f221841b69161afebfd2569a450f30f597f289116d6851d02216f9f17073592b

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 22:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f221841b69161afebfd2569a450f30f597f289116d6851d02216f9f17073592b.html
Size 131KB
Sample260912-1w4dcsgl5x
SHA256 f221841b69161afebfd2569a450f30f597f289116d6851d02216f9f17073592b
MD5 f047202fcbeb832af4895f751fd4c304
SHA1 f71c02b4143be3ce3b5e5cea06900d985631c25e
SHA512 510c60e3045df9a02d434c582d8f74b04ba25cd7892ca78e8c96c6b28a44bd5b50082a474ad475960fc82ce37a04effea9176e6681c8db10acbb94b29e92e2c8
SSDEEP 1536:kaVK5yKXiUXu/aXaUWd2DJ0MhLzUu+06Mp5ZMUcjiFQ6BXBh+q3ZRvIOuP1lJckQ:I3GLQ3P1VF9
TLSH
T15ED3C7166004F30659B2CE24633EBD3A819ED327DBB894ADF34DD5A51B8803F1BB6964
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1952	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{915BF668-C1F3-4F0C-856A-03322B484404}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 828	2868	msedge.exe	87
PID 2868 wrote to memory of 1952	2868	msedge.exe	89
PID 2868 wrote to memory of 2420	2868	msedge.exe	90
PID 2868 wrote to memory of 2420	2868	msedge.exe	90
PID 2868 wrote to memory of 2420	2868	msedge.exe	90
PID 2868 wrote to memory of 4596	2868	msedge.exe	91
PID 2868 wrote to memory of 4596	2868	msedge.exe	91
PID 2868 wrote to memory of 4388	2868	msedge.exe	92
PID 2868 wrote to memory of 4388	2868	msedge.exe	92
PID 2868 wrote to memory of 4388	2868	msedge.exe	92
PID 2868 wrote to memory of 3156	2868	msedge.exe	93
PID 2868 wrote to memory of 3156	2868	msedge.exe	93
PID 2868 wrote to memory of 3156	2868	msedge.exe	93
PID 2868 wrote to memory of 356	2868	msedge.exe	94
PID 2868 wrote to memory of 356	2868	msedge.exe	94
PID 2868 wrote to memory of 356	2868	msedge.exe	94
PID 2868 wrote to memory of 6024	2868	msedge.exe	95
PID 2868 wrote to memory of 6024	2868	msedge.exe	95
PID 2868 wrote to memory of 6024	2868	msedge.exe	95
PID 2868 wrote to memory of 4748	2868	msedge.exe	97
PID 2868 wrote to memory of 4748	2868	msedge.exe	97
PID 2868 wrote to memory of 4412	2868	msedge.exe	98
PID 2868 wrote to memory of 4412	2868	msedge.exe	98
PID 2868 wrote to memory of 5188	2868	msedge.exe	100
PID 2868 wrote to memory of 5808	2868	msedge.exe	104
PID 2868 wrote to memory of 4444	2868	msedge.exe	105
PID 2868 wrote to memory of 2360	2868	msedge.exe	106
PID 2868 wrote to memory of 4404	2868	msedge.exe	107
PID 2868 wrote to memory of 4404	2868	msedge.exe	107
PID 2868 wrote to memory of 3504	2868	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f221841b69161afebfd2569a450f30f597f289116d6851d02216f9f17073592b.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb9a12c188,0x7ffb9a12c194,0x7ffb9a12c1a0
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,18158775391334320120,10382417638997578602,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1960,i,7312775778582864783,5844582732043012895,262144 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,12122759991297550973,844281505442305524,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:13
