8902f9a56055c2ba3d0a50aa658def6d10a8a6cb0d8ead1708812be01897e357

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8902f9a56055c2ba3d0a50aa658def6d10a8a6cb0d8ead1708812be01897e357.html
Size 68KB
Sample260912-ws8fpasbjf
SHA256 8902f9a56055c2ba3d0a50aa658def6d10a8a6cb0d8ead1708812be01897e357
MD5 16410b7e18de5e77aa1800d9733e5121
SHA1 1eb584c8b43ca0a484d88b1d9d988cd6e003a562
SHA512 827f4fe378d36e339708374077f868b75e0ceea8f2d7fd868b51194967813d11eb7c5eea5b038a5c1d1903d395933bafd6b4f9605523b2d917119a4fb30c6951
SSDEEP 1536:z0iOoLDde9w3RYbtRQ0IYTRMOWjQIQTUtcA7Jd:zbgEQLK
TLSH
T10263940702500CBEEE6705F29555AA5E2FAD133BB003117DF2FC1FA23B9AED9451926B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338253975739837"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{A601BFDB-8388-4167-A5A7-84CD9067B871}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2752	msedge.exe
2752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe
3912	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3912 wrote to memory of 4084	3912	msedge.exe	84
PID 3912 wrote to memory of 4604	3912	msedge.exe	85
PID 3912 wrote to memory of 312	3912	msedge.exe	86
PID 3912 wrote to memory of 312	3912	msedge.exe	86
PID 3912 wrote to memory of 312	3912	msedge.exe	86
PID 3912 wrote to memory of 3992	3912	msedge.exe	87
PID 3912 wrote to memory of 3992	3912	msedge.exe	87
PID 3912 wrote to memory of 2740	3912	msedge.exe	88
PID 3912 wrote to memory of 2740	3912	msedge.exe	88
PID 3912 wrote to memory of 2740	3912	msedge.exe	88
PID 3912 wrote to memory of 4396	3912	msedge.exe	89
PID 3912 wrote to memory of 4396	3912	msedge.exe	89
PID 3912 wrote to memory of 4396	3912	msedge.exe	89
PID 3912 wrote to memory of 620	3912	msedge.exe	90
PID 3912 wrote to memory of 4368	3912	msedge.exe	91
PID 3912 wrote to memory of 620	3912	msedge.exe	90
PID 3912 wrote to memory of 620	3912	msedge.exe	90
PID 3912 wrote to memory of 4368	3912	msedge.exe	91
PID 3912 wrote to memory of 4368	3912	msedge.exe	91
PID 3912 wrote to memory of 1208	3912	msedge.exe	96
PID 3912 wrote to memory of 1208	3912	msedge.exe	96
PID 3912 wrote to memory of 4036	3912	msedge.exe	97
PID 3912 wrote to memory of 4036	3912	msedge.exe	97
PID 3912 wrote to memory of 4636	3912	msedge.exe	99
PID 3912 wrote to memory of 2420	3912	msedge.exe	105
PID 3912 wrote to memory of 3516	3912	msedge.exe	106
PID 3912 wrote to memory of 5012	3912	msedge.exe	107
PID 3912 wrote to memory of 3872	3912	msedge.exe	108
PID 3912 wrote to memory of 3872	3912	msedge.exe	108
PID 3912 wrote to memory of 2752	3912	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8902f9a56055c2ba3d0a50aa658def6d10a8a6cb0d8ead1708812be01897e357.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff16cec188,0x7fff16cec194,0x7fff16cec1a0
