9ed2e39732c9106eae9d272c52e611bc62d737588c13b8292f22f702828c8c5b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9ed2e39732c9106eae9d272c52e611bc62d737588c13b8292f22f702828c8c5b.html
Size 114KB
Sample260913-fdvnaafb42
SHA256 9ed2e39732c9106eae9d272c52e611bc62d737588c13b8292f22f702828c8c5b
MD5 fec18fe003b6892c67d9ab41fa6b6337
SHA1 34f481e96681c006c66a8c6f26ab4d2624e4b080
SHA512 b83e398a7704d611776ca874d278ec0c6afe15bf532ea7bee37e19b00f92d37fe9779a8bcac2fcc1cba1ea7e6f42451bc79fe6f569837c919af0a3762bb9275d
SSDEEP 1536:7pPxWYn+hXz+xRHtb/f/HuTmMTlonQRTtENohxCDi7hWc0ybEaozbEaoziAP2W:doKQgNLWPdozdoJeW
TLSH
T12FB3C59712204CF6EFB41DB3459B086B3C2C5437AC4390B9E3FD8F972B9696E034A169
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337928050100517"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{E7CBAB24-EBF9-48AE-981C-AFE394B1526F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 760 wrote to memory of 4868	760	msedge.exe	85
PID 760 wrote to memory of 4576	760	msedge.exe	86
PID 760 wrote to memory of 4244	760	msedge.exe	87
PID 760 wrote to memory of 4244	760	msedge.exe	87
PID 760 wrote to memory of 4244	760	msedge.exe	87
PID 760 wrote to memory of 4636	760	msedge.exe	88
PID 760 wrote to memory of 4636	760	msedge.exe	88
PID 760 wrote to memory of 4908	760	msedge.exe	89
PID 760 wrote to memory of 4908	760	msedge.exe	89
PID 760 wrote to memory of 1020	760	msedge.exe	90
PID 760 wrote to memory of 4908	760	msedge.exe	89
PID 760 wrote to memory of 1020	760	msedge.exe	90
PID 760 wrote to memory of 1020	760	msedge.exe	90
PID 760 wrote to memory of 4516	760	msedge.exe	92
PID 760 wrote to memory of 4516	760	msedge.exe	92
PID 760 wrote to memory of 4516	760	msedge.exe	92
PID 760 wrote to memory of 4284	760	msedge.exe	93
PID 760 wrote to memory of 4284	760	msedge.exe	93
PID 760 wrote to memory of 4284	760	msedge.exe	93
PID 760 wrote to memory of 3592	760	msedge.exe	99
PID 760 wrote to memory of 2960	760	msedge.exe	100
PID 760 wrote to memory of 3592	760	msedge.exe	99
PID 760 wrote to memory of 2960	760	msedge.exe	100
PID 760 wrote to memory of 3424	760	msedge.exe	102
PID 760 wrote to memory of 1216	760	msedge.exe	107
PID 760 wrote to memory of 1636	760	msedge.exe	108
PID 760 wrote to memory of 3412	760	msedge.exe	109
PID 760 wrote to memory of 728	760	msedge.exe	110
PID 760 wrote to memory of 728	760	msedge.exe	110
PID 760 wrote to memory of 4128	760	msedge.exe	112
PID 760 wrote to memory of 4128	760	msedge.exe	112
PID 760 wrote to memory of 3008	760	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9ed2e39732c9106eae9d272c52e611bc62d737588c13b8292f22f702828c8c5b.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fffbbc6c188,0x7fffbbc6c194,0x7fffbbc6c1a0
