593bce73b2089c79c4f023da874a75d2d0b29d7d65b576da91701662e89cecbc

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_593bce73b2089c79c4f023da874a75d2d0b29d7d65b576da91701662e89cecbc.html
Size 40KB
Sample260912-rnf4esda99
SHA256 593bce73b2089c79c4f023da874a75d2d0b29d7d65b576da91701662e89cecbc
MD5 c65e651299c319de627698195246f801
SHA1 720b5d9d476c8173f4a2324d8e18e422950d17e0
SHA512 2b554952790abb46ac92cad47a2d94e13b1d8eb0ca6877edcd172e5a811a07b9b3a76ecdbf67d4e9a70a7d9d1c77a9fa5c3621a668d78ec463170c3312cfa825
SSDEEP 384:BJ5Mkw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8LARY2:XPw8hW8VgJG8yJMrm2
TLSH
T140039364B9C222230133637D9FA79608FB74115B820653407EBC27EA1FF1954D6AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338344036021277"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{6DEEDC25-AB6B-4113-992E-7290EBCC8D9E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe
712	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 712 wrote to memory of 4108	712	msedge.exe	84
PID 712 wrote to memory of 1568	712	msedge.exe	85
PID 712 wrote to memory of 2452	712	msedge.exe	86
PID 712 wrote to memory of 2452	712	msedge.exe	86
PID 712 wrote to memory of 2452	712	msedge.exe	86
PID 712 wrote to memory of 2128	712	msedge.exe	87
PID 712 wrote to memory of 2128	712	msedge.exe	87
PID 712 wrote to memory of 4752	712	msedge.exe	89
PID 712 wrote to memory of 3364	712	msedge.exe	90
PID 712 wrote to memory of 4752	712	msedge.exe	89
PID 712 wrote to memory of 4752	712	msedge.exe	89
PID 712 wrote to memory of 3364	712	msedge.exe	90
PID 712 wrote to memory of 3364	712	msedge.exe	90
PID 712 wrote to memory of 3208	712	msedge.exe	91
PID 712 wrote to memory of 3208	712	msedge.exe	91
PID 712 wrote to memory of 3208	712	msedge.exe	91
PID 712 wrote to memory of 3976	712	msedge.exe	92
PID 712 wrote to memory of 3976	712	msedge.exe	92
PID 712 wrote to memory of 3976	712	msedge.exe	92
PID 712 wrote to memory of 3300	712	msedge.exe	96
PID 712 wrote to memory of 4796	712	msedge.exe	97
PID 712 wrote to memory of 3300	712	msedge.exe	96
PID 712 wrote to memory of 4796	712	msedge.exe	97
PID 712 wrote to memory of 1336	712	msedge.exe	99
PID 712 wrote to memory of 3112	712	msedge.exe	106
PID 712 wrote to memory of 1768	712	msedge.exe	107
PID 712 wrote to memory of 4760	712	msedge.exe	108
PID 712 wrote to memory of 4340	712	msedge.exe	110
PID 712 wrote to memory of 4340	712	msedge.exe	110
PID 712 wrote to memory of 4528	712	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_593bce73b2089c79c4f023da874a75d2d0b29d7d65b576da91701662e89cecbc.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ff894dec188,0x7ff894dec194,0x7ff894dec1a0
