286c4065e2b8e8d040b7530126a943193254927c0dba4ea41d155b1287156a62

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 08:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_286c4065e2b8e8d040b7530126a943193254927c0dba4ea41d155b1287156a62.html
Size 111KB
Sample260912-kb9rmsgb25
SHA256 286c4065e2b8e8d040b7530126a943193254927c0dba4ea41d155b1287156a62
MD5 76be515eb2c2e67530eceebb62777544
SHA1 06143e25545aad42287adf60976197c23a7f50ad
SHA512 e4b811ac260efdee7fc23479cb74fabd1bde125fa21274e36dc78e45f0e6f2d2f3a8e85ef8a44b68647e5559b3e50322f1a54444e3f60d3ef258cd7796dd4809
SSDEEP 1536:wPx+Yn+hR5GRFr/KrNHhh4HTl8QkTtRNohxqu61bEaoQbEaorOhvX6U:ucZQaNDH1doQdorG6U
TLSH
T1F0B3B58711204CFAEFA44DB3459B186B3C2C5437BC4391B9E3FD8F972B569AE0346269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5036	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{91EFD67D-9D75-4FE8-AAAA-915C2E98D5C7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
712	msedge.exe
712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5580 wrote to memory of 6012	5580	msedge.exe	87
PID 5580 wrote to memory of 3308	5580	msedge.exe	88
PID 5580 wrote to memory of 5036	5580	msedge.exe	89
PID 5580 wrote to memory of 2740	5580	msedge.exe	90
PID 5580 wrote to memory of 3308	5580	msedge.exe	88
PID 5580 wrote to memory of 3308	5580	msedge.exe	88
PID 5580 wrote to memory of 2740	5580	msedge.exe	90
PID 5580 wrote to memory of 52	5580	msedge.exe	92
PID 5580 wrote to memory of 52	5580	msedge.exe	92
PID 5580 wrote to memory of 352	5580	msedge.exe	93
PID 5580 wrote to memory of 52	5580	msedge.exe	92
PID 5580 wrote to memory of 352	5580	msedge.exe	93
PID 5580 wrote to memory of 352	5580	msedge.exe	93
PID 5580 wrote to memory of 1988	5580	msedge.exe	94
PID 5580 wrote to memory of 5424	5580	msedge.exe	95
PID 5580 wrote to memory of 1988	5580	msedge.exe	94
PID 5580 wrote to memory of 1988	5580	msedge.exe	94
PID 5580 wrote to memory of 5424	5580	msedge.exe	95
PID 5580 wrote to memory of 5424	5580	msedge.exe	95
PID 5580 wrote to memory of 4616	5580	msedge.exe	97
PID 5580 wrote to memory of 5840	5580	msedge.exe	98
PID 5580 wrote to memory of 4616	5580	msedge.exe	97
PID 5580 wrote to memory of 5840	5580	msedge.exe	98
PID 5580 wrote to memory of 3704	5580	msedge.exe	100
PID 5580 wrote to memory of 5096	5580	msedge.exe	103
PID 5580 wrote to memory of 4396	5580	msedge.exe	104
PID 5580 wrote to memory of 5224	5580	msedge.exe	105
PID 5580 wrote to memory of 2900	5580	msedge.exe	106
PID 5580 wrote to memory of 2900	5580	msedge.exe	106
PID 5580 wrote to memory of 5944	5580	msedge.exe	107
PID 5580 wrote to memory of 5944	5580	msedge.exe	107
PID 5580 wrote to memory of 712	5580	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_286c4065e2b8e8d040b7530126a943193254927c0dba4ea41d155b1287156a62.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdc386c188,0x7ffdc386c194,0x7ffdc386c1a0
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16554729087884949967,15600516637608238615,262144 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1700,i,7200131348327670346,1820299208156603400,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,8806461129305675410,10078440178295123479,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:13
