9e3f8d219616cf3520fd29c2cd02e396ceddd83ad74b1db57e2df920a91b4bdb

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 05:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9e3f8d219616cf3520fd29c2cd02e396ceddd83ad74b1db57e2df920a91b4bdb.html
Size 11KB
Sample260913-gexdyat1cx
SHA256 9e3f8d219616cf3520fd29c2cd02e396ceddd83ad74b1db57e2df920a91b4bdb
MD5 9994f5a066f8aea507e6d8b19e83dba1
SHA1 1183d1ba2a441e504eb99d370c9fcbbd087da099
SHA512 ae2f07ac1df24a9c04e0809a2e67cd779919b0de7498182cf2c2a0eb09771df34f54f6ec2b9aa7185d85fc099924dc86ffc45fae8f0bcc85ed4ce33468c59566
SSDEEP 192:EyxNsGeTHQpD+da6+MmeWsV7NDAjPhxzQe5dD86PX9rvASnBRes:Eyt+X1V7MPvFD861RBRes
TLSH
T1873266D89BE1E117B28D1FCBBF956EF9017660975084F207BB8C368D2FD82C5C1A5849
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337882162501688"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{317FE76C-1563-4BD5-AA57-D529D99F7A6A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
752	msedge.exe
752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe
1296	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1296 wrote to memory of 4332	1296	msedge.exe	84
PID 1296 wrote to memory of 3360	1296	msedge.exe	85
PID 1296 wrote to memory of 556	1296	msedge.exe	86
PID 1296 wrote to memory of 556	1296	msedge.exe	86
PID 1296 wrote to memory of 556	1296	msedge.exe	86
PID 1296 wrote to memory of 1956	1296	msedge.exe	88
PID 1296 wrote to memory of 1956	1296	msedge.exe	88
PID 1296 wrote to memory of 1272	1296	msedge.exe	89
PID 1296 wrote to memory of 2052	1296	msedge.exe	90
PID 1296 wrote to memory of 1272	1296	msedge.exe	89
PID 1296 wrote to memory of 1272	1296	msedge.exe	89
PID 1296 wrote to memory of 2052	1296	msedge.exe	90
PID 1296 wrote to memory of 2052	1296	msedge.exe	90
PID 1296 wrote to memory of 1460	1296	msedge.exe	91
PID 1296 wrote to memory of 1460	1296	msedge.exe	91
PID 1296 wrote to memory of 1460	1296	msedge.exe	91
PID 1296 wrote to memory of 2292	1296	msedge.exe	92
PID 1296 wrote to memory of 2292	1296	msedge.exe	92
PID 1296 wrote to memory of 2292	1296	msedge.exe	92
PID 1296 wrote to memory of 3908	1296	msedge.exe	96
PID 1296 wrote to memory of 3908	1296	msedge.exe	96
PID 1296 wrote to memory of 3908	1296	msedge.exe	96
PID 1296 wrote to memory of 1720	1296	msedge.exe	97
PID 1296 wrote to memory of 1728	1296	msedge.exe	98
PID 1296 wrote to memory of 1720	1296	msedge.exe	97
PID 1296 wrote to memory of 1728	1296	msedge.exe	98
PID 1296 wrote to memory of 3552	1296	msedge.exe	100
PID 1296 wrote to memory of 2612	1296	msedge.exe	106
PID 1296 wrote to memory of 2868	1296	msedge.exe	107
PID 1296 wrote to memory of 2744	1296	msedge.exe	108
PID 1296 wrote to memory of 964	1296	msedge.exe	109
PID 1296 wrote to memory of 964	1296	msedge.exe	109
PID 1296 wrote to memory of 4932	1296	msedge.exe	110
PID 1296 wrote to memory of 4932	1296	msedge.exe	110
PID 1296 wrote to memory of 752	1296	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9e3f8d219616cf3520fd29c2cd02e396ceddd83ad74b1db57e2df920a91b4bdb.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff85a66c188,0x7ff85a66c194,0x7ff85a66c1a0