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,2887446467181175774,9257768985119480648,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,4899851260413838496,8479885192352288773,262144 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,16042612045241962223,13781324224894995991,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,13293948467506733484,13028009258735587366,2097152 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,4118793022013451401,4446517034701813332,2097152 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16929098104422697642,7387996166899358848,2097152 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,4525842545169719428,1285374670226344804,2097152 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,4487533289631981650,12534038793516284928,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,18292361741996275979,11338044847002427114,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,12185911248549965435,16791099816122754647,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,12185911248549965435,16791099816122754647,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,35519294491798349,17053429624300820494,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,10890047454833319345,6377455706729648188,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,14740031340287893711,12824905098318848236,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,2083375733538055215,11770285023724635230,524288 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5928,i,17421740569845117514,15805619055031578968,262144 --field-trial-handle=2284,i,10893874455130557255,547411258013457373,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 634eca5359deb78e9edfc4cfee7418fd4c1603cb9c683043b23789ba8f54e4b1
MD5 3a90edb31c2d3cd91b985fcf98ab2dbb
SHA1 44f276e9ee97104cea21bef253a7d9768e9e1ca2
SHA512 8006af8f804d3b8967ea71a41dd207a3a2e181d944a8c004813f95d0ee1883c044a911a36d3315df09a56d4a1f76292c2df06bc9694b010fa38c38853420b3ab
TLSH
T1705194429B5343ADF7BB613281D518CF3A31454A484B6F2AC1E4C278B89F714A71806F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595c4f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595c4f.TMP
Size 3KB
SHA256 d26392a9d74719b605005dc2d9ed242baff6e7ef043c3b29e65d792bf7532ce7
MD5 811fd5936f55303f86491a57c3367ea1
SHA1 a2d6ba1ac7a039cedabb90c9ace566cb12157b06
SHA512 a3c0b4790b41f682b264f917ae49e3c48acac40252ecdbe3d9dad4087d20aaa0968997ffb3fcb6916f5d11b5a37c14c11eb8224d9be072bb00ed0b8d1b2f9d50
TLSH
T17F5174429B5343ADF7BBA03281D519CF3A35454A584B5F2AC1E8C278B89F754A71806F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dffb309d0d8cb4e9fe22e2b046307ef8fcd67911d662d95b4b84189c35a30cb2
MD5 40a6dce8a5b7c2b7e12d8c34c67b57cc
SHA1 142f422dca22bd65d107692be3d22760144916ba
SHA512 f5254d3d6cf3322aea0840a654b0b73b960738fd1143ef12147cbd8c093e1465ff343873811fc0f0fbe643cc01c6b5b631f0efb7e4dc5e2769703eab0dc0b431
TLSH
T10F219EF3C3D58AAE890156F05B24AE2BCE1D0606432C3D59C9E4EF2B97E2475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b611b4f5db4356fd130ec82aaef8de4c18b68d20378fc2d645b7d009588c94f5
MD5 ad984ba58366b7753cd716f9b3800197
