594c018e440e479b7a96d3b0d52f15a9879f76970c2bfe0dfef605279b9db6b3

Analysis

max time kernel
148s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_594c018e440e479b7a96d3b0d52f15a9879f76970c2bfe0dfef605279b9db6b3.html
Size 109KB
Sample260912-tfhndsec42
SHA256 594c018e440e479b7a96d3b0d52f15a9879f76970c2bfe0dfef605279b9db6b3
MD5 967b96843d5dda1589af495d1ebd9d90
SHA1 a738e7aa53943b2095a856c4b4b6d41dcc62201d
SHA512 59f6d57002280d79269ba0fa436006f1371fc4e45f4e206bd022240accab82a9c3937ace8f35ce31745a6ec46db4c54ecce19617debd78a90e08f752717a76f2
SSDEEP 1536:3XxvYn+hwrjgRzQdTvFEX5lRQJTtgNoLxLPW9bEao0bEao2AP8:nztQcN4e9do0doRU
TLSH
T15BB3A58701204CF6EFA54DB3459F186B3C2C5437AC4791B9E3FD8FA72B5686E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2348	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338352168609070"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{F912CBE2-5327-481E-94D4-B98C933AD8E4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4172 wrote to memory of 2376	4172	msedge.exe	88
PID 4172 wrote to memory of 2348	4172	msedge.exe	89
PID 4172 wrote to memory of 3304	4172	msedge.exe	90
PID 4172 wrote to memory of 3304	4172	msedge.exe	90
PID 4172 wrote to memory of 3304	4172	msedge.exe	90
PID 4172 wrote to memory of 1416	4172	msedge.exe	91
PID 4172 wrote to memory of 1416	4172	msedge.exe	91
PID 4172 wrote to memory of 652	4172	msedge.exe	92
PID 4172 wrote to memory of 652	4172	msedge.exe	92
PID 4172 wrote to memory of 652	4172	msedge.exe	92
PID 4172 wrote to memory of 1172	4172	msedge.exe	93
PID 4172 wrote to memory of 1172	4172	msedge.exe	93
PID 4172 wrote to memory of 1172	4172	msedge.exe	93
PID 4172 wrote to memory of 4624	4172	msedge.exe	94
PID 4172 wrote to memory of 4624	4172	msedge.exe	94
PID 4172 wrote to memory of 4624	4172	msedge.exe	94
PID 4172 wrote to memory of 5044	4172	msedge.exe	95
PID 4172 wrote to memory of 5044	4172	msedge.exe	95
PID 4172 wrote to memory of 5044	4172	msedge.exe	95
PID 4172 wrote to memory of 1492	4172	msedge.exe	99
PID 4172 wrote to memory of 2708	4172	msedge.exe	100
PID 4172 wrote to memory of 1492	4172	msedge.exe	99
PID 4172 wrote to memory of 2708	4172	msedge.exe	100
PID 4172 wrote to memory of 4948	4172	msedge.exe	102
PID 4172 wrote to memory of 732	4172	msedge.exe	107
PID 4172 wrote to memory of 620	4172	msedge.exe	108
PID 4172 wrote to memory of 4324	4172	msedge.exe	109
PID 4172 wrote to memory of 3068	4172	msedge.exe	112
PID 4172 wrote to memory of 3068	4172	msedge.exe	112
PID 4172 wrote to memory of 1144	4172	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_594c018e440e479b7a96d3b0d52f15a9879f76970c2bfe0dfef605279b9db6b3.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffc0dd6c188,0x7ffc0dd6c194,0x7ffc0dd6c1a0
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,10345647017905967351,1973248605053663300,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,9285586301371278707,6652126524563325706,262144 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:2
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,14795302970881206464,14754505643596394769,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,3668097733311693466,5381379560272554519,2097152 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,3354527437073867604,17700225372739603050,2097152 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,14444954661381555481,2327170061411971082,2097152 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17306164857918787320,18272445673028657824,2097152 