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,16525714523730238589,14831996444599800346,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,6789700765411235204,17391952759363934932,262144 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,15587027040917344384,15424270097567343091,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,9997224238441568369,10489287282112246339,2097152 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,6214036701653082829,13508849922410957301,2097152 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,6438368650493050369,11079120013398590622,2097152 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,4186512482213124343,342473903837364425,2097152 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5100,i,11159631115961764416,3139111721214997032,2097152 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,16349634961209487951,5916591797720779338,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,16691450571578436157,2868674525547469086,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,17750053498461493320,2908630945738023917,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,17750053498461493320,2908630945738023917,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,8577106242023876023,17711163896538364604,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,4885462293213934236,14329975552797973261,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,11072031647077715811,13427647503502440654,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,13036737000217299983,14346994367320918957,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,3104297140723765913,4274314913673367559,524288 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,5575370276181256718,10976970132291319920,262144 --field-trial-handle=2212,i,15686032379038758858,16975857134758360127,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

5459e785-0072-4939-be67-214ac7ffa799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5459e785-0072-4939-be67-214ac7ffa799.tmp
Size 10KB
SHA256 35a4ef1b8e540e01f9a7b60d76c902af4c178b24d6eab5049831b919fe066bde
MD5 6a545d5eb7294305a873eaa6c6187c82
SHA1 885fc620b1f10ede9b02fc675d236893e9e7399f
SHA512 4c3852e5bb60e53d93e748e171d017eb380f7496e09ecef08ea0d23f8365982f9aab8b3b1fc1ece4bb98fc43c5f9fc6b2e58b2141f1b86c8b5ef4fbba6e8819b
SSDEEP 192:sxZERgWL/f+sspIdpdNHW6+WNGYg4JiQIg50J:sxZEtL/f+ssirHbG5sW
TLSH
T16422B8556E28697B8CC7D20DBB55BF53E6F9503291911E48EAFCC62C05E7ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1dfd5db038ff7b4901733ac73c1e7e01c48e5cf6d79075665eb0df89ab172faf
MD5 a1de827f12bd2523bed1dab745fb874b
SHA1 501da9de41c79bcce7421a878d92768c16fca7a4
SHA512 8e337fe24bbd9ffb971465e5801783e8bafa2294d731e7b315acc8e38a835d5bd6e13b116d382bcae2062b08726aa5d570763200d68b952b89220f7049021edd
TLSH
T19D618241D0C1846AEFD44230A5F6A1A7F23176B4C5A7BDB9814CDCBE9B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f9ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f9ad.TMP
Size 3KB
SHA256 5b17455da9a9801e229973c3f5c67f50e35a1ed6872b2135be94e1fca5c33b41
MD5 ee095e3ecbc9c125acf0c3f30b77d767
SHA1 6d3619e9ba9842a430bf014febbe67a853462175
SHA512 da37b2ff1bf40ecaf119e422d3aea185dc583bd4d22c194675bd8af662b08154f32a55046b98b9a3557c93c34e0241222076946a401cd1e685f7649aa62663c4
TLSH
T16A618141D0C0846ADFD44230A5F5A1A7F231B6B4C4A7BDBA814CDDBE9B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 715B
SHA256 b7e5c98e76486837a1d9aa44b952e0e5daff45e38b901251dd2b700a47bc9a45
MD5 e98c27bded76243dc027eb5bee752631
SHA1 f29c329b86aa631754e432489575c46c493e934e
