df5898959e460b57db1d6c07c1f9fd1312fdffa7a1575358e8992ea79c88aa52

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_df5898959e460b57db1d6c07c1f9fd1312fdffa7a1575358e8992ea79c88aa52.html
Size 6KB
Sample260913-cvx8ysbl21
SHA256 df5898959e460b57db1d6c07c1f9fd1312fdffa7a1575358e8992ea79c88aa52
MD5 cae7495461a02a55d2010759055fc8db
SHA1 6d7a0a18e916075ce8c395f6a363c6d8b3493e3d
SHA512 3489a8dda937378fcea9f2f6fe707f7b097f735386e85dc27fbaefb856a636de2542d77eb64fe5a125190ae8b393116db5092a12f1f11b53f736b2aa010d6f87
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69EEcE8XECgUdDhQoKDejCPJu:zWLJlxe7f80WhtKDejCxu
TLSH
T18CE1B65A9E4C853F410005D7F0A16A1CD89B487BD302D8A6FCFF416E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3784	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338198380243414"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{C9B23015-38DC-4BEC-97F5-8B241F26A6C2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 4280	4624	msedge.exe	83
PID 4624 wrote to memory of 3784	4624	msedge.exe	84
PID 4624 wrote to memory of 5104	4624	msedge.exe	85
PID 4624 wrote to memory of 5104	4624	msedge.exe	85
PID 4624 wrote to memory of 5104	4624	msedge.exe	85
PID 4624 wrote to memory of 2284	4624	msedge.exe	86
PID 4624 wrote to memory of 2284	4624	msedge.exe	86
PID 4624 wrote to memory of 4188	4624	msedge.exe	87
PID 4624 wrote to memory of 5016	4624	msedge.exe	88
PID 4624 wrote to memory of 4188	4624	msedge.exe	87
PID 4624 wrote to memory of 4188	4624	msedge.exe	87
PID 4624 wrote to memory of 5016	4624	msedge.exe	88
PID 4624 wrote to memory of 5016	4624	msedge.exe	88
PID 4624 wrote to memory of 1544	4624	msedge.exe	90
PID 4624 wrote to memory of 4408	4624	msedge.exe	91
PID 4624 wrote to memory of 1544	4624	msedge.exe	90
PID 4624 wrote to memory of 1544	4624	msedge.exe	90
PID 4624 wrote to memory of 4408	4624	msedge.exe	91
PID 4624 wrote to memory of 4408	4624	msedge.exe	91
PID 4624 wrote to memory of 3792	4624	msedge.exe	95
PID 4624 wrote to memory of 3792	4624	msedge.exe	95
PID 4624 wrote to memory of 388	4624	msedge.exe	96
PID 4624 wrote to memory of 388	4624	msedge.exe	96
PID 4624 wrote to memory of 2948	4624	msedge.exe	98
PID 4624 wrote to memory of 4236	4624	msedge.exe	103
PID 4624 wrote to memory of 4016	4624	msedge.exe	104
PID 4624 wrote to memory of 4920	4624	msedge.exe	105
PID 4624 wrote to memory of 404	4624	msedge.exe	106
PID 4624 wrote to memory of 404	4624	msedge.exe	106
PID 4624 wrote to memory of 1872	4624	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_df5898959e460b57db1d6c07c1f9fd1312fdffa7a1575358e8992ea79c88aa52.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff981d5c188,0x7ff981d5c194,0x7ff981d5c1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,10177454755541254913,10779818748503177948,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,5997462839654645087,6639218644240747669,262144 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,490582143810131748,14808587860282877577,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,6835046316744907466,7859311143714047037,2097152 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,12871539531345371935,15288590617081109677,2097152 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,12588403792548660559,8560938613597112666,2097152 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,9577949083152894095,16809419182917206845,2097152 