9170052f6ae5baa6c5b8d276aa365b6434c938ee96200a48437d5a46274d15e9

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 11:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9170052f6ae5baa6c5b8d276aa365b6434c938ee96200a48437d5a46274d15e9.html
Size 122KB
Sample260912-n38kfabb49
SHA256 9170052f6ae5baa6c5b8d276aa365b6434c938ee96200a48437d5a46274d15e9
MD5 340ff11119bb00e398ad35142965db39
SHA1 822c24665872b23cdf1b04d7806ab68047dadd15
SHA512 4302116d9909363586a4afa8092119166224455fdc88fb9e0c4b5461a3d9fb928050c043fff39aabb4cbdfb093798f96c342a6527b3a3857779144ef281f8da5
SSDEEP 1536:FPx4Yn+hptscRVm4LcI0XhyMl5QzTtYNoXxrRZtbEao9bEao5zofifjQpJjQpTi+:FicQaN8rtdo9do5zofifjQpJjQp9OkfL
TLSH
T14AC3C59712208CF5EFF81DB345DB486F3C2D0437A80290B9E3ED8E966FA795D034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4600	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338331224904519"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2C2380B0-75FA-464E-A4C5-4C5A29221B55}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe
420	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 420 wrote to memory of 4068	420	msedge.exe	85
PID 420 wrote to memory of 4600	420	msedge.exe	86
PID 420 wrote to memory of 4900	420	msedge.exe	87
PID 420 wrote to memory of 4900	420	msedge.exe	87
PID 420 wrote to memory of 4900	420	msedge.exe	87
PID 420 wrote to memory of 888	420	msedge.exe	88
PID 420 wrote to memory of 888	420	msedge.exe	88
PID 420 wrote to memory of 4184	420	msedge.exe	90
PID 420 wrote to memory of 4184	420	msedge.exe	90
PID 420 wrote to memory of 4184	420	msedge.exe	90
PID 420 wrote to memory of 4760	420	msedge.exe	91
PID 420 wrote to memory of 4760	420	msedge.exe	91
PID 420 wrote to memory of 4760	420	msedge.exe	91
PID 420 wrote to memory of 4268	420	msedge.exe	92
PID 420 wrote to memory of 2460	420	msedge.exe	93
PID 420 wrote to memory of 4268	420	msedge.exe	92
PID 420 wrote to memory of 4268	420	msedge.exe	92
PID 420 wrote to memory of 2460	420	msedge.exe	93
PID 420 wrote to memory of 2460	420	msedge.exe	93
PID 420 wrote to memory of 3268	420	msedge.exe	97
PID 420 wrote to memory of 4056	420	msedge.exe	98
PID 420 wrote to memory of 3268	420	msedge.exe	97
PID 420 wrote to memory of 4056	420	msedge.exe	98
PID 420 wrote to memory of 5000	420	msedge.exe	100
PID 420 wrote to memory of 3248	420	msedge.exe	106
PID 420 wrote to memory of 4904	420	msedge.exe	107
PID 420 wrote to memory of 4692	420	msedge.exe	108
PID 420 wrote to memory of 2008	420	msedge.exe	109
PID 420 wrote to memory of 2008	420	msedge.exe	109
PID 420 wrote to memory of 4828	420	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9170052f6ae5baa6c5b8d276aa365b6434c938ee96200a48437d5a46274d15e9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc66cdc188,0x7ffc66cdc194,0x7ffc66cdc1a0