SHA1 59137b45e30b48a65c06baab8d6d5267ef3f8901
SHA512 654556fb00a6153fb2eefc6a8802f2ae56b5b056eb5c687b811932ad721c5ec9d0e78c28d9e989a98386e8fd2be55675bd3dba2ba7b384f47eb277bd4389a7f2
SSDEEP 192:sxZKrRLWX/fIsTrIdpdgHW6+WNGYRPRQVIgrJ:sxZKroX/fIsT0aHbGmy9
TLSH
T14612B9156E38A47B8CCBE21DBA25BF53D6F95032A1D51E48EAFC861C05E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 943a7c7611cdf1a717685250d081bcab7e9ce848a309dcb739d240a91bcec38c
MD5 c868e9bec31759a9fb6542eb390d3226
SHA1 a62d94fffd165d5fa56b857c59d8339c06310c69
SHA512 e62afe98107e88da4abb313ab08f5e26799faee2293e8cc1b2acb4fd90c76c1f10f466a68734f7ae073d17f0bc0549f838e2a9403724deb5b21d0658eda26686
SSDEEP 192:sxZKrRLWX/fIsHorIdpdgHW6+WNGYRPwQVIg5bJ:sxZKroX/fIsHo0aHbGmBD
TLSH
T1E622B8156E38A97B8CCBE20DBA25BF53D6F95032A1951E48A6FC862C05E76DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5525e33b867ab7a9d4dd5088ffb591e412a4e6143b78c5a8bb18037138a09d9e
MD5 b99a927ffed6e4dc057a81b04d23d8ee
SHA1 7190b583a5de6920f2cb32f75a23930feabbf4aa
SHA512 6e1efed262e299843ff056201eea0dd97a1fbef57bc9414a1c8d619b7678489bbe58a69f35f09b0d72428e631d6655c7ed22eb2719b5782fe9aa5db686b7c674
SSDEEP 192:sxZKrRLWX/fIsHorIdpHgHW6+WNGYRPjQVIg5bJ:sxZKroX/fIsHo0AHbGmMD
TLSH
T10622C9166E38697B8CCBE21DBA15BF53D6F9503261911E48A6FC861C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 23c4e680b091af73dea6923613b97f19d4d7d40ab01bdb64b22a5a8654253a3e
MD5 c38082e5693ba40ab7144a5933d08c79
SHA1 8a107a124b290a6afe8cf26fc2c782617bcb38b7
SHA512 038cbe5c5919041557b5c613e7be23dcbe767fbb38bf70306f961175419e9c79ad4e27e5c798663aaa56e0f5b216d0f529e29680b2a95e0c7f939cbc5a2feb13
SSDEEP 192:sxZKrRLWX/fIsKrIdpdgHW6+WNGYRPRQVIg5hJ:sxZKroX/fIsK0aHbGmyN
TLSH
T1E222C9156E38A47B8CCBE21DBA25BF53D6F95032A1D51E48EAFC862C05E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 012d83ba8a170b0095f3512063b352cb6ddec2686f76b5997d01c3a948c873ca
MD5 3eb0abd367e8c7c40c481c5dff7db8eb
SHA1 a1fd9e79b9f538af0d7058e64dcbc5ee118b9e48
SHA512 b32aa5d8d85bafe3bcc0418799b3d7d266332448c7f753643cfcd7c4b54c043b28abf900eff1a293efa93da00a53dbcf9831711f9dc86d0dfad1dd98009700b0
SSDEEP 768:BRK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3ero4+Lc:BRK9uzYWvcQWsu1ja0HL7Q314+Lc
TLSH
T10BC2FA3F640CCB7E5FC01A9DDC5A6F972E9802D7A6688D4047FA944C02C77EE522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 92421fe863df028d2a27d70aed48d467e9b14907fb89748a8a489d95366b0441
MD5 b661a4dda828648c4a62ba7e3cf76193
SHA1 a44c698773a3e639708daba339a3513696dc2eb4
SHA512 9345e0825613eadcfacd9b5553a1926f71e57b2170ff185abf618a8ab5e055afa4d8ef80b66e4d2d6b993b998cd83adb320c6a52ed95378ef1a4ceee4be747fc
SSDEEP 48:K0mIm10JF3jXYbLuLISdYK991vYxdIY+vF1yLmBcAeEE9bI/wISY9K981+9xWtYF:K0mpukKLCm2JiKSMxmoKTSl
TLSH
T18D91F05132BB035078BE645881A4875F128276B33459EF2BBFBC5462CE6BE044DFD8DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 85465db7e62c362516b0ed42c0c303c7730785808a91003aba94f9259306fc86
MD5 a3a12347f8365dcd1572f006d920d298
