fe37dc940b28e66f850b9f96a279952bba352363a42987582d3596b312f5c623

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 06:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fe37dc940b28e66f850b9f96a279952bba352363a42987582d3596b312f5c623.html
Size 113KB
Sample260913-g9txasvxbt
SHA256 fe37dc940b28e66f850b9f96a279952bba352363a42987582d3596b312f5c623
MD5 d0d5ed167a99b8ef0c269e04fb973b27
SHA1 971f6465a1d155c4c749327a582153c56a11bd15
SHA512 3e4dfaf93224e59ab2bce771d772ca1534076296bea7cf6beffda92ff3acb78d4904d13f1a17943779c4b26d5f7c33851269af7ba1f2d212f8c0bfed7f4a9a57
SSDEEP 1536:UmxoYn+h3zsqR++9dZNIlDQ6Tt9Nocx5v/yeD1bEaowbEaoM+gomoWmT:FacQoNvi6dowdoMPolJT
TLSH
T114B3C78751204CFAEFA54DB3419B086B3D2C1437BC4391B9E3FD8F972B5696E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2860	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337910959946833"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{3FC13D5A-537C-44A8-8732-ECB670CAC101}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1204	msedge.exe
1204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 3160	5104	msedge.exe	83
PID 5104 wrote to memory of 2860	5104	msedge.exe	84
PID 5104 wrote to memory of 992	5104	msedge.exe	85
PID 5104 wrote to memory of 992	5104	msedge.exe	85
PID 5104 wrote to memory of 992	5104	msedge.exe	85
PID 5104 wrote to memory of 4472	5104	msedge.exe	86
PID 5104 wrote to memory of 4472	5104	msedge.exe	86
PID 5104 wrote to memory of 2552	5104	msedge.exe	88
PID 5104 wrote to memory of 1888	5104	msedge.exe	89
PID 5104 wrote to memory of 1888	5104	msedge.exe	89
PID 5104 wrote to memory of 1888	5104	msedge.exe	89
PID 5104 wrote to memory of 2552	5104	msedge.exe	88
PID 5104 wrote to memory of 2552	5104	msedge.exe	88
PID 5104 wrote to memory of 1264	5104	msedge.exe	90
PID 5104 wrote to memory of 2060	5104	msedge.exe	91
PID 5104 wrote to memory of 1264	5104	msedge.exe	90
PID 5104 wrote to memory of 1264	5104	msedge.exe	90
PID 5104 wrote to memory of 2060	5104	msedge.exe	91
PID 5104 wrote to memory of 2060	5104	msedge.exe	91
PID 5104 wrote to memory of 2080	5104	msedge.exe	95
PID 5104 wrote to memory of 2080	5104	msedge.exe	95
PID 5104 wrote to memory of 2992	5104	msedge.exe	96
PID 5104 wrote to memory of 2992	5104	msedge.exe	96
PID 5104 wrote to memory of 1848	5104	msedge.exe	98
PID 5104 wrote to memory of 2152	5104	msedge.exe	104
PID 5104 wrote to memory of 2824	5104	msedge.exe	105
PID 5104 wrote to memory of 3848	5104	msedge.exe	106
PID 5104 wrote to memory of 3124	5104	msedge.exe	107
PID 5104 wrote to memory of 3124	5104	msedge.exe	107
PID 5104 wrote to memory of 1204	5104	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fe37dc940b28e66f850b9f96a279952bba352363a42987582d3596b312f5c623.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb6934c188,0x7ffb6934c194,0x7ffb6934c1a0
