d9567d6eb79b688f8285f17200447808435b9debc175fb557bfa57cbe18f7495

Analysis

max time kernel
148s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d9567d6eb79b688f8285f17200447808435b9debc175fb557bfa57cbe18f7495.html
Size 6KB
Sample260913-cd6trsssbw
SHA256 d9567d6eb79b688f8285f17200447808435b9debc175fb557bfa57cbe18f7495
MD5 e25025ffb6ac34371bf6b26b612b56b3
SHA1 47c66541d7f54f345608a1173fe2aedd666a8f51
SHA512 44809ae3d11c7e7a942bfc1685bb61d32819afeb2d97921ae51421c8a4cd4e65bc07ab1a5a45d4cd7753d4d80a299bc0a91660a8f7c3d0f99e6605adc0a8ee41
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69eEcE8XECgUdDhQoKDejCPJu:zWLJlxehf80WhtKDejCxu
TLSH
T18EE1B55A9E4C853F4100059BF0A16A1CD8DB447BD302E8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4408	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338215119625478"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{C1E28465-9E31-4E1D-87FB-0DC60BF8B3B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1072	msedge.exe
1072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 2112	640	msedge.exe	83
PID 640 wrote to memory of 4100	640	msedge.exe	85
PID 640 wrote to memory of 4408	640	msedge.exe	84
PID 640 wrote to memory of 4100	640	msedge.exe	85
PID 640 wrote to memory of 4100	640	msedge.exe	85
PID 640 wrote to memory of 2868	640	msedge.exe	88
PID 640 wrote to memory of 2868	640	msedge.exe	88
PID 640 wrote to memory of 2892	640	msedge.exe	87
PID 640 wrote to memory of 2868	640	msedge.exe	88
PID 640 wrote to memory of 2892	640	msedge.exe	87
PID 640 wrote to memory of 2892	640	msedge.exe	87
PID 640 wrote to memory of 4528	640	msedge.exe	86
PID 640 wrote to memory of 4528	640	msedge.exe	86
PID 640 wrote to memory of 3912	640	msedge.exe	89
PID 640 wrote to memory of 3912	640	msedge.exe	89
PID 640 wrote to memory of 3912	640	msedge.exe	89
PID 640 wrote to memory of 3784	640	msedge.exe	90
PID 640 wrote to memory of 3784	640	msedge.exe	90
PID 640 wrote to memory of 3784	640	msedge.exe	90
PID 640 wrote to memory of 3496	640	msedge.exe	95
PID 640 wrote to memory of 3496	640	msedge.exe	95
PID 640 wrote to memory of 3492	640	msedge.exe	96
PID 640 wrote to memory of 3492	640	msedge.exe	96
PID 640 wrote to memory of 3236	640	msedge.exe	98
PID 640 wrote to memory of 3872	640	msedge.exe	103
PID 640 wrote to memory of 4008	640	msedge.exe	104
PID 640 wrote to memory of 2768	640	msedge.exe	105
PID 640 wrote to memory of 4800	640	msedge.exe	106
PID 640 wrote to memory of 4800	640	msedge.exe	106
PID 640 wrote to memory of 2480	640	msedge.exe	107
PID 640 wrote to memory of 2480	640	msedge.exe	107
PID 640 wrote to memory of 1072	640	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d9567d6eb79b688f8285f17200447808435b9debc175fb557bfa57cbe18f7495.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa5bb7c188,0x7ffa5bb7c194,0x7ffa5bb7c1a0
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,13052254118155583485,14271246956195349900,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,18278270995720634994,18071713601885161412,262144 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,4039042297047578481,6756987837376215835,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3328,i,1564118713021453720,3103214006684149600,2097152 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3336,i,13416695752245932535,69580535594201584,2097152 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,4869708007044040435,15750728651860900585,2097152 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,13369784312841795229,18338971429840652806,2097152 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:2
