912e0bc7eb9a95a36628608db37a1409e2ab4b352b699b502629b61fa6a0bda7

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_912e0bc7eb9a95a36628608db37a1409e2ab4b352b699b502629b61fa6a0bda7.html
Size 104KB
Sample260913-azamcaak91
SHA256 912e0bc7eb9a95a36628608db37a1409e2ab4b352b699b502629b61fa6a0bda7
MD5 81955cdc7b06b0e35f5edb7d870ee7c4
SHA1 7c73fd2c3feaac0ce18c289aa2f34728f58df225
SHA512 a55ed230affebe350094c02ab0aff35ad8da1a412e7a65df6be42f846c9b3f6a8eb6057e5bdaef44c49508e24a57ecfb9af257d66766514f834f69be553529a1
SSDEEP 1536:cPxDYn+hPH+PR9US9jG1XkPl0QmTtXNoGxuBUebEaombEaoT:y3HQGNm+edomdoT
TLSH
T191B3928701205CFAAFA149B3425F58673D2C5437BC5791B9E3FD8FA72B41DAE034A229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1720	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338210612203725"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D329F7C4-C6B5-4C2A-A7E9-93E35FFB4C65}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3496 wrote to memory of 4260	3496	msedge.exe	86
PID 3496 wrote to memory of 1720	3496	msedge.exe	88
PID 3496 wrote to memory of 4908	3496	msedge.exe	89
PID 3496 wrote to memory of 3952	3496	msedge.exe	90
PID 3496 wrote to memory of 4908	3496	msedge.exe	89
PID 3496 wrote to memory of 3952	3496	msedge.exe	90
PID 3496 wrote to memory of 3952	3496	msedge.exe	90
PID 3496 wrote to memory of 1132	3496	msedge.exe	91
PID 3496 wrote to memory of 3348	3496	msedge.exe	92
PID 3496 wrote to memory of 1132	3496	msedge.exe	91
PID 3496 wrote to memory of 1132	3496	msedge.exe	91
PID 3496 wrote to memory of 3348	3496	msedge.exe	92
PID 3496 wrote to memory of 3348	3496	msedge.exe	92
PID 3496 wrote to memory of 5044	3496	msedge.exe	94
PID 3496 wrote to memory of 5044	3496	msedge.exe	94
PID 3496 wrote to memory of 5044	3496	msedge.exe	94
PID 3496 wrote to memory of 4800	3496	msedge.exe	93
PID 3496 wrote to memory of 4800	3496	msedge.exe	93
PID 3496 wrote to memory of 4800	3496	msedge.exe	93
PID 3496 wrote to memory of 820	3496	msedge.exe	99
PID 3496 wrote to memory of 4388	3496	msedge.exe	100
PID 3496 wrote to memory of 820	3496	msedge.exe	99
PID 3496 wrote to memory of 4388	3496	msedge.exe	100
PID 3496 wrote to memory of 4384	3496	msedge.exe	102
PID 3496 wrote to memory of 3092	3496	msedge.exe	109
PID 3496 wrote to memory of 3460	3496	msedge.exe	110
PID 3496 wrote to memory of 3192	3496	msedge.exe	111
PID 3496 wrote to memory of 4028	3496	msedge.exe	113
PID 3496 wrote to memory of 4028	3496	msedge.exe	113
PID 3496 wrote to memory of 4160	3496	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_912e0bc7eb9a95a36628608db37a1409e2ab4b352b699b502629b61fa6a0bda7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb8db6c188,0x7ffb8db6c194,0x7ffb8db6c1a0