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,14710212238920189210,15821206507380369253,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2701866257585299526,5200176925364558487,262144 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,12879771802141627944,9329482499309834158,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,6255980893204845383,18000963486616904795,2097152 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7825050328653158555,1042853952268964652,2097152 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,8940557071166744699,935352686101258888,2097152 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,9582259461307787058,296342390566687027,2097152 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11069445101009268547,1353475056315381370,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3076847708557526955,14250905271812792361,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5434030701587686556,61767377299950348,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5434030701587686556,61767377299950348,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,15144661688131007217,12474035360487295140,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,9159717071349334653,331741671281983093,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,9804635679604384194,3733657703559555167,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,4723486220441569824,3090224331994250041,524288 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,7539516786792588572,11431921212691736330,262144 --field-trial-handle=2396,i,9538226935118453875,3765531272427289751,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8b7a7016d5e84c893ce3d0cea07347f3d93c7d820949a8977b490a926a0f3a9f
MD5 d710b3d151357191c02e9d75bdaacb32
SHA1 d84913dec6d2b0715ebcecabf1aacd444506258b
SHA512 1e1b2dcd468b87e9ecea3d216d26ca78d3c2dab3aa3d8a11bcb2553c583c16bf01a05e1b146fcab17add1c82f7e5ba97e947f0dde5ebdd59415c3edbf0cb589e
TLSH
T179615EC41698609BFBA8B17186D6F18B35359CB29583FE9E00F6E76D4CC6B97C30428C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fb91b2d7ede36bd69def8b17174b1e04bca4c20223d0b5991bc770991bbc9419
MD5 3fa1d50e5ab5f39974e702ebe795a2c8
SHA1 2dcc1829a66130ffcd84ce40818485e4c43f5d93
SHA512 d6c2f4b5d3ac94caa4879eb76e720420b11eef5fafb863691298f2407d7d68a3fa74ce2c33da95dd7292fd1798b1a67e6634b62bb16f414fc9877acd1d58df6f
TLSH
T158415CF7C3D4876E890556F05B246E2ACD2D095A462C3C1689E4EF5F63E24B0D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 310ac68a3553e89fcabb82218ef2686f4d3a627601429bc84befac285c3a3933
MD5 25ad1c3221c266f60ddfedb296c7beec
SHA1 d3c80b512aaee1aa1cf7c7e21e2c2ab4506db2d8
SHA512 9eae383df63a6782ab68eee769906b47d88e7b85d0dccf38cf9ef7242aa1804878d418df63f7e4cda0b3cf1862046863282aa874f48fc47724a939bd11f27568
SSDEEP 192:sxZeRkW7/fYspzIdpdNHW6+WNGYgUq+2IgrJ:sxZe97/fYsps/HbG3d9
TLSH
T1CC12A6526E28A93B8CC7D21DBB25BF53E6F9503295941E58AAFC861C04E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7925058ac52cde14e4481926030e579b85d9c58d20c4c7649255b541a41d4b7d
MD5 f69586e1133024c671700ea6bb1b680c
SHA1 db984e2c781c6fcb6c8d6eb879390ee9564bae8a
SHA512 7b4438a822154f0934549c72813c4a7cbf4e88774eab0468f1d8ed6e45866aa8390b9f50544a097ffc457e74f799ce2e87ab00bdf2a03b1a6bbb2d3abb36db0a
SSDEEP 192:sxZeRkW7/fYsIzIdpHNHW6+WNGYg3q+2Ig5LJ:sxZe97/fYsIstHbGsdP
TLSH
