1752	msedge.exe	104
PID 1752 wrote to memory of 4460	1752	msedge.exe	105
PID 1752 wrote to memory of 3088	1752	msedge.exe	106
PID 1752 wrote to memory of 2192	1752	msedge.exe	107
PID 1752 wrote to memory of 2192	1752	msedge.exe	107
PID 1752 wrote to memory of 3152	1752	msedge.exe	108
PID 1752 wrote to memory of 3152	1752	msedge.exe	108
PID 1752 wrote to memory of 2284	1752	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b38d1fd7d194a844d981a95e47666800fdd8e12e4c2329aa284370070a681186.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa8ef8c188,0x7ffa8ef8c194,0x7ffa8ef8c1a0
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,13176516802636717490,12513435881233958080,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,3950345551355497046,3277135046838580623,262144 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,10380438250836719762,9843053853172176028,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,8555402515903353768,17700519815338398660,2097152 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,11780867381092479660,3480683759183492913,2097152 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,16634284310963953121,9094046741092446534,2097152 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,5760387658440608842,393831607054045680,2097152 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,1657386935662662155,11300716939971839127,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,3442874135770047458,15084601481566002597,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,17274885672916138992,3524608538685769559,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,17274885672916138992,3524608538685769559,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,11490352871514449038,5076740921466924545,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,18193278066224691208,10811637831091246895,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,10854737504261540996,14672003768705977554,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,7108934967007513494,232839825361121786,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,12476350658909825981,15761976095969439017,524288 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5536,i,9804620977489758467,1637722497681697414,262144 --field-trial-handle=2284,i,6334193303227047771,9053056761618661966,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 66d07d6dafb4df2db9678ba3f7e071d7dded1f4c3a26fd1cd425d5922f2fb9fa
MD5 6668c8012dbef474c63cecfbc3bee3f9
SHA1 89ce8edb63efd95a7a897e1bac7d303b3b2150a9
SHA512 f032cb57d53f81f5a7d1e7489719f0538cee3194f636e3ccd95e33fa888ffbc27e0780f6af94ab27ce86e2252fd7327051e990c0df64a7f33e14ba680988322e
TLSH
T1F46142CA5ED0287BFF6865B4C1FD154B3B3034B045A31F5A28E6F8741E8D7892D96238
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e7cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e7cb.TMP
Size 3KB
SHA256 a013240553f1bbc496e035a66e3fa74f2e511a584110b22ea5afb469a70f2bb6
MD5 fcec739ca27e3701e5dbb5856b0df50d
SHA1 2dd67bee1ef4a68bda422f2022fa9d081dba36d1
SHA512 fe7bb42b765ab0543916861ec8d131db1108f0992722853f66c1f67985b2794c21e1d3023d3d42df53a80b925dac33ec52c58dfdd91bef8b4336daa222ef3eed
TLSH