SHA512 62f7e5324668d218a39c790688f2a30b0f886e5d6856782159382a52c9ef4aef494f6fb7fc7db0026e5b2f9a292c39c794081c77413b7629b3687f4e3593cf19
TLSH
T11A014CB382D185AE891516F05A24ED2BDE2D060642187D298AD4FF67D3E3069E40255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 163b4823eb35aa4c88f3f6f2706436d45c679a5c26fc1223d2af07f1c0af0b1b
MD5 ec907d39722d91d80f68f440dd0d2db4
SHA1 fa3968dad0b075d50478b1b2c4d5886ad7044f98
SHA512 5d5e837273f82c76dda8f90514cf3471835b044bad7d11f0a77149412b8333a80f9a1195e118257611e786006ab0106a9ea4b977c1758fd64bf994233c40c4c4
TLSH
T101117DF3C3D586AE891516F05A28EE1BCE2D0616421C7C19CAD4FF2B93E3475E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3e9d1d35950a413f848f90792f09d56f9e668eeb4402c18a45439684dfcb473d
MD5 6aec63377ff60c5f1c07aa8a84784990
SHA1 ac30a046014e5e0db4eae6fb91d948f3dc7dc1b0
SHA512 be728fcb4b451f991da8aa1140f31e33f24bb2d8af628ad7f209e66d8127cb5cb1264f10f2103a0d82ed5b2173661d687f9ec6051a1d9e8421c7bc88b167d7c8
SSDEEP 192:sxZERgWL/f+s2pIdpdNHW6+WNGYgUJiQIgrJ:sxZEtL/f+s2irHbGRs9
TLSH
T1C412B8526E28A57B8CC7D20DBB15BF53E6F95032A1951E48EAFCC61C05E76CE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 62e60ab4ad7368ac648c005410de2a9a61277ae5b6fae3d9dedc05d62742593f
MD5 5ed92e31bb0443f252a5539d2f153d0b
SHA1 a62aa53e64db4b03a038e47c00075fc34cf2ad07
SHA512 6df6470643c91a515c45006d695289f9ed9654aa0e656c42d05b6e3f29d54580d5b8ebfed8e618ae474063d384ce31d625171ea79f46c251f0bcdcafee61c9ac
SSDEEP 192:sxZERgWL/f+sspIdpHNHW6+WNGYgLJiQIg50J:sxZEtL/f+ssitHbGysW
TLSH
T12F22B9566E28697B8CC7D20DFB55BF53E6F9503291911E48AAFCC61C05E7ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ad213cadb42d1f4f9108b58be082e35c8c13c0bcddfd9b4f34bb6d91fb3981ee
MD5 895cb53ab18349ea2b4a9db29016c62e
SHA1 b0162fa69afd18d9ab78ea84b34e4ec9f3a241db
SHA512 50e4bdf082556d44b800b46b2af51b8e25dfab8927bb0c452174a1ce25baf0c23ea9543f1044270c9ba756ee78a7227dbbf0d6eaea67af9de3fafc75110f18ba
SSDEEP 192:sxZERgWL/f+sipIdpdNHW6+WNGYgUJiQIg5eJ:sxZEtL/f+siirHbGRsc
TLSH
T1C722B7566E38A97B8CC7D20DBB55BF53E6F9503291911E48EAFC862C05E76CE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 de98c0a91362a495e045417a01e794ea09e2141b25781761fe60ee2503da2344
MD5 cfb01117c045a336829d8da97957db3b
SHA1 6f2a254c30855c7e096276c847d87ec416067e32
SHA512 eb900d5f5e150e8f1cb577829073c66ebd371f3eab6b15139385b9af114ad754dc93692650fc503e69a9360407dba00096975ced90894894df09ac34d1d39e3b
SSDEEP 768:QhichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzDroWZ67:QhichfPWvPZplu1jan+LKgzwW87
TLSH
T1C9C2EA3B640CCB7E4FC01A9DDD5A6F9B7EA802C796688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9fd013176277517294f3159ad8d7cd01597144070296ed3b72efeebb5f7051da
MD5 864637fcb37b46096b7407adddb48432
SHA1 cc6f68090179c23baa3ab4e8bd6dcd8eb3592cec
SHA512 c32e685a270a765583e4492bac27fbd86e36a23b4bb4726bb1eccb9c89e626f6d3bd30feaf636d712b7984e546c20067d27314bef6b6286696b007732e1fef1e
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLWRsQO00tbYvAISotK9M1OtxG9Yn4Ut:KAzmKo0ye5WKyoCOduKu8xz
TLSH
T1F9910F01347B125078FE7C6995B0871B02813577351AF62BBFBC50668AAEE480DFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3497d91eb9b125cb84f189968e06cfb097e938000c8dc04f1d317b0a22e40b1a
MD5 6fca84e42634b8faf527423f7f844019
SHA1 da948988a51c97a5a726e149234537e81ab1a699
SHA512 7e7bf428ec965543721747a08839224dfa5a2a678ab8ad589a7a7b6fe2346b7113ada7bfedd60b0416bf7d5af5dd5ba4942f056678a6b0aee54e03d5458e1a58
