8b319a23c4cf1d76294fb48d05cf0a43bfbbb52f4c2baf203dff9a255f141780

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8b319a23c4cf1d76294fb48d05cf0a43bfbbb52f4c2baf203dff9a255f141780.html
Size 112KB
Sample260912-pc3ryawfle
SHA256 8b319a23c4cf1d76294fb48d05cf0a43bfbbb52f4c2baf203dff9a255f141780
MD5 fb1ea0bfa946dd1f2251de9f6db2dbee
SHA1 bdba9c64990038910eb125ee664abb0120cb666f
SHA512 09d61c4503979e46c932b8b131c80ea337c51e5bf85045cbb7861d9da7d9add895ae0a94bc461ff44b61591b4288082002642c0f0890806d641d91854793bea1
SSDEEP 1536:fmxhYn+hUcsdRvOoBQNdxl7Q/PTt1NocxrIJbbEaodbEaoOztdtClzu1:OB1Q/3NZKbdoddoO7tClzu1
TLSH
T198B3C58751204CFAEFA55DB3459B086B3C2C1437AC4391B9E3FD8F972B56C6E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338225647120493"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{8524C3E0-7C87-4517-8C0A-0DBC26C675A4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 976	704	msedge.exe	86
PID 704 wrote to memory of 4692	704	msedge.exe	87
PID 704 wrote to memory of 2304	704	msedge.exe	88
PID 704 wrote to memory of 2304	704	msedge.exe	88
PID 704 wrote to memory of 2304	704	msedge.exe	88
PID 704 wrote to memory of 3884	704	msedge.exe	89
PID 704 wrote to memory of 3884	704	msedge.exe	89
PID 704 wrote to memory of 1716	704	msedge.exe	91
PID 704 wrote to memory of 1716	704	msedge.exe	91
PID 704 wrote to memory of 1716	704	msedge.exe	91
PID 704 wrote to memory of 5096	704	msedge.exe	92
PID 704 wrote to memory of 5096	704	msedge.exe	92
PID 704 wrote to memory of 5096	704	msedge.exe	92
PID 704 wrote to memory of 4304	704	msedge.exe	93
PID 704 wrote to memory of 1248	704	msedge.exe	94
PID 704 wrote to memory of 4304	704	msedge.exe	93
PID 704 wrote to memory of 4304	704	msedge.exe	93
PID 704 wrote to memory of 1248	704	msedge.exe	94
PID 704 wrote to memory of 1248	704	msedge.exe	94
PID 704 wrote to memory of 3344	704	msedge.exe	98
PID 704 wrote to memory of 1160	704	msedge.exe	99
PID 704 wrote to memory of 3344	704	msedge.exe	98
PID 704 wrote to memory of 1160	704	msedge.exe	99
PID 704 wrote to memory of 1172	704	msedge.exe	101
PID 704 wrote to memory of 4612	704	msedge.exe	106
PID 704 wrote to memory of 2372	704	msedge.exe	107
PID 704 wrote to memory of 4560	704	msedge.exe	108
PID 704 wrote to memory of 916	704	msedge.exe	109
PID 704 wrote to memory of 916	704	msedge.exe	109
PID 704 wrote to memory of 1172	704	msedge.exe	110
PID 704 wrote to memory of 1172	704	msedge.exe	110
PID 704 wrote to memory of 3984	704	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8b319a23c4cf1d76294fb48d05cf0a43bfbbb52f4c2baf203dff9a255f141780.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd9051c188,0x7ffd9051c194,0x7ffd9051c1a0