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,10053620435053266753,2044314262693621140,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,13758476723520745774,11510759721401092530,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,17792689562728626506,8006594909883337114,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,17792689562728626506,8006594909883337114,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5345933054040140117,10667182322104593286,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,11764421520225504796,357420399167488203,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,13978875766804872136,5824136263620594283,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,6429166919164093612,4298761881557036014,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,8308273014711491763,10756883100415465281,524288 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5228,i,10732859306885237568,5416204818359321856,262144 --field-trial-handle=2924,i,8639639804396108053,6513645139551538937,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 662a14346482aabb34348555318c8560cca9523d1302d880910819f434f9d3d9
MD5 6c551658f057f398f22357fa5d8dcd6d
SHA1 8d64a00bbab685e5d6dc761ff04eb35ac9f20aca
SHA512 4210e8bb6db51e9f8a6f20ce2f84c4084e45d2d9d0e911c56c2e354f3977477ab443e6c466725e4da1987345361e355050e47b2e0c0d43353f030122efa63658
TLSH
T1395180817AE4C0C4FFA45FB1D0C818AFBA32D58CA483BF130FA4E4B96B1273481493A4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a8c1f1289e9edaf1e4ace0709b8231be0b9c32b8c19c0a1fd1dfdd1172a77ffb
MD5 e9ce7f78833994889c3424a351a4fe53
SHA1 c0a968aa9c765b49d4ede4854790c8351186d776
SHA512 591164c0c2a32a8b533154b85177de4530c88d8227b50ee4ba419d561005f923c54d8b037fc008e30d73952ffe2cd948c3d8a22cf0e7f0b597f59ffb2e3ec189
TLSH
T1A9218FF3C3D486AEC90156F05A24AE17DE1D0A06422C3D5689E5EF1B97F2475D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 666b32c8e1905cab81b8f96c10f597c56894b27bb9a220e4be1032d22d424a00
MD5 567f17fc309112a0991c92ce3c929a84
SHA1 71955169270df8a2b318de13105e235572879e38
SHA512 657c243614ca1007a82cb8c8c0cecc783167fda30075dfb604bf66dbfa65082db97ebd5f37db5e2478111c0c3d357b90e4565ac55eca2a5888e06d27d72af07f
SSDEEP 192:sxZWRFWn/f+sT1IdpdhHW6+WNGYgUNwIgrJ:sxZW6n/f+sTGLHbGV9
TLSH
T1EF12B8526E28A97B8CCBD20DBB15BF53D6F95072A1D51E48EAFCC61C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 096d64c0ae1e2b24b919bc80f495f914fb751b98694a197793d91efbda73c07d
MD5 1c3d402bf7abacc44f4e8ddf1c75c10f
SHA1 206e3d2ad288fc1cad6153fbd634b5caeb6c4380
SHA512 9706309f35691dd90e41f84af6ae27db853e301e93cdf919d1780000ac13f67edd6e0f5701c7123900061fc68f13ded7a4b33d9b05103aecadfd8d516fc07489
SSDEEP 192:sxZWRFWn/f+s1xIdpHhHW6+WNGYg0NwIg5vJ:sxZW6n/f+s16BHbGpf
TLSH
T1E822B7526E28A97B8CCBD20DBB15BF13E6F9507251911E48A6FCC61C05E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 52bc3a7c7551a028cd258d0ed80a24cdb8b6be10fae4025180f69c38b038b10a
MD5 69e4c4c1fb5938ed38199ed9a728ca34
SHA1 25ab2c5d9aa97bf1fedd65e5c423d71ad86a92fa
SHA512 2147b480c49bd2d1db8c5426ecd88e029497eaea214798563a5031f15a64c8167a670935a601ac897169ac509c9ed66fd07d61dcbd2b383e5e5f7d9be8113a1f
SSDEEP 192:sxZWRFWn/f+s1xIdpdhHW6+WNGYgsNwIg5vJ:sxZW6n/f+s16LHbGtf
TLSH
T1E222B6516E28A97B8CCBD20DBB15BF13E6F9503291951E48AAFCCA1C05E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ef638b8754ebba0992897f2bf55a496c6270cee1d6dde69a0ab56aaea8ac1ef3
MD5 2db3c641960d2af9e97f145b081b3cc1
SHA1 dd5482f4ed22d71c77915c71774d71e613dd7d05
SHA512 57c0614c95f6009d790712f565a15d54313d982138ad899f1217538e773aa5c0bde55c0b19a53edc50a3ac97bd7dfee25803fec2bf6aab726875ff3a5ae883a0
SSDEEP 192:sxZWRFWn/f+sx1IdpdhHW6+WNGYgUNwIg5FJ:sxZW6n/f+sxGLHbGVJ
TLSH
T1A822C7526E28A97F8CCBD20DBB15BF53D6F9507291D51E48EAFC861C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3e3b8359f916ca3a3412c2a39ed90be0bd6d4ed1591a021bc9b44a38c76bf1bc
MD5 5f8807b52822ec4c8dfb02c55800f8f9
SHA1 2d59c1e099cb7a973881865a6c1d31926aba74b9
SHA512 5f080d2a4ea6da2b04303b2e8e165231b5740e1c62b9c1d263708a3c6393af9d90d489354b3d575fe6092775936585e2ba56ad49d3c09e803777b1b3a2806159
