27eb7144fd80909c6311d60c5f3c6a7714aaab4fd8840cfeff32368f0515ff9d

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_27eb7144fd80909c6311d60c5f3c6a7714aaab4fd8840cfeff32368f0515ff9d.html
Size 6KB
Sample260913-flx4dafc42
SHA256 27eb7144fd80909c6311d60c5f3c6a7714aaab4fd8840cfeff32368f0515ff9d
MD5 d11120179d55e60fdbaf2be9f70998fa
SHA1 e0693387c30d5ccaf5ffb03bbe3d5316a69cccf9
SHA512 33cd4977519e0aff8499dfeeaa1c080293dd4bc3f0d704b03e6befcf48a836d7bfe5d3acfa6ca1c013366c8be9c88c42c8f9476c514affd2deb6acf2458fbfc3
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69hEcE8XECgUdDhQoKDejCPJu:zWLJlxeOf80WhtKDejCxu
TLSH
T114E1B45A9E4C853F4100059BF0A16A1CD8AB447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1992	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337958468830204"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{39EDDABF-B7F3-4CCF-B615-EF2F1206DEF9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4132 wrote to memory of 4156	4132	msedge.exe	85
PID 4132 wrote to memory of 1992	4132	msedge.exe	86
PID 4132 wrote to memory of 872	4132	msedge.exe	87
PID 4132 wrote to memory of 872	4132	msedge.exe	87
PID 4132 wrote to memory of 872	4132	msedge.exe	87
PID 4132 wrote to memory of 892	4132	msedge.exe	88
PID 4132 wrote to memory of 892	4132	msedge.exe	88
PID 4132 wrote to memory of 4604	4132	msedge.exe	89
PID 4132 wrote to memory of 4604	4132	msedge.exe	89
PID 4132 wrote to memory of 4604	4132	msedge.exe	89
PID 4132 wrote to memory of 4928	4132	msedge.exe	90
PID 4132 wrote to memory of 4928	4132	msedge.exe	90
PID 4132 wrote to memory of 4928	4132	msedge.exe	90
PID 4132 wrote to memory of 4464	4132	msedge.exe	91
PID 4132 wrote to memory of 4464	4132	msedge.exe	91
PID 4132 wrote to memory of 4464	4132	msedge.exe	91
PID 4132 wrote to memory of 4268	4132	msedge.exe	92
PID 4132 wrote to memory of 4268	4132	msedge.exe	92
PID 4132 wrote to memory of 4268	4132	msedge.exe	92
PID 4132 wrote to memory of 1660	4132	msedge.exe	97
PID 4132 wrote to memory of 4596	4132	msedge.exe	98
PID 4132 wrote to memory of 1660	4132	msedge.exe	97
PID 4132 wrote to memory of 4596	4132	msedge.exe	98
PID 4132 wrote to memory of 1204	4132	msedge.exe	100
PID 4132 wrote to memory of 4744	4132	msedge.exe	106
PID 4132 wrote to memory of 1352	4132	msedge.exe	107
PID 4132 wrote to memory of 1412	4132	msedge.exe	108
PID 4132 wrote to memory of 4604	4132	msedge.exe	109
PID 4132 wrote to memory of 4604	4132	msedge.exe	109
PID 4132 wrote to memory of 3572	4132	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_27eb7144fd80909c6311d60c5f3c6a7714aaab4fd8840cfeff32368f0515ff9d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc66cdc188,0x7ffc66cdc194,0x7ffc66cdc1a0
