a5f7c601daeae03adb15ff70f5c716f1e39658ea233ddfc7cefee1dcb358ee50

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a5f7c601daeae03adb15ff70f5c716f1e39658ea233ddfc7cefee1dcb358ee50.html
Size 6KB
Sample260913-fdmmnscm21
SHA256 a5f7c601daeae03adb15ff70f5c716f1e39658ea233ddfc7cefee1dcb358ee50
MD5 39315831fd69d23e54d0a5a218c920fa
SHA1 f98dc7472678b0f2d0232bff43a46e37a025044c
SHA512 2c414f63e4477b3fe17cb5f7ad73257e272cd7d111d1dd637e16824856a857f1e29dfc775f469f3067f640cbb93b70eef1da391a86163991ca516a91f6b6ee26
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69cEcE8XECgUdDhQoKDejCPJu:zWLJlxe7f80WhtKDejCxu
TLSH
T10CE1B41A9E4C853F4100059BF0A16A1CD8AB447BD302D8A6FCFF412E3FD9EAA45375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3140	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337841180688475"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{2A6D38B9-31EB-4F96-8B6C-93317409EA30}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4240 wrote to memory of 2564	4240	msedge.exe	85
PID 4240 wrote to memory of 3140	4240	msedge.exe	86
PID 4240 wrote to memory of 3964	4240	msedge.exe	87
PID 4240 wrote to memory of 3964	4240	msedge.exe	87
PID 4240 wrote to memory of 3964	4240	msedge.exe	87
PID 4240 wrote to memory of 556	4240	msedge.exe	88
PID 4240 wrote to memory of 556	4240	msedge.exe	88
PID 4240 wrote to memory of 1584	4240	msedge.exe	89
PID 4240 wrote to memory of 1584	4240	msedge.exe	89
PID 4240 wrote to memory of 1584	4240	msedge.exe	89
PID 4240 wrote to memory of 4272	4240	msedge.exe	90
PID 4240 wrote to memory of 4272	4240	msedge.exe	90
PID 4240 wrote to memory of 4272	4240	msedge.exe	90
PID 4240 wrote to memory of 3536	4240	msedge.exe	93
PID 4240 wrote to memory of 3536	4240	msedge.exe	93
PID 4240 wrote to memory of 3536	4240	msedge.exe	93
PID 4240 wrote to memory of 4588	4240	msedge.exe	92
PID 4240 wrote to memory of 4588	4240	msedge.exe	92
PID 4240 wrote to memory of 4588	4240	msedge.exe	92
PID 4240 wrote to memory of 1140	4240	msedge.exe	99
PID 4240 wrote to memory of 1696	4240	msedge.exe	100
PID 4240 wrote to memory of 1140	4240	msedge.exe	99
PID 4240 wrote to memory of 1696	4240	msedge.exe	100
PID 4240 wrote to memory of 4984	4240	msedge.exe	102
PID 4240 wrote to memory of 2820	4240	msedge.exe	108
PID 4240 wrote to memory of 1464	4240	msedge.exe	109
PID 4240 wrote to memory of 4944	4240	msedge.exe	110
PID 4240 wrote to memory of 2184	4240	msedge.exe	111
PID 4240 wrote to memory of 2184	4240	msedge.exe	111
PID 4240 wrote to memory of 3992	4240	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a5f7c601daeae03adb15ff70f5c716f1e39658ea233ddfc7cefee1dcb358ee50.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff8b66fc188,0x7ff8b66fc194,0x7ff8b66fc1a0
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,790985617808935174,8966648713135533395,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,17969151225019881576,4633154223281189732,262144 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,2439224679783482648,12187220124391969042,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,10050333251332676840,4011823895562046063,2097152 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,3342303652930442599,10587634888886362130,2097152 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,12120452485955724792,10981078491366494885,2097152 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,14476124255806438957,7001142382454177812,2097152 