T15722D8526E28697B8CC7E20DBB25BF53E6F9503295941E58AAFCC61C04E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d20e06e4d1320a83c77e7ec450645b658309057b9d5b4d3dbfd1d0ded5b943da
MD5 16fa38aa457b5094613091905aecb6e2
SHA1 ce630b3d7e5e710bdb893fc120a7df5c609daad1
SHA512 f497fda9f188ce4d2ca03be4a3fc8b7b6266c754300cf9caf984f36f24eadba70aa98ccda0507b6ac512f9f5f1697171fbc0d0269b1a707bfad7c7ec810d6ecd
SSDEEP 192:sxZeRkW7/fYsIzIdpdNHW6+WNGYgSq+2Ig5LJ:sxZe97/fYsIs/HbGBdP
TLSH
T18922C8516E28697B8CC7E20DBB257F53E6F9503255941E58AAFCC61C04E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 78ebfb7349383f7627d15af064d036529dfb19cfafd08ad134e0e5e52e19382a
MD5 2269cfb79e812abf16cf95bb5622069f
SHA1 9ff50bd756a0761639c5fd6a85af0cea9e7c1782
SHA512 63f50399deec6a8600ccbfa21ad28229004958918338c9efcd8f228d69ee98e1dade40b61e4928ec394e3cae8c684b75125773b7309585289fecf393f9ff446b
SSDEEP 192:sxZeRkW7/fYsDzIdpdNHW6+WNGYgUq+2Ig5RJ:sxZe97/fYsDs/HbG3d5
TLSH
T11222B7526E28A93B8CC7D21DBB25BF53E6F9503255941E58AAFC861C04E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 95ea6c03b373c67827b962f6f44645643b8c280fcb13e18847505f19672ac618
MD5 c211e6bfbdd35a92d1d90a033e282948
SHA1 fc17c0c002b452e1520618238cc6c72067c4d8d7
SHA512 af2db720916d78c5406cf3986610ecd04b73bd287c2216835e61213ce947e9ab0f62a60f25ea9fa76c8c7f8aeaba700f772417a337ca55bfd8ca6e1f2060ed96
SSDEEP 768:INichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzProPlU:INichfPWvPZplu1jan+LKgzcNU
TLSH
T157C2FA7B640CCB7E4FC01A9DDD1A6F977EA802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2741b4d42df3d146c2fe4f3cda5267e7fd822d6b37b8676d184f3c2cee7e3eee
MD5 58d81e26c44bc808d1b5cbc01afa0d21
SHA1 a7831d3a756c7052b78be84ad637255614552c5f
SHA512 40f4db15add29ec631f728e825c7930c852c0e395d1226f6d510d38cb6dddb9b199e9c884edd94662ad4bfc88377b7b40a189511e180fbcc86d1f662b8bc8d8a
SSDEEP 48:K0c5cIcVcpczc3cLckbc3cScPIScBckK9cB1crckxcJc0YcyczcJc5yLc0cDcCcp:KwvmKEsiyC8KXKw4gKNqCp
TLSH
T1A391145131BB121078BE659994A5975E12A131B3311CFB7BBBBC10728E2EE050DFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59adda.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59adda.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d7c3a08bfe671503af29fbe849d422e942100ddc6972f4ae1f98ac72c2a0fc40
MD5 0cc3e8701aad279f93337c4422d5955b
SHA1 c34fea7a28f857c3ed826ae55771c62624f7dd7e
SHA512 f322a599627b643bf692fb79079de142b3ea504a850d3b059810a899250b9fa87d79ca12ae465d2c516072131e76da5fafe5d9659b4b344be92fc4ced504f266
SSDEEP 192:uuzysNHUKQtxjKAphvuzQQmiU19g2xB4BGYX59ezWC+m4gx+eLkH15/5XU8:2sNHUKwMU5bo2xuBGYX5EfMgxmHU8
TLSH
T1CF322A3198B8AC7B4DD7A554F54B36139FA8512BDB857F90C2ED2A1C01DF29C230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 4cb1f95fee369954ac2b43cc38666ebd846e935d4ad25c7bfdd7943ffd936576
MD5 8a4a7fcb4971d587ac321dbfe6730d00
SHA1 2d7bd7e64bfbdd281d7b90b5094db31bcc7e791d
SHA512 2047292a1c478533fff22e34e745f38314d50454ebc85a7ab84a661e4205aa8001b18598d4f2d006f7a95683bcba983f6a2b73f72b392f0c46e79cfc9e1f8f7e
SSDEEP 384:YiFiZcIt6sN88TUNTUlIltNwMU5bo2xuBGYX5EfMgxEH7O6R2Feoch7U1op:jFQgZwgT+h+2WGYufMgeH7TR/oC
TLSH