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,11148958922453166766,17846738123006016321,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,12694842072519034937,18323568407039359385,262144 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,9539753933149660819,5403996811357835634,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,14209675815921448455,4799955183952861893,2097152 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,12632326372070198757,1000635142056203050,2097152 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,16741414167633310557,9951263771888318827,2097152 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10980084116856629704,16502353954284507548,2097152 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,5743574074206216824,11288764251017375516,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,11592233476188049981,2076697274508422902,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,15827946429308751060,13308164128111522514,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,15827946429308751060,13308164128111522514,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,3329102617091328400,18081238820651598836,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,2187457627988835640,13589691751727238231,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,9656160236759456053,15378496815305046579,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7535601802750028940,7184836205903535125,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,12328850364296146979,2387497715123505037,524288 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,18049888972367838889,11895591307781835199,262144 --field-trial-handle=2224,i,7958671498874776543,4599677620225013333,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ea28cdd76f43a577ce64c932fe84aa8a2a0b40207ac6fc99e2c9693e8205efcf
MD5 30b5ae4319818c017a15e68c0eb73115
SHA1 160ab51ba587b22c67669864bebcc1d3d5e73a06
SHA512 9fb41c83ecac6ac708b2d4afbed909c4b4f6357b5b8e4067314ebae0ff7281a8e0194d5871f6495ba1394a85dd7282a1ebfe01c0e832e55b7b32728d760e193a
TLSH
T1BC514CC2BDF160D1FBA8007888FD91D7327A4573174B1D392D91C778BA2F76618023A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 338bbc31a9047b95280d553313be5928c8c22637c08f5ed67dd615465594d3f0
MD5 56515c0829127c75e9c66cd36ca99f06
SHA1 f9e54f4f49a43a9b907449383f1719626014cd79
SHA512 daab4a33bf7373d63fe41b16b5d44769cbd70c59b2007a509b7063a1d62ab67b5dc29f1505d14c7566071c342adf08676dbebf40037252921da2fe459b9f1acb
TLSH
T1BC416DB7C3D4867ECD0156F06A246E27CE2C0A06922C3C1689E4EF1F63E24B1D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6813281148130d3dce0ece76a4ecc9d31981e164a0528d5f026d1d92e02aab4c
MD5 ea8e0afb993a89cc7e81ea6721bf6d13
SHA1 68b70bf72ac2cbd6e0af054cde2c442646a94cee
SHA512 81031f980d87404a2735fe3094a6399591c26308b9855ae8069439b8093eafae9c33925e11777455fef72a893a7f244cfdd14245b6a6d3df5b52e473ce68d78d
SSDEEP 192:sxZnRfWc/fKsc/qxIdpdaHW6+WNGY3ReFvIgrJ:sxZnkc/fKsc/q60HbGf19
TLSH
T1E412C8526E38A97B8CCBD20DBB157F53E6F9503261D01E58E6FC8A1C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a70490bb5877263a614c3d1c9548fea3dbdebc8d1d03f18d870469710af7beae
