f8b0d85257c2242eba86545cc2aa93afbe66efe6638fcb5eb266b1bba4fbab5b

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 06:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f8b0d85257c2242eba86545cc2aa93afbe66efe6638fcb5eb266b1bba4fbab5b.html
Size 116KB
Sample260913-he8mmsvxhs
SHA256 f8b0d85257c2242eba86545cc2aa93afbe66efe6638fcb5eb266b1bba4fbab5b
MD5 0d917a47c4ee542f07b80efc5654fc0f
SHA1 2504b1b10d65a15572ebe90aaeb8644bb0504aca
SHA512 bc254ea42206b2474b86ee0604a21210335e5eeb434ccfc63108dd8071ac9c5f84c6478b13ab64f3f10a33c176813dc3bb13580ad51d2b1e6091adcd6f796e25
SSDEEP 1536:tXgEQUTYnl6KkSSvSLh9kLmCvutQOBcIvoh79gaj+RD4ssghfI/PRB04Q07e5p:tXpHBJNLmftQeoh79aigV4Q074
TLSH
T11FC3D59342201CFADF6605B2529B2A5A3D1D413BF84700BDE3FCCF963B96D6E064662D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
556	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337913750490571"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{303A1994-F1C8-484A-A701-5A51DB0E4C3D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
924	msedge.exe
924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 1564	2228	msedge.exe	84
PID 2228 wrote to memory of 556	2228	msedge.exe	86
PID 2228 wrote to memory of 3532	2228	msedge.exe	87
PID 2228 wrote to memory of 3532	2228	msedge.exe	87
PID 2228 wrote to memory of 3532	2228	msedge.exe	87
PID 2228 wrote to memory of 904	2228	msedge.exe	88
PID 2228 wrote to memory of 904	2228	msedge.exe	88
PID 2228 wrote to memory of 5084	2228	msedge.exe	89
PID 2228 wrote to memory of 5084	2228	msedge.exe	89
PID 2228 wrote to memory of 5084	2228	msedge.exe	89
PID 2228 wrote to memory of 2996	2228	msedge.exe	90
PID 2228 wrote to memory of 2996	2228	msedge.exe	90
PID 2228 wrote to memory of 2996	2228	msedge.exe	90
PID 2228 wrote to memory of 5032	2228	msedge.exe	91
PID 2228 wrote to memory of 1260	2228	msedge.exe	92
PID 2228 wrote to memory of 5032	2228	msedge.exe	91
PID 2228 wrote to memory of 5032	2228	msedge.exe	91
PID 2228 wrote to memory of 1260	2228	msedge.exe	92
PID 2228 wrote to memory of 1260	2228	msedge.exe	92
PID 2228 wrote to memory of 4108	2228	msedge.exe	96
PID 2228 wrote to memory of 4108	2228	msedge.exe	96
PID 2228 wrote to memory of 2232	2228	msedge.exe	97
PID 2228 wrote to memory of 2232	2228	msedge.exe	97
PID 2228 wrote to memory of 4568	2228	msedge.exe	99
PID 2228 wrote to memory of 2844	2228	msedge.exe	104
PID 2228 wrote to memory of 896	2228	msedge.exe	105
PID 2228 wrote to memory of 2676	2228	msedge.exe	106
PID 2228 wrote to memory of 1988	2228	msedge.exe	107
PID 2228 wrote to memory of 1988	2228	msedge.exe	107
PID 2228 wrote to memory of 924	2228	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f8b0d85257c2242eba86545cc2aa93afbe66efe6638fcb5eb266b1bba4fbab5b.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb8ecdc188,0x7ffb8ecdc194,0x7ffb8ecdc1a0
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,5701046640647149077,14838525271536702463,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:3
  2⤵
  - System Time Discovery
