19379357d534e7b37b1d5a948b766fa0c686f07c99a668657614ff8d3b744e61

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_19379357d534e7b37b1d5a948b766fa0c686f07c99a668657614ff8d3b744e61.html
Size 103KB
Sample260913-a34dtsch69
SHA256 19379357d534e7b37b1d5a948b766fa0c686f07c99a668657614ff8d3b744e61
MD5 07ef12b55c50aafbd8d2b9384ee2d529
SHA1 b4aaf59347deb992aef50c9ebdb8bea5640542ad
SHA512 5c10185fd2ef9473f8996c47d123141decbeccfd68013ea28c4c76bdbb928d3f03d017ffefd45d1531c32a09d47c231c528d431f60e55d94923e77bc6fe86600
SSDEEP 1536:Uvr8aeS9jWrOQbgL/OBR9/qufdk4n12c0ev3wKLaWpGd6c:UDZVAr0e/z8J
TLSH
T1E6A32933D62B240E3337AD0AB1D275487619B019F31336E4F96E061C58EBEA516FA71B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338320557229245"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{0BCBEBD7-824C-4203-828A-484BEC416EC5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
692	msedge.exe
692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 3304	5112	msedge.exe	83
PID 5112 wrote to memory of 3248	5112	msedge.exe	85
PID 5112 wrote to memory of 4204	5112	msedge.exe	84
PID 5112 wrote to memory of 4204	5112	msedge.exe	84
PID 5112 wrote to memory of 4204	5112	msedge.exe	84
PID 5112 wrote to memory of 2836	5112	msedge.exe	86
PID 5112 wrote to memory of 2836	5112	msedge.exe	86
PID 5112 wrote to memory of 4732	5112	msedge.exe	88
PID 5112 wrote to memory of 4732	5112	msedge.exe	88
PID 5112 wrote to memory of 2440	5112	msedge.exe	87
PID 5112 wrote to memory of 4732	5112	msedge.exe	88
PID 5112 wrote to memory of 2440	5112	msedge.exe	87
PID 5112 wrote to memory of 2440	5112	msedge.exe	87
PID 5112 wrote to memory of 4200	5112	msedge.exe	90
PID 5112 wrote to memory of 4200	5112	msedge.exe	90
PID 5112 wrote to memory of 4200	5112	msedge.exe	90
PID 5112 wrote to memory of 1692	5112	msedge.exe	91
PID 5112 wrote to memory of 1692	5112	msedge.exe	91
PID 5112 wrote to memory of 1692	5112	msedge.exe	91
PID 5112 wrote to memory of 3384	5112	msedge.exe	95
PID 5112 wrote to memory of 3384	5112	msedge.exe	95
PID 5112 wrote to memory of 2052	5112	msedge.exe	96
PID 5112 wrote to memory of 2052	5112	msedge.exe	96
PID 5112 wrote to memory of 2852	5112	msedge.exe	98
PID 5112 wrote to memory of 2300	5112	msedge.exe	103
PID 5112 wrote to memory of 400	5112	msedge.exe	104
PID 5112 wrote to memory of 3712	5112	msedge.exe	105
PID 5112 wrote to memory of 3828	5112	msedge.exe	106
PID 5112 wrote to memory of 3828	5112	msedge.exe	106
PID 5112 wrote to memory of 692	5112	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_19379357d534e7b37b1d5a948b766fa0c686f07c99a668657614ff8d3b744e61.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffa5bb7c188,0x7ffa5bb7c194,0x7ffa5bb7c1a0
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17896194376927004952,7842517262346193136,262144 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,328164307951832283,14021840574880752295,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=1884 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,6054762759973550840,10174321441163002209,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,6294775971802621054,14247601898898123267,2097152 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,1359353911414618403,4967548048921588441,2097152 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,18302595977236113251,12565898334705444558,2097152 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,14591290466317738592,11618366372528580891,2097152 