febb9fdc5d079a0a2b8fb562ec9ebe9d42f4166391aec302bb00a5db8fd28873

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_febb9fdc5d079a0a2b8fb562ec9ebe9d42f4166391aec302bb00a5db8fd28873.html
Size 105KB
Sample260912-ls9nmswvbx
SHA256 febb9fdc5d079a0a2b8fb562ec9ebe9d42f4166391aec302bb00a5db8fd28873
MD5 dc2f57973f48d093196e14c17fea12c4
SHA1 f1b237ad2ca38d134188548628305a225bdd9229
SHA512 55543720d9891a0015682a62f4cf7048a23af2fbe611c08d50c4cc1934a6674ebe8e0b58a41fe047010d9e2e2af9cabc3ccb5ef78f11d8a0d1f63b8b187a2c45
SSDEEP 1536:Cmx2Yn+hl/jz75R+6E069U2GlmlGQvTtjNoLxmMwxbEaoKbEao5u:bcl3QhN1fxdoKdo8
TLSH
T1F7B3948701204CFAEFA149B3415B58673D2C5437BC5791B9E3FD8FAB2B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1724	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338185430309279"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{B2ADEDDB-09B6-4144-A02D-1C43A90D4F04}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4248	msedge.exe
4248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 5068	2448	msedge.exe	88
PID 2448 wrote to memory of 1724	2448	msedge.exe	89
PID 2448 wrote to memory of 1872	2448	msedge.exe	90
PID 2448 wrote to memory of 1872	2448	msedge.exe	90
PID 2448 wrote to memory of 1872	2448	msedge.exe	90
PID 2448 wrote to memory of 2336	2448	msedge.exe	91
PID 2448 wrote to memory of 2336	2448	msedge.exe	91
PID 2448 wrote to memory of 4912	2448	msedge.exe	93
PID 2448 wrote to memory of 4912	2448	msedge.exe	93
PID 2448 wrote to memory of 3592	2448	msedge.exe	94
PID 2448 wrote to memory of 4912	2448	msedge.exe	93
PID 2448 wrote to memory of 3592	2448	msedge.exe	94
PID 2448 wrote to memory of 3592	2448	msedge.exe	94
PID 2448 wrote to memory of 2176	2448	msedge.exe	95
PID 2448 wrote to memory of 2176	2448	msedge.exe	95
PID 2448 wrote to memory of 2176	2448	msedge.exe	95
PID 2448 wrote to memory of 1088	2448	msedge.exe	96
PID 2448 wrote to memory of 1088	2448	msedge.exe	96
PID 2448 wrote to memory of 1088	2448	msedge.exe	96
PID 2448 wrote to memory of 2660	2448	msedge.exe	99
PID 2448 wrote to memory of 1060	2448	msedge.exe	100
PID 2448 wrote to memory of 2660	2448	msedge.exe	99
PID 2448 wrote to memory of 1060	2448	msedge.exe	100
PID 2448 wrote to memory of 1148	2448	msedge.exe	102
PID 2448 wrote to memory of 4508	2448	msedge.exe	107
PID 2448 wrote to memory of 2608	2448	msedge.exe	108
PID 2448 wrote to memory of 2320	2448	msedge.exe	109
PID 2448 wrote to memory of 3612	2448	msedge.exe	110
PID 2448 wrote to memory of 3612	2448	msedge.exe	110
PID 2448 wrote to memory of 4248	2448	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_febb9fdc5d079a0a2b8fb562ec9ebe9d42f4166391aec302bb00a5db8fd28873.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff744ac188,0x7fff744ac194,0x7fff744ac1a0