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,15845404427397479286,14123907939102473121,262144 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:2
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,9380898197038818367,8316485696382349721,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5893150510041284268,18197123769681755353,2097152 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1432957248068034695,14791241396947378599,2097152 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,10938371154462817932,9686800241570766744,2097152 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,18010030469139349272,11740863821184447065,2097152 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,8541938856749732180,3121799190449300686,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,7263112590054907517,13760889406670481120,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,1511971568211968669,14893673655653396484,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,1511971568211968669,14893673655653396484,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,17793945334866693852,3280456629746992281,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,1658466416609546093,17637870132530657029,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,7402112998788589680,9902644774633703809,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,6497687241741707826,12709122275459515390,524288 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5888,i,14050304158995505140,2034712705483144225,262144 --field-trial-handle=2872,i,13151217153444358978,7711639071665239787,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bbc1a7117a85df724476c1afe8da89d59224985f580e4ce1377454b5aa499628
MD5 c282e280bf0d52bc75d981fea0dcaf60
SHA1 727d808515d6e99e234bf5a3c4fbd66e9fb9a774
SHA512 776dea5dc9ea002cdbfc9c43cdd1555768cf1f2652b455911f29c71ca6f1fd3ebea1fc5a0a0d39fe43b5c498fa7bd85be83112f9a69b3b91557913765d097cb7
TLSH
T11351FB91CEED8468FB9C46BFA9D37E873EF04A40295F5FD220E4E3B85B063418100855
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 11eeebfd2f0ff1667fbf3d124c001a4d0b574138aebb2de5c457aba8164e2a02
MD5 6e01241feb2953ebac8826f8cc65e96e
SHA1 adf29325995f316d728454710bc32ff77939a6cf
SHA512 e817909727ed23d1947e53bf033751343877cbf7d1843f688cbf30c0283ea41c9935ee5568d6ed246af4a67834b56e14e3003a9b4648320023f490f7b5b22d63
TLSH
T199418BF7C2D4877E891156F09B246E2ACE2D1A06423C3C56C9E4EF2F63E29B5D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b7ec264a6653f9e65c915478fb2f63d507aa27bcf1d14169aa62b496b0c093e4
MD5 aa8f35bda1d544443b84b06b72478b91
SHA1 5fbd15d505ba2937890c0759e5c5da430adb6f19
SHA512 284f0f9e686bae8ac42d6f8455f32f55391ef025b25623e813e05bda08bbf7cc043af63a5af1896548d42f7f5c34430541d0923cc9212504d5ec80d3a879dd76
SSDEEP 192:sxZlRqWRr/fVsmeZIMIdpd/HW6+WNGYapYHF6IgrJ:sxZlXR/fVs/AhHbG/9
TLSH
T1FD12A6526E28A57B8CC7E20DBA65BF13D6F9507291D41E58EAFC861C04E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 35553cf76611d93e602be1cf9cc951a41801162a81a39a47bc914345a3f78a55
MD5 b8363c30fc10657a82c18a9e8927bab7
SHA1 f370d064656dc8a29aba8f2682b27267852d3aef
