f85bf0ccb009c3f26d64754e3caf700c3eeb700a6d5fb4cdd7a308823dc2cb2b

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f85bf0ccb009c3f26d64754e3caf700c3eeb700a6d5fb4cdd7a308823dc2cb2b.html
Size 9KB
Sample260912-185f7aba49
SHA256 f85bf0ccb009c3f26d64754e3caf700c3eeb700a6d5fb4cdd7a308823dc2cb2b
MD5 a86eb41f57b2b6b6cfd30cf72bc0bd09
SHA1 5377bc8922530bf405bd97e2e3425e65082eada7
SHA512 7d8745b3be10a633c51456b5ad7c56da03b0747797105bd2fd3abfc074b22e63f3f3343601950c99b5bb072c5185784fbf304f2ff7da4c28b887478cd62c9e26
SSDEEP 192:Q3jKTlNiTUAtBzGP4ulu+/OTiHdAqMsdjd+dO6yuIRlb4sR2R3NY14HI0:SaNYgAsj0AdRlbYR3e1t0
TLSH
T14322D893A0306D5A4FF0222A707A9B0B17603D078EDBDD5CE5AB5A7C2F08E876159D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4528	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337252173015905"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{A0766B34-FCC6-4604-8426-BC5D5927B980}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4212	msedge.exe
4212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4552	4732	msedge.exe	88
PID 4732 wrote to memory of 4640	4732	msedge.exe	89
PID 4732 wrote to memory of 4528	4732	msedge.exe	90
PID 4732 wrote to memory of 4640	4732	msedge.exe	89
PID 4732 wrote to memory of 4640	4732	msedge.exe	89
PID 4732 wrote to memory of 2472	4732	msedge.exe	91
PID 4732 wrote to memory of 2472	4732	msedge.exe	91
PID 4732 wrote to memory of 3484	4732	msedge.exe	93
PID 4732 wrote to memory of 3484	4732	msedge.exe	93
PID 4732 wrote to memory of 1992	4732	msedge.exe	94
PID 4732 wrote to memory of 3484	4732	msedge.exe	93
PID 4732 wrote to memory of 1992	4732	msedge.exe	94
PID 4732 wrote to memory of 1992	4732	msedge.exe	94
PID 4732 wrote to memory of 5588	4732	msedge.exe	95
PID 4732 wrote to memory of 2952	4732	msedge.exe	96
PID 4732 wrote to memory of 5588	4732	msedge.exe	95
PID 4732 wrote to memory of 5588	4732	msedge.exe	95
PID 4732 wrote to memory of 2952	4732	msedge.exe	96
PID 4732 wrote to memory of 2952	4732	msedge.exe	96
PID 4732 wrote to memory of 3488	4732	msedge.exe	98
PID 4732 wrote to memory of 2256	4732	msedge.exe	99
PID 4732 wrote to memory of 3488	4732	msedge.exe	98
PID 4732 wrote to memory of 2256	4732	msedge.exe	99
PID 4732 wrote to memory of 5660	4732	msedge.exe	101
PID 4732 wrote to memory of 5924	4732	msedge.exe	105
PID 4732 wrote to memory of 4388	4732	msedge.exe	106
PID 4732 wrote to memory of 4888	4732	msedge.exe	107
PID 4732 wrote to memory of 5896	4732	msedge.exe	108
PID 4732 wrote to memory of 5896	4732	msedge.exe	108
PID 4732 wrote to memory of 4212	4732	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f85bf0ccb009c3f26d64754e3caf700c3eeb700a6d5fb4cdd7a308823dc2cb2b.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7fff8cc8c188,0x7fff8cc8c194,0x7fff8cc8c1a0
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,13401094005752696017,7855222228962671912,262144 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,5321985443448461799,793629397442110007,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,12672942188395221457,17364480168984898270,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:13
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,612201201398285767,15970870595282313398,2097152 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,8486536398058244782,6775580566527597306,2097152 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,11348160925753831934,16850890537212052138,2097152 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,9297459143742927567,11469157366241447742,2097152 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:9