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,6480736146876778377,2232390380380482450,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,6615105082335891822,12717379555695502933,262144 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,2061762164742671991,10555844344600315020,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,17362559286970294093,14231037687969219062,2097152 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,2702133060837595036,17128515993041224062,2097152 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,4161706108484737193,5443397201510872609,2097152 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,1296490261566662104,8075111256227123702,2097152 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,11110664390844183343,10266497619421863242,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,18272469898237793429,12371982560936082969,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,9279375311369353166,1003723039222875781,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,9279375311369353166,1003723039222875781,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,519044898906528883,11399968150313117251,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,17926128159352678590,2278258547696865817,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,6793625192278232053,8769974366408739484,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8915196681213951181,7127228581323475184,524288 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5952,i,15480114838501649143,7441837642069164818,262144 --field-trial-handle=2364,i,16575332336486079007,2886609664831296323,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bb744081bd09e9c7b8afe69eecac786758ee9421fb312d1b90ebdeaf2970228a
MD5 ee0fbc70ba34a063ea62d3c43224f80f
SHA1 8a88e5443fd12c5f53000bdb2d03d60352769003
SHA512 bcfe1003722c95f78717676d7b52225c7bc5da6d77c02f9832ef06050134c308df137d47eedadbe6f9bbdddcdfdff12f38704c554d4b9a058e4d3e0ed5577d5f
TLSH
T110613E8050E0C4A7E7A8D671F1F2528F3928657145CFAD5A25E6C5BF4B0FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c37a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c37a.TMP
Size 3KB
SHA256 93d84e75450db186404c0263faf14d05a2cbd959d43fc4bdfd4cbdb68c07c0b8
MD5 bf1f560f5615000c4c2a892758f9bfc4
SHA1 2bae4639e0f95055b5f8ebb8727e4cc370f3740f
SHA512 f47fa807bad576c638d5578e217a2841bd38875005412f3501c4856735c8a67b12b3e6fe57814905bc9ca46a2b8f084103bd42d13c885a788df8e59d4f7cd854
TLSH
T1C3613D8151E0C0A6EBA8D671F1F6928F3928A57145CFAD5A20E6C9BF4B0FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b27d198268a707fd7c4bd115e1ab69f581a611de7c9f556e3cb5545eccfe8d7d
MD5 28124b88df87f139d0100f65157d8806
SHA1 fde4a9704ae41c36e280cc42fadcad3d2af4d755
SHA512 6477924e5301db5c82f73954dc75c7d68c28076698047c39eb78b4e2a1a63e1eb6a96323309aa7d79cc398a00804e27878af3faf9f3a345d289ad254da41d5d8
TLSH
T1D0415BB7C3D8866E8D1156F4AA246F27CD1C0A46422C3C1689E4AF1F67F24B1E20159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1fd06bda5a3c28966393a3fe4ba472e65fd4461afc12245a445d43b726bfee5b
MD5 f90080e698b6e44631b1d2fc59c1632a
SHA1 d90d64ae18f661dc1290eff552af7c4f94845614