SHA512 8ccf278b6b2540f1dbab0b8f7cc7445a56f4737043b06e836a24354c9cf84d30def19c66bf0147098f4b0377268744d923dc3cd73493ab34974e0ff288236e67
SSDEEP 192:sxZlRqWRr/fVsW1eZIMIdpH/HW6+WNGYapAHF6Ig5XJ:sxZlXR/fVsWMAfHbGjP
TLSH
T1CA22B8526E28697B8CCBE20DBA55BF13E6F9507251901E58AAFCD61C05E7ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 320ee88b0548bf2f745a7d4a9f1121d6765512453f6ee9ed104e9cb1b79eefee
MD5 0f76179c08f957296df33fcbe669b385
SHA1 de7b8bd794262cfe5ef26f5798ebaef42b6fca4e
SHA512 e0ae1c5411c9882060c2910b035d8a0df0c131dd7d93159e7a2a1502dd9933ed02b315dade1bc1f33a1517a5de91747be0b8e0fa2312ecb2b8706f6223bef03c
SSDEEP 192:sxZlRqWRr/fVsW1eZIMIdpd/HW6+WNGYapYHF6Ig5XJ:sxZlXR/fVsWMAhHbG7P
TLSH
T16D22B7526E28A97B8CCBE20DBA55BF13E6F9507251941E58AAFCC61C05E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 06a8edb57a2ab2dbc0ced6fec0919ed174a840f150ee5ad8735bd12c79a2f458
MD5 0aa1472c57498511880792de98f7ebf4
SHA1 28cf9f5cf443fa7bb1169c60451c158747fb0a14
SHA512 21d9312ff1efd421dc4055d2ce2ab1dac2c27557eb15636c007b2b2a7c9ce1c767217f575b9b63315515e98e89d0301493f292c5683608a6855c85316c233d97
SSDEEP 192:sxZlRqWRr/fVsWSeZIMIdpd/HW6+WNGYapYHF6Ig59J:sxZlXR/fVsW7AhHbG/5
TLSH
T1D722B6526E38A97B8CCBD20DBA65BF13D6F9507291D41E58EAFC961C04E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7cf6e59b8e1bb63109863f624a3fffd89295bc505bfb032f0b9f29625bbdabbd
MD5 f1b819d308c2e5c97ddbf060815a6338
SHA1 c08b9d7245487fb428bf295f7ef2d98d760efcbb
SHA512 f6e5ceb23f4852f010e789ff28d4499347ddadd589ea56fee0cb7b0fb5ae56d00092c465df3925c51012ec11107dce2409d9e50d75feb9b3ce5244ac22832f34
SSDEEP 768:cAWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy73ro4IfekmR5:cAWPcLKWvKeEeu1jaClLiF7k4IWkmR5
TLSH
T1ECC2FA2F640CCB7E5FC01A9DDC5A6FA77E9802C79A644D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0198dcbd9e865542adf11447dce7ef68389d9458164f80746536ea17c57952fb
MD5 ad0e9642343c03fe7ebb7ffa6ad8f72a
SHA1 6fbde1e0190e11d713d3eb07ca4da9d71a60d2d5
SHA512 fa248f5c6c314c3b0ea380cc548d369a1eab5b019ca74f30605fe9a4f31a47d90713c64a10d0d1b29d5af37e18dd37cfb9eec0aa7700942146f77e3bc7b9c26e
SSDEEP 96:KyFkBFnvvu1/21HluKfbHjuLtluzVvYtMpNv3H213+9HN2KfTHb2LltWrCCdGig2:5FkBFnvvq/2VlFbHjmtluzVvYtMpNv3T
TLSH
T1EF91F410327B121179BE3A88A0758B6F464131B33115EF2F7BEE10A64D6EE594DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 1897317d9c64ea3883bb794743e6c96867875c55f850b39bb01d72388ccde1ec
MD5 837cd80ded46857dc431c508e010d190
SHA1 5a3cbaffc90d899b16e4dc07fb9d9cdecfb519f6
SHA512 fe0c8134b4efd3db14a3bf3ebfc51b07c57c530f57c628f36371e76b14ac2dbac0f576b5860dbf63f72a8f4009d4c1136632b060f4edd7d0322aa2732545c566
SSDEEP 384:GsN+M11ReizIGmS/IICniTO7O6R2Feoch7UY:Giik1gXiTO7TR3t
TLSH
T104625C32AC78AC3B5EA3A555E44B3B139EB551B79AC82FA0D5DC5F0D00CF398130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 04dff83455911cd71aa952b4ca783976cbfeb1fcff2ab268a087e3f9d0b90ae9
MD5 843c0216eba2f2b483792178a4cccc61
SHA1 ef5a59ada44b6c0822815a2b1d5db798e198d76a
SHA512 174b8319be44dcb19147017fa822bd6d5ef4b07145b0022b9d60271466a0adf629f0d7b138a8c6bbcca76043a6558b857076851f0477184f16ec8708525b9bdc