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,16256203044650683030,3821684836190073209,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,15825944633538049380,15684148132847549618,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,15011446441315137619,6727831661982589158,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,15011446441315137619,6727831661982589158,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,1934901548401482393,10921156721468708054,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,996498190013446031,4062572728819261385,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,512910170013059717,12429407266925636091,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5581826391784540385,3575196391167569801,524288 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5852,i,14697275284260857346,15414397477118556326,262144 --field-trial-handle=2468,i,6778869863059291035,8358317088289443863,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 87db6a97c0c4c7f214f8ca17d7f1082247c432bc9a75cc6a43a0766621c3b108
MD5 c517a68e255479db321ae950276288b1
SHA1 b9c0a8fa19b52ba1405ba3e287d2beacefc6caff
SHA512 f135b32c5f7e46e36a24431401ac33e6b0e1c55f53be2663c319707af8cad5b29a27d26324a1fdf36fe331a72f71341e41cc760315994f2aa241871bf58b3b2b
TLSH
T15651F94895F04677F7E84635D1F316CB36308F6154833F520496F7BABA4A358CF05856
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

669f6a6c-1901-4c2d-be56-d7552ecc6adf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\669f6a6c-1901-4c2d-be56-d7552ecc6adf.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 41fd82d7d83e405bc840038b2548ad572ea357381d3244aaf565dddef9a361ee
MD5 296aaeb12f8747aa0a496eb07f1d835c
SHA1 751e8ff25f23ec89fa8c3f4e08e637185248f7c2
SHA512 463079fd6756a109fd06a5c29b8635311ea4bbcc835ad78e03210841c51be18af1b0b2529a393c0df1994fd01e9b410ab9c6eb350e22ba679440f1d4aef798cc
TLSH
T1D0217DF7C3D486AE890556F09A24AE17CD2E054682283C1689E4EF1B93F24B5D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 dd26bfc4e6924714dfd20ea8a7f3ba69931dca566f0d4ea9b6a3081e80231148
MD5 75429d30a275f48d6537c4592719f0d0
SHA1 64241b4e6a109c6658c1175e7e91561bbd0b43d0
SHA512 1744763bdeb8ea9e7aff5649a9679b70d51df5ddc6315d1bbc261f9ef57d2f9903f8538478fe9b6cbfdc26fb4897dd3a8d141ad4cf61a18086374e3a46452583
SSDEEP 192:sxZ6R5WG/frsidlIdpdwHW6+WNGYrbO+IgrJ:sxZ6mG/frsidWyHbGu9
TLSH
T11C12A752AE28A57B8CC7D30DBB55BF13D6F9503261941E58EAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 15e75dc064a6a9701fa2df1614096dec52bcec0cdf1bedbb8433687989a1b7c5
MD5 c1cc1b38e06f9b8288fa9bbd24fa3a30
SHA1 5f2435c81d78ee3713949d1b7835ec8d593050f0
SHA512 000c0d4867086ebecb2dc127a10664840bab6cdeb07838c3e371137f80a90f2fb37cfe1b27c658bc17344f850cdecac42402260cbf320fc6455523092d7bd620
SSDEEP 192:sxZ6R5WG/frssdPIdpHwHW6+WNGYrUO+Ig54J:sxZ6mG/frssdgQHbGdi
TLSH
T18A22A752AE28A97B8CC7D30DBB55BF13E6F9503291941E58EAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ef0f5518f9fa3509ea3254520e690ceb26f69092f6d65be6cefdbaeb5df791be
MD5 db7d6dfb8a07e4c4a2022933429872cd
SHA1 21ebcc64ed2fb7b77cf636f4e7c47684832f611e
SHA512 06714afa797c7a368e6428f2af1fe2d0baad51ef71a7aaff5fe94ab797d3bd10ec88c90c9e8e5cbc2502cc36e31c3ff4438a61a2182a4fa9f2d018c894121057
SSDEEP 192:sxZ6R5WG/frssdPIdpdwHW6+WNGYrrO+Ig54J:sxZ6mG/frssdgyHbGUi
TLSH
T12422B852AE28A97B8CC7D30DBB55BF13E6F9503251951E58EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4f50c3cb32b538b283cbc7fa8eb5246b72b52c84473e69283b3576828d264908
MD5 fef366766606c471c21ecd330cd177a3
SHA1 9cbc6216514b0ccb2e074be2beb1f1f2040218cf
SHA512 90d75f0ec8d9316080a15878b7b4de0235f1f7a26035086d0f60e05926887d2fffb1148ea7146f907650642fd2e1ef8c956ec95d757d6ff3414dce8802d0d0a8
SSDEEP 192:sxZ6R5WG/frssdlIdpdwHW6+WNGYrbO+Ig5SJ:sxZ6mG/frssdWyHbGu4
TLSH
T161229652AE28A97B8CC7D31DBB55BF13D6F9503291941E58EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1d55b40611e3dcc523b12ed90932446f109a47b9268bcb6c0ad77534e90114f5
MD5 68ed21efa775467fb02d294a93bbdef7
SHA1 8d82baccf226be1638416bfed95b5b832fa4d30e
SHA512 9af453f20a1d56b7bf373f47ac0317f3493f409c18f1e3e7dbbe88436c84976db86fb46745ef6b870d767289fc4e0b8f3693d68e147e1bfac4576c4606a20201
