4cfa2ec0e8fbb89f9eb239d57086cf218b5728077319e5387f08060f45094871

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4cfa2ec0e8fbb89f9eb239d57086cf218b5728077319e5387f08060f45094871.html
Size 40KB
Sample260912-qs2p9azzfx
SHA256 4cfa2ec0e8fbb89f9eb239d57086cf218b5728077319e5387f08060f45094871
MD5 b07d6e5b6e64c2200417e3bbe13e05da
SHA1 33d9805bb9850c9e63b60b59942f58847703401a
SHA512 efdd6cf1ed3e2f18f44d672ae3adfef9b6748f216602bca4f9c8bc9e0f25605e9f8dc31dc3db9f0d3e4889ca8497fa5943a0df2d07c718f56a466b7efa91dbe9
SSDEEP 384:UJ5Mkw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8ghQY2:Kfw8hW8VgJG8yJMp92
TLSH
T159039364B9C222230033A37D9FA79608FB78515B820553407EBC27E61FF1954D6AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338234950626996"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{CC9D2005-97B1-47F6-B707-BA24922C556A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 4724	1988	msedge.exe	83
PID 1988 wrote to memory of 3532	1988	msedge.exe	84
PID 1988 wrote to memory of 5048	1988	msedge.exe	85
PID 1988 wrote to memory of 5048	1988	msedge.exe	85
PID 1988 wrote to memory of 5048	1988	msedge.exe	85
PID 1988 wrote to memory of 5116	1988	msedge.exe	86
PID 1988 wrote to memory of 5116	1988	msedge.exe	86
PID 1988 wrote to memory of 464	1988	msedge.exe	88
PID 1988 wrote to memory of 464	1988	msedge.exe	88
PID 1988 wrote to memory of 464	1988	msedge.exe	88
PID 1988 wrote to memory of 4444	1988	msedge.exe	89
PID 1988 wrote to memory of 4444	1988	msedge.exe	89
PID 1988 wrote to memory of 4444	1988	msedge.exe	89
PID 1988 wrote to memory of 4192	1988	msedge.exe	90
PID 1988 wrote to memory of 4192	1988	msedge.exe	90
PID 1988 wrote to memory of 4192	1988	msedge.exe	90
PID 1988 wrote to memory of 1900	1988	msedge.exe	91
PID 1988 wrote to memory of 1900	1988	msedge.exe	91
PID 1988 wrote to memory of 1900	1988	msedge.exe	91
PID 1988 wrote to memory of 4668	1988	msedge.exe	95
PID 1988 wrote to memory of 2440	1988	msedge.exe	96
PID 1988 wrote to memory of 4668	1988	msedge.exe	95
PID 1988 wrote to memory of 2440	1988	msedge.exe	96
PID 1988 wrote to memory of 2128	1988	msedge.exe	98
PID 1988 wrote to memory of 4348	1988	msedge.exe	103
PID 1988 wrote to memory of 4484	1988	msedge.exe	104
PID 1988 wrote to memory of 2752	1988	msedge.exe	105
PID 1988 wrote to memory of 732	1988	msedge.exe	106
PID 1988 wrote to memory of 732	1988	msedge.exe	106
PID 1988 wrote to memory of 3160	1988	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4cfa2ec0e8fbb89f9eb239d57086cf218b5728077319e5387f08060f45094871.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbe741c188,0x7ffbe741c194,0x7ffbe741c1a0
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,9238372096281114924,2597583043113481427,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,682629961703998504,674030658279174323,262144 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,14889813855362780218,12723321419665954618,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,16167629576732841887,1462225068680425055,2097152 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10555366554566054316,858149761339074613,2097152 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,7293846221333642345,15289502750157675356,2097152 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,15562351870723340143,8254378111044331991,2097152 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18005539180741083038,9788022438899822203,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,2937468504571647624,15663932079239487023,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,4709467239661848514,13899627360637603515,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,4709467239661848514,13899627360637603515,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,15574210678082849027,14614501229663465579,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,2286153380941919213,4293887282981497095,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,908304225273827983,13875642605997847981,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,1286342834490727091,279477931735638346,524288 