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,916463805103447057,6519194085549854463,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6300972493377974686,4575911147415785335,262144 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,1033601840212353896,18365100392303171599,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,6957262674163685680,15774273798346450944,2097152 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,9171302210834258421,2999783488549489486,2097152 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,16651308438782394443,16378806053644991460,2097152 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,8659488988860140496,14422625633043395033,2097152 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,8915349962026491106,15604484644656209188,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,10816300285440249916,5348199146175805034,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14041815501735105591,12857071697809499121,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14041815501735105591,12857071697809499121,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,12275219969033699211,6355262046456005500,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,6540113183627421785,6740375860941602638,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,7248004718252311789,13099977081467793363,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,14626923660937714383,15353910267715627740,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,18114824497436451812,3799555436477522196,524288 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5236,i,8549210677070664155,2779525067742947831,262144 --field-trial-handle=2304,i,13875118125518432870,10685480556181132591,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3008

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 be6e12bc5efc8c8a736792ceb751a43846521bcc077cd1b62fdda5f628cd2435
MD5 6787954f4dcef6270e19c350168677e5
SHA1 b44c3d68b2efa51c9abe6a1a7e4e37525ad9b8da
SHA512 7576bb1967bcca73dbed57c199908a3482558c053615c88c574b6858c5b8f5a4c3b47ce0d54343bb00b11aaf5cbadb09294535a27d34527039da4437e66313b0
TLSH
T177514D8246A2FEC0F7A9073160D712A73730884D80B32E4A11A8CCB9BA4FF56B234C74
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 58f923b42b5ac2df81880ac8eac733e2d41743077190009f32eb64e55b7f8f44
MD5 8a8bfd8a0eb2fdae558296ad9e195a99
SHA1 1955d206dc893c5d5149fe6c7efedbb527eb0f5a
SHA512 ee73bf503b19832b2849bcaebacec6ce5cbf9a2d5f1a3ab03313ed120e7f04ecfe0811b3b4d4507b82b5111fe8be37403ff5a2bdfc2bd515f9a1c18120355900
TLSH
T16C419CB7C3D4877E890156F09B25AE2BCE2D1A46422C3C56C9E4EF1FA3E29B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bed1c4242b2830f61ba4ba3ce9e91ee8e402b0e7a9f92140e4f87ddb226c2279
MD5 906e46475dbb61af85692ecdfff69471
SHA1 c8df7bf96c5c64df073099995356f56f04cbd423
SHA512 64083bebca0bc43c6e3026d5b4e377a8030b9ca708b825287482767b927158b2d5541d7d8204fa6942ff00f2f0cda51dfdcf71c76ec33f973c44bdec5489785d
SSDEEP 192:sxZQRxWX/fOsNdIdpdJHW6+WNGYYBaXrIgrJ:sxZQaX/fOsNeLHbGfo9
TLSH
T1F612A7116E38A97B8CC7E20DBB15BF53E6F9503265941E58EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ae2ad3cf7b9db475b9d3375c5d0936de3b0ae97481d8632d8e990e0c4380a45d