T1236142CA5ED0287BFF6865B0C1FD154B3B3074B045A31F5A28E6F8741E8D7882D96238
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8a60554930f013625e4c6e6d5dc3e7265aa459d9dcd16b2fa00b512e7f59da5c
MD5 99be8d9dc6e7b6fd0fca124d4b6e967a
SHA1 515f9de65b941b4dbb5ebba8f08a5c45c94e668b
SHA512 32e04372af0e08d383e29ded210f6d732c6760ea0ea139747d5ff71216f840d84ecad89f2b421a71171810af2a627686a63c780caa979d303c55c96698471489
TLSH
T1364149F7C3D4877E890156F0AB286E2ACE2D1956526C3C16C9E4EF1F63E24B0E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 29fb42ef04e85c2bdfaa04cbdbd305a04e6f6de39daf3492d6a472b89e2bbc87
MD5 06d1431b57074090b7df4d8b722da74b
SHA1 a31535c97cafdb302f00c6ab7d647fa9b676998e
SHA512 3e7d0b27cb9cd7b5bcf635b363e1742dec8a0e781823f2a04002db7cae2d13dd5fdc4609547b43b0d15da2220916f2b931de7b2f2feca1a0204a4967a4bd9788
SSDEEP 192:sxZJRHWz/fAszKmIdpdwHW6+WNGYaQa2IgrJ:sxZJAz/fAszKHyHbGE9
TLSH
T1A91296516E28A57B8CCBD21DBB25BF53E6F9503251D41E48EAFC961C04E7ACD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0a6d9831405a2c862c90921e486bd5cf7185a214201f13c1358e4a29226e9533
MD5 d42b1e3332b41fc704d760ba1cc92980
SHA1 8339c313f98b14c4c70e032e5a879ec7771b06e9
SHA512 0b2e3c4c099558ef2161c079fd0d8943af94402fd11562171367f2abb913b04b637586b4eb517f33b5ce236743dada3e4520d725c5f9afe3b1a1084a6194be58
SSDEEP 192:sxZJRHWz/fAsyKmIdpdwHW6+WNGYaQa2Ig5vJ:sxZJAz/fAsyKHyHbGE3
TLSH
T1F122A655AE38A57B8CCBD21DBB56BF43E6F9503251D41E48EAFC961C04E76CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0fb430de5f8f74d0f2c18321b2bbc8461c7c65f9d7e40e16dfb35ccca38925ef
MD5 609ed41c14cbcb0745937d048360dc09
SHA1 c58940c9940e084b2b29c964965e71ac0fdeda57
SHA512 752a9673b36ae3e28b52991e66dcdf7288ead91260a8f56f26771c3af356f93fed89ef789aea05a9dddf91ad2c124c2cc1e04cbe860ee2435e4e54624e594cda
SSDEEP 192:sxZJRHWz/fAsZKmIdpdwHW6+WNGYalqa2Ig5NJ:sxZJAz/fAsZKHyHbGQp
TLSH
T1AC22B7516E28697B8CCBE20DBB56BF43E6F9503251D41E48EAFC8A1C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 27a1d04942e1a9ea5a415ac5d600107519149f52c6f7f1cc24777fd77fb866a0
MD5 daf22dfd934f84b39d5d0ab93a06850b
SHA1 b4ffccdf44cdd596569242c597051f87530ad413
SHA512 699dbe02593ab21621bd57e87f4eb129f10b9bf1f20d254e98e2cc87560b84cc20b697ff1b9548f2853f1537bf912185abedf1171fbb1cb7d0ae181630cc378e
SSDEEP 192:sxZJRHWz/fAsZKmIdpHwHW6+WNGYa6xa2Ig5NJ:sxZJAz/fAsZKHQHbGKp
TLSH
T17222C8516E28697B8CCBE20DBB56BF53E6F9503251941E48EAFC8A1C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8bed502af2f43dda53965ff5daceca3fc1d9ed012d75164a54cc03011f0e0c5e
MD5 ec3a626044647b8eacee8d12edbba690
SHA1 d2caa31324e162c69933f5a02ca614495954107b
SHA512 587fb868bbe70ad8d4938824cce996e82ce7a796e06327d3535e5184069df07e89dd9773eb0bd6d7f8f30e2699184d02b59909be5ed52173b44e87659ebcde36
SSDEEP 768:STyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH34roEZw3:STyQRbrWvvlpZu1jaXKLf33DEZw3
TLSH
T16AC2E92F640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0fa7db7af984eec5a4a1dfeceae8fe6f18652cf740024532099fd8c5cd29b68d
MD5 9be1faa988b5f56e6a577a3cf65e9cdf
SHA1 851104bf11fc62b49fff20629d492d56c3826af8
SHA512 f1ca769a3697d6027eac92173ea05126d23459011cf94d9100f104e8c5fced00ea7de92c713e9c121840dcfbd3eaaf89ed19ddd95ee647f75a52034d7aad89ab
