874e6ff6f9b8c50c9f461ac8b759fd5499a456f9bec82da39e72aa96709552e1

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_874e6ff6f9b8c50c9f461ac8b759fd5499a456f9bec82da39e72aa96709552e1.html
Size 111KB
Sample260912-sdl3cs1zdw
SHA256 874e6ff6f9b8c50c9f461ac8b759fd5499a456f9bec82da39e72aa96709552e1
MD5 c64ff32ad269c0f188ff8a13d8d5ebf6
SHA1 cc07465dae0dc117acd4cca8c84e8600631de2fb
SHA512 feca51f5d1dfc73d592d043d059f94595893d50d1c020029431ad869c631e874139dc2dae29e8535a6f212a4146a1b286758a16b0c76905bb7f0c77d446a4a7e
SSDEEP 1536:RCxxYn+hEh+dRM0a/6Mi6wQlBQjTtdNohx7C8obEaoWbEao6YkO:0paQ7Na5odoWdo6YkO
TLSH
T10DB3B48711204CFAEFA40DB3459B086B3D2C5437AC4791B9E3FD8F972B52D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4944	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338241370360544"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{E6D004C7-30B5-49AF-97EF-263B3156EF5E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2896	msedge.exe
2896	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4100 wrote to memory of 3148	4100	msedge.exe	86
PID 4100 wrote to memory of 4944	4100	msedge.exe	87
PID 4100 wrote to memory of 556	4100	msedge.exe	88
PID 4100 wrote to memory of 556	4100	msedge.exe	88
PID 4100 wrote to memory of 556	4100	msedge.exe	88
PID 4100 wrote to memory of 2304	4100	msedge.exe	89
PID 4100 wrote to memory of 2304	4100	msedge.exe	89
PID 4100 wrote to memory of 3996	4100	msedge.exe	91
PID 4100 wrote to memory of 3996	4100	msedge.exe	91
PID 4100 wrote to memory of 3996	4100	msedge.exe	91
PID 4100 wrote to memory of 2112	4100	msedge.exe	92
PID 4100 wrote to memory of 2112	4100	msedge.exe	92
PID 4100 wrote to memory of 2112	4100	msedge.exe	92
PID 4100 wrote to memory of 2380	4100	msedge.exe	93
PID 4100 wrote to memory of 1720	4100	msedge.exe	94
PID 4100 wrote to memory of 2380	4100	msedge.exe	93
PID 4100 wrote to memory of 2380	4100	msedge.exe	93
PID 4100 wrote to memory of 1720	4100	msedge.exe	94
PID 4100 wrote to memory of 1720	4100	msedge.exe	94
PID 4100 wrote to memory of 4012	4100	msedge.exe	98
PID 4100 wrote to memory of 872	4100	msedge.exe	99
PID 4100 wrote to memory of 4012	4100	msedge.exe	98
PID 4100 wrote to memory of 872	4100	msedge.exe	99
PID 4100 wrote to memory of 1380	4100	msedge.exe	101
PID 4100 wrote to memory of 4568	4100	msedge.exe	106
PID 4100 wrote to memory of 1952	4100	msedge.exe	107
PID 4100 wrote to memory of 4560	4100	msedge.exe	108
PID 4100 wrote to memory of 4484	4100	msedge.exe	109
PID 4100 wrote to memory of 4484	4100	msedge.exe	109
PID 4100 wrote to memory of 2896	4100	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_874e6ff6f9b8c50c9f461ac8b759fd5499a456f9bec82da39e72aa96709552e1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd9051c188,0x7ffd9051c194,0x7ffd9051c1a0