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,16597644703933607463,5181572985318311161,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,18271590492166890014,14051012838153199066,262144 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,132918264227939575,6797826724808936697,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,14796054891999226963,2659905045887954867,2097152 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,8585954568050396611,13847359708460201010,2097152 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,2067992698219602538,7299094264021223841,2097152 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,7236022138997228974,10310697671546146304,2097152 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,7202331658390844666,3721457781862473491,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,18100364254665869591,4622167053271762132,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,195287658537717625,17092855090646489798,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,195287658537717625,17092855090646489798,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,15697505811949662626,10456287452859692924,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,17435654889905797143,12527385819861781680,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,11828074646245632533,632080584494744233,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,14731375538892899457,14021840585537585561,524288 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6444,i,11373110704244081337,14397024235897325557,262144 --field-trial-handle=2360,i,494802484383410043,10431216860283271277,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bec73e0383953b8bf2d190b3825b48bff6510365f3d1acff210f388281f10535
MD5 1b850f071a30c32fb308ecdfc733c7d2
SHA1 48797d95703087512004917c03ec39f80b3f0f92
SHA512 494a9fee5ac816b49294635e86f3f94b654ca90e13f0cffcdbf02a3f36a92c178a399443ee959f11d9361e8aedf86840d70997779417aca5e5f2e9235170642a
TLSH
T1A9614E8050E0C0A7D7A8D670F2F2528F3928657145CFAD5A20E6C5BF4B0FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c3e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c3e7.TMP
Size 3KB
SHA256 b5e1ffc5b2bb1c3e75a076febaf81b1f59a0372700bfa487a7a441f437287f76
MD5 6474247f612d5486f81626fb3de54497
SHA1 0b27da5bb0ffe3bff39e0e4a621d5a72f88ccb14
SHA512 4a08a3ddeabbbe4e50173a74fe15c83fe03e1b368551cd1c3e198dbfba9f94ea4a260a7b4770eac9f22504249fb836a90bb8d331928c80bb0226853031cd2fb4
TLSH
T195613E8051E0C0A6D7A8D671F1F6928F3928A57145CFAD5A20E6C5BF4B4FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 bf2000363d3d784ef3accbc6415b743408d1cc01f81ec83f0accaca12765b30f
MD5 c1c032204d717b43086d6b60afa65ecd
SHA1 fc5df7cdfa89cb03fa325b543e06dfb5e9785c38
SHA512 2590559011a0a5fe2526bddea3bb3737d4f69ea3fa0cc1d4aae920408fdd9265a111291e6e6550083cf6e1dde9b5295273a33685f371d810d65ccb6c0fcf5779
TLSH
T1A0117AB3C7E5956EC90516F05A24AE2BCE2D0A06831C7C1A89D4EF6BD3F3075E10259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b37141ee1940f3805b47591836cd72b9bd3be1741d42bc574a53cff35cde7fe9
MD5 e5cf10aeb9b63ed4f837343adbd9c1dd
SHA1 8de58241c9418042d81b513d9667155eb17850f9
SHA512 39f2ca5bbecf8119754a9696b5b5280647cff818d237185a1c5623437b9f0a194cf4f9aea45be881e655b7b254d2d072944c63613262fc72a0073c5e0c38fe6a
SSDEEP 192:sxZPaRDWm/fgsQdLIdpd8HW6+WNGY36afi9IgrJ:sxZPakm/fgsgUeHbGXt9
TLSH