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,9830086983308793475,9274941094401475178,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,3746108078814384648,11089692347413885308,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,9626149437948305931,14425607608708747572,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,9626149437948305931,14425607608708747572,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,17169606994056995014,15876331000664439800,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,17149962697304474202,10607218576235772413,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,12834521823281909340,8044030481684436074,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,11878768407025334710,7719938024687215212,524288 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,3016811704984655569,11013069648078576375,262144 --field-trial-handle=2888,i,5975139443254031830,14107236367678077160,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c6c5c1ff05864b1028c32be487eed32fc7291967185421237149b5f854118182
MD5 fa142504dd15c69cdba5413a7edfba5a
SHA1 8ed122dd66078efa37e1c21f6f34286433299d23
SHA512 3902d7ec96eb07fe795eaf81f4a565365caf2114181179b346df4347c1dfdd8d1772a00ad6db7f202c4001b3d6e67864ebb8519560c67832d8b9023f9652718f
TLSH
T11351A8B0BFA883A5D7A7FC70B1E1138B36F7697151432EA60694C5BB4B073340128C74
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 605071cc5037aef76f5c1d1bc50584e64da1641f370fe629cc504ca8463628f7
MD5 cb204c6e484702968db2547f7ec2658f
SHA1 e018413d815d50e702b2ed61c031349d7894b6f0
SHA512 26eca21f54bc09407756632daf7dcb7894a07feb62017c1c3d485ad974ee54fe36f4b1fa0ea75eeb603e2f5f3f1c66ef20d0e8c137ec663e39b0b01b7b105fc2
TLSH
T1D4418EF7C3D4867E891156F09B256E26CE2D0A4A422C3C16C9E4AF1F57E24B0D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 189c810d23846326e207eb318e4a4766d9bc581f0ebe2294cf7f6262a2d2fc19
MD5 095b14ce093cd09809bf82823df0438d
SHA1 eb583d1b7f909e417516859575a94fa74dc5def7
SHA512 2fe0ceeb09da79c11a61c0e9eb8990fe448e1b79815bfd79c0c590602f4253a624554ec0e1259a8ca0ca3adb71a18cf23e24f26d7dda30f187f384a0b169dfcb
SSDEEP 192:sxZSRpW5/f+sXzIdpdlHW6+WNGYrbTGIgrJ:sxZSa5/f+sXsbHbGR9
TLSH
T1F512B9526E38A57B8CCBD21DBB15BF53D5F95032A1951E88EAFCC61C04E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 da0bcb79a06ccae69efb9ccef19dd052260eb437344fa5d5b721a3ac0eb72b3b
MD5 d9fff46c53549615928477e503ef056b
SHA1 1fa5ab27126ebdb24676b3418d60876e8dd28577
SHA512 8d03a9b9d130b1e1bef70db7e95b966dbc4a605d429e9f3de83330823e62d885397e80c94a086a37395abf337a7e06a07e70ff43aa155cff297b9c41105af4f6
SSDEEP 192:sxZSRpW5/f+swzIdpHlHW6+WNGYr0TGIg5DJ:sxZSa5/f+swsFHbGmj
TLSH
T1F822D8566E38697B8CCBD21DBB15BF53E6F95032A1901F48AAFCC61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9b9ca86253000de823bcb3b04f6d1d8a39e84b538e620895a81b6fe782a63cbf
MD5 095b3dc73fb7e608e8d1c9442ac19e45
SHA1 e334d493247195a1f56ebe86773b6e83f5281b3b
SHA512 2df5b892fe80c1f526222910d3d7bdcfb944fe4205d1fcfd6cc7cada3d5b361e575ea9750084349ee1906994b9fb85f3361981760e1a566a02864c9dabda0aae
SSDEEP 192:sxZSRpW5/f+swzIdpdlHW6+WNGYr9TGIg5DJ:sxZSa5/f+swsbHbGVj
TLSH
T18022D8166E38697B8CCBD21DBB15BF53E6F95032A1911E48AAFCC61C04E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c46a8dd202793fcbcac77ef83ac0797a1f7f340681cb7e6f88d412b23cf52747
MD5 05b46973edcb49cc9bc9587a1c87e7c7
SHA1 668dc506e734cbbee7814505b408342e79410675
SHA512 c62f387f512769f447b8ddd20a598c8337484685506e99c55bcceb89b012866328d316db1ce6e0fc5c524b1c2fe14b5c5436ff76c8e4cbb83216b8db34f17048
SSDEEP 192:sxZSRpW5/f+sNzIdpdlHW6+WNGYrbTGIg5ZJ:sxZSa5/f+sNsbHbGRt
TLSH
T14022B8566E38A97B8CCBD21DBB15BF53D6F95032A1941E88AAFC861C04E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 730ab5d8a731ccd4ebc8625cef184e9088a1ae7380a12da0f1f6612d6e93095e
MD5 b48c725c463f68c83b98a190107f6141
SHA1 1ed0a7c63292cbfd3bea9a1b78b85ed3798a8f50
SHA512 b89570dd5846362c260a66e8b80eb67175e6c543a05ef7a580c169a31ed12eac028540cc5e097f4e687fb2bd707bb2231f616b320dd62c07ed882ee5bd2a30e0