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,8987735334816473177,5955653261817101390,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,17133312629299606409,1565513900930430087,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,10039064402204625632,9160963910387182964,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,10039064402204625632,9160963910387182964,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,10557480658080255511,7854191191093443659,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,12200914460069344035,2015127507203335029,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,12383206445604428278,4298843535854504078,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2076,i,11464925110821528496,1391727995824957178,524288 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5864,i,16077274966330659268,4106923451846086449,262144 --field-trial-handle=2312,i,9200099984235771524,11316182094249735976,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1d1ebe9d78aa2dc2a842439c3e014d157c9f5dcb254e25f8c91ebd56672a9d05
MD5 7686a6e4a3185eed405bc11091ed4f34
SHA1 48646babd0be3b3115498928ba10541ee839aa6f
SHA512 d5d8392e308e5fd4beef4a3d463e04b5c02dae45a05346c4e5682a6b39d26b62c5a62d0b847d9df25667386e2734cf145c0d3182df06030ffd01b61565308ceb
TLSH
T13F6181B5F48474A8FBA8C4F394E5ED8B3A795081B9C31E221164FBFD68463C49F3A118
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b8ad53af1c7c37e44806fa321f749e4cd212cafc241be0c6f8aab78aa7cf6c9f
MD5 2e0874287c561693beb6caa6b2f00ce7
SHA1 495474c2f7c2e4b2741ff0ccc27ee1dbc91257a6
SHA512 8638feff313c83bf6208e7bc6bf0097b26b6b2992c1d81fa1e1e2e543c799c3842d1d7d4b94f01d2082cb19ad673a31b37d046c486ed845abd3a17c0966d18ed
TLSH
T1AB218FB7C3D4866EC90156F05B24AE17CE1D0A46423C3D16C9E4EF2B93E34B5E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b955c89940edb5f95a3274c79113fff6ea54481398a55608c1af86d52b5d3470
MD5 804b4eeb95ce9a54ba0fb59a774598d3
SHA1 cef02fa5923c28574cef657955094540b7bf925b
SHA512 cb5aeefd91e13794c1a96edc3ac681096bc9e4c16f8e0a901bba0660d7a0bc4e7fe4601998fa34b2146b10754650a641d9e1144908ac4037cbf43c0b16f3c094
SSDEEP 192:sxZbR5WP/fmsX0yIdpd+HW6+WNGYaQR+mIgrJ:sxZbGP/fmsX078HbGa59
TLSH
T16F12B711AE28A57B8CCBD31DBB55BF43D6F9503291951E48AAFCD61C05E6ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 88296ccc6997a074022a87dceff9839de1f220b642905414b70ef4ec3aac6e10
MD5 bf41c7b2ae58b561b00930ad8dbe7135
SHA1 d2d3b1f2fa482abeeb5afdfe1173a98e45b82fb7
SHA512 b561d1d253a60b80756dee15f467ccc7d94dab8bf4e06d98835804acb03814612154540e3fdc0f1314a53d2d68278e8d55a1151b6d45d5a421adbec6dc994b16
SSDEEP 192:sxZbR5WP/fmsK8yIdpH+HW6+WNGYaoR+mIg5OJ:sxZbGP/fmsK87eHbGi5M
TLSH
T15022D915AE28697B8CCBD31DBB55BF13E6F9503291941E48BAFCD61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 912ae7ae35cf40ebc16dc298391c165bee557e9d6523be966b67ea66adae02d7
MD5 642e353bfcbb7038fd2196d147ef6c14
SHA1 33051cc77ba56eb5f2700801ccee75f98978d538
SHA512 e56ea7fc48477e86ad2c687ce418289633384f85f60f90978dd526accb0865f116a4414fb85c607fe8d7c588800d0af0e4e86bc6d098e25c1b42167003b470a1
SSDEEP 192:sxZbR5WP/fmsK8yIdpd+HW6+WNGYanR+mIg5OJ:sxZbGP/fmsK878HbGp5M
TLSH
T1B322C915AE28A97B8CCBD31DBB55BF03E6F9503291951E48B6FCD61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c3067641704c1e4cf3e9e956236b87c05c2979da8b1acd090c1f216d08349d6e
MD5 fbff530620b686df57bb9b9baafb8899
SHA1 339d774edb7a17831b77e71f189af68ec7f8c7a4
SHA512 3c8b17c593abe708b3d440d250455198aa765de9ee14a734c0020bbf1b40ff9a8729e23955a29dbf677827cfc0c613340414304cf9ba62624230925c966f47ad
SSDEEP 192:sxZbR5WP/fmsG0yIdpd+HW6+WNGYaQR+mIg5cJ:sxZbGP/fmsG078HbGa5e
TLSH
T1D322C712AE28A57B8CCBD31DBB55BF43D6F9503291941E48BAFCD62C05E6ACD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e20901360bd2e3faab25f05905602792efe437f17e801554a6aea6f33878ad35
MD5 929eb89d6936f59f03e582d5002af4d8
SHA1 8a27d224379a63c87d8b08cead10dd5b11644963
SHA512 f612fe1f7ef76e455b49867cd0696cd23c636d9a6637b01ea9d3db1ce3204aaea06025e3b07d3459637f65589b42942ab82eaf20b61ee8ff11bf01721f817ffe