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,9390500894576115482,14322499111011077946,2097152 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,2345076021524109707,13639373489456384393,2097152 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,7038691533347646275,16557127273762499701,2097152 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,1613005272674468791,3282503699054871855,2097152 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,3170144801005683877,13350128042291877502,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,3371653836828501323,9667847208866704637,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,12327090643429293896,9386949970722108584,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,12327090643429293896,9386949970722108584,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,11488584081721465562,3982389123336499767,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=1220 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,6972447284272694988,15936116372662317388,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,9220748819477954554,13047000548414713267,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,441543173056111542,15822830186428794615,524288 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=1160 /prefetch:14
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6688,i,3129789732929600135,13435617727009779994,262144 --field-trial-handle=2768,i,7334217493318858677,14227070242655296971,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 330070adb54929d8e044f52e1998016696fe02cf58b34b866f21371136f45992
MD5 4ea070db62748a4aa15ed2c5d03c49c4
SHA1 4ea22369f734a5b846e2b130c0ca37d6d5b944cf
SHA512 0f9eaae4b040818357fcbde1c60058717f9bcc2d62f3fc656e99f8ebc33c3377961076c9a7305fd4d9e03ba85a1bef38af51fcfb6e5a773886c585f2b1e1dbad
TLSH
T10461538557A39C57DB6C403092E916E73E714EB354871D9A22B8CC745C8A7F62ECE8C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5968e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5968e2.TMP
Size 3KB
SHA256 a5a8f5b1e1c5a0609a226dcb3578f0ab179686161879ae1ddf9ede4593676537
MD5 6392ed5d11a54f8043c9451f34498151
SHA1 605dd82879da35c9db7d8bee484c17c5843a8f8e
SHA512 0606da30765d4aba8626090cf418a98654e7aaa1aba4ef95e438ef411c0e6a9c23e1feff1e73cd4d66c318fc7c61d96423a2f6437663eafee01d3fbdf71cd5a1
TLSH
T18061538557A39C57DB6C403092E916E73E714EB354871D9A22B8CC745C8A7F62ECE8C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6e13c3961621295d5e5c67733f0ce8807ff09cb3e3384763b007a915ffe28c5c
MD5 c98bb91548c98ada03fa43c716e0daca
SHA1 8859edf0f28574506e05c4da2b1fea1e8981e237
SHA512 74c1518016a5d8acb5dd1cc2680b2854b7110b9c2af08047d6d32db94a0ca6fcb4d047325b32f74b8bfc59f6edb5ec25a366d129abecc14a103a2a34bc675739
TLSH
T1FC61CEF3C3D8867E890156F09B147D2BCE1C0916522C3C5A89E4AF1BA3E24B1E24166F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c7fca54430ef2438a4a9b725ee942dfd104fa55808bf2fb88cc061da349d1386
MD5 c278aad90932f28105b64dd4fa14e9e7
SHA1 83ea71de9ba6d7522b17a3944a9407d4a5816e22
SHA512 a119c875c74b0739debf0204ab11d7030e607112a002cc1f507ada556dc7690f80df9daea3609da488e98f7540fb282632996e30c4e5470b36df727e807e1a5d
SSDEEP 192:sxRLRDb+/f+xsfezoA8p4H/g6+WNIYFIQG4IgIJ:sxRLZ+/f+xsfDe/5Iks
TLSH
T129228415AE28A93B8CDBD25DFA65BF53D2FD1032A1D51E48A6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 afa9f0a565b482f9a415e0ab1b6511913ff4e550169ea5130555c5e5e4b4e8c9
MD5 93f1a042cd745c2026e1e28e3bffef50
SHA1 92229f3b2bf7ab9fcd20062c7b62c1f374505f09
SHA512 9133ab51de3ecf6252393cfa32f3a6563d0828d16ba90ee8abccf0e1f151932222d2ee79bdac4f7de848d9a51f7078fcef9bd05de55a577a7126ae27d7c75d8e