MD5 72917bbf668eaa56b0c44f62cd3ce943
SHA1 25f3fcbbd47345536ad20e8388868d740efda7d1
SHA512 972a4666599d41f94c6e7f53480097fd71b11e555b6b4e0961a1615066e9a2f927d0c0e260c680fc6fcc445389424cd5069ea4ae744b608a9e7ac7db6943ef88
SSDEEP 192:sxZnRfWc/fKs2EqxIdpHaHW6+WNGY3xeFvIg5TJ:sxZnkc/fKs2Eq66HbG31n
TLSH
T1FD22A6526E28697B8CCBE21DBB15BF53E6F9503261D01E58E6FC8A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fa03e46bcf09915c43efdf538e0b224a62c5ed61d677bbe6002ade96a14a869c
MD5 a135b17eb94a68f50d97cb419d1256e5
SHA1 a65ff5452d8e0297824cf297d39c9e9c7c2d9ea8
SHA512 ad21c52da7da7b980997aaa9966e036e4cfc1ad64f792b2d1341ba83d5e215c363e7f546c892815670b8e0d8bbc46ffc4c593d744ab9c1bd5299696e55e4725d
SSDEEP 192:sxZnRfWc/fKs2EqxIdpdaHW6+WNGY3EeFvIg5TJ:sxZnkc/fKs2Eq60HbGi1n
TLSH
T1F022B6526E28697B8CCBE20DBB157F53E6F95032A1D01E58E6FC8A1C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b53dd68e23ceaa12e829edb0e6a1647f05ae36f7e2f4056cb1d4723b42e4f791
MD5 0632f46e1658851a313e39d6eab2e276
SHA1 c6724a26fadfd01cef5cd13a14e19b8d69b1c96d
SHA512 0a85d19d2f6c6228b86a116f5c042e34395ccf787ec09bf14a0de89057f20a06d871c5843178c64c13cf19444b87fc33f6d9f06aa593fafb693f525017de6010
SSDEEP 192:sxZnRfWc/fKs2/qxIdpdaHW6+WNGY3ReFvIg5pJ:sxZnkc/fKs2/q60HbGf1B
TLSH
T1A622C8526E38697B8CCBD21DBB157F53E6F95032A1D01E58E6FC8A1C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 265a6dc5c38a6ac576152b766b1dd3f5ceecafebdfc5c6259cf7907118822ef7
MD5 db2b0b20414679b9027fb39f2c611c7c
SHA1 8ed9e143ca8902e1b985cf706e25c5113e4d9157
SHA512 f80e1595c6e69fecbbb9b0ef9c780395dac7f9157287a6a4349b89438a4cbc8e6b5491eee022c86209f4b64c19691e1f6c260eadaea405a00e6e3967a80fe4a4
SSDEEP 768:KG30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72drolZMd:KG30AbSWvS2l9u1jaLmLZ12Wi
TLSH
T150C2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8159bc3b57ffb5f93b7e5f19ed2bf0e84767e54a1c19c5ccc3bd6932d4abc3f7
MD5 183511b90567e47a033869befe9db197
SHA1 a89d558ab76cc227b98b82cef725656db604ecbc
SHA512 45b2d39378aacf8e07f1910ddf3bcff183126f473632f152844e76c125f934a2be980e059f7ed58d6b6765381a1579f0e5b4de697076fa23c7de462fb17778f4
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyLKV4kKIYJbUzEIScJK9A16JxyZYLswD:KcyIK7ia2VKKOEFa0Kv6uqz
TLSH
T14191E10170B7164038BE295D90B4971F028131F37024E66BBFB955B69E2BE1C4EFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 e904d132a16bb2aed0e4be95bafaae1069a47c398211e92f41c4f8873807eda5
MD5 4c00919e88ad065be6a55ea3f13f1567
SHA1 4ed4848e8697d47e321165614b3029ad8445bfd6
SHA512 7254e9f7bf6af37faa78c11ebc14f4c1f28ef31e1b76be11ef80d128744b5b1b9b232451635a8f6aee8dc2b349d763205297090bf4ed4d47ccbb391564e4c1ac
SSDEEP 384:hsNMU2NVnBpu1Ac9iX5F7ZtoN7O6R2FeoVh7Ut:hhBBdYaDoN7TRoY
TLSH
T1D7625D32A874AC3B4DE3D555F50B3713AEF851A797C42F84DAED2B2D05CA59C1306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8ecff48ecca1bf025f69b249e2e94384c28121a3f837f2dd4593eabc9b50e59d
MD5 45b881af9dcc2138b272e106e9692fdf