T1D012A7116E38697B8CCBE209BA25BF53D6F95032A5D11E58EAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b2ad26a0adf25ba4da2d95ff9716879f9cad961523d1759c77365893ea962f1a
MD5 17037af0c35be30ff079134cd6834bcd
SHA1 85595feca72c8ac76cd8d93dfd68d453fd52ba8d
SHA512 fa0aa8b7bde4ef15655dc3a6c63c5ec606a83f8e6420684ecb9d4bb0ef5a644789f67e1a87ec64b15d4a83594670ae972d1a0b5333727f730363aeed68c78d09
SSDEEP 192:sxZPaRDWm/fgsHd3Idpd8HW6+WNGY36ufi9Ig5KJ:sxZPakm/fgs9YeHbGXJI
TLSH
T16222B7116E38697B8CCBE209BA15BF53E6F95032A5D11E58AAFC861C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7bbdc896ab10a68ffe44b46d25b608c24e7bdb3c5cbba43e2b997fa0fa717c11
MD5 344b18690af896b14b75aa09e9f5abc2
SHA1 f6ffbcdc801122123a5ce93b4ab267c58d5f1136
SHA512 0e02e8c4586745d1f4b161f75636b44b0150950b962091c302d4b23c7096270cb53161139fe69618c4a526b5109ebe6e7e730b815f49665ee24610a1a376aa30
SSDEEP 192:sxZPaRDWm/fgsHd3IdpH8HW6+WNGY36+fi9Ig5KJ:sxZPakm/fgs9YcHbGX5I
TLSH
T1D222C8126E38697B8CCBE20DBA15BF53E6F95032A1D11E58AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 82ed32100ea39fe659e8099dce29d26626534e00a5b8ca1930853527ea45513f
MD5 7a6768e519e4a13180df4635302aa579
SHA1 744f2eb4d3d164fca99ba08b9c9386793bdee923
SHA512 59b64ca6845927413bd94aa3b9ebb147657d03d7945760f1d1418ce058e8bdab04a1e3b61ddbf5c516cbdbb34c2ed025fba3a2f781202b9b5d0081d17a15b494
SSDEEP 192:sxZPaRDWm/fgsodLIdpd8HW6+WNGY36afi9Ig5oJ:sxZPakm/fgsIUeHbGXt6
TLSH
T18A22A712AE38697B8CCBD20DBA25BF53D6F95032A5D11E58AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0d9c7e89baef78fef4fd7995ffe8a72be6d0ed0fe887fbb4d14a35bfbfe5e3b1
MD5 df28b78f22e9c41b6613cc63d571e480
SHA1 7d7930564066dde1144a70ad812f7544dad21678
SHA512 07bcac500e26daaecf424aa0e11246ce4d7f77a30a8b787c4adfaf95e41749986898879451946b79587968b6bbea2b4ccb8e7bcddf5593669cfa0fe7e9bac0b9
SSDEEP 768:LPKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/EroI6:LPKlm7QWvUYe0u1ja8/L/E/PI6
TLSH
T1DAC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 01da2422e2568b49804790cf66530e621d8c2ac02af7e486b3bb46e166292a9c
MD5 b1f022c549e09853f409dd90a1c7f0dd
SHA1 30de02bd442b0b5c6846ffaf9bfa881adfb4d7fb
SHA512 1c5cd4bcbdc6707e25785469595ed1d88259f074ff50308324d50db5dff0f0af7471dd8ee9498f2833c54b0df027ca50678659ba6ec31e3f8180cf9d14749974
SSDEEP 96:KMWEKbKmKSMKjCr0t402u+G8Oftu0GKWDuqGq8UH6UXd:CDHm0t402u+LOfU0EDuqP8UH6UXd
TLSH
T169910454717B024038BD354992A1971E42417273341AE72FBFBC44A68DABF1E1EFE6CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5960c4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5960c4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3a2490f9935386195eb378468c5c61c621c15e82e58330377580ccdbaa5f088c
MD5 44b9e9d9f714526d311d88bfa4b66c81
SHA1 c75191e9086e94d197532b0b4df2a88a7cf936e0
SHA512 dc24fe555a650fb51899fd4437c199fadd6131e3dbd5db6d40f54f8a0330ac9d6a809204b8560e4f1cefd2c12b2807d0b80f07f6ff877af10bfe38cde55a2368
SSDEEP 192:uOwsNekkGQHThYbv1RUbTeAQmiU1OJJf4h//gywTPAUZLaoA/oU8:ksNekkG+Ti2bSAI/Qh//kTP9ZXtU8
TLSH
T1E64218307834BC3A4DE3A595F14336239EB00467ABC81F98DADD6B1D01DB2AC630BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 66dee2c91e82143acd561d837759c059c1a0223190406c0a527bc9ba806c9408