SSDEEP 768:IpyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3LroJZBm:IpyQRbrWvvlpZu1jaXKLf334JZBm
TLSH
T1E8C2E92B640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA994C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 03210a6698c1786251fbbfc50aaabce361cb054d04fd7fe0850c0837fa57e830
MD5 1a78f67dec8bd10a4ad560c460d594f5
SHA1 9ad76683354ed872557334dcaf4d31074cdda215
SHA512 dcca6f41d0b425de7c1002ce5c0c970ac0cbbc064537c8b4fc3f975b3af0746565c56732331fa3e2871a12fd5357665cf4db6849751eba20e39642af4481648d
SSDEEP 96:KE4gK1eySOEKXq8jKKw4SyvWzvxZZu/JA1RD:aj3SpyvWzvxZZcJAfD
TLSH
T1D9A1459531B7025038BE294890A8971F42A132B3715CEA7BFF6D11F68E6BE085CFD4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d40823dc7ee482a1ad9564a8c6755b1043a4ecba0963dde2a2ce9ee9b9fefe3c
MD5 e7e522ac8433782971bb1a4e37edba27
SHA1 0bf509eea9634a79839ed7356d3f0745265aea23
SHA512 95e70eb03370aa3ef1bc1375fe1a881f7056378e8730737832e2ba436102d6371582feea3aa77016a4183b5010331d5cb7ad4a1adfbf9bf0bffd983f41e94565
SSDEEP 384:kFiZcISfsNo8TUNTUlIlBQOKUhp5u8igAAZYoEaBkwc0aJtoS:kFQCVwgHdkjEMaBkuazp
TLSH
T192A28E724C689C7ABDF69655F9463603CEB881ABC7D8EB80E6CCAB1D01DB1D81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e8906b2876fe6904b399d3293a82b23c00310861144858cf98cca99a3f817867
MD5 cf30768d8b60fcf78737a238837a88b1
SHA1 390ef370a854e90d9f531f0562c59771e36185be
SHA512 36edb275c79ad7065bd7f6b03c2a97b2f006df1f590eace4b4d0d1f5f046f2f86e1bf24d58b91ebe0d055118b560d0c9ae30a4bbd13e1cc6088648d8527ab783
SSDEEP 384:yZcIdsNzUEQOSUhp5u8igAAZYozaBkwc0aJtoS:AdkdkjE7aBkuazp
TLSH
T193829D315C78AC76A8F6A155F4463A038EBC81ABD7C8AF80D5DCA71D01DB6E42317927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f2b6f59c4ef38e9011cb2141ec4980a5f54bc2e6d0bf2096c4bc2624e75c02c1
MD5 6efaf8d7970b381698cecb8cd0acab49
SHA1 da691ac91f1bab132d3ce74b4bd1877b8ac80851
SHA512 ea0eb9c613a5502d4da5d31e6c801606c1a3404fda533c84397dd33dabf496b2644be70ee6a09ee70f4cad3ac4fb00f2cfcaa1d0fbabc9e1281fb3fa62d22160
SSDEEP 192:SON56iDlQmiUyV0Tq5u88PEvIBAB3Pwo9uZW/ZU6:SON56upTq5u8igAAZYoEaU6
TLSH
T1DB124B35B878BC7B6C92A955F44732039EA8426BDB886F80D9DC2B1C01EF59C6707913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1d95e188a676295a2a1fbe3b1f41d5ad2f9b2b0192338075d12e7b5dad6dff1a
MD5 a98b62897ea99ccbc0f2b55b943551c0
SHA1 ef290acec51883617097e459168565a113002a24
SHA512 a51093bb2cfc6e96e2e0d8df8e0fa37da56afca894f9aa5ab817f7a7d22a02453851d4dd8770d8567a8cc34a1374c1e78e100a35d40449a824c52ce3c6fddf95
SSDEEP 384:rZcIdsNzUBQOKUhp5u8igAAZYozaBkwc0aJtoS:zdddkjE7aBkuazp
TLSH
T136829E315C78AC76A8F6A155F5463A038EBC81ABD7CC6F80D5DCA71E01DB6D82307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0e31e2a-3f4f-45e5-8ece-5bf276b81ba1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d0e31e2a-3f4f-45e5-8ece-5bf276b81ba1.tmp
Size 8KB
SHA256 d39682397c2242c4d74fe0af16e98a33322cda2ad6ef0999a74d71bf9bf981ae
MD5 aa200d93f615ebf7b589f66d1fc55728
SHA1 13ae5e74139a5f4e014bfd16c66a40ac6490d4d8
SHA512 4655638768676662c374821af287cf2c307d6d42fdeef34e3990369a4e039356f236e23b0155001b7874e65472e0c3812ff5f37078f49ddb75e0a290a2eb750f
SSDEEP 192:SONh6iDCQmiUyO0Hq5u88PEvIBBSq/BROU6:SONh6/YHq5u8igA3vOU6
TLSH
T10A02FA396C387C7B9DF2AE15B5877B175FA8017FE6941B84DAE8172C01E769C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b3c80bc1662689f1b38d35d1993b7157dba9c570c8287766b41284da3be68f4c
MD5 485df86f101ad68ecdd09de346f35e11
SHA1 4c87d9fd53dced0d1bc8a170aa579ddebaf13a3f
SHA512 232a9aabb4976cf923dbcbc31ed2245919d1ddf7e20b913278ab598599dc1d42b08f033f7375a51ae561fe58b31d27b9e397610bb1744863700dbaed17af2457
TLSH
T15341295CA6F91148B3B76E5AAFF6A86D447AB8772F0BD45D10110E4F0E32B40C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download