SSDEEP 768:iPy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb9roR10G:iPy4J/DWvbtBhu1jajiLm0b2/0G
TLSH
T178C2FA3B684CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 6806d40dd926e35360df07b31db9ea7ac156de257f6289c800d443b13df83015
MD5 a718910df9768e3199c1d29a259454a7
SHA1 f6244b35775b101c20a52d368ae593c07a1f757a
SHA512 542374abdab06a7b4158d5cda52cd479c7b8c207d7fe639691f8326382e7a7bc4ea3f157d7d218c83552df7950e7b190390aa30fa16d375018828bb9df963954
SSDEEP 96:KIDCKs0+KsgKtu+i+VNqKGk6iS8KDKSXMj3hR:E5LXw9v8
TLSH
T171D1F74170BB060538BD268C81B5C72F524236737119EA3B7FBD84A68E6BE045DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2e56e284d851860e80be88ba5a620c840c923bbb9a3ff79489e14f4e3be5071e
MD5 ac1777ebcb58d8493d2310943c0392e3
SHA1 926aa89f50b1ea3bc14fbb7905fef4ffc9639da4
SHA512 cc244b5845b197e100901969655278a2d99cc67c7dae5f150709e019b3ac4ed4d60b030d10e8883388a547b0c3286595a7b2bec27a365bfc8d566d39d175b6a2
SSDEEP 192:1ONb6wlDgQmiUySXW4X58gZXjzorPJjADloRU6:1ONb6kgpW4X58Ef8PJj0sU6
TLSH
T13C02F935E9787C6B8EF3AE09B08727139FE5112BE6552F84C6E80B2D00D765C230AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 362b841521f4bb84723df790d6c3d8673b31d62e8072cbeb4cde65797a2682df
MD5 2165ffe1c07ed55e93a77976b9605e1f
SHA1 ca09aed489cdd09b069ddd59f65e63966b819bc9
SHA512 92a4230f832c2bb71fcbd074f5caa851c8a28db7d6137a853c56eff9629aa67492889b6780b75308af4571727c9d906cc70f22a8b6b0deb8b15804f5d53e4eb0
SSDEEP 384:YiFiZcIPHsNq8TUNTUlIlqPRifBZJlGHX58Ef8PJjWXi+2mor7O6R2Feouh7U2oB:jFQfnwgYRip9gaAilTr7TRtLm
TLSH
T1B5A26D3398E8DD3BADFB9A95F54A3213CFF54067D685AB90E2DC5F1E009A598130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a3a8042d2614f2086d0f1f41b4ff2be5076acadb3974ebda4a880441ef717f2f
MD5 da8ad7086563719e45b9b36a054cf379
SHA1 87eef4220818f88e2915a70d4a3b1cfccba4b1c8
SHA512 e2d610f4640c923f554123369e3f7a83060a654d8ea115d683f6c958876562dd2a19c1ff5251c3a185b34d29577f461c998fa0300d308f5ca30e1fc95827817f
SSDEEP 384:SZcIdsNSbPRifBZblGHX58Ef8PJjWXi+2mSr7O6R2Feouh7U2oB:gdNRipfgaAiltr7TRtLm
TLSH
T123828D35A8B8AC3B5DF7E195B44A35139FF99053A7C96F90D1EC5F2E008A694130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e775e368e2ee6916170c5d88b08c0c253f902b30dd462a08b5796978ef6e0b87
MD5 cbd0b7e55535af4d168ab2772dea6781
SHA1 6a749455ceb34a44b81b7a4acc4d56e2dfb61d80
SHA512 d34a4b9ea5d6150c5214d79840eaf634447bc13a0229b3fe8f34c099567106cb8be138506cc712df134d1dcf4138acfa9383e0280e51d1a85ce806c29cf0ba9e
SSDEEP 384:HZcIdsNSqPRifBZJlGHX58Ef8PJjWXi+2mSr7O6R2Feouh7U2oB:vdARip9gaAiltr7TRtLm
TLSH
T16D827D35A8B8AC3B5DFBE195B44636139FF99057A7C96F90D1EC5F2E008A654130BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4c0e6d0803677c878bf40ea488f7fa7b419407db8ec24e4bb1f0481a007700a9
MD5 ea4f7eb31fd2278c5407c356f16a82ee
SHA1 d4ea8d73426977cec689ce4408180a52da43fcb5
SHA512 9eb8f15a8f48be0ce5c26af55aecd56ac9ac7c78de6119369412090c930692d11517413ba95c001497c643ae8a49b698af098e3e1ab608015dc84257972215a7
SSDEEP 192:1ONr6wlDTQmiUyrXS4X58gZXjzorPJjWXm7R+2mFveW/kU6:1ONr6kFCS4X58Ef8PJjWXi+2mUrU6
TLSH
T117121735E4B8AC2B5DE3A585B08735139FA55217EA896F90C6EC1B2D01DF26C534EC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db5e98c9-6c07-495f-bed3-1412054d0df7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\db5e98c9-6c07-495f-bed3-1412054d0df7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2a4af5a1b72f109acd5235c594bc7108f228943650be62735f3c4546f9cc55b3
MD5 b56ecb8e5755e2969d05a4d10bb5fd7e
SHA1 f960e7a2da8887a717aa628098a29b75257d6a39
SHA512 10c7c32b754cde84fc82bf7e0f89039e227ceef857be74eb7839ce306510221da413ec5cc595e330527cb88cf5c2f6973ef1fb474a4083262b9149c97fff0605
TLSH
T1BB412B58B6F91148B3B7AE56AFF6A86D447BBC772E0AD55D10010D4F0632A44C871737
MD5 SHA1 SHA512 TLSH

Submit Download