SSDEEP 768:RWichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzeroqM9:RWichfPWvPZplu1jan+LKgz1b9
TLSH
T1F3C2FA3B644CCB7E4FC01A9DDD1A6F9B7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ba7ccc151b8d1c5ac5071c4293fddd80744ab0a94bf1baaec54ed257050f8424
MD5 a56596b180544b654a070e7dd1148094
SHA1 4e2a231ef0f6e09b359b70af7666842dc60cfdca
SHA512 30a8d3731e23bf3d0f232da8959ad2ca596024d61793f22d6ab8ad409a6de1b2ef45436f639cdd193bd77a8005796179340c770fb52c47b68fe28dee5b094952
SSDEEP 48:K00DCOcey7bCxKISm7K9C1Q7x0rYZ6SIyLZo1JTXrEbXyvIShEK9h1LExpUYSTHM:KoLWKQsSKeoKDiI2oK/K6R
TLSH
T12C910F9536BB130578BE3949D061971B024171B37058EA7BBFB810728E6EE1D0CFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b124420efef31c73a6661db63ea5c48fb53eba7f8938ea6a10602782ececdad8
MD5 7cd3b7e89fe4f90c83c0ac5c62b364e2
SHA1 a9512e56aa05927fb79799ec8f0724c46971d71b
SHA512 ba4485f1c68b0652c40277fea2208dbf1e6b213c93d8f92ed7fd511a7e61cf1bb728285c83e49f817d2a7fcbeddd50c69313e6cdd2f590110e7df46dcfd39ad5
SSDEEP 384:9FiZcIz8sNG8TUNTUlIlvMI5P5dDjBGYX5EWS4It18UeP7O6R2FeoBoY:9FQoDwgRpPbtGYuWXIt6UeP7TROj
TLSH
T18FA26D7358B8DC3E6DFBD685F94A35038EF88067CAC5AB90E6DC5F1D008A598130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de743a5da22555ec8c20c1da0ba0abb7605f40f734b34555e99ebaefaf1c7814
MD5 230322b95140d1c049d137dcfdd54ec0
SHA1 0b34d8f8d8f7900f9dd280086cc72b67edc820de
SHA512 6fce1534992af9f662353c7489cfec97a4f265580e595658982e373af9b4484d955302544d6feecb8ec03370bd13131bd2dd6ae33ae9d510f39e389b4753612e
SSDEEP 384:9ZcIqsNG8MI5P5uDjBGYX5EWS4It18UJP7O6R2FeoBoY:lqmpP4tGYuWXIt6UJP7TROj
TLSH
T139828D7298B8AC3A1DE7E146F94B39078EF88157D7C96F44D5EC6F1E01CA698130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c5baadf801515e3a0bbb93c19926597432741c92b4b1571b1120623a301a99a5
MD5 6d3717319114f53c58b11e5eafa938c6
SHA1 26750214e0b5cc10493009a387d704098c576e9d
SHA512 fd540256123593e34ef23f145104f865cde1c3eb7a9c9704a7694ea7bbeeef1f7cbb59115a16fc229900a25b25da5557645ee0085ce9760d12b000d236e3ad3e
SSDEEP 384:IZcIqsNGvMI5P5dDjBGYX5EWS4It18UJP7O6R2FeoBoY:2qdpPbtGYuWXIt6UJP7TROj
TLSH
T144828D72A878AC3A5DE7E145F94B39078EF88117D7C96F44D5EC6F1E01CA698130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e0fdc13e8111e144f975a8987709137d592ca9d5d5351d76ebad855c2e122cf1
MD5 e70fd6f646bbbf102b8ea79df8d98911
SHA1 329688cc6ca4da719767bb452b90d95ab309e0a3
SHA512 c58192d56dd9d95eb0997dcf144718670a735605c96255c499aeea43a4aacb8e775028f01b295413ab1a22e3188b000bef816fcb1de2ab28001e891b4d70ddb4
SSDEEP 192:LJONg6DphmqQmiUyd8q8wGYX59eznCS3oInkk7TLqbU6:lONg619hRwGYX5EWS4IPvqbU6
TLSH
T1E702EA39E87D7C7B4EE36E45F58726135FD8112FAA942F84D6E81A1D00D769C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d054e10a993e7ac11fe13d7c1c36bb1a50316324cad65c8704ae2299e24493a9
MD5 cbd7c33b9cb0a404818a207f9325d31c
SHA1 4a08f1bbe2f3715a610270b497df0c0e5cde9d74
SHA512 08b58901a6e9fcca52f3e7bbf4fb7f5de116bb86da84c4fac34218cf9c1e22a5afafc86c7dfe75346016ef225c4f5d805ddebd2d7ec848b60398b7df4f8c68a6
SSDEEP 192:LJONv6DphMqQmiUyq8xwGYX59eznCS3oIt18U2kIIK/5iU6:lONv6170xwGYX5EWS4It18UvPU6
TLSH
T176121B35E8B8AC7B5DD3A591F48735138EE8522BEB887F94D5EC1E1C01DF69C130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f00f64c1-f11f-4e24-8aab-1aafc57fcef9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f00f64c1-f11f-4e24-8aab-1aafc57fcef9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 45ffc5b8f7e2a319d747c1ac1f0caf249835b5174741f1931a9487b6027aa959
MD5 3f79ad6d5f23583600cb6d961c4f4935
SHA1 1aac5c6365fb2346cd388ca1b689335c8b45d7e5
SHA512 5925f3ad053e69de388c8b6061e3c14da0acb684554c99f6d15e5544e1bd1895887674f419fc0ae567973fe91d6d1dde5a59e158cfee34c340ac0fef470fcf9b
TLSH
T1FD412C98BAF91148B3B76E599BF2686D447A7D772E0BD05D10110E4F4667B00CCB2B37
MD5 SHA1 SHA512 TLSH

Submit Download