SHA1 823b062da153d1a7ef9db3439724b4d83b1f153a
SHA512 117ef6dba2705a1429cb57fa9eda8156215ef48f77f30ae57330768ef085af0c0fe0b73a0a0970d46fe9e0a0a4ee4ec3d8046abc0d21263abd30d35f1f86c672
SSDEEP 384:+qZcIUUsNMUENVnBpu1Ac9iX5F7ZhoN7O6R2FeoVh7Ugo+:pfh7BdYavoN7TRo91
TLSH
T19D928D72ACB8AC3B8DE7D155F60B37139EF8506397C86E40D9ED6B2E05D66980307823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 020145ecb732de056378178852cd1ba54e5190460bc837fe6efc1dfcf94f4d49
MD5 823ab5a5a119fcffa08c309d6817c1b9
SHA1 151fd87727bb273dbbb233eaaf3f332d69ab5db2
SHA512 65e993f500d418a2818dd1b9e1a06d47678d4088a9a0f57a8fe1590520e74c835368014abc6949a4bd1b1800e6aed015a30712991970cc1d39276ba1cda33abe
SSDEEP 384:eZcISsNMUENVnBpu1Ac9iX5F7ZtoN7O6R2FeoVh7Ugo+:cSh7BdYaDoN7TRo91
TLSH
T112828D72ACB8AC7A4DE7D155F50B37139EF8506397C86E80D9ED6B2E05DA6980307823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1f0ceece0e5abe50423475620f9ccd40e0e8385ae3252651479681440bc56dbf
MD5 1d9c894b7c4e82699c2436b3e2067b4b
SHA1 b7cdffefcf59ef8170b37825cf8e0d964d88b2db
SHA512 ae78310c5e0e7ea649a1cc865d402b2b6a0f08d8fe8fc42c538902332f36cd4665c93d87f55bc2be9896f3a1c6c7ce4df1757c350d1a3b2bf1a25b40b14628e9
SSDEEP 192:LONlB6AmwprQmiUybl6siX5F7RJiVkZU6:LONH6ipd66siX5F7GSU6
TLSH
T1F102F935B9686C7F8DF3AE48F54737239FA5116BE6946F84CAE81B2D01D768C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 90a5819ec4d683aaf0a7b53acf2f7e21041ece31f45a4e33030e9624748c392c
MD5 21963ab0517ca458646f1c1785567c07
SHA1 b55a6a876284b67ffff0953c51ac8ec7c8b948fc
SHA512 c2e5c59faee1a7a034b10d80393cf34a556ab46f81ace136c377914267c2b4ceb2de1e2085771c9b69be747c7b3b13d5a94d6766f165a601e5bc4883957102e4
SSDEEP 384:hsNMU2NVnBpuUAc9iX5F7ZtoN7O6R2FeoVh7Ut:hhBB8YaDoN7TRoY
TLSH
T15D625C32A878AC3B4DE7D555F50B3713AEF851A797C42F84DAED2B2D05CA59C1306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c35b6a0ed8adac841a4e79d5f97f5c605558e295a6fbd8707ec8dd211cee966
MD5 dbe24026bd2a378a64ace2a98701c358
SHA1 240f89be9f45429bbb366c497bd16e2344842a90
SHA512 af3e02a239f56eefea6fdff4e8db4f7bc00d843e791bd0bf514bf30cd924bc2ec297c318f9f5a32e7b2834258dcc6844c4ab2ed35f152daba2e8d6666dd22c70
SSDEEP 192:LONAh6AmwpmQmiUyFlMsiX5F7Z4eslRW/hNU6:LONAh6ipCSMsiX5F7Z6oNU6
TLSH
T13C122B36B878AC7F4DD3E554F44736139EA55267DB887F84C9EC2B2C02EB59C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fba2043-78b9-4cef-8d10-d47f99870309.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8fba2043-78b9-4cef-8d10-d47f99870309.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5413c2d892a41dddcc1e88f29d4ad4d342c5b9d0c4cee2c13a2170fca3c57822
MD5 abcc838e77907207a541a0dfc4cdccdc
SHA1 2009958594ba534dbc3b521f4f88c69c2d752c08
SHA512 a264228eef5db8153f8a9459e931433f3096fa47cf8f095a6574ed6e5e2e284b861f31145f67bdea85d00e46b8b0f64c00da248f88ae7829de888ce503507c04
TLSH
T1DF41375CAAF91118B3B76E1A9BF6A86E087E79332E07C45D00110E4F0A27B40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download