SHA512 ff130250f89b6111589c1da59a89390a77383b34657e4bde5327ad6a5d1b21d2bb3531e220c87b2a44759e1074c711838a2fd0e4b260ac1027bfabe9e295b534
SSDEEP 192:sxZ8R5W9/fisO+lIdpd3HW6+WNGY36ailIgrJ:sxZ8O9/fisfW5HbGXl9
TLSH
T1E212C9156E28A97B8CCBD20DBA25BF53E6F9503261D01E58EAFC961C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4866550228de1b512ba7129a91afc77f11d094e3bf1043edc685d34e7cb8f663
MD5 0daf456b9dc478582d46ec6a1728cb27
SHA1 58a722a19d4ad09435aadb6232949e8cd91b07b3
SHA512 9b979ede3e07e8efab0bbac61cae2bec7cd10ee8c7435535497a0136773611ed9bc8bed97859462dbbaebce596e7b3830406096d46ffa3bea33c246571b8089e
SSDEEP 192:sxZ8R5W9/fisl+lIdpd3HW6+WNGY36ailIg5KJ:sxZ8O9/fisIW5HbGXlM
TLSH
T14E22C9156E38A97B8CCBD20DBA257F53E6F9503261D01E58AAFC961C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 652ed625bfa95bc067ca46fa8f371b6dc480a1fa239dbf1f45a93053bf023f35
MD5 533d924e134bbaaad9c0a4d074879b24
SHA1 667f97f3a435454a766b65e4d32307bc1b6e61c9
SHA512 9a0276cc97ae33e3e5a660178d77c123ec9a6e8b5f5f41673905da6aad0fa77dfe9f15e0a5206c91dc64e4fb8cb3869efeaebfcef858e7dbcce68565ab271fba
SSDEEP 192:sxZ8R5W9/fislLlIdpd3HW6+WNGY36nilIg5gJ:sxZ8O9/fisRW5HbGXWG
TLSH
T12A22B8556E28A97B8CCBD20DBA257F53E6F95032A1901E58A7FC8A1C05E7ACD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b0b1c1ceb16ed876c3c93434e803688df8b4bc19fa87fa59e03fdc27655fa93e
MD5 c7ec0ed95f07eff7fbf8c474f11865bf
SHA1 aa815fea9320fd2443696f49c0edc0e71adbdbef
SHA512 dc20f0f66305f8446fb007f08aa2e906333bc3c8e1c790ed06fa488096c1d0569b591321c7a37d2c05c04f7a587e998681ca233ef3f44354016ef6575dc146a2
SSDEEP 192:sxZ8R5W9/fislLlIdpH3HW6+WNGY36FilIg5gJ:sxZ8O9/fisRWXHbGXgG
TLSH
T1E222C9566E28697B8CCBD20DBA25BF53E6F95032A1901E58A7FC8A1C05E7ACD130741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 139de4937a89baacfd1094b00669977a7827581945aa880bb04653da0f5c5d7a
MD5 93d99d881ccbba0fd2b25c32f2c7a5b5
SHA1 4896ed9c503e9b38c2de6d2d5b2d501dbdbded66
SHA512 fd3f3920ea014bcf1393632412b861e0bcc5fc9a06772bf374fe865b0c1bd8be6d137e7bd0ba0fafb4dbc195ae24f7017a577f958d122c3dc410c1520c9621cd
SSDEEP 768:pdKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/6rosL:pdKlm7QWvUYe0u1ja8/L/E/xsL
TLSH
T12EC2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ac033c9ca94aee62311431eed81703ad21ecbff9d2714eaa05127f028115ae2a
MD5 32d2f915533e2641247f22cb4a70a951
SHA1 3fbba93ac67a21ac144b205c7248b7027e2ffeae
SHA512 d35d75142633be755ccb8a68987b378cad5feb3e6a7fcb9f3c9c839a48272b8d55e8cf3075a9721de6785cc7fcf0198f165c933ba6be1100e779764429ccabff
SSDEEP 48:K098xN/rvQbjWDISFQK9F1nQxVAYGH99yLFk51Hznob7+7ISNoK9t1foxt4Yuf3w:KMWEKbKmKSMKjCIb6KgQi6NuZtTrB
TLSH
T13891D51570BB0240387E355882A5875E014275733029F62BBFED506A9D6BE1D4FFF9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5e841ee-20d9-4cf5-bbb2-20edd15480b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a5e841ee-20d9-4cf5-bbb2-20edd15480b7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d0a375526b84750713042986a901ed5c837690638f2af9eac7a4b92cade4270c
