1268b137e2e45e8f0f8bdda16ef5c0de8b69cbe4a2ed76c7995b5f09682778e1

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_1268b137e2e45e8f0f8bdda16ef5c0de8b69cbe4a2ed76c7995b5f09682778e1.html
Size 1KB
Sample260913-bbbeea1way
SHA256 1268b137e2e45e8f0f8bdda16ef5c0de8b69cbe4a2ed76c7995b5f09682778e1
MD5 3a3d71f35e42fb8d1d158bd50dd59a06
SHA1 439c31669b9e232f70abd93cc57dffa348139b9f
SHA512 83481a10e50ebd37e426613d9ed95a26dd4e3538a300c46e1c4642f357255a9673d887a9c709625ff17c79c487b7e6235c608fd2f0a6435c9f5fefdfec5a3631
TLSH
T1CA3175BE71C16136B703A97D61A7FF5E709360671A094935E437B0D06FA2744E113645
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3960	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338275482043966"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{78E3C5C1-E05D-4B81-B972-D3C22DAD00E7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2640 wrote to memory of 4992	2640	msedge.exe	84
PID 2640 wrote to memory of 4548	2640	msedge.exe	85
PID 2640 wrote to memory of 3960	2640	msedge.exe	86
PID 2640 wrote to memory of 4548	2640	msedge.exe	85
PID 2640 wrote to memory of 4548	2640	msedge.exe	85
PID 2640 wrote to memory of 3836	2640	msedge.exe	87
PID 2640 wrote to memory of 3836	2640	msedge.exe	87
PID 2640 wrote to memory of 4916	2640	msedge.exe	88
PID 2640 wrote to memory of 4556	2640	msedge.exe	89
PID 2640 wrote to memory of 4916	2640	msedge.exe	88
PID 2640 wrote to memory of 4916	2640	msedge.exe	88
PID 2640 wrote to memory of 4556	2640	msedge.exe	89
PID 2640 wrote to memory of 4556	2640	msedge.exe	89
PID 2640 wrote to memory of 3340	2640	msedge.exe	91
PID 2640 wrote to memory of 3340	2640	msedge.exe	91
PID 2640 wrote to memory of 3340	2640	msedge.exe	91
PID 2640 wrote to memory of 2328	2640	msedge.exe	92
PID 2640 wrote to memory of 2328	2640	msedge.exe	92
PID 2640 wrote to memory of 2328	2640	msedge.exe	92
PID 2640 wrote to memory of 1424	2640	msedge.exe	96
PID 2640 wrote to memory of 1020	2640	msedge.exe	97
PID 2640 wrote to memory of 1424	2640	msedge.exe	96
PID 2640 wrote to memory of 1020	2640	msedge.exe	97
PID 2640 wrote to memory of 2828	2640	msedge.exe	99
PID 2640 wrote to memory of 4412	2640	msedge.exe	104
PID 2640 wrote to memory of 5004	2640	msedge.exe	105
PID 2640 wrote to memory of 1992	2640	msedge.exe	106
PID 2640 wrote to memory of 3716	2640	msedge.exe	107
PID 2640 wrote to memory of 3716	2640	msedge.exe	107
PID 2640 wrote to memory of 3520	2640	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_1268b137e2e45e8f0f8bdda16ef5c0de8b69cbe4a2ed76c7995b5f09682778e1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9f6afc188,0x7ff9f6afc194,0x7ff9f6afc1a0
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,15847015531167552939,2140380986863774622,262144 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:2
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,13553430843539454980,5786373368526049033,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,9624015381780066379,15062098097222107154,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,12971811085728944609,6933541024257903098,2097152 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,10473488911623868666,12206336223873824977,2097152 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,15384004189437504927,4229606461526436435,2097152 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,9551720547485935680,1928971720674227659,2097152 