SSDEEP 96:KgHmKQou6ucK3q8t0BdnDfkvDePh1kKJBhpUgKdil:AV3lt0BdnDfyDeJ1pBhee
TLSH
T14791D051307B064038BE29D881668B6E524131F33018E66BBFBC05E59E6FE095FFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95d23c7a-abe7-4874-b02c-451bcad71c99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\95d23c7a-abe7-4874-b02c-451bcad71c99.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dba0b1c6b82cfab66352ed6593545870f63d625a14bc50fb2e216f52c77f022c
MD5 a40440bb62c0eeea90ce43c1bf18c912
SHA1 fb456a791525d6559078b2e2ef9c9c65568063ea
SHA512 0059dc05fe9b3be780ace9bc16d8ed14f9791fdf752a950f17ee89029127018e699b89ca8a1aee6d453a62000bf74fe58246512572ad20d2477a46a4dba5ac6c
SSDEEP 384:miFiZcIaxsNu8TUNTUlIlmuPLHyp5u8ijOBP9Bkwc0axzHoO:NFQkTwgvbwkI9Bkuaxjx
TLSH
T136A26C735CA8A87ABDE79A45F94B36038EB44177D7D8AF90E2D8961E00D72D81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 815d4e174c025d88443c063390099eec6dacbdedb321a753077814dc6ce39e07
MD5 5dd0540ddfa03ed563c9379862c6fb7a
SHA1 7de922aa21c9a8b649cf426bd774755af6ac0a0c
SHA512 5fe4aec4d031cb11874f9501531fe61e0a9f7cb5346d8322a7a322f8ae506b4cfb81bb5dad98ac634f49c7ba79ddb77efe146d53ebede1d86f667122db51dc59
SSDEEP 384:yZcIXsNejuPvHyp5u8ijOBd9Bkwc0axzHoO:AXoHwkm9Bkuaxjx
TLSH
T123826D7228787C76A8E7A541F5873A038EB88167D3CC6F80D5ECA71E05DB6D81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6135050e71d9a40e87675f1a3adfeec85b2e66a72533a4d43fe653c2b3b17a5d
MD5 14ce708cda2aed9bf511043be6ecc802
SHA1 0f996175d95b658363d3f09138a7ebaa43098fb1
SHA512 85865511340cb7d628e7b70eb1747691a4b24edb0f69787f3da7d23e28a2557e39bb88791dfdbf49dcff445f73d77756aaa177962396f869aefb6f57b61bb420
SSDEEP 96:PqONkNQsjpfwDISp5ih/cIPURHl8h4otop5QmDrBfPGxvw45RxmJm78lFUxFqsej:SONV6iDCQmiUyjVHq5u88PjaSqjcpLU6
TLSH
T19A02E739AC782C6B9EF3AE05B54B7B179FA4013FE6942F84D9E81A2D01D729C1307522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ed2fee6c359579098156fd456ffaaf9ba308726244dbb310a9ef4939ecaa2915
MD5 5fc19c26f8f6373eab1601ba5c632c64
SHA1 0f4598dd50c15cf3c1f6c53d217f99a4c15b98da
SHA512 bd6b096ca693bf750bd21901bda5bf1bacc40b0d804a982a82b166805c1144727ce26fe0a383363faa395ca2cc45b8d768ddca69313d0b32b5a23e954e27aec9
SSDEEP 192:SON/6iDOQmiUy0Vuq5u88PjO7FEuZs/wU6:SON/6/huq5u8ijOB79U6
TLSH
T18F120A36A8787C6B6DE3A950F54737175EA5423BE7887F84D5EC162C01EF29C230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 24101bfc4ea1e365e1dd4a9286e599c8ea197c12d6045ff01a08fa3ba65d509e
MD5 857537070bf9ddcfe6247bb338fc7c76
SHA1 4564db3bed11edc6c5a51005179bf613bd3155af
SHA512 b10b76f2ac92ac2ae2ea983a984673d040265302c7a9f8de5273027aa820e0f90f87e90335a0a1f74c25931503455e6e98ceac45acf0975e3f3dd572495d471f
SSDEEP 384:3ZcIXsNemuPLHyp5u8ijOBd9Bkwc0axzHoO:/Xzbwkm9Bkuaxjx
TLSH
T15E926C7228787C76A8E7E541B5873A039EB88167D3CC6F80D5ECA71E05DB6D81307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 79b619c2f9ce9f8d01eaf6609a377f06584f1398357d9f93bae3ba6cce7444bf
MD5 4d9bcc7800e6815a75ce6bf453e49808
SHA1 7aaa3dbad4eaac0fd4b18af605077c1e9082e53c
SHA512 91f242a29003816ebdc99972bac45ad04b8951ae994514be1cdd1d5340ef1d055dbabd22ee2295213577eb10078fedbab554ae08dbaa66a34028b3247cea8dcd
TLSH
T1B0412758A6FA1048B3B66F566BF6A9AE047B7D371F0AD45D00010E4F0A37B40C862B33
MD5 SHA1 SHA512 TLSH

Submit Download