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,16420122642843316675,15615520639701312147,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,17324705859756401166,15087353142900583182,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,5680006691243653296,4122018568188301090,262144 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,18097209968751932556,4253643515575218001,2097152 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,9052984314291082838,203431447377526405,2097152 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,12727910028283453639,12974123295691353556,2097152 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,1680855918872056928,14330745711663881670,2097152 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17833407154537605260,9437944178743576355,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,8377138949315347530,2328983510163283822,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,12354491965970878215,16643875656988378996,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,12354491965970878215,16643875656988378996,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,15629574683040381543,6961371559537152675,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,15318719162384909144,17458728240182932593,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,14754318979016233084,4436832442501764245,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,17019467547724971938,8839146615106304202,524288 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,17299816295373525458,13716695859143683657,262144 --field-trial-handle=2464,i,13140586523605224586,1358334314340788302,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4160

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 744dcbd5e8420109e0622eba74677d7e7c57717648331e400ba62f4d1f989f79
MD5 760c75873a8154da3f2a8afbdf46054f
SHA1 f4ceb14999ea0e24477451b3dcc36cd1f67b83e4
SHA512 d22b15d1430eac42910b7ff2e282cc58b18bf972a1aaacac2ddb1115674b693b4fed3a218c12c412a3a3b795369bd40c915c1b5ef19b52b1b32dfcf8276b9148
TLSH
T18451A5DB8A904CF8F7A89C7181ECA2673A7C4CB259836D72CC9DD17D9B1A3DE904D014
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b2092090d32f0074213fd0ba5887a5458cd7d52d69d2745cc5f414c5e14d4222
MD5 6e27e3da995089137c41da4f0485add8
SHA1 ee0a9f62837f116ec3dcf8d43d275ba838e31e66
SHA512 3e319a43f41add097d2aa3ddedf62e3f51a7a4c5b56be99a7034e3d461b310488f9bf45e1277106c7bd099df5a4c7419ad377b40531b8cd3681e5f09a192af72
TLSH
T1DA51ADB7C3D4876EC90116F09B246E6ADE1C1A1A822C3C16C8E4EF5FA7F24B0E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 761ce291c79536e9a70fe2ca6f8b6563f9503c26c80def33c63ce0640c53b254
MD5 2654d6fc7fcc142f654c4e034b64978d
SHA1 c8ea4ef61893c5fd355177bc6321e319b9011b3b
SHA512 7538c00758650a2d7b675451b9cfdb5ab593e59d537a63497790cdd2c4448d0e26c599f4849ae6c1a10679e4a4863cf0e8528d6adf31bacb68339efac3419117
SSDEEP 192:sxZgHlWU/fXhXsSJuIdpd0HW6+WNGYRPRu8IgrJ:sxZgHMU/fXxsG/iHbGml9
TLSH
T10D12A8516E28A47B8CCBE21DBA25BF53E6F95032A1D51E48EAFC861C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 24945f11e68e1abae5748fdf635c3b474629cd50de7eef818a550e075a697e7c
MD5 c06c954a0c8744837c3337b0317ab75d
SHA1 a2d018799c09513791210a7dd00702f3596d2e26
SHA512 9f55503fd7f5babd7d67d6538c6b908432d9eaf27251b178fd3eb7643b0069e3290add07cfaf739d378c977899a11f1f952a056ca9e8f08160b9f5345035ace4
SSDEEP 192:sxZgHlWU/fXhXsEluIdpH0HW6+WNGYRPqu8Ig51J:sxZgHMU/fXxss/UHbGmUd
TLSH