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13319372157273283667,7765175622656497458,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1007138729631118548,3490404675205378585,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,377833553169889062,6613165843624133751,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,377833553169889062,6613165843624133751,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,8973151661880724493,13405666542080146886,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,9713669560001904068,3917663637167592583,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,10552102428364109678,17831628351690919985,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,17257882717303727167,16332754667497064669,524288 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,12218367909460864090,7043285614289831896,262144 --field-trial-handle=2012,i,11315623061319132959,11003436553679108288,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 33e5cf4de856eb2e63b4ef4b73b11eff76e7e3b04db319952bf5cf2952a7866f
MD5 fecbeeaa8972344bff5f2085009e7d2b
SHA1 c5e703c655f845dc2a64134041c2aa1bee970f70
SHA512 84a2981e780490c09a053fe74ea03c778f89ae47868bbe4d3c0cc13e1a6bdaffb03c9bd5e7e59a5969daee10bfc1c4e586502f62ca1a5f72580aa3877dab4ff0
TLSH
T1745180817AE4C084FFA45FB1D0C818AFBA32D58CA483BF130FA4E4B96B163348149394
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a4002f55e1a842393884bc1fab1314adaef8cd114d937e8f96c399e1c45aa481
MD5 3bb3e30250aa15b3638c58d7f0ab31c7
SHA1 11e4fbe8b6ab274f55f16b6378d93dd8a1dc814f
SHA512 ce4aa73adfa7eb5e1b5a5a1499a31b298eb2e1e5b994b68c9c722d523d082417773cada6eafda0587021353aa07bcdab88f29f3995f8b85703e9b2bd58b25b74
TLSH
T141317FF7C3E4567E8A0156F09A28AE1BCD1D0516536C3C5589E4AF2BA3F34B1D10265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6e186151ac9bb4f6bb4febaa7a76f01a88fa9ac9aa3c157a487676f244f65ffa
MD5 9bb7d3b86d546590f53980f828390f3c
SHA1 b329f326adc8919f1c819cf294ac799c3540c383
SHA512 eb51719ddf08a7d3125d8ffc3442304b0e9fdf0f6df19af9afa32434fcc0b2195d4a561cd378b49985aefd9a976ccdd8b7ab42958a5cdc8aca953949296b136e
SSDEEP 192:sxZYRUWf/fMshvIdpdlHW6+WNGYgUniIgrJ:sxZY9f/fMshAbHbGt9
TLSH
T1E412A7566E28A97B8CCBD20DBB25BF53E5F95032A1951E48E6FCC61C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85f56016f9559f9fbed6d92acfe902e66b6585ac4b629ccf71a24ad3b0f9fc1a
MD5 103b06d6984b9c0860d0fc29e5e8581f
SHA1 ee7ba3c63dde67ba357042a78ef1cf334a4c614a
SHA512 7d5bc9a9be6022009019cb7fde4106b491f76daf2d3611b757248d1e598337acef912949ebf13afb0ef6629c9e84f1b23de9d2b4093db16136b6ceaa1c103da0
SSDEEP 192:sxZYRUWf/fMs1vIdpHlHW6+WNGYgtniIg5eJ:sxZY9f/fMs1AFHbGOg
TLSH
T16F22B8566E28697BCCCBD20DFB257F53E6F9503261911E48A6FCC61C05E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 20d5d88d3ea5e169d1825b3da8164972abb7c808c092ae4f9ef7f5718291a33f
MD5 26b980e3fad710ddc0a2c195c80e9a71
SHA1 9585d487b4ed7d9c2246508c8183ed3cd5af3bd0
SHA512 6eb8267752b3bf01cc4ef93768ca84fbea1ba10bd272dfb1c723bc8be5c2757df3e531cfb68e6efaadc0dffce25280f147c2495609ae6c5574779c6aaedbabd4
SSDEEP 192:sxZYRUWf/fMs1vIdpdlHW6+WNGYgYniIg5eJ:sxZY9f/fMs1AbHbGJg
TLSH
T1F022A7566E28A97BCCCBE20DFB257F53E5F95032A1951E48A6FCC61C05E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6546e7c053573d05603f01d15fac38875f686a189e7f02f6b2112c50ab752269
MD5 84d8778b69215f9621849a1f2672c77b
SHA1 e63ac36d9d9cd5ecccd34f58dc9467b878bbda5f
SHA512 cf45936f65046fb0d309a528aa2dd25a25475a91c3fa841e3387cfb6a377e7aa9390db3ee937e1054f02306f6a2c64c22ef02f04ab4fbfb2373216d8afa5b9cf
SSDEEP 192:sxZYRUWf/fMsHvIdpdlHW6+WNGYgUniIg5sJ:sxZY9f/fMsHAbHbGti
TLSH
T1AC22A6566E28A97BCCCAD20DBB25BF53E5F95032A1951E48A6FC861C08E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a202b66d4dfc7486978e026fa20219aa815ed6cd5fd4f89b40594dbaca1ec45e
MD5 868e6eef93d93566bf8534cfdc9ae15a
SHA1 e5c2b9cea60e4a0620bd94dc9b58bd82821cf750
SHA512 ec54ea03ef75136e46929799da49fe0bad565f5aadb691041a84ee8e505aaa93dea0cf3b5842e90b7150efd6b8eaa456c929e5210d5d33a9ed2b184d1ca252b8
SSDEEP 768:WbichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzdrouwC:WbichfPWvPZplu1jan+LKgzWjC
TLSH
