a7762846c2bf9e97136b0273813153739f72133abab715915b9e7ef0ffb7cc3b

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a7762846c2bf9e97136b0273813153739f72133abab715915b9e7ef0ffb7cc3b.html
Size 114KB
Sample260912-rmrtja1vgt
SHA256 a7762846c2bf9e97136b0273813153739f72133abab715915b9e7ef0ffb7cc3b
MD5 d53c570796315f74e20ebe1601ec935e
SHA1 ddb8240ec2ba32f0eee4c192c2bc8fe90fdfeac2
SHA512 42be2f4beec76e1ba57c270c2abca99dc97ade36811e0d16eec9a31a847aca73c96c8bd2cb45201d2f86a504befea9b328b31e937b0b80a4586dfba287d96346
SSDEEP 1536:ymxBYn+hV405Rl5RnV9mXJklEQbTtaNoGxyDABbEaoybEaowRWmPxN8b2:rFgQINqsBdoydoLmZN8b2
TLSH
T1DBB3C69712204CF9EFA41DB3459B086B3C2C1437AC4391B9E3FD8F972B56D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4988	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338237348798739"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{F3EAC07E-EBC4-450F-B0D9-F86BDC634A29}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4188 wrote to memory of 372	4188	msedge.exe	85
PID 4188 wrote to memory of 4988	4188	msedge.exe	87
PID 4188 wrote to memory of 976	4188	msedge.exe	88
PID 4188 wrote to memory of 976	4188	msedge.exe	88
PID 4188 wrote to memory of 976	4188	msedge.exe	88
PID 4188 wrote to memory of 4520	4188	msedge.exe	89
PID 4188 wrote to memory of 4520	4188	msedge.exe	89
PID 4188 wrote to memory of 4036	4188	msedge.exe	90
PID 4188 wrote to memory of 4036	4188	msedge.exe	90
PID 4188 wrote to memory of 4036	4188	msedge.exe	90
PID 4188 wrote to memory of 1816	4188	msedge.exe	91
PID 4188 wrote to memory of 1816	4188	msedge.exe	91
PID 4188 wrote to memory of 1816	4188	msedge.exe	91
PID 4188 wrote to memory of 936	4188	msedge.exe	92
PID 4188 wrote to memory of 4224	4188	msedge.exe	93
PID 4188 wrote to memory of 936	4188	msedge.exe	92
PID 4188 wrote to memory of 936	4188	msedge.exe	92
PID 4188 wrote to memory of 4224	4188	msedge.exe	93
PID 4188 wrote to memory of 4224	4188	msedge.exe	93
PID 4188 wrote to memory of 3864	4188	msedge.exe	98
PID 4188 wrote to memory of 4252	4188	msedge.exe	99
PID 4188 wrote to memory of 3864	4188	msedge.exe	98
PID 4188 wrote to memory of 4252	4188	msedge.exe	99
PID 4188 wrote to memory of 4588	4188	msedge.exe	101
PID 4188 wrote to memory of 408	4188	msedge.exe	107
PID 4188 wrote to memory of 3840	4188	msedge.exe	108
PID 4188 wrote to memory of 4204	4188	msedge.exe	109
PID 4188 wrote to memory of 2124	4188	msedge.exe	110
PID 4188 wrote to memory of 2124	4188	msedge.exe	110
PID 4188 wrote to memory of 4680	4188	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a7762846c2bf9e97136b0273813153739f72133abab715915b9e7ef0ffb7cc3b.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc001ac188,0x7ffc001ac194,0x7ffc001ac1a0