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,7841506694209866668,10923760480638196595,262144 --field-trial-handle=2368,i,2758624670990627261,1620286552690461438,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3160

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f7d0f86985bdd35102a9fc93d5401c174f1c4f6aafcb63a8a8a928b34ec1ea70
MD5 77e436c5e16a1ee072db3d14cc14b855
SHA1 fbf396bae0bcd35056a932c5033e812369bf5dd1
SHA512 8da33266c48ec00a0a993dbc3583c6bae2526507e45d341963a3f44c5754055f7ed258f0226c2c10f0166fe7986d3cd7f737a6d98fe15fbb6a709a755c32d2c2
TLSH
T1096184E8915A5091F39C40F376F7088F3D32B649D5A31D3E6767D6E4BB497B4E1A1040
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8e4f891a6c7fb6760f7a9859f71382232f860916b50964b5e233e978174e73dc
MD5 b6ec6f089ad08c061546e4428d78b5a6
SHA1 5f421f058055d02f6a0a02bca0dca0ab9c6209eb
SHA512 be6b89ba058928ba53a43535cfb15775ef89dfb52a3aba3eac08a06c5bde75528cf0b04cac747e3987cc80fcbc862bad201ddfddc57ca9f13e6921194665a3c5
TLSH
T1D4219BF7C3D586AE890156F05A24EE2BCE1D0A46422C3C158AE4EF2B93E2475E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5a52a26a3f37da4bb88f208faccbe66f1fba0920eb488e8df1619053f009f332
MD5 649829707c603deea0ced5fb1d7bbec8
SHA1 a7309dfcaabfe4c1c737db3acf2eacf590f2ae93
SHA512 e6e42c02c1bee7dbe3d010ba16c8e5eda548ff10b06788587ce1b5d4fd831a61118249fb6e71c136b1d774a271b096d2f20381d0769f392f3521e53b2af4f05a
SSDEEP 192:sxZNR9Wh/fGs3ZIdpdiHW6+WNGY3R+QIgrJ:sxZN+h/fGs3ycHbGO9
TLSH
T17612B8126E28A97B8CCBD21DBB25BF53E6F9503251D51E58A6FCCA1C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d0ad5368947487bd4bdfbeaaeff1fdb2fcda58d19669743aa4c46a178ba644e9
MD5 5c9f0ce48333582258ceee214ec06973
SHA1 1ad26a52fe91e0ee5791d22e57dc60048b7b5abd
SHA512 5d5c0f0325222752f0ea1efe18a5483c414552470d496abcf1b887ec205c6a7489a70864b375830d83d7ad9458a4cf55db9f2a97604f247dfac337be0513397f
SSDEEP 192:sxZNR9Wh/fGsQZIdpHiHW6+WNGY3M+QIg5uJ:sxZN+h/fGsQyCHbGbU
TLSH
T1AC22DB166E28A97B8CCBE21DBB657F53E6F9503251901E58A6FCCA1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8bbec73a40b87d8e7c86847945460b21c49a15e8e592ab644b1a81925c621bc2
MD5 b8355bbb1134f4ea0d8fa77196617f88
SHA1 33245ea057b3c4cdac5597cc69cc3da42a19eac4
SHA512 30b26b93c113a0416fcb959f9abb6d24bc9fcd8273c99880642b191f72640866bb3c2d2a685491ef756bd4cdbe5753649cc247a1f7e5bbdd329eb7ecddd4f854
SSDEEP 192:sxZNR9Wh/fGsQZIdpdiHW6+WNGY3G+QIg5uJ:sxZN+h/fGsQycHbG9U
TLSH
T1CA22DA116E28A97B8CCBE20DBB657F53E6F9503251D51E58A6FCCA1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e51e4aab719862fde80213cf0782ba51ebdc4fecd0f5f540ec3099de1d5262a3
MD5 ddfc52c3fdff9f24e7c905ae63f641cd
SHA1 cba422af522e480885e0e49e8468f15a54a11d03
SHA512 9953c3bb59b181a0fd0972bdcdd0b02dcb893fbe4ec94dbff97de205d3fdbb1a9da3a8a875473a1c98dfc1fdda3de21cee0abe90d82ec1c5f9387b00f5317e9a
SSDEEP 192:sxZNR9Wh/fGszZIdpdiHW6+WNGY3R+QIg58J:sxZN+h/fGszycHbGOW
TLSH
T1F522D9116E38A97B8CCBD21DBB25BF53E6F9503251D41E58A6FC8A1C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cbb8dd4da960789bdcdbd0d0eeba8432bdf6d3ef51962ad06eb131b899b2b539
MD5 0e28714fad35e4da4ff2198050e600ff
SHA1 40fc2ad8ed3c2d9b5ae707980c1c6ee75abe9e02
SHA512 433c80f2217023607126be90f1fb7a92e69156319a95481717e36ef1e906c8ca652af21865340ba0e582becf1b61b0e6aa74c6147a2c943dec7d19f625d7757c
SSDEEP 768:Nn30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ722rolZMqy:Nn30AbSWvS2l9u1jaLmLZ12NPy