SSDEEP 384:wZcISsN6NPJC3z5/E0BGYX5EaV84YXT/ZA7O6R2Feoeh7Uco1:OS4DSOGYua7YTZA7TR1xe
TLSH
T198827D726C78AC7B18E6E185F44B36139EF890679BC96F40E5ED5F2D01CAB94130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 38838a6b3af62b0d5a3014f420573c5274ac812e1cbd0df0e0fe91727c94bad3
MD5 cfd5f074108a829545d63b5a74f12e49
SHA1 ccd7b4e76c563a2d22a74f67a78866b29c5d773d
SHA512 206db85277a25678b6df949e7bfbb3cfb093876395eb00706892e813e6607c2459ab314a315ab0ac36b8c0c417ac2c3b9fba2daa25c7cfafc937220656cf80fc
SSDEEP 384:IFiZcIZ0sNC8TUNTUlIlEPJC3z5/E0BGYX5EaV84YXTlZA7O6R2Feoeh7Uco1:IFQKbwgfDSOGYua7YBZA7TR1xe
TLSH
T113A26B735CB49C7B6DF6A685F90A32139EF85067CAC5AF50E6DC5F2D00CA698130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 66a8abc8d4ca2710b10a751364da841d98658c928c6306ba5bbc9312683857d2
MD5 083e39bc974c8b1b10280640e39c0b71
SHA1 6daaa2febea3b93d48b64a1d594bb3e6b803aa6f
SHA512 b6d0fd58af952cc1e4f2d8e2dc318a0426558c61feb859cd11ec3c4fe59901f8e1812976f894d8199e260d415450e6191da4370f4487568b41b9d21fdb90eded
SSDEEP 192:LJON76DphmqQmiUyhKq8wGYX59ezTC5jzor3mL9kk7nFU6:lON76197RwGYX5EaV8CFU6
TLSH
T19202E935AC787C7B4DE3AE45B44B27139FE8212BAB552F44D6E81B1D01D764C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 810e2bfce217e458aaaa84e487e0ee1e5ac9071b6e3ddaff9b64ee7240c3608c
MD5 41694997b80bea79e12abc813aa095a2
SHA1 3c806bd0ea0076bf37e407efd5fe16528b587ea6
SHA512 cf38403020ad746d7438069ab7bca30473cb870e4f5854aafc903bd16212f4a642a3faf57c6e4ac89c17ed1568168fa5ede980685329f06c5b1f4363914e4336
SSDEEP 192:uazssN6WQwJC3FTXphvrMjQmiU1vir4BGYX59ezTC5jzor3mLrYXT+5kH1o/5oAg:QsN6WPJC3z5QE0BGYX5EaV84YXT/ZAXQ
TLSH
T1BC523A76AC78AC771DD2A185F40B36139FB8512BDBC46F54D6DD1B2D01CE698230AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fc61c097c570af29a5573fdb0debfeabb69e3b400ac08fc73746186f802cf0bd
MD5 c72aeb1248b0a87d15bd30ca1a9410cc
SHA1 9c2da3a046a84d4f46de65e6444504d4deceb79b
SHA512 e38e36b1767375185e1fe8816f6bacd6061c2218a8a2c5c9c9fbf3731e1f4dd38c7f7fec394375cf7bdaabe03e0de3b557f3253e1106a71f345e17e73b926635
SSDEEP 384:GZcISsN6EPJC3z5/E0BGYX5EaV84YXT/ZA7O6R2Feoeh7Uco1:USTDSOGYua7YTZA7TR1xe
TLSH
T1FB827D725C78AC7718E6E185F44B36139EF890279BC96F50E5ED5F2D01CAA94130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0f6037a74ace146e91ceb198680f90617d3d3ee5dea55be32c5c9a24a44e215b
MD5 ef8ffc343bc27a52e64b61a5811b2909
SHA1 6bc741538646afb8cbb521ac72b7fe61323bb8d0
SHA512 3fa592e902f9e66c99955ee08d360e344c273c042701bcaab888ab4be312860f10266d7880eb5025ed44c24b44feeffd2eabbf88e7b54d4596761aa6b5885855
SSDEEP 192:LJONT6DphqqQmiUywKUwGYX59ezTC5jzor3mLrYXT+vkIIo/5oAU6:lONT61B8UwGYX5EaV84YXTJZAU6
TLSH
T12D120B36A878BC7B1DD2A595F48B36139FA8512BEB847F50D6DC1B2C01DF658230AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d61b842e-cb42-4f17-9d04-1eab7430bdcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d61b842e-cb42-4f17-9d04-1eab7430bdcb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c30094ab4af9aaad12e43216262df5808210caf9a638833b44a1a2a9dcbfc7d6
MD5 113ff90d697a86e53dd12b10827f9da5
SHA1 363f8ef454dbf51bf5c512c28fa4f02f7b197e9c
SHA512 8551258256b9405db8c247008717d309e079bf18b88ca00c62ec290f6a48bf5e4647a0bb706913304a03fb5cd542b179f434262c81ded54c680a18a8950c5892
TLSH
T1FC415B68AAFA1058B3B77E4AEBF6786D547A7C772E06D19E00110D4F0A73B00C861B33
MD5 SHA1 SHA512 TLSH

Submit Download