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,9554096971351228943,14425441876919262915,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9856360965999171703,714772908535170733,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1807815978162462250,8242328273528986160,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1807815978162462250,8242328273528986160,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,16381594109159350958,7710888271380081830,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,1044931494491959318,13231436972747610128,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,17743797618287267683,9573728261348494783,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,13317866776136237160,14604411271526323599,524288 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,17929497023204941105,14392420574370014833,262144 --field-trial-handle=2920,i,12294863432989201900,7513295290062026942,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 02eb0c7e8b290c12328ba4aa631787774404feac789fdaf479842e27cd883544
MD5 5197011cce3a7359d20863b59bf9376c
SHA1 41844455c6206c2ba01686effe738a705b52048f
SHA512 def9d791d02f870f902e207eb0f8d95d38805b11771a5692d8795f526f8d2d281e36f55a0e69e46321c2c8a2d3e63f13a90b029a791bfcaf3a43447f31f3ee47
TLSH
T158615D810BB088B3FBA451F8C6F498D7BA32938D54839D110AE4F56D5C5332741F720B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 f53c583698558606fa75eb1788a715d6f9111173a91b3d6c6585572793cc205f
MD5 4b2286299188a19ea870a2bd937e1826
SHA1 11d5fd8401920eca5b4077a7c6d4d711af48954a
SHA512 e394d56d1b7ecae8f55249a9ff43506497449a40809edf0eda23423e282bba22b0f8da7f4449b2dce57d5fce734bd2c498fa4cf091612d5d5af309a629691089
TLSH
T1C2019CF3C3E499AE8A0156F06A18AE2BCE2D0546431C7C1AC5D4EE2B93E34B5D51189F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bd3d3688f4d64fd9139a5e225e81dfd094f90f6399864fbe7b34aece1f8dbf33
MD5 e4d95ef94d5af9f985d85ca224f24887
SHA1 275cc4a8549b8e87d1699468d68a0c5c1169720f
SHA512 d3cc661032315c0a4a1c0cc8d37e5cb77485b5f14dae03b6edca85fd8bed730419d0e30ae7f89439045d89484830f2281c28a7bf77fe09784f773e384529ee93
SSDEEP 192:sxZwaRJWl/f6xs0xqIdpdIHW6+WNGYgUa1IgrJ:sxZwayl/f6xs0xj6HbG99
TLSH
T1FA12A8116E28A97B8CCBD60DBB25BF53D6FA503291941E48E7FCCA1C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 abde90b9a03bde6c3e70e29ea7c61f49de8f6ca587e6604bfc78ee3abc00bf3b
MD5 63f7f8414e316e7a55d4c6c72ddeb62b
SHA1 ea6278e7d2b302ca5b1c8cbe66f3e42c195df8b2
SHA512 1e6c91f0c3b6410838065b6a0322763cbf3fb92865e716d1871a512320ad865d6acb8f65f3059e389792a2dc8918c0e182624cfb3c5d65e4d3b081eab34e2e92
SSDEEP 192:sxZwaRJWl/f6xsrxqIdpHIHW6+WNGYgwa1Ig5PSJ:sxZwayl/f6xsrxjoHbGd0
TLSH
T1FF22B8516E28A97B8CCBD60DBB65BF53D6F9503291901E48A7FCCA1C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0be1ba46e3b52b1a47f0f663bb9639a00c6b3635bd4f56867e1b3d337e1b4a3a
MD5 eb69bc4f5f5928ee33d56067f4892639
SHA1 1018b6c8689f8505dafc50ed667f2da0e57e0b58
SHA512 136d811bd9686d8f1779eca60422841cc98700a2f671bac822632b10453a5d99edd3d53241f91996774e10d582388e24ea6e4d8780ccc8cc98a1cd339dfc85b8
SSDEEP 192:sxZwaRJWl/f6xsrxqIdpdIHW6+WNGYgca1Ig5PSJ:sxZwayl/f6xsrxj6HbGh0
TLSH
T17222B7516E28A97B8CCBD60DBB25BF53D6FA503291901E48ABFCCA1C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 273bf1b2c42b8385bb405232350fc0b6510ffb2d48d86b34bb231946543d21fe
MD5 a59ef3a2a75b6c9666884e0ce35cffc4
SHA1 c59b4d2f6584f5ee81777bb59fb9b2dac7bf08be
SHA512 7a1d020500e00ff04aaca0012e9b6ad69a84e372b085e76d7889e41737dd73ec7f89295ff5e1de971a1913d6b3dafd491c4bae1c81a1e6e752cff7eba4e46c94
SSDEEP 192:sxZwaRJWl/f6xsMxqIdpdIHW6+WNGYgUa1Ig5PgJ:sxZwayl/f6xsMxj6HbG92
TLSH
T1FA22A8116E38A97F8CCBD60DBB65BF53D6FA503291941E48A7FC8A1C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ea3536d793ab6eb0a64a5fb5835abf19bcaa1bbdb09f3aa48f286d08f34242e5
MD5 cc599124603559209a45f8e1a0d9c215
SHA1 31ea3df6624b6ccd8df038a51c92127439ac441a
SHA512 d5372460827de69a2bab87b51923bfd127f2d6d554e2a4d272019bb4aecc11df3874788b7ace7891cf64931035582cca4f82cf288c3c4c3a2860b0fb2dcd23f5