TLSH
T19AC2EA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85212cdf00e7605fc6e31f92ddc779766edb4a88ed830815911ddce0e128b5fa
MD5 71974438fcc24dc1fbf845efbc86caef
SHA1 479339b47b540b9e074db7b50be4a703736c40ca
SHA512 96ba58d52adac6d8cbd4514eba2cb2e67c27433dfdcec826293d92badde0af28c42880863cf4466f7d511b4d4c738bbf7983f05619238b29fb0f616b0385f789
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqLyLYH+CIyWXbOVOISaXK921sXxgHYd+SI:KYrCKYwx236KUYjluKekmq23
TLSH
T143A1124535BB121038BD294CD5708B2E428176633018F6BBBFF91561AE2BE181EFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596392.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596392.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 27dfcfaea1d8c194525b7f8ea1ef29d8ebeaf1721629c79bd197f70427d6d453
MD5 21263a98b4862705e2f976fd492236ae
SHA1 6e474e9be5139d971ce5524a24c813e1d602b588
SHA512 0c1172f16d96d6461fe7ac789d7b7ab3d89f077b679f41f118cf723271fbc6f1fb7b3f1c68bf26373babb2cd7ec79e43ac72231371a899e4a27057aed0b98a0d
SSDEEP 384:xiFiZcIVKsN78TUNTUlIltErpuBFo9iX5FN3+HJ1sq7O6R2Feow2goV:YFQQCwgyQsa1asq7TRtG
TLSH
T1C3A27D735868883F9DF6DA51F94A3603DEF841A7C6C96F84E6DCAB2D019B5D8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0cd8c40dccb2bb942ddd4cc86c2499182c19fc7afe640ed52858d4ac31fc677e
MD5 389d27540f8757e6f62780502bca221a
SHA1 0fb59bfc8b08b3e28b8c9b9338ae47bb5662de61
SHA512 51014bb1399a91c428653a7acaf4431211a22f26b1b8acff9c981f90ae3c4d1e9ce4615aafc613265da3296c30be7bd7aa55ec62905eb41bee40670137a2d47c
SSDEEP 384:zZcIcsNZtErpuBFo9iX5FN3+HJ8sq7O6R2Feow2goV:rcJQsa1Dsq7TRtG
TLSH
T1E7828E7258785C3A49E6E156F84B3A139EF88167D7CC2F84D4ECAB2E05DB998131BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3fbbf072a2e1cbc74d5033bc6cf6fda406f3b7f72bab983026aa79c6b90a472f
MD5 565d0ddc4b26473177bea112adf64b57
SHA1 a0cd35d346b161e3ca4d041193ce6bbcc4867318
SHA512 c687064ee7f3c41898a8e0f97b76a17ebdd12750fad2d2c9a5ba363ea02adb811a00a54ecbe2595c582133c96882f85e503e3c12cd09408f1b5557c1e6b97de5
SSDEEP 192:LONE6Amwp3QmiUy6blYsiX5FN8Y+HJU6olRsb/uU6:LONE6ipZ5YsiX5FN3+HJ2sqU6
TLSH
T111122B32A8786C3F4DD2F551F48735139EA95267DB887F84C9EC272C06EB59C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b808b783ddd65ba3a4cee0fed839dee7ed26b938d97738730220328065b3f581
MD5 119f0f7039c6b16b15b6062c941aebbe
SHA1 f8b0b3ce8f06b0887241a18678c15670d5e224b3
SHA512 63dd166c08cd0a98d35def57c23c90e4a53df4ddff078cd788a43c63eebf5a53b351f4e6aea82eabcb36e7aa9f07ab776e9709d44db1378a3665d1d1528b5621
SSDEEP 384:2ZcIcsNZMErpuGFo9iX5FN3+HJ8sq7O6R2Feow2goV:kcQNsa1Dsq7TRtG
TLSH
T1B9827E725C785C3A49E6E156F84B3A139EF8816797CC2F84D4ECAB2D05DB998131BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9d788e0da856fb639b7b8eea219927d71ea4f35da941c08231318ed1d3b44388
MD5 97297c8f11e3a8d616a744233d0b6119
SHA1 344b1233c98ba6bf67645a9002cfb8dd80353888
SHA512 a9f593b335b1c874efe8b06b99938f7244e809bcf6caf041ca5388b7613ae4ca73398223cd4a284233a2e7ae74568c8e9a3841f154781b57c9592907e0d6804c
SSDEEP 192:LON46AmwprQmiUybl6siX5FN8Y+hJisi0U6:LON46ipdW6siX5FN3+WsPU6
TLSH
T12602FB35AC686C7B8DF3AE15B54B7B239FA5117BDA941F84CAE81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad4c0179-3053-4977-ad36-2bcb20b2b201.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ad4c0179-3053-4977-ad36-2bcb20b2b201.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9c405af62fd980d2f966adb95b3f60b8bc2ca258a2be5bfba6a027287da78d6a
MD5 f7657fa371123574aebea4ec116a583b
SHA1 0bd60e4f02a91162fc82ddc8227bfb00c3f214b1
SHA512 964a676eb28b228fd3c2b3fa0e2ba0c695fffc7e9b260bf6340c2e10ed9e62e4d94b42c4c5229923531fb5f9b55273456da7a770906f823b392f61600293e62f
TLSH
T181412898AAF91018B3B73E56ABF6A86D447FB9772F06C45D10010E8E0663E40D861B37
MD5 SHA1 SHA512 TLSH

Submit Download