MD5 0cdaf0c61f98fecda68516ef9196746d
SHA1 bce1ad430b385d54579944b14ba854586a9369c2
SHA512 d482dcd43eba4d8565f0645892f0c3370d431194ba1aaa69ec288a42e52ae3ddd057310f0027bc946e016a5e3bf56a9c0aaf8b3989f074a479b1dbcd909d9e1d
SSDEEP 384:UZcIgsNrQVy34rb9dYuh//kTP8T7O6R2FeoXZoN:Sghyyv/XT7TR62
TLSH
T134827D716C34EC369DEB9156F44736139EB880A7A7C95F80D6DDBF2E01DA9981307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 70e78070009bc14307bc7e9b8f5381a341f384ab764177b5826c7a9c739a7206
MD5 a4e4b4dcaf018dc6b4497d3c0a12805d
SHA1 09c93b23b271ccbe903d6241c95056841cbaa220
SHA512 dd7fa7255c26cd1ebcc84255dc1f66a663bdfa05cd3344d18acd2111b654663bbc649be60a181ec04332362ccaac386a4c1fc4e9f002b5c02be47c5938f29fb8
SSDEEP 384:DiFiZcInOsN18TUNTUlIlhVy34rb6dYuh//kTPAT7O6R2FeoXZoN:uFQOgwgByRv/bT7TR62
TLSH
T1C1A27C726C64D83BADFB9695F5463603DEB840E7D6C99B90E7CDAF2E00DA4981307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 46d6e7b245c58fd2cd77d5aee09d2f36e43be51663106e3470a0cdfe9d5eefe9
MD5 5f2f3b61daa3bf5da9ab47330b564fff
SHA1 2eb5baa0d521f0e2bb187f62da05dd98adec1d1f
SHA512 30ae1e85ea759abc382e834bc151c7ab3c72899c4f87d1081f58c5b8bdd073671fcb3414736bb58a83ab518a0c6308cf164f4e450de2c18295f73b677626b243
SSDEEP 96:KqONk0QsjpfbUmjH5ih/cIPURHl8h4otop59aDtBKP4v+Y1xf//ojdixHeYMyw3L:BONU6JUm0QmiUy+zso//gyw3BCM3U6
TLSH
T14002C839BC28BC7B8EF3AE45B0477B239FA4107BA6951F80DAD92E1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f21e591100a22de78186d7d4567f6b7ccb458b1c58c21fcdd44a58f2b546f802
MD5 cc12a692ddbe2534e5660f534a60fda2
SHA1 103310bffd8d9e2d0525593a637240661aaaf6f5
SHA512 45ae70713cda0466b76530d46c09a1c1a6f2c2ea08bc6ee805847aedd8ea88494c6abd64646abbaaf83eeaa84f589a211d73d0318836db0b5dcfa6b4e29f470c
SSDEEP 192:BONO6JUpQmiUywzzo//gywTPABNx5/NU6:BONO6+H5zo//kTPoTU6
TLSH
T14A12F835B868EC3B5DA3A591F08336239E644067EB895F90D6DD3F2D02DB5AC6306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 498656011b48e41af56ac01092de0ac0c0290141dc2a24481a96773f60363b93
MD5 135dbbd3e8eb3cef09599610a8195223
SHA1 820e35024b5af74d847653365c8ba5c9501c5401
SHA512 c08ea216b918b5c457dfdc2c4d05f3541e9fe658c19e3265f17b0c19fd6a9d868c50c0dfc587d0b000045b5ae32cec61d6a340434aa36f64cc87b9f7d1202b65
SSDEEP 384:0ZcIgsNrhVy34rb6dYuh//kTP8T7O6R2FeoXZoN:ygcyRv/XT7TR62
TLSH
T1CB827D716C34EC3A9DEB9155F44736139EB880A7A7C95F80D6DDBF2E01DA9981307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4103db51-e6d4-4a6c-9f4e-e469b4271b76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4103db51-e6d4-4a6c-9f4e-e469b4271b76.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 00929c0b32e527553f366525547cce5a0390deb1ecf768190d4cfe6d54296110
MD5 40157ff679f052c12bb0884fddd9de1d
SHA1 4990186ee321e51e9b4711691c847bb764528fd5
SHA512 49b55e0a1aa3b3ea3ed1d868867b9f5fb721acfcfd929428b32694387788c73c2a5278e2dc46fe191996fa8420faa5cd21b2d6a6197de37acc56b26c3acc05aa
TLSH
T10541245CABEE1018B3B36F5A9BF7A9AE487BBD372E0AD45D00010D4E0662E44C861733
MD5 SHA1 SHA512 TLSH

Submit Download