MD5 d1a911f6b4b42f5fa57afcf34313f723
SHA1 54f5ee95dd771bcb422bf6b4781c885246187e4a
SHA512 1ead647b3d9f442e465ac3a57104134e572c6e076763e02cfb1945ee878f1dfea72d787b125b787676609ac10104b0658b95fb2b395cad8b23cab878272e5c44
SSDEEP 384:DiFiZcIcYsNu8TUNTUlIlS+Ti2bSAI/Qh//kTP9hLt7O6R2Feokh7UTo0:uFQ/HwgRWxs/8t7TRvqf
TLSH
T176A27C725CA4EC3B6DB79A95F54636138EF440B7DAC59EA0E6CDAF1E00DB598030BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0cb7a9eab5eba314e8220e899425126b1b1280893b41184b1a00c50130d00dfb
MD5 c840e5e297487d4eeacb6ee7363fe0a2
SHA1 c2a96ec4e3517952b361f0d10f1a25646e8b5fe5
SHA512 3b11edd14894059950843b2b3088ababd596f6637d65463244e8ca1b6da5385d65b51d3672dde432b372e36b9514e36f4821b7a2d5ca8c7f3b90061f4f5cfd5b
SSDEEP 96:KqONk0QsjpfbUmjH5ih/cIPURHl8h4otop5WaDSBKP4v+Y1xf//ojdixHeYMyw3U:BONU6JUm0QmiUyryso//gyw3BCp3U6
TLSH
T17902D834BC28BC7B8EE3AE45B08777239FA4107BAA951F84DAD92E1D01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e80ab348b12c63f0b464f3d5f31eea40e1d1ea33db83848d18b16e7c64e458e3
MD5 52354e3884cf1e91c7c542247538a428
SHA1 af205f21b34c54a510116aab66311e3a227e5255
SHA512 2325c7647f5db7d3091f682aa5ad2c60497512c6edc47a2aa5774e928c52978b781c94bed8707a89062024aadf5979caa02b5f511aec590f010352ffaf724bdc
SSDEEP 192:BONv6JU+QmiUyyWyQo//gywTPAUFNxA/oU6:BONv6+6fzQo//kTP9ttU6
TLSH
T137121835B868FC7B5DA2A591F08336139E644067EB886F90D6DD3F2C02DB5AC6307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f6037c1fbb45180d141a5eb1249d80ca2992b563953f6925d478d260b939fe07
MD5 684fcaa062983ab7ea5c3cc66f694913
SHA1 ef689e49219675f502d12ead17e00d6c4dd754be
SHA512 1bd252b95beeb2a5d779077165627f24909de029f1fd24947ad18e4a231ed580edb00893ae99519d2fb97abeb0ca35010395ec4128fcf95e5a9b5190567082c1
SSDEEP 192:uOwsNerkGQHThYbv1RUbTeAQmiU1OJJf4h//gywTPAUZLaoA/oU8:UsNerkG+Ti2bSAI/Qh//kTP9ZXtU8
TLSH
T1374218307824BC3A4DE3A595F14336239EB04467ABC91F98DADD6B1D01DB6AC630BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e784bd2aa495f6e2e7350e03d071a985339a53bd0d2b6abc35d55d0411fef2d8
MD5 29e9ddedab78ec0c926dc566c88d6ad0
SHA1 482cf965e3041e2dfd57f76693ea60b89fc79668
SHA512 082a11a73f67109db72448d86728835235b4770e4e880ae5057e395d8e8080a8ed8c81399daa8cfc06c0c8a0c088bf2854d3aba1d08a46bc5ea6dbfd9868795c
SSDEEP 192:uOwsNekkGQHThYbv1RUbTeWGQmiU1OJJf4h//gywTPAUZLaoA/oU8:ksNekkG+Ti2bSWiI/Qh//kTP9ZXtU8
TLSH
T1474218317834BC3A5DE3A595F14336239EB00467ABC81F98DADD6B1D01DB2AC630BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c0159a8-dd61-4da5-9cb6-0a887b0d61ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8c0159a8-dd61-4da5-9cb6-0a887b0d61ab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 38e917cb5e65519f504b5ecf6e10f52538d76323bfed5677d9015dbeafee0aae
MD5 3110feaa2e581b69c6c9180ed96124e7
SHA1 a99b083e7195a88313e9482d737b6df74860a211
SHA512 2a0cf0aa1429597141e46cf3f628548f7f2090794d148f7b99ed429015ffc1c0ae4ceaa4dff3aac2c254be8fbef443c1d68eb56416900d5b7989ad154338fb69
TLSH
T1EA412958A6EE5108B3B36E5A9BF7686E487BB9331E0AD4AD10110E4F0A67B01CD71733
MD5 SHA1 SHA512 TLSH

Submit Download