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,6394767820971972962,2621433664260857248,2097152 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,14853895901808388009,107047627792033386,2097152 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,16649533922206189698,2880572181656126722,2097152 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,16719461641096225320,9430254808194606943,2097152 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,10443904848851943710,12987449673016393155,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,12528006023083343255,16894393917071287510,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,17492052000378108627,5703047792727955473,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,17492052000378108627,5703047792727955473,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,1641245714069850800,5893343488365129059,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,9889325481962592062,9798314716034421449,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:14
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,1820187756838050056,15138042729763098817,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,1466030768335059100,17211851315285332018,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:14
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,8458764618380887095,9411120815354704554,524288 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3064,i,12699533779226377044,10671677208709014599,262144 --field-trial-handle=2216,i,1000011642404415305,16353183377729749220,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ea33aa59d0138f9631332764980fe4a450ce294acd987d5b312d1dda92beeec1
MD5 ec7b8dd20a68f846ae904ba0d1d149c9
SHA1 779923013603fd46ee20c678a035a1ce78345bc7
SHA512 4ae478b987084fdee5876b7856b3c22da22b41dad0de47fc669ea4d38a85cc8db15e3cdd99e5dce8b2956b76ca6473a642f0dc4edc46b71f4d3999543287ab4c
TLSH
T19A5148418250E66CFB6906724CDE35E73AB0CAB149DF5E16C894CDB46B4F394A3B41B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597fa6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597fa6.TMP
Size 2KB
SHA256 853955c899ad06ed1e6c233f436ecd68533253bdad123ded1c971ff40ca9565f
MD5 a597ef700bd5e4dee975f040d7717c9b
SHA1 1010df6ed5c5179cedd10bcb1ad6f328f0fbe6d6
SHA512 5bd0661fea1d6136df2af216de58ed95c7b407841a06a24a2fe78da2bca8b59a11a1c79d845e4a064b30c64acc6f9d52169021ef73a68d6e27d36a263c34c365
TLSH
T154515B418250E66CFB6906724CDE35E73AB0C5B149DF9D1AD894CDB46B4F394E3B41B0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 23ce3de21bd6e933fbc1d43e32275568155afe83ca997bea5fc7f44280332443
MD5 d9c8cb42d617b4fd6c5dddc3c810a705
SHA1 8aa74b73d4b4d279239cb834fec3d5e232dd4a05
SHA512 22548c7c0b9028453c509dcdfa2f3d25313fafb979548dd3f5ee2a02c98fa39defd7ba08e1d74e96bf05a012e181cab64d8fef2839ccfc1c9e0c4ac4675f7b94
TLSH
T1B361CFF7C3E8867D890156F4AB186E1BCE2D0925532C3C56C9E4AE1FA3E28B1D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7551bdd66ed80f3ee662776d945f5b4dcaf9a2dd07342907b33790f0d46e53df
MD5 2f4c57ade03f096c1abcc6c88962bae1
SHA1 a6062c21ad46f49767f6ec9f46ef1f853b314e00
SHA512 1fa63800682c419d92a1fea51c6af649135828dded60b6943385e9865ef51ce20fbc619da5ec0347395b7cad9706ba625a6daf59eda504f2c9c7c203d8a58fe4