SSDEEP 384:7FiZcILisNO8TUNTUlIlQ11ReizIGmS/IICICiTO7O6R2Feoch7U5oq:7FQmrwgGik1g4CiTO7TR3kF
TLSH
T16BA26E735CB8D87A9EB79A45F54636138EF541B7C9C5AFA0E6DC9E0D00DB298030BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 dc4e5422f60e35af522cb21136c289eb3c0cc2d44a6e6d3f1156962920fadde4
MD5 7937bff5d5259f0d42b888eb01ebd7f4
SHA1 d39cca066abf70d63d18eb9f74e1f9e00c5c9a0e
SHA512 e02f0a063cabc54037c31f11de7d54ab2ad0a6afc56a61d425f82fe47629b3798a6ff7958f7de780f1d87d4123884deb15cdcb3b2d87c91cf7025a2cf7a36cbb
SSDEEP 384:lsN+R11ReizIGmS/IICniTO7O6R2Feoch7UY:llik1gXiTO7TR3t
TLSH
T1EC624C72AC78AC375EA3A555E44B3B239EB551B79AC82FA0D5DC5B0E00CF398130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 d3bc2e7eff6e4cf2f46916070cc26f989ff3c1c94b5b6db67ace4d1d1282dfc4
MD5 56eb64ad561af79e1e044f8af676db28
SHA1 2e5613e24110fe678d46880f91baba2cad2336a1
SHA512 22df023b6fbe2db67cb030daf4db6b0a4ca7e5a3851e5a857ecbd9d0008c975c0748a8f760813c9352891d83646c2e1f2fe1d7997050df380ee3e451138a24ca
SSDEEP 384:GsN+M11KeizIGmS/IICniTO7O6R2Feoch7UY:Gi/k1gXiTO7TR3t
TLSH
T13C625C32AC78AC3B5EA3A555E44B3B139EB551B79AC82FA4D5DC5F0D00CF398130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d4cb38c2d5e376f617d253531366b6d509cb94bbcb1ccadcb4253d1c87a3eecd
MD5 47af12bb5ab6aaa92ea3bef19c40e560
SHA1 1c1dfe812b40b953ca434cc5bbd0698ce818406d
SHA512 41639892a651eb925bce54194f26451ae11377c821b3f4d3c9fc9621733db02ba3a208f653440f15bbc89d060b4541bbcb5502a66bf1eeb0d4bbd4c9591005fc
SSDEEP 384:5ZcIIsN+Q11ReizIGmS/IICniTO7O6R2Feoch7U5oq:RIqik1gXiTO7TR3kF
TLSH
T1F7828D729C78AC7B5EB7E145E4463B139EB981B79AC86F90D4DC9B0E00DB798130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 61b7e3aaf7b61e77df59e3a8e3267aae3c8a72b3ab34b54914ed3881aa2bb43f
MD5 c6a22d049090e7e01b9ac185dbbe5c9c
SHA1 6f4024f276a005e9310e49369557a4f76c22ac8b
SHA512 e60d8e399917cbcf3f9b36877c7b2661d258547b30714f3f757e4e2c8fa4a520883d47f467ad4462e49f7fae7d2398f7cf14814001fb0c3f11e981b498c1f7b0
SSDEEP 96:3qONk2Qsjpfe/tyng7X5ih/cIPURHl8h4otop5QYDMNNBnP9ZvEI0IG2jbZ0rLYg:aONC6IE7QmiUyBoTPuIGmSrLRC7s26U6
TLSH
T16C02F935EC7C7CBB9EF3AD48F4873B236EA5117BA5942F84D9E85A0D00D724C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1eb89fd0e973e09eedfa101ac172d16c4ed788be7f4225efe4755716ed317224
MD5 8cf7308242e68c89295724435d76b855
SHA1 a1eb111a2c3035349c06a9721072c281dfadd021
SHA512 45c18f9d39507ea7fdca7b50b9da3be954b17a05997af9eb03f8f1f57c26780bee92b615ec550a55b38cc1b48fc851ad198af6608267cadc3c0c633a529a760b
SSDEEP 192:aON/6IEQQmiUyyoT+uIGmSrLIICI27H9/JOU6:aON/6DQE+uIGmS/IICxHTOU6
TLSH
T1A0121B31AC78BC7B5EA3A954F4873A239DA54277EAC87F90D5DC1A0D01EF25C130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cd576424df0eb596f7172c739baa1155bab099ad9846d80d49c7620d21054275
MD5 74662c52174d047c4a47db271413e83a
SHA1 cea71bc735bfc243181e2c2c5c065466ff595feb
SHA512 039b4c83541f3d3d0a42a5b1ae63753d429e73e1676307e6d140e61ad485e4ad371c04ac7e6e1afe8094039a915c45048c9b7bd4a6910ee5f1697f0ef3bb50d8
TLSH
T118412B58A6EE1108B3B77F56AFF7A86D447BBC772E0A905E10010D4F0A62B40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download