T1CBA26C738CB49C7BADEB9A45F95A36038EF85067CAC5AE60E3DD6A1D00DB1D81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 00765a5f6a7dab86f358f95413521aeffe9b1de6cb4c44982efa19f04d98f4fc
MD5 6aa3f6c30d2588416ff20e5951f3555c
SHA1 57d3baeecab4e53d101d82962024182bdd2a50e7
SHA512 746594e0d84fdf560968787d5e02e42d803ea96f45c18b028d5d56e6f2d1eb4068b06fb6916b5a40f4a507da3f7b73155aadd7f1e3855c9fd422a79a0c95a38e
SSDEEP 192:uEzysNHUbQtxjKAphvuzQQmiU19g2xB4BGYX59ezWC+m4gx+eLkH15/5XU8:IsNHUbwMU5bo2xuBGYX5EfMgxmHU8
TLSH
T135421A3198B8AC7B4DD7A554F54B35139FA8512BDB897F90C2ED2A1C01DF29C230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f55c3cbf793fa6558321b1b43f8f543a364a556fd92e61002edccb66cccca7eb
MD5 bc154154d36f88aab77734ae77cea267
SHA1 1b80d129c8761723b960796fb53209e1e2faa011
SHA512 860cb6bddae72b514db05f1352892f67ff2bfa81c883a1236314649e9df50793cda21b5c20949d09496560fd00ab4c9b0aa73e1f706dee6c16f842c49d2aac30
SSDEEP 192:uuzysNHUKQtxjKAphvuzEQmiU19g2xB4BGYX59ezWC+m4gx+eLkH15/5XU8:2sNHUKwMU5Ho2xuBGYX5EfMgxmHU8
TLSH
T1B6321A3198B8AC7B4DD7A555F44B36139FA8512BDB847F90C2ED2A1C01DF29C230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35cbe214391e75c74c2608d946208708f6a88dce7ba0b026c45fc7bee29f68ee
MD5 86faaffc43b2698ab2cd3dba8200a33d
SHA1 00d2a592bd66a4252b3bb26a71e041d34c4f5d00
SHA512 04a94693315940428f37e8953787b1b831622881004be61960c61634cf8e3e29b7626eafbbb5b08c27e97f744d80982c6841e6914e5a7108c4b352065082941c
SSDEEP 192:LJONI6DphmqQmiUySpq8wGYX59ezWC+m4Mkk7IZU6:lONI619zRwGYX5EfMq4U6
TLSH
T15602FA35EC787CBB8DE3AE49B58B2A175FD8212BAB952F44C6D81A1D01C765C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 91f4dfc363276d49de4032bce051403933fa29ad14d4d66e41c64255a70c05a3
MD5 39f62b00309ec4dee89aae9a4eb8970d
SHA1 5389bc1c2728c3a063c83acb1bdd9e0a0b03532b
SHA512 d8fe9f1785e6c85e40332ff1288e8209b3830188d47d191bfc6e376eb1bbfaf808a9b51a4e3ad546ff2f54fd8bf377eb3809b1601f70bec5b26a6fd7b90b3b3f
SSDEEP 192:LJON16DphZqQmiUyApcwGYX59ezWC+m4gx+e7kII5/5XU6:lON161incwGYX5EfMgxeHU6
TLSH
T106121A35A8B8BC7B4DD3A455F48B35035FA8522BEB857F50D6ED2A1C01DF25C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7ed82b969c13baa937f0b9f61e8250cf095987e5151abec48c0a7a85babec5ed
MD5 c20a4c6f9bc593631cbca627de04b848
SHA1 d59047fd9924215d955465285bddae24b725c57e
SHA512 82c09f99a8a92b6f1ef6d3594e885e87862b39259c8f6670670ddcec0c5be502aa114fb88fad839bcc06bb6e2a71b7daa0e20dfa4855188746fda505c9ef9a08
SSDEEP 384:CZcIUsNHUtNwMU5bo2xuBGYX5EfMgxmH7O6R2Feoch7U1op:wUN+h+2WGYufMgsH7TR/oC
TLSH
T1F0828C729CB86C7B58EBE145F44B3A134FF890679BC96F5092ED6B2D00DB6981307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd5c983e-2af5-4501-ab7d-d10a8d0fe73b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd5c983e-2af5-4501-ab7d-d10a8d0fe73b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 696c1d7a146473aa6f313b70687dffb79a24f672bb27f1e527667471f9e5dfd8
MD5 bebe1fb07d1d5d146ad1fa0be3f8c1c1
SHA1 6377bc10370a09ecb4b3f67be874cc0d3d8552b2
SHA512 6adea27b2f763fd853a9648345d20f037dff77e1d78b3702b7aea6de1745e3e4390f96133824c68f025d164f4b3ab67b977eb9ad67f25b6736d74fe33230f7d4
TLSH
T12041E798BAE91158B3B77F4A9BF6B86D847B7C772E0A949D00110E4E0A62B40CD71737
MD5 SHA1 SHA512 TLSH

Submit Download