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,17238684073461415832,14059141054060853096,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,17643413061756625523,1177752703380737584,262144 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2176,i,3754390040245414396,3820205385684781363,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2194969897080855883,14466219652106498327,2097152 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,7324201267828162262,6010596365400459928,2097152 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,12052971155721766781,659133963303660972,2097152 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,3705144816732160803,6393275648788839238,2097152 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,2974767084539687167,17699096606165033106,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,17506523751033666615,10359742853917610482,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,4161242682788800505,9644510989184911774,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,4161242682788800505,9644510989184911774,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,7163323171738254579,17852705461762965013,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,16620155437601651754,9427494710875815782,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,11207863425076616759,2761953580995335488,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,2848040700122667262,11643519437231170814,524288 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,17945678654275564655,15141760646073873850,262144 --field-trial-handle=2368,i,8189292053220663648,4775575022821533967,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4248

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0665ab03c469319d6d287cf36938fe07908bfbab90d6873948e48478ca4d79fc
MD5 a45b596b7cfd0c6e5b3093baacc4fa51
SHA1 16cab00f3f786411c7bcee3078a016775a4822be
SHA512 6111773c946a2c2c35a1c84a772e9f3f0ea3f401745e12d67226a30374d64d121d044e7e7b6ad57f53891ccb11232808b672cbcccd89c7d483f57e52896db768
TLSH
T13851EC499698A9A5F7A81C7942F5A387373865C1CDC72E371CACF93C3F8A3825102240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590c5a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590c5a.TMP
Size 2KB
SHA256 1485f2e6e537c4468cecb3018789612ef067f6aa95cbde7a4c88d3c2c68301a8
MD5 a5a26421ede76487699a0e7b9317ffa7
SHA1 3b151b473d9f1981be57aa1cc78d09bde8741e81
SHA512 e89f4e8dfcf82d586c45caff796695d86e8c2f970bfa954e715f4ce2f6eb3a024efcd0b20a91f5adf03f6d8781cb2d922b4acd7f1ccced832818c34729bd5451
TLSH
T17F51CC499A98A8A5F7A81C7942F5A38B373869C1DDC72E371C9CF97C7FCA3865102240
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9038ab066fd01e3e90c4bc97248362ffb46682e0c9bacbcecbf8c73601b5ae19
MD5 a0e81c2ece78df6bd6b271003fcf8fc2
SHA1 4af2898f6737ebf3ec8c0a24842799a5137c0779
SHA512 ec4d4c27fa0faef807259768db0af70b295cf42eb2f04ccbd8287bdd44f3210d79b212a86c044b180a589a7eedb635153977f2ce7c06d9773327c1f926a6d6fc
TLSH
T14E4169F7C6D4967E890197F09B286E27CD1C0A1A422C3C16C9E5AF1F63F28B4D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 33441ddd61cd11358e2e4ef67b89237e25efc2622dfb9a805fc06a14eb43e204