SSDEEP 192:sxRcRDb+/f+xsbezoA8p4H/g6+WNIYFIQG4IgDBJ:sxRcZ+/f+xsbDe/5IkP
TLSH
T186328415AE28A93B8CDBD21DBB65BF53D2FD1032A1951E48A6FC9A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 dd47740f7bded39a1b4c42c406bd4820275a45bf658d2360460809d785797552
MD5 cd6523760d5832230ec6bb3bd029958b
SHA1 962c8205cc9ba29ff46d85bf5ef6c9115781d45f
SHA512 c2284dd85ef83b0867fb87908c619d632a73554aa88ecf58f566e42b71e43c3a05ff735bff9ee6b0643537ee4aa27594f4d2d4f0d4b69cda66fae29950aca87d
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnmro+P2:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0VA
TLSH
T16CB2D92F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aa23a45e4cc60fd88c9d7cb028fc79511b807ba0f74171c83b65cceb7ec89fd0
MD5 7d2536d2de38eb55d7a99eb94861fc1d
SHA1 9813df99b7062c6b62cfb329498cb72258b23eb8
SHA512 c41be5002820d36c2edc32d986c7934d46cb0950ad787709192172db0cb75ebc422ce6868d1de36ebaa5d0ad6828155caba7efc0cb89b4bc44469b7a7fc68e69
SSDEEP 96:KAJ6KiEKOb2K8g2Bk1IEGOO+Eefl2k+KuL2a+yskXKe:4dl1Bk1IEGOObefUkkL2aPskXKe
TLSH
T1BE91EE62707A02107C7D250985F59B2A8A4531E33038F66B7FEE44668EF6E144EFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 baf4f45c02c8152aedcec24eb7a062c6b6ddd8b4bc0de47ce56420a0302145c5
MD5 9cd2b6de59e53e58ed5ace6b149f52c0
SHA1 a860ff64f4b872472a45910013b7d59eada828c5
SHA512 c33733f559c983fa8bdefa3fe717fc86e5bcc9b085b58d9475c6bacf8c43006589d570df15477ee764bd58f169f03ab6c99efa504e7373cf11a6f7ca06eed2e9
SSDEEP 768:M/UxvxjgC+53haf9cUefyEMbxyJugQVTJ7vvmeXvRB:5Zj3+53yeyEmxyJJq17v1RB
TLSH
T18A03C035A8A5AC3388F6D284764AB7C7EFF4056384C62ED484CD5E0E168B3AD574BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 06f71a5dc6dc7af33820db4159d26a5441f2913c7a57a9f05706ad93c837fdbd
MD5 0aa30afdd658923e8f2ddcd820b57ba0
SHA1 c340c31fcd8642cb791d50d24adf5c14f4f7a6e7
SHA512 4ec148b9cd95a187a9090299eb3fe545c1109863bb71dc0cc4b10a3080ccd5f41d94b162a522925936488d11da614fa33f5fef6c319bbbac534b8e94781ecd63
SSDEEP 768:0c3Kaf9cUeIyEMbxyJugQVTJ7vvmeXvMgOif:0c3lHyEmxyJJq17v1MgOif
TLSH
T1A7F2AF31ADA5DC7388B6C2C17A46B747AFF8026395C91A84C4CD6F0E158B7AD174BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7345a26d8729528fc4c8fb47ba5141ce28bf785336214f22f2f76e3b215a5d4d
MD5 c0990c49cb5cf0c64442927ede3e232e
SHA1 4b078b931304ad92c22fadb892e44944400f7590
SHA512 e5a0959a48afed9ba819fff474dcd6408455baaaeab58f0056311cc029b053668c9446b11658366ce9a53304c4404175ea40db7796ff3df5b1f4c6ff05a25312
SSDEEP 768:rc39af9cUeoyEMbxyJugQVTJ7vvmeXvMgOif:rc3uHyEmxyJJq17v1MgOif
TLSH
T11EF2AE31ADA5DC7388B6C2C17A46B747AFF8026395C91A84C4CD6F0E158B7AD174BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 09fd6918c3ec59c8aebac0b2a8f576be8192df1d45e9bea6da746edb950c12f3
MD5 67326b500820186bc4540cfe15a2e7e8
SHA1 36c04252b638cb98217bd8ffd2fca6fa419d2f77
SHA512 4b808f30a9acbb006f0c4600d520d9b15a0ecd9248f105b1a28f33cde5b266074f6a38d24ef8a6a1572d798261ca7dac1b4d627be23e4f1c0d8c0b5256307725
SSDEEP 768:p/UxvxjgC+k3Awf9cU1yEMbxyJugQVTJ7vvmevRSHtBk:cZj3+k3JDyEmxyJJq17vnSbk
TLSH
T10503C035ACA59C7388F792843649E787EFF505B398C62BE485DD6F0E128B2AC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd24929b-6562-4e0c-971f-aa73f391a85b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd24929b-6562-4e0c-971f-aa73f391a85b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download