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15166094204893863244,9215835176857216380,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,4853087311457596980,3266313486191114177,262144 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,1883948539893744040,2115092449278300371,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,3361678076088093539,12951860919120971251,2097152 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,1325117303205398981,11996363314936707759,2097152 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,3634855162695194438,14338033583002569346,2097152 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,6510346002853765180,18371493583090447653,2097152 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11102987827093792170,7573975413406364933,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,2230294245784438920,15884753331868569239,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,7262638136436325578,18325213558089333631,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,7262638136436325578,18325213558089333631,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,15181043735788543594,2647857873448647477,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,15941404878741167136,10914336543610970832,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,14322328203481559920,16902610362109570061,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,17046795539687684554,11964898553939855836,524288 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,2995977249044629032,2744968408161738808,262144 --field-trial-handle=2184,i,2373952597098262395,5300949508810933518,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 74be845547654d278ec6cb17482428c8b740f1633fdbafc6be8baa37ea7c2216
MD5 7fc4df4ca1908289687e6d677a351f8b
SHA1 a7fb673aa69328acc30fdab6df92d09bb091d251
SHA512 4154bfe555e3ea3da31d3bcaf5500cfedd20a537f7ac8ed555b8cb66e95e041e998a82ede6231c3b3f5b6baebdf3997d4573df6086e6b5368cfa36a50d80a12a
TLSH
T11C514BC2BDF1A0D1FBA8007888FE91D7327A4573274B1D392D91C778BA2F76618023A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0797d25d760dafc93d10dd2f3c3932d6f5475e22dbcc9c10b0bbf51c0d775f2c
MD5 1b4bf6685dd305c5122733d2049918fd
SHA1 737c8940aca3bc56f83f0b9f83c201f16d0d668a
SHA512 9cf7ca9a9b494f3b3c08daf177fc5f3954805fbb3a186006bdf9c3e7bdbd882116280c5d5b367911e2a69f43256b3b83a2dcc0cf50b597565206dee7a14c90d2
TLSH
T121418DB7C3E4877E890156F49B24AE27CE1C0A46522C3C1AC9E4EF1F93E24B5D20199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 06da95b016a30d306a7a0388a66bd32e893032958a6dbaf421bdfae6e2f750d7
MD5 d0137b073bf7bddffc372db9b9a10a5b
SHA1 81158c1f358c713bb37096f58673b81bbe88a578
SHA512 6ae7475388db6395f4dc6407b0a1778aa4ab3fabb3a1d7652d1ca57bdb502919e4805bc57b6c2607df6ce07ffe3544b30a577497c6b3c0149734d12a26d291bf
SSDEEP 192:sxZXRjW6/fXs7AIdpd5HW6+WNGY3RmOIgrJ:sxZXM6/fXs7BLHbGs9
TLSH
T11E12B9116E28A57B8CCBD21DBB257F53E6F9503261D41E58E6FC8A1C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 81a881d1ff499d25b40c636bbb547f29243759345d7e7f3ab8660415924e8f73
MD5 0ab70ec4ff6d1f1a148c23589368a2d6
SHA1 3c9215479ffa8c69efd9ecc41fb8119ddc49b9ae