SSDEEP 768:dSichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzaro72ej:dSichfPWvPZplu1jan+LKgzR7Rj
TLSH
T108C2F93B640CCB7E4FC01E5DDD5A6F9A7E9802C7A6688D4047FA984C02C77EE91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 15472d0fd29e4a4845f53f49d15e5f97cf0cccf12dc9436a1bad0d8203d21eec
MD5 3f244dba128958d2368e330903d0ad9e
SHA1 4dcf2e278a97e891b6dda7d945ca98e10024cb54
SHA512 63edcd86de29ba4a6c55143bba3c1c24bef6e7db35b635e7a03d1936a715d5b2fb76ad1d5acdd556fc0a2c4a4b92e070ba2a4dd2f494d9301d5aa0b0fc8fcda2
SSDEEP 96:KAdOKOY6VAr8QuC+giapzIIgKQ1IWgsYIZ2j0gKNCWG:URVAr8QuC+1ap8IU1IWdYIZ28rG
TLSH
T15191420135BF068138FE69888574872E464132BB3768F53B7F6D00A28E6EE145EFE5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b76f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b76f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 50702fb993be2e0a55c762155c39b1b3573994311336702764c0ea73a9a68083
MD5 304b364a4b67469ad46ab6ab437a96ee
SHA1 b2806a882ea57ca359d196ca5eb43d16cafcc15e
SHA512 76a931e57008ba1f2cdee2d81802fbd287558245279a5d8ed06f6fbfd64482ada49b3cdc6dc224b752dffe33cd3c0f31c6d0c5813d338cdd756965efb490f929
SSDEEP 384:eiFiZcI7osNn8TUNTUlIlZkHC53A2BGYX5EzyOi6Q00bm87O6R2Feo2h7UMoE:1FQsCwg8iiwGYuzyO3Q00P7TRRFf
TLSH
T184A26B735CA8DC7B6DEA9A41F94A3207CFF95067D6C4AA90E7CC6F1D009B198130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 77a4b6947d478795085029ff9b85e27796b01f55fa9320df45dc7f49a5a46ed8
MD5 4d1433457d7f3d5886ea919d557cdb55
SHA1 e5125cf330d39026f1feb4c2d61a8e3e4434b401
SHA512 0a7950f17ae8f4a4a45208e0aed8cdd72e86fc9d23fc84b1ed598f897aae534fc32e56b05b079d6204e521e3bfade15d3516e2e1b3365e9b9dacf41faf809564
SSDEEP 384:UZcI6sNdZkHC53A2BGYX5EzyOi6Qh0bm87O6R2Feo2h7UMoE:S6tiiwGYuzyO3Qh0P7TRRFf
TLSH
T1DC828D725CB8AC7B18EAD242F54A36079FF89027A7C81F90E6DC6F1D05DA698130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dfe014332b6cf5bc2b12fabb5c5f94b6e07725243bf619e249f3c508f76f7405
MD5 08ad5be723172b17997a9a33b7c85a7d
SHA1 8f4a374959fc2095360b32f33a9e1386dda26020
SHA512 f9b4031d1551981a57d4a1f7c025d9c59a0a51473926bf8ed5686a5f4530bf232f82c980bfa005f42a514221e33d65f351349dcb37cf8479164abca92056e63e
SSDEEP 384:UZcI6sNdAkHC5qA2BGYX5EzyOi6Qh0bm87O6R2Feo2h7UMoE:S6WiPwGYuzyO3Qh0P7TRRFf
TLSH
T1CE828D725CB8AC7B18EAD242F44A36079FF89027A7C81F90E6DC6F1D05DA698130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 799ab3543750f257df1a7755ab487ef834f61b8d6247b82cfa0e2534541296cd
MD5 0795e129a1f44801a25af0c07711dde3
SHA1 a9f380d6ee8829ce9bc137efcff79e5124cd1609
SHA512 665723e3d713c2ab27b5c0d9225c631206ed8744e6d9a6f6b61d33097b80f56e155adcb82bcc5afd656e511ecf82b8da1c47756c3f15db61e2407d94e7ef612e
SSDEEP 192:LJONf6DphmqQmiUyKpq8wGYX59ez6CyORMWkk70QyU6:lONf619jRwGYX5EzyOiw0HU6
TLSH
T1D302F735AD78AC7B9DE26E46F5873613AFE4102BAA942F54D6E82A1C019764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 55a1a8831e1d8d304bb63207a7355d87291f5635e44bd8305b6cb3dabdaf6074
MD5 3bc1fa07027f1cffe60ad52d21acb8e2
SHA1 78f298b5b6a556a4b798cda1fed700637774164a
SHA512 72a6f055e46e35d21f916c1dcc2266ac94a261398124ee04150ab96a409bc45c129cc927d16ad37f41b338fbc94244869a5efa23ae616d63d7131502efbf27a9
SSDEEP 192:LJONw6DphtqQmiUyjpLGwGYX59ez6CyORM6QlkII0bo/5n8U6:lONw61WIiwGYX5EzyOi6QO0bm8U6
TLSH
T16C120A32AD78AC7B1DD26591F48735139FA55127EA846F50D6DC3F1C02EF69C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e646881ce09ce5382ca79d1737e3b5bcc0557ac12b1c9394ba008892e392d60c
MD5 78811117a9c32ac8d0ec514939dfcb9c
SHA1 e0e9b3b69652e1c45e4ee5ab9d90d0a12727e28a
SHA512 cff46a03ca7f89cd14c0421034376550f112dbc944fc2c580908799b42acd70d84548ed6498810f6603613f1b7212fd0125788efd21f9c427298fb41323ed5f3
TLSH
T10641D75CA6F91148F3B36E5AABF2A86E887BBD371F16D59D00110E4F0666A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download