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,6917509226666307034,1015223505091181808,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,10856374639730740900,7121402864908408661,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,89244189516822835,18017175261366566158,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,89244189516822835,18017175261366566158,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,16906329481778118152,9889540363798404097,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,8284448469507365287,17027064776298196372,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:14
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,5899288589311888534,4380250712922134181,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,3751528770444152349,8820173849029184856,524288 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3796,i,11120070023758919744,8121858183680102082,262144 --field-trial-handle=2380,i,1176685992612450371,12383021212463340972,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 59688153c827aa2c28458b96762a9cab88b8f9a5ba1e5ecab4de0629b4578e93
MD5 f051b6d101ea8299809778bb9ec935b3
SHA1 40aa8948c04550292a2f9315e9b054f5729ab870
SHA512 87829c5ed4379aa016602895904ea4f39379c2aa5f9662c8c11c2473694fb9f010d94bc4cddbb30214ddf1d63a0d425958ed5a29e5958ccaf113232d8d70fc64
TLSH
T1F75153D0C7704126E759C1B4A4F427C736F4C9BC6F8B1E9215A8C5759F4235783280EE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5acf48.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5acf48.TMP
Size 2KB
SHA256 667229c69ff0fa8fbd47787a8697cbbb1792c3beeab02850d5e90ae36c8691d0
MD5 54f819ed47e2bf29eca36dd9f9104a84
SHA1 e9f96933a5596be1d604f9298e6315fd4f82aab6
SHA512 0570a09a15ce411efe7ee95764c08b964719470e48eb184541daf921983e2d5b19a3ec91492175115b484b117016ceac2f5116f1b04ea1c115f762ac83135c1e
TLSH
T1285151D0C7704166EB59C1B4A5F423C736F4C9BCAF8B1E9215A8C5B99F4276783280EE
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cf5e1ce-5955-45a0-851a-e1b4960f7374.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0cf5e1ce-5955-45a0-851a-e1b4960f7374.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7a0e9e36e63fa9bfd177b83089188b340bdd46aa3d547ea3aeb15eda6ef29688
MD5 bbbc56822e7e2ce5bf7b4a8529ae88e6
SHA1 8fb71992f2d655a7c87a12b6ef146e1ebcf8df18
SHA512 39f2688376749fdee43fbb0aa1fdf4af5e3cd4dbd1fd446b240379475b62e435284d35dd39456566a58ea44bbdf0d4a9cbf672d8804242c3f23c53fc558278b3
TLSH
T1FA41B2F3C3E8867DC90156F4AB186E1BCE2D0915432C7D56C9E4AE2B93E28B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8c8c34b2c0f5a4d87975d05cf7e86c1422492fd270d3c1ac6ff9f6d473fb40df
MD5 be21a9ce286cb48e131545821149d96e
SHA1 ba64606e9d96a2d5b5bf5c58e05144f352c2a127
SHA512 112bda1feb6386bb6bb2135397f6c26bce5271120d3fadfed0061145033d927f8b681a44465f573e1cbcf0a853ad0bc32ed40ba45f7aedf3f4ded7cba90de5c2
SSDEEP 192:sxR1RObK/fv+sUQHRqazoA8p4w/g6+WNIYE22QGw2KIgDvdJ:sxR1uK/fGsUQe5/5Iq2Kzn
TLSH
T11B32B815AE28A93B8CCBE21DBB557F53D6F95032A0D01F48B6FC8A1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 803c36497d797a13159bc7e480b574e432f880d3202aed39d875f566538e0f79
MD5 85878fbb7640231abc55ac5fad1647dd
SHA1 0dba315a1bd03f78f4714a9093415624a8c2e45e
SHA512 f2ad2b9c697e10f12c780526e6e7a0f1b2caca3a52fc3f52c83d105fe9e80a4244706ec740c346c306f32461cb0c69a9362666489324d2ed586274e7f7f2fe45
SSDEEP 192:sxR1RObK/fv+sOQHRqazoA8p4w/g6+WNIYEI2QGw2KIgDvLJ:sxR1uK/fGsOQe5/5IA2Kzd
TLSH
T14F32A815AE28A93B8CCBD21DBB557F53D6F95032A0D01F58B6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8b3384630b74f7a09461361e97a389598abd9e02ec3f195df296189055ffeabc
MD5 a8f01ecae364fd75f6285071c2af9d69
SHA1 993463cebf1677a39867ec0b4b72b376c72bfe1d
SHA512 88bc79c1e8bc2c1fec5fa7b31a611e6ed4439b16fce0e0eb4f2ee3ced0c475902f219d94063a15826bba6790d28247b6955332897ee4e2650e18ade8c074383b