MD5 48d9ad37c62b37bc6fae3ea32203bfc0
SHA1 85f7308760607f283b2286575e288063e12ffb98
SHA512 eca7ded3859c65c0b5db2116754529b2a1585f2388649dfb44571e35679517564c14aecfba116e37a97897da4b98068df52a108ac12491960516776ddf452e04
SSDEEP 192:sxZSREWe/fSs6HOIdpdWHW6+WNGYapYtmIgrJ:sxZSBe/fSs6/MHbGz9
TLSH
T1D012B912AE28A57B8CCBE21DBA25BF53E6FD103291951E88E6FCC51C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8347a051234a55e81425583cf1b120d8bd477982ed0a6f5932b42400efcfc9b2
MD5 fe54225fc5027193c71d8880b3a850c5
SHA1 c7029cedca820ecfddb73ef1f1a1f9679b755ae8
SHA512 ca297f03623e711464c8b5137f528aeb2731e0437783f5f8a5f84d94e1b7f26262c1ed550eecd51d211f27a065bf3159bb7931a0cf9480762948ee561956be20
SSDEEP 192:sxZSREWe/fSsrHOIdpHWHW6+WNGYapmtmIg5cJ:sxZSBe/fSsr/2HbGlu
TLSH
T1F322C852AE28697B8CCBE21DBA15BF53E6FD503291911E88E6FCC61C05F76CD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0219b42e96dba96803db47f628473aafd917f79e117052a8f98eb676f6c28592
MD5 c75d5273d2304ba058524f3dc96edc40
SHA1 af189ce23f837657203db6e4c5c4a7abffaeeb99
SHA512 edddc72bb1dc54d43b5b032c9c5ed4bc4fb60b3408fc66246f11f8f16bfa14d3d58df8adb04aa9c47df9c7b55be66b8cc98c16546f31594605c65a3bd32ac51c
SSDEEP 192:sxZSREWe/fSsrHOIdpdWHW6+WNGYapctmIg5cJ:sxZSBe/fSsr/MHbGju
TLSH
T11B22C812AE28657B8CCBE20DBA15BF53E6FD503291911E88E6FCC61C05F76CD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3717408d23a114e06f646d8593deaedacaf139d5ba2ef468c0b3fc7ff225d3ac
MD5 9b00dbcf43968a4ace1a1a473ae5fe58
SHA1 92878f25779202686e5dda4d6293f3658178a062
SHA512 4eb6cca21a38e2ab81859d3e4f0bcb94c4e73f7e9e758547ded20495eadadf8db086b65497f1d31a4fa5437abae7975a31977c08827b73926e2486fbfb757c20
SSDEEP 192:sxZSREWe/fSsSHOIdpdWHW6+WNGYapYtmIg52J:sxZSBe/fSsS/MHbGzE
TLSH
T1CF22B812AE28A57B8CCBD21DBA15BF53E6FD103291951E88E6FC861C09E76DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 aa3b0185ce9df178f3f9af79cdc9cb3bfd140c29ce8f9791c0d02f2b4d6e4646
MD5 2f369f926e1e342c044caf7221eca480
SHA1 ba5e0c33588afd3e8ced0dfe267725917768d6fd
SHA512 a0cbdb6f2b841d418a5e8238f7c691e5e8382347a0d53c6919d42ccdd78d695b0c65b21b5712755e39e10be26b4a0a7143835950694c3bffa0dd008150bd1da4
SSDEEP 768:YQWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Hro45fevmRy:YQWPcLKWvKeEeu1jaClLiF7U45WvmRy
TLSH
T169C2EA3F640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f9154ac922e781390c654d490ba80aba5afa0d441abde90ee8abd64e8344f012
MD5 8091420c6b62e9107dbe73831ce7a36b
SHA1 3dd14ce520f2689db6ce7bcdcd7740518a1ca93f
SHA512 9f48c6c1958df11edd4080ac46a8b6b90ee8bd87440dae05e855f40d6236b9ef2db00295222202e6b2e18f7736ba104a81d705fa752413b3bc1a7960c4870418
SSDEEP 48:KsUITKda8/SyFFIlKGQ4XyNbIBKowEe2TgMu8w:KsUgKda8S+FWKGQKObyKowz
TLSH
T1DD91FF4172BA124038BD2919D174872AB2413573361AF62F7FFC61A1AE27F180DFE4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a4c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a4c2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ad63347b2e991ba242ab58d6452f8fb00ddef493a7b9de83c0711aca918a157e