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,1408344710688086305,5915529123280625738,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,8079638950557039445,9980537427565133750,262144 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,2481179053498954897,10715338254616574459,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,8249728121796290508,2657628338450628540,2097152 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,16441672026323165473,5006410222011907622,2097152 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,13500238247155866528,3877752010738051261,2097152 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,15213408207252015898,10511617411031702939,2097152 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:2
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,16848650294295378497,17764572898175702528,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,9642928431000637981,10116309469097777822,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5678754503854298432,10683318486242696771,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5678754503854298432,10683318486242696771,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,9916276255984672537,11156569449118012675,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,8703654336521599801,2650904261056930417,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,14749218989796422220,18019834497381882378,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,2429368509770719354,3824322297985562465,524288 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,9260672906032583222,10638644616702214551,262144 --field-trial-handle=2472,i,12145361579626206251,11972553706839300028,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9eb694142c248449b23e00754e5168950b89135bb397d58afdc2af9802657dbf
MD5 2ffb876bfd3c77810110da06e0c242ce
SHA1 4cdd08fe9efb1dd6ed435a76a8618a23f80cb819
SHA512 387f0a6a70e8c5d47257137d4a84ba72a169755204744f7db8ed5ed06548a96c74e19f5f5738ae2636722746ae6d3a333c6bec2412904d1909895a1c7f51905f
TLSH
T19651B98595908065F7E8C17BA2FB1ACBBA3C678055835F1136EFFDFA9C7671AC109040
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 050bde7158f182a6e1fb135bf2a857032eff559a40d69c424a28774981841c6b
MD5 ac68bd0fd0285b71b56fb5721f6d32ce
SHA1 50d7dae8e4dc77c4c324f90cd424b357f9fa590c
SHA512 9e8d23b82f4302d07c8fa77d1e0b1d9598f64ad4c39a75f872bb17996e3b85b38fd4c2e1d4573a4ab62b927265623463b8df9a5f114f475f452883270a707583
TLSH
T1C6417AF7C3D4877E895166F0AB256E2ACE2D0A4A522C3C16C9E5AF1F63F24B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 84f028eb4a2e269295d730aae38d054109572cb6eacc8c7ea2e60080da7d104b
MD5 14a5857984401e133e67cacce9e34dd7
SHA1 b32c6b92191fc60ef170eb47c081366aa4a8d19c
SHA512 56e8970e58f4707ccf49bb84967fe85ba45a414b4c0ac879f80d3b638b626ff9c96bfa04a6446bfc2926036a75d2831bb16db72c93cf3ca1c3cd93aee6467376
SSDEEP 192:sxZzRUWc/fuspNIdpd5HW6+WNGYRPRJGIgrJ:sxZzFc/fuspuDHbGme9
TLSH
T1D612A9126E28A57B4CCBE21DBB257F53E6F9503251D41E58EAFC861C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 71553770323899a62dd0dc152e7a96be33ac78c4ee94e561766e18e6726c4c2f
MD5 46ec2114fdc3819be71466016c017e78
SHA1 b175528e54a33f7eb5a94b7c2e2bcba73035b61d