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,10696444533662071767,1783775592552357622,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,5298422444264364860,4680667938676981676,262144 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,10443137448458446502,11885258913277701124,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,5161239277327419752,18370982285227625842,2097152 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,7315420434469243253,17220104239778799948,2097152 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,14120525283883518215,9565015014552554747,2097152 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,14393680280045644345,13473138081107062657,2097152 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,8120658168137562657,3168513706851101237,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2940488355281055580,5109171891787856605,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,1015090493215449507,8316971743069319471,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,1015090493215449507,8316971743069319471,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,14309140562526571410,3308004280220108453,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,15825025482357936394,13472528823611835299,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,1391908605476591885,6018273159249979214,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1004,i,1422486128528089843,8974200575281834306,524288 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5228,i,8557578740950769213,17880868235722671922,262144 --field-trial-handle=2240,i,1286976373403501050,7469055226564022656,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7fddbdff7c2397fdd1f71d842ec290c7f23ea6e268a1331badd0ec3d3a62c19f
MD5 cd56432a43a361b030d16d7e2bfd254f
SHA1 8699a0b4ba980d633c7b3773e1b1128e27cba499
SHA512 c6416c1c148f52df8ccacd7984356de1cfbb597e45c4df16d8ac203454a0534d575d3cb5366ade81e35c9736b48bfc3d7091fc620870df6eb481aefa5ade629f
TLSH
T1E3513F42ED5082BBFFAC6EF18EE4A687363AE5F815431D3A04E4D7FA97563B4050C094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f23b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f23b.TMP
Size 2KB
SHA256 96090b3b9339fd4d47c1788b304c5f12ee0bb74263d56bb0a486bb514f7feb46
MD5 4be67c003957ba6cad2c9dcbfe45553f
SHA1 60b58baeedcd730435fefbbf756e02ec55a91624
SHA512 e5e2c94eddfc5198add727b1818cf3009dfa2d2785fd4273fa8b410ccace6cbd7e67b8ab69347194412a2acc87289102499c24f61580268cb48b51b00a60d52c
TLSH
T189515242ED5082BBFFAC6EF18EE4A287363AE5F814431D3A04E4D7FA97563B0050C084
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8b8d03d4b9a710df329f4e920f76ebe6fbe64cf9c8c8539e4f9e38bf92bc9cd4
MD5 08b6368aec9c4efabcc2b222023ebe61
SHA1 90e988e251cb06052a130a01d71d8bd5ff93d6c1
SHA512 7ee702faf13942688b77c0a5bf139f7cbb6266b0a16bc0e2eeceb2c03f39d2afc5fc08b80118c8836946fcbe55e9e22028fd577440bd09eee5812a50b5da839a
TLSH
T14F515AB6C3D5876EC81517F09B28AD2ADE1D0A5742283C1688E5FF5FA3E20B1D20265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 00bfe8fba41f731929abbed20526d1010eae2aa761208c6751dfb37348e2e14e
MD5 0b47b5b4d861342a0115924a19783fac
SHA1 ba5a8ae5bce1bfd635056954da5d5652887baa38