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXLroJe/:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VO
TLSH
T18DB2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e05812adc9afe833016bbc167beb968a97c9689a127815e856eb78a761b8ea31
MD5 fc65a8bcb234b4d6af6af705454eadc8
SHA1 16160edb0433604d76a5e0d67013059c5862641e
SHA512 622a1db11096f7fbf3ae939aeee9fb292a749c92f1e834ba5143d9bdf11aed0054297282c246c2626e9dbcd06da795f12080b9fbbf5d41f7fcc524bd4bdd3582
SSDEEP 48:K0KGKhK8KgK+KkKkKdbKoKfKQISK4KdK9Kc1KeKdxK2KNYK3KIKkKtyLUjiu8+Sm:KcGYKTCduDCKMUDOQKjqmOd+KO0y
TLSH
T18EC1C850707B02003DBE79498AB4971E61413173311AE62BBFBD446A9E6FE085DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bb2f7bf1-b162-4388-b614-d83f2b28f6dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bb2f7bf1-b162-4388-b614-d83f2b28f6dc.tmp
Size 11KB
SHA256 a2a6d7c505a41ba9e37053245c62e3ad6fb72a1fc582504bd6623479c9f97a4d
MD5 6d9644172e089c8db76b0aa007aa5f61
SHA1 6cb29889dcf14fcf40ac8cf637f5714f8b5b1481
SHA512 7796bbba5075c0e5efd658c7624dd517e8a75045d0455e2ee178ebfed69ffe7a9744f81ffc1f9cf0bd16bba1fd0a685cf7c7900fbe89f78279efdcccf948e79f
SSDEEP 192:sxRSRObK/fv+sDQHRqazoA8p4w/g6+WNIYEI2QGw2KIgIJ:sxRSuK/fGsDQe5/5IA2Ks
TLSH
T155329715AE28A93B8CCBD21DBA657F53D6F95032A1D01F58F6FC8A1C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2bdc392-37d7-47cb-a30d-e5bd89430945.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e2bdc392-37d7-47cb-a30d-e5bd89430945.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 09c2fd3fbbe260620ec5bcaf8b9205799552c5f7c78760ea63ed342252a7d466
MD5 7204cfa8dd7884aff3f00c4758716580
SHA1 6037602baf981cee27b7cd5f57ebcbe295d14f30
SHA512 f2e8b403f574a387df85ed73ab77331bbebbfd44d87cf3a548eaec84f12f40ccf8bf413a4f84d1654be9c04126ea419dfc0f90cd9da325c437374e851f66ada2
SSDEEP 768:ae/UxvxjgC+Z3hThpc7fZrKfVp5XSwQs88uBkiT2nMgoiQ:aTZj3+Z3hktrUILNBOMgoiQ
TLSH
T1D303CF39FC945863ACB2D3917B4B2757AEF0514394C40E684AED6A0E02CB75E634B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 40a6485721c2f0818b013a7a3e2e1cebf69e7602287ff9005e5e9609b2610489
MD5 9a6b9b5f18238ba475938b45be9cbac4
SHA1 f79294ebd855606bde1fc491e8bd0b1699105456
SHA512 057f2bad8de3c8453e7a30f168aa8d126009da453c4c1f8a7b09e98bca6b53ba630505141e57ec82a1e509a709d83772c62e1f3f0cd9d278c9911a8e5143d63c
SSDEEP 768:a2M3TTVpc7fZrKfVp5XSwQs88uBkiT2nMgoW/:a2M3vAtrUILNBOMgoW/
TLSH
T115F2BF75ECD098B3ACB6D3827B8737176EF09147D4C80B5489DD6A1E018BB6E274782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f946fff1f286d1aa4b161adf36e7c1d1f8589c72bd3bbcb0359688422095cb89
MD5 28639e1720ec49b8372285eaed3246f5
SHA1 db591a6e4e27c4fc1b1760d911dfe3222d4bb72b
SHA512 16f7823240c288a4fdc0913ed02c695d20742ba4d9fb1aa7a022319050d3e7bd9a470e3122b9051226a047c2ae3c83cf4be4d4f049cdbd714d8fa8666bc8b0e3
SSDEEP 768:R/UxvxjgC+W3NEWzc7fZrKfdp5XSwQs88uBkiTCH/P84g:kZj3+W3+ZtrOILNBuHg
TLSH
T1F003D039E8946873ACB39385375A275BAFF05093C4C41BA849EE7A0E028B75D6307C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 1349d9360b2c1a2bc2c802880c9a7f39092a74ec4a7e7e171f3e48b5ccadcfcf
MD5 a4fdfd739b87468b40899ebdb47f437e
SHA1 8f4a459a5c1813b0472b5cd0464b66f893d57c0a
SHA512 a2b6e48850243ca81207b541a48c88b76c99a2dec4a61bc3539f84bd84b1254858a57bf688de6871a8e1b952a9e2e5513c1c80dc2644f49978140eecf1c646e9
SSDEEP 768:SAFQB3ewg3TVpc7fZrKf4Op5XSwQs88uBkiT2nMgoW/:SzB3gAtrFAILNBOMgoW/
TLSH
T193F2AE72ECC0C8B7ACB68781BB4A37179EF05197C8C81A94C6DDA91D018B79E134BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

737c4b2b-efb4-4820-8516-e2f48d889052.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\737c4b2b-efb4-4820-8516-e2f48d889052.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download