SHA512 86c7f3ceb4f3fd30c3887e2d206af7bd90db7f19af34b0b706b6b6eda0b986d9cfa35e49ba7dc535912f519a782bfc4827e84c6ac59e091e8bf4c1a96bd9193e
SSDEEP 192:sxZXRjW6/fXsmAIdpH5HW6+WNGY3NmOIg5CJ:sxZXM6/fXsmBZHbG2o
TLSH
T10222C9526E28A97B8CCBE21DBB157F53E6F9503251D41E48A6FCCA2C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a66ee514252d4291bd16d7619ce99efb168dcf0036b9f89525e684c3c0628a13
MD5 ebd6b8f5646fd2da83bcc6b394c0e648
SHA1 3f21151e1378bc8a44af4556eb7e1a9a12712662
SHA512 0a576c03170f741b9f1eea29539c2c3cf2b486dfba7627cefaf9ec315d9919194f6100a9367664a15e02cb1fe12fbec9ca3815179d66d89cc6e854083d5a2ea6
SSDEEP 192:sxZXRjW6/fXsmAIdpd5HW6+WNGY3SmOIg5CJ:sxZXM6/fXsmBLHbGvo
TLSH
T18522D9126E28A97B8CCBE20DBB157F13E6F9503251D41E48A6FCCA2C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d463fc7a645ea06dc71ef1dd44ec0d0688d6ab1f4cac9768dc7b6703ec34d4b1
MD5 19dc68c70c48d7961e0c45c901e949c5
SHA1 03b0d3b5c7c3649724e3e802466bde583e8a0e55
SHA512 d2162607181d275151e8dbd6621e17fe33a02ae964bad2b8eb9312c6545bf43533f765f6c993177b27fc7f346c67c7924ca220e41effa21747bc3ae1da948fdf
SSDEEP 192:sxZXRjW6/fXsIAIdpd5HW6+WNGY3RmOIg5QJ:sxZXM6/fXsIBLHbGsa
TLSH
T16E22B8126E28A97B8CCBD21DBB157F53E6F9503261D41E58A6FC8A2C05E7ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c99988c856867f019a91e2f87a82c14ddb8fa4ed6a00d2e7f1bbb936c9d28409
MD5 f7d10c82aee6688e11e51c4d1502a7e4
SHA1 cfd3e1748d52287ea063ed884ebd4bc3072d33e9
SHA512 d3f94d96eb10d76413c1ed8267139f3881ceac0a1bfc49bc2d3fdf9bc3fbcfd4e62a7af7b8da9d15620cfea429cc90b69863f519dc0962f7916136e03d4d184b
SSDEEP 768:G630AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72DrolZMEu:G630AbSWvS2l9u1jaLmLZ12w6
TLSH
T132C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9d1f1c28295205d3ae9adb69f027fc10783e1e39984509785d0285139a796df2
MD5 737c6c1620b77d1fdb1b9ab82e3339ef
SHA1 d975d98782bd25cb73fa1d17fe7e0c3cdfbe293b
SHA512 cb827af5caa7c9d2ee967dea92701b7f81db0b00b3934c1724f982d0ce6e942ae15dc5bdbe817f92c407530900f86766974c883d24be7a2b215965ccfc0601c0
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyLKV4kKIYJbUzEIScJK9A16JxyZYLsk6:KcyIK7ia2VKKOE5TyKsE3G
TLSH
T1AC91C25231BB034178BE258D91B5AB1B028131F37018E62BBF7A54B69D2AE1C4DFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a359b388-2d6a-4ce6-aaf4-bb634b7a2055.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a359b388-2d6a-4ce6-aaf4-bb634b7a2055.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2ced1cee2f2f6b763ac2c68014f1f568099cde212a9c2ce80fbe442604e88723
MD5 58842ca85ec1580be3250044ce962496
SHA1 1e07ca823dd570365a622718b9b2aa195859db59
SHA512 71f50ac4eeef8de730359fd0ed1cb0930695273cc3542df5ea5cb2a20b0dcf7d6e3f1cb4276d3e4221e3b782d5dfdcb4ce73695d3ca0337676a05133b85b2dfd
SSDEEP 192:uz9qsNNuQiiRKRwXmwpuJiPQmiU1B3L49iX5F7Z4eBiI//PU8:+UsNNuSRKapuWDU9iX5F7Z1fU8
TLSH
T14D322B35A878AC3B4DE3E555F0473613EFB851679B842F84DAED2B2C01DB29C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f742e6cbad27c71296738ab20e425cf002cbaf7d4ed9534ec8317835d39bdfbf