MD5 4064497365b8a1228b4b83c02937c3a9
SHA1 f9892e85a07f624a859fb2b13c032dea659a096d
SHA512 0050f2580d6f7249235b550b73c9f5f691425372155936790f2f103486674864ef681b1792c2635c8361e7b1d2eef6a7a5d03930d2acb492413c9dbfe08aceab
SSDEEP 384:MZcIBsNAe4lfL3E17qk4zIGmh/qPhi/7O6R2FeoIoT:aB2UkKeCZi/7TRHQ
TLSH
T1F7827C729CB8AC3A9EE7E105F8473D035EB8816797C85F80D5ECAB1E04DB294131B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2f032c92f1ea9fafdfee802e7d6ba887bc54c631fae83ea1aa3190081080bf1c
MD5 c2fa5ce597554d4a291adadad763cb99
SHA1 75329e571fe8971cae9e5037352392cc925402f8
SHA512 3f353affe3ff8cd83ff37f21835f8ec2c69ea48d459026d5d7596a9ca785d28fe6b44be8680336020b6b817ebddbc72b4a2abe5b4198997cee4cc34e5d52ede7
SSDEEP 384:8iFiZcIivsNA8TUNTUlIle4lfL3E17qk4zIGmh/qPYfi/7O6R2FeoIoT:nFQ2ZwgAUkKeCQfi/7TRHQ
TLSH
T1B4A26D738CB8D83AAEF79A45F84B39039EF94167C6C5AE90E6DD9B1D00D71D8130B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 395201c27bcb628aff887ccf5ba6c9fc94452d2874a14ecb95a93dff7eacbaf2
MD5 e30332d89c853c10497d5ebd01bdc16d
SHA1 e9bd1b7fdaa97e86e71c486db748ed0e9408dbf1
SHA512 89f2f5dbd8ebefce965e2fcd970fc3d6ad86059e578b3da40c1a74969fa662f4cc4b319b1b4bb1dc8c9eae72d75fe96841a215df39864e3298eda12445fdc0bd
SSDEEP 192:aONZ6IE7QmiUy+L+UTPuIGmhQRx4LC7sqn5U6:aONZ6Dt/PuIGmh/UsSU6
TLSH
T19C02F935ECBC7C7B9EF3AE09F4877A236EA9112BA6C52F84D5D41E1D00D725C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3f804b428d9c12796e01a30af0c2317a57ed1615ff328652a32352d8568cdafc
MD5 6b8d4be70cbec966d4900f08911478c2
SHA1 c2b6fff638f1a6c1628a07684bdcd940bb914621
SHA512 241963773e041afa29104780900e934eb6a39171fce83f0c060700488c3690e9fd54bc622d1a05cb5e259dab0b165b0c8120f2ed8d9febdc21ca652b1e15c07c
SSDEEP 384:VZcIBsNAj4lfL3E1biqk4zIGmh/qPhi/7O6R2FeoIoT:tB9RVkKeCZi/7TRHQ
TLSH
T104827C729CB8AC3A9EE7A105F8473D035EB8816797C85F80D5DDAB1D04EB294131B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ad5cd8f45f96b49ff990a3b066481730bd1eb686b189fe6414f051c26a5d97be
MD5 2b62be05e53d42ed9894a854de2e3ee1
SHA1 7fe9d49fe882eb7fdc9bb2be6be8ad1eaeb6b544
SHA512 a13612773311f5560ea5cc50bd405253f3f198a594705551efe95eefe7e7222f787516d5adca93dc173b5e204bcdff729c2b06162fa847edb70a89ca7c82d106
SSDEEP 192:aON56IEzQmiUy+L+UT/uIGmhQRx4qPNeU+27Hqw/FU6:aON56Dl//uIGmh/qPBH/U6
TLSH
T11B120972D8B8BC7B9EA3A944F48739136EA94227D7C97F90D5DC2A1C00EF29C130B516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a6ba9bb20346d50cbc020c07f6c951b33685f9c01516ca31e25515f40abd5681
MD5 16c0c12ef5db892623b73150f551de86
SHA1 b5b2b4fc75e0e8851fe6b0314a2c478710b7bfd8
SHA512 4ef36c91883e78fca7c96ba6cb3e6c1e9e123e2294a325e5ab58403fdcfdb8fd19533501d90a4915860a31c9e7b1e36a89a22aa17e47684d293f2c2764baea81
TLSH
T15F413A6DB6F91208B3B76E5A9BF7B86D487FBD772F0AD45E00010D4E0662A40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download