MD5 da83569b95375e3cad6f60fdd8270631
SHA1 36166d068d9797441e69380a92724be02afafdd9
SHA512 11b7bed5fa4e757e98d0bf3c0d898297f986106ea4d6b12a491b93db29bb0d1cc3448c9910a604e5278fe40f2d3e84880c8686df9730f7915dbd75a2642e6f62
SSDEEP 192:sxZQRxWX/fOsXdIdpdJHW6+WNGYYBuXrIg5yJ:sxZQaX/fOsXeLHbGfsg
TLSH
T1B222B7126E38697B8CC7E20DBB15BF53E6F9503265911E58AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3fceccad8143886dfe190836110bd64283f30fd3844e35c76a4c8daacb0fd107
MD5 2e3efde19429a228a19ddc757a94d4f9
SHA1 206f109fb93231b5a3a94fe57f551049e089545f
SHA512 4a415a3decc4c688376c2e3e689c3c48b8d01bc2c4d19c281ff07fadcf60c1fe206cc5d87c75eca8ba6ebfaa652eea45df52f461ba6ef31fb2930935ea78948f
SSDEEP 192:sxZQRxWX/fOsXdIdpHJHW6+WNGYYBBXrIg5yJ:sxZQaX/fOsXepHbGfhg
TLSH
T13D22C8526E38697B8CC7E20DBB15BF53E6F9503255911E58AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ead0d38df89a2a55b7599a835a0247ab5179dcf2bb8977b3617d12ba40186e8e
MD5 e26fa3ec8e9ebd8681897d5cb8b37ad8
SHA1 d3a62a29210e362e272e73c2cb3e00fdb2c4c16e
SHA512 dcfe2fae73e3615e4313b8c55fe665e815cee5b9285ba79fc624cb73203807726949f963e38f49ed6db01667da4acee958b81be539142ee41baa57c9c60f0c40
SSDEEP 192:sxZQRxWX/fOsZdIdpdJHW6+WNGYYBaXrIg5AJ:sxZQaX/fOsZeLHbGfoi
TLSH
T1A622B7116E38A97B8CC7E21DBB15BF53E6F9503265941E58EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f798dcafc534c9f7f55d47a266764ca2de2cfe9b159e43544dffc6157fbaaeb6
MD5 07dbd6c22ec38db54954cf78c256732a
SHA1 c449efd979d68a55f3844aedac42bc53b79846d7
SHA512 b0bb93786fd6f2a602baa9c17149274b245ed6846c71a20396a8ac306d7e9bcd71d8a292cdb9e9c498e1b43ad04d915cb225b39bb0ad88bb6ee50938ae7612a2
SSDEEP 768:mDyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXFrop7/Z:mDyYR7jWv3NpBu1ja/CL8OX+v
TLSH
T146C2E92B644DCB7E4FC01A9DDC5AAF9B3E9802C7A6548D4047FA944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 94c8aafe78876f95094935853b45d4adb94ffbfee731aa52d85fe3ac5807029f
MD5 a2482cdec0c75ce0333c43dd7f9fe1d0
SHA1 75e5c2ecf9e3dc25670d4490c14fb59ce612597d
SHA512 89e446a321b182347f168a6e7637ee12446aa23a5cc79df8ac3f900d1429b959f23b03f32044295bb7bd92393d66117a3e95ccdd15b63ed54bb63e9d9000c496
SSDEEP 48:KgLuvL1ttOb9wVISrOK9715OxjeY4JbPyLgvmqwaOPbmdGISCPK9e1kPxYfYlW+s:KIogKV2qOPyKQEH2wKnKKZ
TLSH
T15991345172BA02003ABD398DE1A1C75F425271B73019EA7BBF7E40718D6AE091EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a04d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a04d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c347938e4cc26ef22aa3f003ed3a4cc3803661c200cdc021d33a52887c36981e
MD5 b4ec5f1c4ded0e832b52eacab0823092
SHA1 b36bde0813687c170e42b41364f8b7cf7b6b9db7
SHA512 7f41d71e08f88400358ae38eb5ffc592cdee400dde96fd8c55f951d3760f5837723f4788975aa6f58cf4c64d54e0ca2020b4721e5a1da477468cd8096c5e6eb6
SSDEEP 192:uUMMsNPGQjwUcsgnHCOUQmiU1JLy4bcX5hQDP1XO7uFfEoPywr/5wU8:PsNPGQJqi5j9QX5+DtXO7y852wU8
TLSH