MD5 5498f1fbfa005053bc293021e641b4ff
SHA1 20c1d21f2ff9060f5e1d34b03f34871d1293ac15
SHA512 091e7eb93c6a5f36c65215177969449580d94af0c3ac80c27ba40156dcf526e57f713d0c6781adb5776bbc44a614bdceef8c77c5776760d055adb4c1dd7673f4
SSDEEP 384:cGiFiZcIXysNX8TUNTUlIluSRKapuWDU9iX5F7ZXfsa+VYkd7U3o+:8FQiGwgTKa1QaBfhgXKN
TLSH
T185A26C7399A49C7F99ABDB95F94A3213DEB841A386D4AE90D6DC5F2C009B1DC0307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d63f846be18cb80ad0dafba68d41e6be5b4edf865b24903a8bddd0e2d8a2ba7b
MD5 cbdf3da8a7247b79bd1272fd26a60452
SHA1 74f625345beb2a8f878af089f77a2f7fc74c1db4
SHA512 e1523f03b4c88644f2de68566bfe04d27548285b5ba9e79edf249b931c71d50a6fd58fcb4c91c7ca05ee9fb55d9021d9f1fa3c0832b021ce222573f99b7e21c5
SSDEEP 384:EeZcIUsNNuSRKapuWDU9iX5F7Z1fsa+VYkd7U3o+:DU6Ka1QaffhgXKN
TLSH
T112828D7269B86C7B48E7E695F54736139EB890A397C82F44C9ED6F2D01DA69C0307833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0d16a317cb30c225b2e5cee823599c1c786ce536f18afffd1a0718c29370e95d
MD5 ca4e0c3c3f4532908a1cebe1d173bcee
SHA1 a66f3a12e780779a107c634457662220cb65686a
SHA512 fefd2d0cc6b179573b6d76790fef6331ee8aa76c1041c9d409bc70dae2dced99442d863a0fa9127a5ac9641e64a76bd1cc17f0ab4bad53c1dcb11976aa5dd389
SSDEEP 192:LONlB6AmwprQmiUy8o6siX5F7RJiMkZU6:LONH6ipd86siX5F7GxU6
TLSH
T11B02FA35B9686C7F8DE3AE49F14737239FA5116BE6946F84CAE81B2D01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 04c487e89a31f1b61fce59352b3bf19d1699d62e4110c12a7e505f651507e504
MD5 ee42ad1046b07d51b0d39a336f58bf7a
SHA1 20be3f8808531eeea21ff9ae158d83096b7fa8ae
SHA512 5e1ba99abeeb9320786bfab366902c62a164ab9f1a418d1185fa75f0b2b5f2ee702c4d17b7cec3e41deb3aa004dcd080822a2400f0b3b5b42b50bb9392577382
SSDEEP 192:uz9qsNNuQiiRKRwXmwpuJKQmiU1B3L49iX5F7Z4eBiI//PU8:+UsNNuSRKapucDU9iX5F7Z1fU8
TLSH
T13D322B35B878AC7B4DE3E555F0473613EFB851679B842F84DAED6B2C01DB29C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 34075092f78139dc279d666491a1c966b0f41ed5479e8d2ab1857848637686c5
MD5 ef0011f2d8854c00b0cd7caf69848113
SHA1 47147d8b2a5f842e3ec838b78b3ef75f4cd0bdef
SHA512 bacfa39847abf97a631155776712bad9a0795e932f0eb4bf899c9c29ae00693a98a0aaa7c185f0e47a12d1a7a9fcee46896ae734d2a71f929627e45bf038c200
SSDEEP 192:LON46AmwpRQmiUyso0siX5F7Z4ellR//PU6:LON46ipvO0siX5F7ZxfU6
TLSH
T1A1122B36B874AC7F4DD3E554F44735139EA54267DB886F84C9EC2B2C05EB59C530A832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8040f60c-76b8-44b4-95fd-270da5619d78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8040f60c-76b8-44b4-95fd-270da5619d78.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a115661a3cb332877b9baa2a62a261757099ff7607bfe9fe2f93461742ffd868
MD5 1c6f869fd87c4a70a02f2e346bf7d9f2
SHA1 4409456def7926b8346c66b2e3a7e43431a597e8
SHA512 55bb14a767f9dcbd0c96f404ca99af9ddff005a29ecc9eb456f59f2a877ed0f089fccb4fb8dd599316e42a6bfe8a88bcc06ec524d81cfb30449aaa3d9e07f05d
TLSH
T166411A58ABF91108B3777F169BF6A8AE487A7D761E46D16D10010D4F0637F40C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download