SHA512 70440ed0f674d3fa2a4803b29c8543f56c4aa95e6451901880c859b98702c9c47e3ae7980b48c71fc22dcaf2568586e06ca597ae2233e56a957b4a07fb385539
SSDEEP 192:sxZzRUWc/fusCNIdpH5HW6+WNGYRPoCJGIg53J:sxZzFc/fusCuZHbGmQvr
TLSH
T1B622BA166E28A57B8CCBE21DBB257F53E6F9503251901E48AAFC8A1C05E7ADD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7e3953bf27ab9d9a2b919b3af394e8f8fef0a87f7dba536009d8087ebdd8f684
MD5 82b85147545b6c61077d6eb6228ca304
SHA1 766d970c3a2f4e462aae8d81b516fa3292b6ffd0
SHA512 d6e9b4d27a048e984b047e86da1f644e3b28543a92bb8fe53984470d648a9c97be7cc44ceed39098f60b187f707b5672de87af8228c4500827a087d10c22f316
SSDEEP 192:sxZzRUWc/fuszNIdpd5HW6+WNGYRPRJGIg5dJ:sxZzFc/fuszuDHbGmeF
TLSH
T18B22B9126E28A57B8CCBE21DBB25BF53E6F9503251D41E58EAFC861C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5839ea36bb62ad433d3123c1f387eb4775022d765898c51ffff3909e90b09cb8
MD5 6cdcee8c54879108529958e4727143ab
SHA1 56414aa9a4f7a97ff465c6f12bec849a1b4452fc
SHA512 fc2ae5dc987398d77ae64db53d9f5dff1f295e8053ad2c3de0e0a9c89d20a5f2aef0930bcc90fc3ca4c9ced082b83996db079fcd9d49bbbb711c3c902cbbd71a
SSDEEP 192:sxZzRUWc/fusCNIdpd5HW6+WNGYRPaJGIg53J:sxZzFc/fusCuDHbGm/r
TLSH
T19022B9126E28A57B8CCBE20DBB257F53E6F9503251D11E48AAFC8A1C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 21c6e4914ed0787f4c14ccd1f7989da9fffb68f9ec2586c8846f6c2d0734b927
MD5 9e41b0059356be9a8fbb92c96392d776
SHA1 cddef510d154ec067242a1d720fa8342a3948b8c
SHA512 1528bb3fc1cd0fa8e378aca4445d4697b77ef8b1d90d23690328db252c8e68f478f55321a1ce8e8fd986d6cb50f7a3cac87b6a7761babfbf2cd8a19354b859e2
SSDEEP 768:wiK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3/roXL+jnl:wiK9uzYWvcQWsu1ja0HL7Q3sXL+rl
TLSH
T155C2FA3F640CCB7E4FC01A9DDC5A6F973E9802D7A6688D5047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9644c28b7cf636650f15e211d5f9d9eb0ac389fb3f53ff4cfaf79edeebbc4f5e
MD5 c7acf39324af790da733172f5f6c16ad
SHA1 d7583883230d50fbd9a1464ef40fa4631eb0f77d
SHA512 68421f016061f4233fe900b60735518a846592b09cd31ca1da2994ead2a419f83e1ca7c55562718c6841ffb81a138fceb6e0c53b7f5775ee53642a1424a80322
SSDEEP 96:K0mgeNiOw8YEI83viWEK6hi4EmuOXwuZPJoPTBDvjI/OSibjK66i9jm5xmHSWAK0:zlXEA
TLSH
T1FB91C24431B702043CBE695895F5972B128172B37018F66B7FBC14B59E6AE484EFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ad44b7d-730c-48e5-a3ed-0ef390c187f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1ad44b7d-730c-48e5-a3ed-0ef390c187f3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 1e557575744d23a8671bef2dd8c8d179b5bb99c179874520e28cb30d268244fe
MD5 9ae389e2cfb5d4f589ac732320880c34
SHA1 ca238078881354dd43076aa857ca09a8022f7f79
SHA512 7c148c8c0c436eedc8027d45c7a74b2f3a4daaba243bcbaf5ab871b96177ce0a3a49df4678b0a8ddb123fbf87a1edb8f9838eb9fbc0fa0c668fa416524dc66ef
SSDEEP 384:DiFiZcIrCsNT8TUNTUlIlPwnyYD5OjTVi0OGCj7+204e7O6R2Feo/Eoq:uFQuCwg20nFOxj7lte7TRXd
TLSH
T196A26D735C689C7BADFBD685F94A3603DEF840A7C686AA90E5CC6F1D019B59C130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 05c7711f7c60a550db5b9db9cb078c0a8ea9a29fc420597867520b50664ba928