T1A422C8566E28A87B8CCBE20DFA25BF53E6F9503251951E48ABFCCA1C05E76CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b352e06e7364e2ea2b24768724a798ba9bbf01d8eb1e996e2c76b5429a10ee9d
MD5 d10ef4a02ea12a8f87ff2d1972454d12
SHA1 2211c0ab41294acb6b8f07170f2582a28c076dbd
SHA512 e195929704b8cdabd17736b6da7db4181cef97a8708403cbb90cf7bea3097202eefe823b53c382af9e6af9479b7a3ad1e01adcab706657cbe88684341ba20a63
SSDEEP 192:sxZgHlWU/fXhXsEluIdpd0HW6+WNGYRPlu8Ig51J:sxZgHMU/fXxss/iHbGmBd
TLSH
T1A722A8556E28A97B8CCBE20DBB25BF53EAF9503251951E48AAFC8A1C05E76CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 90f3ed1d9eda4d72ddbd5ef64b4ef036c8c48b9c9bc4f1a6735e3977a98985d4
MD5 9b029b1d3b3c663b666bb34e43b6a1a7
SHA1 d2db646695b410a5f39282e3d17933163834d66c
SHA512 cd0f4a6639684f9b42c90d336523b208b1e28e228b7aba082d33e09c1c88ddb0cbf2b38fb711ac3ef77fbbe2a3592921e97197273a231c736b1eb59095c9c944
SSDEEP 192:sxZgHlWU/fXhXsEJuIdpd0HW6+WNGYRPRu8Ig5nJ:sxZgHMU/fXxso/iHbGmlb
TLSH
T18322A8566E38A47B8CCBD21DBA25BF53EAF9503291951E48AAFC861C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b1f4fee7e90c4bbb9b93cb62d6683294f7e253e61c7d445963b08ff2410eb462
MD5 f83b888732c61035db5fdbabc841b256
SHA1 6ba7b0a89a0989e862f5180396d745a61ee232a3
SHA512 7165c3e2485fb8957c03e09972f3b7847a4bca568cc2694ccc55d8f1b9f4f1321876c61495b973e18334a98ca6dcfdbc800b8eb5450584a22909b0e6b3a113cc
SSDEEP 768:fXK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Mro4+kC:fXK9uzYWvcQWsu1ja0HL7Q3X4+kC
TLSH
T1AEC2093F640DCB7E4FC01A9DDC5A6F972E9802D7A6688D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f93eb59cdacb5db26b440e4c26087ace0afa27105ede65af09f902f9709082ad
MD5 4d8dd047e61784e742635b04bb58ddd0
SHA1 32ab38b1836c5f2c857985fec1f94b3bb20cea82
SHA512 9310581e068aaeecb76e0a3f3a0bb03b1d3df61658046a90cd9fbd3a172cba976d44e90c9ca446291042937ccb237570a10165d8bff2eb19784aff5cc49203b2
SSDEEP 48:K0mImIXOS4iGHbeFeISqHK9G18HxQXYtOWMyLq1YEqo4pb0TkIS8pK9g1apxS5YG:K0md/uK0sqOt2KGQR9mKugu
TLSH
T19D91F64132BB020039BE395895A4872E924136B3315AF52BBFBC50655EEBE4C4CFF9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

556614ab-657d-4bc0-a4b5-cc43d8f6dc2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\556614ab-657d-4bc0-a4b5-cc43d8f6dc2a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 38792e3e3804dcfc5083c269934be9cea23c6d6921107c3d3e364b6590b79768
MD5 267e8bc4aa2fa7b6c44927b277a75d89
SHA1 c1ab88421b08cee54ad3c2077c1fa525ee7a1e95
SHA512 5882554c2a89bb02189487f16b8f72b9319d11d521025f2f6f2419e5173f6f38ace10fb4be260dc05ebe3d26d9fbbbbdcf1489c3dc6371fb2cc811d0be58eb35
SSDEEP 384:MiFiZcI7msNO8TUNTUlIlSw/28naWSDuOjTVv0OYSh6jCwJrZBpY7O6R2Feomaoi:3FQqHwgvuFniOYBjphZfY7TRCl
TLSH
T142A25D725C649D7BADFB9686F84A3213DEB840A3C6C67B90E2DCAE1D009669C1307C55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3c27a5762c9b3eda6a1b94cd5cc514cd8c2dc31ef3d37d2506a503d7c67d3482
MD5 a9a5cc37ff25164368782c5852423d68
SHA1 8283088e518a6d314ca255feaedb371af8cb7318
SHA512 1d41660b312bccaf2b51d796bb0e32fa221341a29ca546899720efa6d4a819c39bdef43f9201b3175414b5d4ce5761c7a7c5a1bab6246b32fccef764510ec70c