SSDEEP 768:85y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TblroRTt:85y4J/DWvbtBhu1jajiLm0beNt
TLSH
T19DC2FB3B684CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 803363b60583b29c6c84a25a4210b56d5ad2deb586d96ec13f3caa9dd8020689
MD5 e9696c2ae09dcf5934d6feb9789b8bf2
SHA1 17d80bea4facf905c0038386e807e5541793a68f
SHA512 3d71b12b65d04bdf4489b1eb0d29e32e9facf91497624e6f65ebc7bd430c6e8a0cc32b0cef1891f70840c86e735a10393dac80554d4751ab2919b20fee48611c
SSDEEP 48:KIDI1Ks04jyLEzy+suCLbyB6ISWLK9y1ALxEbYJqC4yLpBpQp9pxpbpfpjp8bpP1:KIDCKs0+uzeKEIOSc4KR2i4
TLSH
T11E911F4170BB131538BD29488575D76E028136B73168EA6F7FBC44B68E6BE040EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4fe101d-394d-406b-a71e-d104189aebf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a4fe101d-394d-406b-a71e-d104189aebf1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7a8286136172bc62b388b9af93dd1363506627d9d95019f13162ab48562e226f
MD5 402dc3f341d973e5e9c04fce8f18d10a
SHA1 d05e8612ff7e86e609dfff64fb59a8b50951653b
SHA512 2640671bd88ba68210b7b547ac5afaa9b9167b14e023c23138e9c8faf92de4ff8fa314ead137defd9d6f34ba0ef761780d7cef16c467e0743f7b6fee911e4fde
SSDEEP 384:YiFiZcIgasNB8TUNTUlIleZIdZyGhHX58EvOeJB3JrRj7O6R2Feo/loH:jFQdEwgIIdd1a8OY3hRj7TReo
TLSH
T142A27D7298A4DD3BADF69646F54A3603CFF540A7C6C5AF90E3DC6B1E019B69C130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 22860aa5808d62f29c3602dbba3e63ac6ba4398064ad9d8da6595e5f08eb1824
MD5 379b05775b61333da7fa9f51024b36b5
SHA1 2167db861281b0897dd7f9edaeca6b419275e33d
SHA512 9538f9a0705b145f7bcaa301d1ac9b4a3c503aea173215ab95d3e0b52dcd221f8aaa0cfffd4c666e4cd4c8335ade3d2682a64cff5f350b8ed1e1aacd37057161
SSDEEP 384:pZcIwsNfvZIdZ2GhHX58EvOeJB3Jroj7O6R2Feo/loH:hwEId91a8OY3hoj7TReo
TLSH
T105827D31A8B89C3659F7A146F54736039FF990A793C95F80D6EC6B2E05DBA98130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a8f4f0a708614663d185937313d52b56fe088c9311c7093eedd10e3bc2644a5f
MD5 73e5d2357a8535134cc31174e39812bd
SHA1 45c1c32320723ba64ceed8a8b84b1abb10c52e50
SHA512 c10f343764a1fb0f10b85ac29ecb60e5ad5879f570ac75834b5b5cf7fb122965dfe68aca3e7b433b4b0e521662081484c302573e3e544f405db6c1603a62abc9
SSDEEP 192:1ONgV6wlDgQmiUyksW4X58gZvOKNJ7DlY9U6:1ONu6kg8W4X58EvOeJdsU6
TLSH
T1C7020938F9687C7B8EF2AE09F58737139FE4106BE5552F84DAE81A1D00D769C130A923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ca44ccaf8cb7b89c50d957f9b3e7fac1de2c0d45e0966a601655a4e8c155e497
MD5 127ba5c5b6206d3fd5c26257d0bb7846
SHA1 99732c7cc648be341486748662eae207f2ec5451
SHA512 b67ee9f9361786a2e8d289ed8daafae892fc42bcd7c52080b35877af10de696cdc5e0a00f4da70c17ef9062f6531ac12175c4fa9ad95de2ac9f472c25e731c74
SSDEEP 192:1ONy6wlDJQmiUyisT4X58gZvOKNJyqwSJruveq/cU6:1ONy6knUT4X58EvOeJB3JrBjU6
TLSH
T15C122935F5A8AC3B5DE2A545F08736139FB54127E6896F90D6EC2E2C01DF6AC230EC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f71ddf01d0c4a13ac8709384dc56433b36a21e2545e508c1a98268efd88a1390
MD5 be3d428c3e49975bdd70b2392cbe2e18
SHA1 908914700c19dde8f104fc2410e8965bf4c25c37
SHA512 2ea024f2937c4bfc14cbb80d999551cce6f1a3241569b16af3d068e1270b39159e010b4e0875b015834d5faca69b929bc637ed7b9ed34ff9e2ac25d15b0f0e0d
SSDEEP 384:jZcIwsNfeZIdZyGhHX58EvOeJB3Jroj7O6R2Feo/loH:7wJIdd1a8OY3hoj7TReo
TLSH
T111827D71A8B49C3659F7E146F54736039FF990A793C95F80D2EC6B2E05DBA98130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 464b0c59f439aba7700151493613895411078a15dd4de0f6aac9490f1386c846
MD5 9a7cda24662b47cb70096db1cb13c920
SHA1 4a23810847ee5be5ffc9e4f29b17058c6cbe54aa
SHA512 804112290d6760c873aa6e3a60f10963ef95c30308f448625793da7efc53001924ee66121641fd656dfa2ce47e3f5d49839e68f4e84507ee5aa5fde6c7db0413
TLSH
T180412958B6FA1108B7B77F1A9BF6A86D447F7C732E0A985D00010D4F0666B41C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download