T125C2EA3B644CCB7E4FC01A9DDD1A6FDA7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3b67aa1eb4cdcec7a8ebe1cb7129d78dd88a616045bdf9ad2477543bc9df6163
MD5 2e750fc03a79a981fc77a030d127045b
SHA1 c12a669a21ecf0d3418d72f3d9205d1b9e6c959a
SHA512 3d1179b6712766f33ea6dea154b1c2a94ca5b371528597219e08fb3578d8e8341020745612774ac718420a339972e8bf4bc60cab2fb10ce56a11235db3d344f9
SSDEEP 48:K00DCOcey7bCxKISm7K9C1Q7x0rYZ6SIyLZo1JTXrEbXyvIShEK9h1LExpUYSTbM:KoLWKQsSKeoKDisR6KS8CN
TLSH
T1EF91FF5032BA12053C7D66499062A71F4241B1B37058EE7FBFB925779E6BE090CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc2d5077-65f5-4b39-b018-c958593e6b96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dc2d5077-65f5-4b39-b018-c958593e6b96.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 24f986acb5a0609a432610bb103073cca307663d920bc869f312a223d9fc3afd
MD5 b1b9efe9553baee46c238a4ad8d6fe48
SHA1 65b89f459aef3a1715da80fa7a1056c59054c656
SHA512 de6c9bd3197778abb414da39cf4dc52827bbaed1b16470492a9e57d59e9e0136b945d005108560056deb806edf242aa50ceb6893754b0d99519d6e4ec2bd6cec
SSDEEP 384:qiFiZcI/OsNI8TUNTUlIlGhU5oCUBGYX5EWS4It18U4E7O6R2Feowh7UVoT:hFQW9wgcaLuGYuWXIt6U4E7TRToo
TLSH
T182A27C735CF8DC3B9DEB9685F94A3613CEF84067DA85AB90E2DC5E1E009A198130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d2155f8bded97a82c02ed8a90a0b08319e64b3c3b5131d6a6076c89d9173754e
MD5 fae04cd379251ea956d6b8e239c3a22b
SHA1 b4c03cebeba53e6ccb879a6dca80cd0e5ffebffb
SHA512 61311a96b96c820d04e58a5d6b93ef4c589f2781e9554799c13316494eedf2eb8cea76d45644f36f3257bbe45cacf45c9ca9ee5a5b34d92217da9864a707ff18
SSDEEP 384:DZcIYsNYXhU5bbCUBGYX5EWS4It18U9E7O6R2Feowh7UVoT:bYraAuGYuWXIt6U9E7TRToo
TLSH
T166828D726CB8AC3B9DE7D186F44B3A178EF88067A7C96F40D5ED5B1E04CA694130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 364a501b2d29163a22c5a90c611265ce6b4df14f5e6be59a7066181ce25a8ff7
MD5 cb7e4cdd2fc6a9d6bf88b78dccc459c0
SHA1 2ee20070ae5dc70dda4f4b7aafa857222404480e
SHA512 8659bad05695d2dda2c545a6643c4a2771df71270163ab79c118075ce962366b616ab91160d6f27c0aafb1a9f5418afb7da8f37ef17ec5078b8f276116a6e315
SSDEEP 384:tZcIYsNYGhU5oCUBGYX5EWS4It18U9E7O6R2Feowh7UVoT:1YSaLuGYuWXIt6U9E7TRToo
TLSH
T128828D716CB8AC3B9DE7D185F44B3A178EF88027A7C96F40D5ED5B1E04CA694130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 33fe3f984b4752f3274be817238a3f45094d76a5ab2583164fba17eaf3a848f5
MD5 c586228eb60c103f75af084f6b4a0162
SHA1 cc5142af26dc70cd617e01f900f3d43ee7ff5fd7
SHA512 be0dad256b6fe923b6b05e87e8928a832346bc714427203fb7ea6a0cdd87f64100f912ee94d53ff462e7a179cdaaf7057fb7661fd11b6f1b101b1d4c89b3b2ad
SSDEEP 192:LJONg6DphmqQmiUyuMq8wGYX59eznCS3oInkk7mLqbU6:lONg619KRwGYX5EWS4IPsqbU6
TLSH
T14A02FA39E8BC7C7B8EE36E45F5872A135F98112FAA942F84D6E81A1D00D769C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 acfa1706c89bebd90f3605cb507d73292fc49667d42a0fe80f83631f28ac1736
MD5 8faaa4c9939ce9c6b3c1629fe84ad871
SHA1 886c3489643688446bca21e0036bd1832e4d7248
SHA512 3d3be7dbeff92c6dc9a7709207d9d0e417e3f446d764c171d059f9403fa91a1146356728ea2a926ad29c030cca266b968123f995df295264b5dfa1df19d88242
SSDEEP 192:LJON56DphDqQmiUyJM0wGYX59eznCS3oIt18UWkII3/zopU6:lON561sX0wGYX5EWS4It18UPEU6
TLSH
T1F2120B35E8B8AC3B5DD36595F48739138EA8522BEB887F54D5EC1A1C01DF69C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b33fda2f-107e-48d6-bd5d-ee8d30891e49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b33fda2f-107e-48d6-bd5d-ee8d30891e49.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5584b0df41a1111906d1bf11f2ea20fd091e18a835d4fb6118eb4431daff459c
MD5 728023675150aebc53727b11aa10031f
SHA1 53c43d9af6c52abf1c0c2d2675d2d8ba5ac39052
SHA512 28246e5e1765dbd1bb50f252a8d0d531dcafafe0192eef1ff95464c2615d21dec2d1de6b0731d4b31d609e0d7dc0df21ed3587213940adcc765702d6ebbb04b7
TLSH
T133413B5CAAE91048B3B76E16ABF7B86D487B78772F07D19D10110E4F0A26A41CD71737
MD5 SHA1 SHA512 TLSH

Submit Download