SSDEEP 192:us+sN+BQ//28naUewwvQmiU1kyB4OjTVgI0OXoSh6j+FJSJrZBnWsZb/UU8:YsN+Bw/28naWSDuOjTVv0OYSh6jCwJr8
TLSH
T13842193168386C765DE3A185F44A3613DFB85167DA893F90E2ED5E0C01DB3AC230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 111f0f37982b9b73ae8ea8906b27a3f14e0bfcc8033a14266181d9b5d1bb759c
MD5 4b372d1e0aed4045d41d0feeb8be6e0e
SHA1 0f304891ce31b925529db9455a74331c8efbb027
SHA512 b9d3803027e2fd26b3ea34a9257fa5a8ccb698d9b7ce173aba1b615b49e7209a77e2b6104992a039e9820fa62fe6a2e841f22adb36de2c971ae681406edc00dc
SSDEEP 192:SONx6ygpQmiUy3UtOCTVgI0OXoSPzPtFU6:SONx6lHdtOCTVv0OYSbvU6
TLSH
T14402C734BC687CBB8EB76E45F88B26139F98117BDA552B84D6E81E1C01D769C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5d9dafef707b666b8080421909d23e966cf7464da54e5b51e99e0cb6b3962a27
MD5 0d2b65afa334616787b1ce4f07da07a1
SHA1 28003ccb5fb2ac1fb7f11645e15abf8757f95caf
SHA512 dc1ab295aec07a509d0753ab6ad517910b7976244bbdada722ae62b9405cabeb18cca4f36eaa7d555e5738cada8836e6c511736c4802b443de1c41ec5dc82691
SSDEEP 192:u3+sN+CQ//28naUeww/QmiU1kyB4OjTVgI0OXoSh6j+FJSJrZBnWsZb/UU8:VsN+Cw/28naWEDuOjTVv0OYSh6jCwJr8
TLSH
T18C32193168786C765DE3A185F44B3613DFB85167DA893F94E1ED6E0C01DB3AC230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 bc4e2c41acc339fbf611ac31ba944af330fcd6b5478bd2d60ba7ef5f0bfcb1fb
MD5 2cffef118180c80897c6dc17df7a4be2
SHA1 a1ecd366cb17ad786486293288e683de755f74bc
SHA512 879842e556ecdc442d3edf0577a5b46a3c74885488b94b3854762e3674ce720b63d10895010b08b093e9af578d1a259ac75cba9b717cef17b415311e2768c37b
SSDEEP 192:u3+sN+CQ//28naUewwvQmiU1kyB4OjTVgI0OXoSh6j+FJSJrZBnWsZb/UU8:VsN+Cw/28naWSDuOjTVv0OYSh6jCwJr8
TLSH
T1C232193568786C765DE3A185F44B3613DFB85167DA893F94E1ED6E0C01DB3AC230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 2bf7c114e87ffddbb499fb47e2b6aa14dd009aaa4a0744a3ce80e26a6aaf1717
MD5 c6c44d17dfa7ff3370d4e3a5393669ec
SHA1 1d2da94b99a3179fee6373fca39d328440dd9ca3
SHA512 14c51f549c0a349a7763cbd1b3675a3bb7bf744da3d04673da030d81ab8b6d54fdb32b1a3b690259da0ac2a6558924acde8642beae51edb80f38fea6e406214c
SSDEEP 384:YsN+Tw/28naWSDuOjTVv0OYSh6jCwJrZBHYXd:YUuFniOYBjphZhYXd
TLSH
T1C0522A31A8386C765DE79186F44A3613DFB850A7C6893F94A1ED6F0D01DA2AC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f52e52c54b187bfd36730fe629cbf571084c92385239e70f24ee6db1d9fbe4d
MD5 281a24af9d93d6f9351baca1f0194e50
SHA1 7923b9d21941852a5327619eb3bc3084c7d137af
SHA512 47f03add7af3bf533ddcdab0ba589c4192041236f465f230b39875d1af145f9e8771a2c792437c628bcd1e8fa77f4138ff9f8b642b27a501f61a7f9d89a8b4c4
SSDEEP 192:SON/6yZQmiUynUKOCTVgI0OXoSh6j+FJSJrZBnf3Ub/UU6:SON/6ErKOCTVv0OYSh6jCwJrZBsYU6
TLSH
T1BD121A35B8686C775DE3A585F48731139FA84167DA4A3F80D1EC2E1C01EB7AC230BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0eec7e2ece10d95139dadb94380df83b29f6280f889a3ef087f6d91eaebc7055
MD5 9d6ceca925a10631dcbec0d52c3d32a5
SHA1 1b9a56bbdc231c013ae1446a4f77534069fdeb26
SHA512 3ca2aa6deb00400e3124ec00ff66d9631f955214b98abd447a98014684af6ade08223e6d47041db0db4025fb9d4887f0a091fb6eb7f61c4386ab7dfbf16a0edf
TLSH
T11241485CB6FE1148B377BE569BF6686D487EB8372E0AD45D10110E4E4A72B40D871733
MD5 SHA1 SHA512 TLSH

Submit Download