T184322931ACB8AC765EE6A584B0463613AFB41067DA887FC0D9EC6B1C01DB6AC131BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2c972446c2449f72ada334d40b47d000e037ab82ac778abe4e9b58ff60edeb84
MD5 aeb5ef3bea650531950abac83d40cb98
SHA1 070333707bddf4e9d77f2fab54ee910f258c1e78
SHA512 75eeb1be5350de5a5cd04ff2f6ae74751b9a969bd87683834eda403b8e5b227528e560400400c36fc5e2ace1617fcbfa9686f959d1a12d89556b202ecfe07c9b
SSDEEP 384:oiFiZcI4q0sNx8TUNTUlIldQJqi5j9QX5+DtXO7y8B2wsa+VYWlwoN:zFQo8wgcJq0qkDdO7dB2whgIK
TLSH
T143A25B325DA8DD7BAEF79B85F94632038EB450A7C5C8AED0E6D8AA1D009B5DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b3ade1f142a61f21707750518aa49bb0d5fbdd22ea836a53e9b8e6b0ea914eba
MD5 1433ee8a7bf44bba2b6edc60e170cffe
SHA1 0a3469fd535ce075ef5869ecc96647a946d98357
SHA512 ac45c38f1dac6969f4a59fc986474c30f593e8129c5ab239d7c7de5ff166857e8f4eb3030046266c97717cf62dbf4b81c6fd45c4637929b8c9a627b7f435c79e
SSDEEP 192:uUMMsNPGQjwUcsgnHCOUQmiU1JLy4bcX5hQDP1XO7uFfEoPywr/5wU8:PsNPGQJqiHj9QX5+DtXO7y852wU8
TLSH
T16D321931ACB8AC765EE6A584B0463613AFB41167DA887FC0D9EC6B1C01DB6AC131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3930cda7c97818be058952699b30757b757b06643056be9656a0c43ecb715b92
MD5 bf8c88a400c991b6c707da99c894253c
SHA1 f9587113781578d608218fe6e07de424d9b4ea91
SHA512 17ade74432cdfdb0a37f39b5441f494109dc0f2ee7072e8f230dc5b91482157a5081212442fc354aee7c91c7306310583442307a1b9015b6a1e3ca53b32dae25
SSDEEP 384:gZcIqsNPdQJqi5j9QX5+DtXO7y852wsa+VYWlwoN:eqVJq0qkDdO7d52whgIK
TLSH
T19A828C316DB8AC7699F7A285F98632039FB4506795CC6FD0D9ECAF1D00DAAA81307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9f83e11a965be77727c1e449d37df5265b6d05023e9837f91a9e31374c9fa50a
MD5 6dc1dc9cd9ed8dc048c81998b3a85895
SHA1 73bc9987f397f9bf634ccb71bfeeb554012f2125
SHA512 047c6bbb531a5f83c3fc33cd503e25a629489fb22a914ae3b513f578bafe9b3377f2acebf25fc56b4e98af0c88aa83e61be753a9739cee6312abb44bfe597df0
SSDEEP 192:EONK6nnHGQmiUy1zQYcX5hQDP1XOEMcVyHU6:EONK6nCKQNX5+DtXOgMHU6
TLSH
T1AF02DB34ACB86C7B8EF7AD45B48627139FA5217BE5856FC0D9E85E1C01D769C2306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c62a8a5800a88f46f6251bf682ce85687d39cb0eda945731331c6ff5b85f461
MD5 08d5fe996f0b6201610ed1a66f25066c
SHA1 e29f389448cc27f5a3d3b97b9eb28e1f806ebef7
SHA512 d195327d8a981f27af5fd814b3c78739c9148972c7410b1947c7dcd933f0c6f72c2628acd6e4b8def2751b593f9830b7a22d71c00aca90bc2ee8b59cff4c73b6
SSDEEP 192:EONC6nnHvQmiUyezfYcX5hQDP1XO7uFfEXg3wr/5wU6:EONC6nR5fNX5+DtXO7y882wU6
TLSH
T1F912F931ADB4EC775EE26585B48735539FA51127D9887FC0D5EC3A2C02DF6AC230AC52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 919a119b1082f651ae398f8c0d0803d52eb391facd1b2f2dedbaad445a217d04
MD5 618617af7fa348647c6c7645072e32b6
SHA1 7b2a730442f0c419c8c70600547af64a0b4d7e54
SHA512 4137fc8dc234652a4ebd507324ccb0b4ee9681f4d8643a45e0ef312ee737cc5c8ac9003262002788ef3ed0e75202ac10c33b9571ec0740fd8d2ba6376db6527a
TLSH
T14141D898B6E91148B3777E1A9BF6696D547BB9372F06945D00110E4F0A72B00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download