SHA512 b4162128fde11578be590824ec3b344de1395884b790b80119e916fb3941f6489537a0df3cf061c2998507dea569f3cdc67a3be5f80d92538f47a06ad2dd026c
SSDEEP 192:sxZglWH/fksCiAIdpdjHW6+WNGYYBaIlIgrJ:sxZgMH/fksnBpHbGff9
TLSH
T1B912B7516E38A57B8CCBD21DBB19BF53E6FA503261941E58EAFC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cd11e28095d5af9d216b7ab290cc518feffbc33d8a977422ab427506c3b11b6d
MD5 f72b69f236fd91ac09e540401eb98a40
SHA1 eb1ef55844a665a67f04970e429076485465a7f1
SHA512 7451ecb6f531022bcf9a416d720e4174db9cf80931c61672b39a1c865c8aa90e5496930e73ed7a6e2b384ca0c6feccda216622beafcc6842962691b4dc054e18
SSDEEP 192:sxZglWH/fksoBAIdpHjHW6+WNGYYBlIlIg5hJ:sxZgMH/fks6BDHbGf6l
TLSH
T14222C9516E38697B8CCBE21DBB15BF53E6F9503261911E48AAFCCA1C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3521eb97ba473cb865e411d35644db04a6df53fb3544b666c0ccf7dc733f54e1
MD5 716e25e5f7efe0bb0b73e6312d15a65f
SHA1 20ff2c7cce8a2e076e5039c93be9408c3aded739
SHA512 c48a1a786e842026e34949fdd3d99a7da41d6090e25bac35205364064e62b6183cb53ccdff820d7e13bd28abbb143f62b589f5c0ed6172d4211172dbdc12fee6
SSDEEP 192:sxZglWH/fksoBAIdpdjHW6+WNGYYBuIlIg5hJ:sxZgMH/fks6BpHbGfDl
TLSH
T19522B9516E38657B8CCBE21DBB15BF53E6F9503261951E44A6FCCA1C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ffb8fb7730b808570ca812bd0074057a01fc2a405d896655a59482275773df96
MD5 0b3a796c11852be32d9275806623ed5b
SHA1 8026ef61beab693307a3c4bffc481df8b7dfb7b6
SHA512 05e49838fac1891958d9b85763b67da0f251105881b6004613eda74664130d387c1b2929291040539dc58f34c899fb1a8162421c1c053581464d91c3352fa955
SSDEEP 192:sxZglWH/fksoiAIdpdjHW6+WNGYYBaIlIg5TJ:sxZgMH/fksFBpHbGffz
TLSH
T1FD22C7516E38A57B8CCBD21DBB15BF43E6FA503261941E48EAFC861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 64e7bc793eaa064193c4b1cc80fa0d9126cb8be08f189f3f9f33ba6e7377181a
MD5 c7d57014aebf15c69986f6677ffbb925
SHA1 fe748668836f8462f85ea6909c41e5192540543e
SHA512 189c3dbd69872ca3707dba2e0ee03d5819b368d94ccf19ce21e9742e1015acb0cba6ea09dd27c15cd9498234ca6e37076f879cff35bef9c5958b8ec8f1244958
SSDEEP 768:vIyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXEropi6le:vIyYR7jWv3NpBu1ja/CL8OXPp0
TLSH
T16AC2E93B640DCB7E4FC01A9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 af7a2f86eb3426f2e1f10970759166f7290e8d8e67016a6d12bfe3bf5c0970cf
MD5 adf351c153faafc1706014c4a2e38ef6
SHA1 76d8a1b9af9a8fd2cc23505154c213527781f17c
SHA512 5a67caee5d285be73137812f90a23c3920e6871f14a39f5eb04caf2af4408ba4e11a6c2236584fa80607e8dae2c27833731faf06080eb8947af1552538551fa0
SSDEEP 48:KglEZVnTHIbbebIStIK9N1/IxNYYO/VFyLeZ04WcMFbwX4ISQFK901GFx+VYvwso:KIygK3KmWNKKuIFD6KIAKOhKKKw+
TLSH
T1B1C1E05031BB064539BE39889474871E568132773066F62BBFBD08A68E6BE0C4DFF4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f71985f-b28e-4f10-b205-8b1ae91f1250.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3f71985f-b28e-4f10-b205-8b1ae91f1250.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7e237a05fdaaec2d298b6b714adc3fbd3334d23db2382aa48ddb481bf44f7f2c