SSDEEP 192:sxRrR5bA/fsysdQyYhFzoA8p4R/g6+WNIY28cBGbIgIJ:sxRrfA/fsysubo0/5IPgs
TLSH
T1AD32A715AE28A93B8CDBD21DBB65BF53D2FD5033A1941E48A6FC861C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4b63e4f5651f7b2143410e7f818c9b2ee4849e939135a543f883541eb7c23dc3
MD5 589ddf6b51b6451b205cf6b6a0070a26
SHA1 98762695bdcb949c2e280b5ca2512e3c42626dfb
SHA512 64cb6d7ac2c3c09125456c8852de89bc8495e27034c214d818efc54e9ad2c2fe3359f8c805076dd51d51c63857ced06ed180f41d2b2209845f7b43c41796503d
SSDEEP 192:sxR0R5bA/fsys4QyYhFzoA8p4R/g6+WNIY28cBGbIgDZJ:sxR0fA/fsyshbo0/5IPgX
TLSH
T1D332A715AE28A93B8CDBD21DBB65BF53D2FD5033A1941E48A6FC861C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 80d8d831cba3ed2db8a6a7f29d545fd079e312e307292df882fcf1757362ff09
MD5 831de08ac9773b7c49c6f4a02626fdbc
SHA1 b9cc5407af7e945c127914e7361722db3afa5889
SHA512 fc8b119bfe5f4285e777a2774ebec85d65d47cae4f816f8de84b81acd13b74982b0dbd01811af3bf17029f1edd008df1a7dfd9bcc6befde049d1c8df8ec373c4
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWBroHrQ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0V1
TLSH
T188B2EA2F644CCB7E8FD00A9DAC596FDB6E9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 056d80790c4063817d2fac93bd323a6d386a164586b31481eaa67ca3535f1ccf
MD5 9985522fbca62bb4731a925bc9abc91f
SHA1 4e9698b7c0c727b2d62dbb4347272d4b0e3f3e68
SHA512 61b52c079bd507e3071b8dc3aac435c4285e0148555eb6f8f17c12ec57d8a251efe4bc7300e4c2975df679250b782aa27eefbbf2521d175ec9e62622a8e52f3a
SSDEEP 768:RN3DASgm1m2PKekkDmGA5b65Q92RQMPb6VTRC5x:RN3DWekMAF65dQZVTRC5x
TLSH
T183F2CF72ECA0DEB35CB991C13653B2057FF88163D6CC869099EE6F1D0487A9A431BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 237182d3df03a5dbffddcb710869d1b2d1897e8f1a059469e8d749714374d6d3
MD5 c384e6abb090ab075b02f2437b9a7c82
SHA1 c799a2997eb4b8d4f2b614e67cec6f1067ed0cd5
SHA512 8c5701e25ef344fedbe8af9d5ffd8c6dac663294bb5155f35a257f9b17e1157a1cfdfc604f9d7490a73b5c9702a98ce2f4e72d05b21ba9c361d65c79486a3d31
SSDEEP 768:U/UxvxjgC+B3QaOogm1m2OtDmGA5b65Q92RQMPbCFj0O:BZj3+B3d23AF65dQVFQO
TLSH
T16703C036EC90AEB79CF95280374BB35AAFB84073D1C556A049F96F1D06C768D830B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 2d7631e09bc28946eee8d66e501e4550a7f2bf16962ba7be89f0203338137c17
MD5 bb5f7a646b48ea3aee680be32d25eaf9
SHA1 af162acd2899ab4809843b38d7f8ddb16ee2e9f8
SHA512 d9084c28a88801990d780fd09f40d9cf04da9d597f5c7052b5aaca417377184422dd4850dfde36f797f91846ccf96049cbacc6e0a7122f4f993156b16b57fed3
SSDEEP 768:9/UxvxjgC+o3WASgm1m2PKekKDmGA5b65Q92RQMPb6VTRCsR:gZj3+o3WWekqAF65dQZVTRCsR
TLSH
T14813D032ECA0EDB35CB9A1903617B356BFF8456391C999A049EE6F0D05C7A9D430B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 60ad625f7eaf40c3778a9850c38047666a5625c3083bfe9f0bf938e62ef20558
MD5 f1e4815a31af281cb2f86ceade578a0c
SHA1 ea5fa250a45ccc7398b83040c83657d22ec7a583
SHA512 ae2495ef957d5da8c5cb122ab9f6231e61c1ead23b305a54ff95b5148fc70b06e429fcb85d4ff7e0162fa7a0f5a4020ec96496e3596e54f4c3b23628ddbefbeb
SSDEEP 768:YN3wASgm1m2PKeYDmGA5b65Q92RQMPb6VTRC5x:YN3wWe4AF65dQZVTRC5x
TLSH
T122F2CF72ECA0DEB35CF991C13652B2057FF84163D6CC8A9099EE6F1D0487A9A431B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download