SHA1 d24002353f89da99d5cd6b92846e49be012854f7
SHA512 cb8ae79dea5f9b4e886319999f04c1d68b80103c80e77cfdf8168eeccdfdc3fc097912919f04a7b58b0354eba4f438e0dbc9e567632925805f93c22b8da6ff18
SSDEEP 384:xZcI7cQsNsjwvj05bt2OjTVYudkG8+zO7O6R2Feomh7Usop:ZnlvNnhlzO7TR5Bm
TLSH
T1D6927D7168746C7758EBE106F44B36079FFC90A3DAC92F8095EC5B1E01DAAAC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 322ff045321c0ad86902d399c653fad569c31e45bce1d46db1b8e07476882f2d
MD5 d6572411b4250f88cb99c16e64627582
SHA1 fcf8ff5ec6f106c427b78ee29e413861dfa49930
SHA512 96f1a9c3438f469022b4e620cb8705e1cc47289d0421d4b507bdab31fbbf20f2af9b577f3411a4b09269bb6ca8813ecab684bb6f66721173e5767bca47cd4d15
SSDEEP 192:SONU6ygpQmiUyQTtOCTVgvR+FdV6R0ozPWGU6:SONU6lHxtOCTVYudkGSFU6
TLSH
T11C02D835AC783CBB8DF3AE06F48737135FD8116BEA952B94D9E81A1C019765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 587f96ec4750a6a2b5f942c8f5433e6edf2983401f515dab40571ff8a19e732c
MD5 b559c33d2b0f356feda1bc176b67f039
SHA1 49c94cc1805689a779c8c9e158e93ca3c13cab22
SHA512 f760e46b3a4689726b7298da14e90054dff25be2b856e18fcee7a66b32abcb666c5393584fe5b2e87e28d468a8f9e04b7acdb5824654ac9b0ef896a99cab48ce
SSDEEP 384:3ZcICQsNsWwvj05wt2OjTVYudkG8+/O7O6R2Feomh7Usop:/5QyNnhl/O7TR5Bm
TLSH
T16A827D715C746C775DABE146F44B36075FF890A3EAC92B80E5EC9B1E01DAAAC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e86289618ee22c8e17a3f16adec153ce1fdd66267e788032d51ddb3a019a3325
MD5 6ca64d039aedf24bff16e453185c3983
SHA1 a771e7c1069a42f0d27263e7ac30939e72dbd4f4
SHA512 d109a25fa21ac6d4e2346a15ed2be6ef80cc5322304ac54dc690bf7b48a00909d1bd241421b44d83f9be85c5621798c7c1a4b3fb5d2b3c3e67df32c52ce1620a
SSDEEP 384:eZcICQsNsjwvj05bt2OjTVYudkG8+/O7O6R2Feomh7Usop:c5lvNnhl/O7TR5Bm
TLSH
T1D0827D716C742C7759ABE146F44B36075FF890A3DAC92F80D5EC9B1E01DAAAC2307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c2468b557499f8a8e2fdbbc97a1afc32da01156761ea0667887b83a1fc8f9190
MD5 69c04193308e47b058e107f90dcd0b4a
SHA1 4571a83b788d3fdf17eef56d444b11aefbd4d681
SHA512 2f4b22f553f30f95e96ce0bfbcd7499de76b37abb4feace611a403e8de04aabc0e2c1dd03d7310ee15c965eab118e96d6db6eaea2d95604979f8f33149a86e75
SSDEEP 192:SONN6yRQmiUy4TiOCTVgvR+FdV6R08dMZ3Ud/gU6:SONN6sLiOCTVYudkG8+aOU6
TLSH
T1D9120935A8782C7B5D93B541F48736039FE891A7EA853F90D5EC1B1C01DF66C630AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97a03177-e2d8-4342-affc-21f5c1fc5f34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\97a03177-e2d8-4342-affc-21f5c1fc5f34.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 13e95443520ab05e610266537aecaac07f9d7eafcadf2164ffaa0b8c4f200084
MD5 99d63d9641799caa20793df0495fa22d
SHA1 5d89ff322b636cf892572ccd1628827a212f602d
SHA512 2a8f0a0c1701ea1bd2a8e16ba8b8e77d0e98a31caceb979d53a11a87dc6dbdeea28f136c6844bd3aa626db8f8590ece7b01df0ae0a1d8d44c1649106cbf3c32d
TLSH
T144410B5CB6E91148B3B7AF566FF6A86D447F79372E06D49D00010E4F0A66B40D8B1733
MD5 SHA1 SHA512 TLSH

Submit Download