MD5 b4bce3c1fd1f883297faa1e3c5f1c5b9
SHA1 a418382e04f258e5faaba8884f9321669900c26b
SHA512 d2485cf73bed50785f945d0662acb81152217a40ab83db36f8595406bb34f44e5cfd3eed00b0a649a51a2c121641ddf817e3072410941140a46922685c06780a
SSDEEP 384:4iFiZcIzysNg8TUNTUlIlrfiKey7QX5+DtQODEBO3b7O6R2Feofh7U/oV:DFQ2Bwg97skDeOQA3b7TRKei
TLSH
T13BA26D725DE4DD3B9EFBDA85F44A3217DEF850B3C5C5AA80E6DC9E1D009A69C130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 89178ebed60b5d0635af4d9d270b136aad33de295175718bcd8d3747bd45e96f
MD5 bdbe5401b39e67064c305d5966e60d0b
SHA1 f00a2fc2dd3f8cfbb7c02bc6c0f5985c5f8a4e27
SHA512 a1d1fb1b54957cc21893c898de238f3f75bb8963e684dabbe43af3d4916b8ee5c7a47267a73e69e56d260318c8e7e95f76df77f77865e7ab50b6e2e420dddcf8
SSDEEP 192:EONT6nnHGQmiUyDCQYcX5hQDP1QOD1McRUmU6:EONT6nCtQNX5+DtQOD12mU6
TLSH
T1AC02EA34BDA97C7B8EF7AD49B48633179FA4213BE5946B80DAE85E1C00D765C2306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 891154990db4df9648ad192669df6ba7c7e4a8bc401316bba338c7c93b878c71
MD5 1cc240cf6dcd5f0e460ec8f418a6b089
SHA1 4ddb99d3b08430e3c145295d43659765cc9c1580
SHA512 322de974a17ce769a4bbbf11b1bb7d92ebb91f420b8ff14bc10a53517fe779663cd7b094ab265017e195d1d9605e344e515ba63479dc77740f4b8013bbffc4a2
SSDEEP 192:EONR6nnHtUQmiUykCZYcX5hQDP1QODEzNKLg39/5bU6:EONR6nNkYZNX5+DtQODEB13bU6
TLSH
T146120A35BDB8BC774EE76994B08731539EA91137D6897BC0D5EC2E2C01DE6AC130A912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fe75829ae717504da3b9295b69c1b9d4069e8da03e7f8389f6e0b43734026b1e
MD5 583af4c105150d3223416828a500751f
SHA1 953444e3989730b4642497de8a32c033042f3068
SHA512 d8ae5afa7ca8301ca1d4043ef9342ce93a5023a5b95a220d70a867a10f7b7b4e77300a66c6eb61dc00733005d02955a6fcc7b7af915d6a65bc6b46ad69fe4976
SSDEEP 384:mZcIIsNgrfiKey7QX5+DtQODEBw3b7O6R2Feofh7U/oV:0ID7skDeOQa3b7TRKei
TLSH
T15D828E716DB4AC379DFBE195F44A32179EB8507386C96FC0D5ECAF2D0099AA8130AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1eb7781b744f4f0973541bb8253f8cc06e68295b57c7cc5a08735b4c36ea7f9a
MD5 4d2bd4192e5d64e75645b175b1696a17
SHA1 4181b6e16763a4c6e82df4c9edb6a2db01a285ab
SHA512 c6620adabd19f5ea6785d51cae56f852b2194e10a52af4f8c7fd0f4a33bdb8e26b32e5a179b67694d89c7edcccac202c3e3c585ba04f40183643eefbde1b05a6
SSDEEP 384:NZcIIsNgifiKNy7QX5+DtQODEBL3b7O6R2Feofh7U/oV:VImUskDeOQt3b7TRKei
TLSH
T111828F716DB4AC375DFBD195F44A31179EB85073D6C96BC0D5ECAF1D0099AA8130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f17aed04-ce6e-4507-b39a-b625b316f061.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f17aed04-ce6e-4507-b39a-b625b316f061.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 67f9b50a0d6023ec0224ca4b1160bb74a2cb947fafa0bc57762d52332ecf17c2
MD5 d40d8df3c2251bd10871b3d6631dae9f
SHA1 3fa9bdc0880366b7fab2ebb5ed5bf0caadbb7e6c
SHA512 3b49af8ce576e902861c8e884f983ef1c4a3e4320fefa99e611cf8de6d1f306f784f967501f0bf821489ffbc03a0d9faa1f462f6f2d96f9f69f2fecde9c5f0bc
TLSH
T148412758A6F91108B3776E969BF6A96D487FB8733F47D45E00110E8F0B26B40C8A2733
MD5 SHA1 SHA512 TLSH

Submit Download