MD5 6648ddbe1e39af32bc25d4488822d519
SHA1 db7e52780c47e55723a70cfb087534f3b5c55533
SHA512 67d9a7ce1599f485ed68bf1594df6328aeaa1d9d7cfea167238d36b66c8cf84dc9474d55d839ecaa1e2547efa8454766095fc789c33618598ce5418f14c943dd
SSDEEP 384:TqZcIrCsNBPwnyYD5OjTVi0OGCj7+203e7O6R2Feo/Eoq:su70nFOxj7lge7TRXd
TLSH
T18D925C716C786C7B5DEBE145F54A36039EF841A7C6866F80E4DC6F1D01DAAA8230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8ef0e33fe1f5cbe220a0e3e0a43dbf282dbb5c476738b5d39d0be65ce0df5944
MD5 8bdb721627a7bb28c647859a4ae30134
SHA1 6b0cf99018e2e12df2bc749185a6dae39fdc6275
SHA512 c945d4ef3df523a06e1a553a8ef84cd5cab248b102dbe66b6e091421d384f839627ceea68d5250e7113f5b6c088ac12fe3c04cc9e50a6c0d59b750f27fa16828
SSDEEP 384:0ZcIssNBPwnyYD5OjTVi0OGCj7+20We7O6R2Feo/Eoq:ys70nFOxj7lVe7TRXd
TLSH
T109826D716C786C775DEBE145F54736039EF880A7D6866F80E4DCAF1D01DAAA8230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e2c9d0f426cb257e60019cd832d9b91a9dc08714b755f5e004dabc9b48139191
MD5 33598d3d7012914955305e40f358ce9b
SHA1 bbf495ada03fd803e7ea00dae3a78ea1a3529591
SHA512 898b616e9b1208fc68f1aeaa74dafabd41b9f1ca144d6a53057c49138af5e4fe5733bab6bdf49a5664c9f48e811fd9075420ba0f28adc2ab79287ff677d1a246
SSDEEP 384:8ZcIssNB6wnyhD5OjTVi0OGCj7+20We7O6R2Feo/Eoq:qs70nFOxj7lVe7TRXd
TLSH
T184826D716C786C775DABE145F44736039EF880A7D6866F80D4DC6F1D01DAAA8230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79f628cf19ed6d9586fc9380eb826a2a1af7bffc4e5e547231494bf6f6dc8020
MD5 e7e58502b6a97074f8bcf6bc6212774b
SHA1 222d33fdac65a5fd808add685810f026767f38f8
SHA512 eb140688ba2302ecfeca6320c81aa1c4a308c341439116a7c37c3cd199f8b7a290193cd76b064821fb2d7ba9e26acdab437c4f26a98d546569ea1b8d5dbb6352
SSDEEP 192:SONY6ygpQmiUygjtOCTVg10OQm4zP50VU6:SONY6lHJtOCTVi0O8GU6
TLSH
T15002E834AC783CBB8EB3AE45F58B27139FA8116BD9522F80D9E81E1C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7d5beaa1da68fdfcf2e6167e5f67081345b21f02b080a217bdd085967594e27d
MD5 60bf8103627b3b8bab82360fa2ae752e
SHA1 9aae7832f53d99ac9401d88e28cbb9421106b14b
SHA512 6108f744d397350fe408c1be3c6956422f118e430b5df4f46e725e5b4ac4c39ce24392e7d3258f227fd1ffec7b33145669ab2e704012958ac385188c93591102
SSDEEP 192:SONM6yQQmiUy3j7OCTVg10OQmMCj7+20c3Ug/vU6:SONM67I7OCTVi0OGCj7+20ReU6
TLSH
T15012193578786C7B5DA2A584F48736139EA84167DA867F90D1DC1E1C02DFAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

599ad834-c7f7-41b3-98a7-8800e70b3ad1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\599ad834-c7f7-41b3-98a7-8800e70b3ad1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a20143192b4a20b3b18f1aee83c3df1b6c8f19c82e3d33cfeeeb242f3232275f
MD5 a0a295860d5d2e4a117d0f71f410ea6d
SHA1 4f20fd6e415a0db4f9e57c59c738a7516b0f1a1b
SHA512 685df1e5531c49650a2852d0aa3d7e6bd980aad2e01d7d63dc8407387e786f96386f2fc4a056a8da043fb6ddc8d9262f88f54757a520db443f72c0d9c08a3d1a
TLSH
T14741EC58A6F91108F3B77E566FF669AD487A78372E0A945D00110E4F0A62B40DDB2737
MD5 SHA1 SHA512 TLSH

Submit Download