8e8d7feddd3e823f2a8afdb999f462cc1f41d83c8c3583c67ff69d381350d893

Analysis

max time kernel
149s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8e8d7feddd3e823f2a8afdb999f462cc1f41d83c8c3583c67ff69d381350d893.html
Size 49KB
Sample260912-mphlesfk7w
SHA256 8e8d7feddd3e823f2a8afdb999f462cc1f41d83c8c3583c67ff69d381350d893
MD5 52097200b8237b430a08fc90ffe33a81
SHA1 785668e51e1d801cbff61cfccef4873cf77642cb
SHA512 833b16b722100f1f95803216ddc4333f5c5959ac6d6aca09b930211423a5a6579704b01b88d53066c53c149079d05e97978107aadb3e8542af5ad0505398e213
SSDEEP 1536:gpo01bdcKx6S1LV4jb/8fhIH/igcDMhgnhEAvx/0:gpo0xdcY6Uf0
TLSH
T1CD332AB2B9549061060797F4F736B508B6A720BB9E81C958F2ECCD54BF80EDD4CA4EC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5284	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{6E40AC8E-6AB1-4079-9A92-4AAC35E019A6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5948	msedge.exe
5948	msedge.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3592 wrote to memory of 1908	3592	msedge.exe	86
PID 3592 wrote to memory of 2476	3592	msedge.exe	88
PID 3592 wrote to memory of 5284	3592	msedge.exe	89
PID 3592 wrote to memory of 2476	3592	msedge.exe	88
PID 3592 wrote to memory of 2476	3592	msedge.exe	88
PID 3592 wrote to memory of 1312	3592	msedge.exe	90
PID 3592 wrote to memory of 1312	3592	msedge.exe	90
PID 3592 wrote to memory of 5668	3592	msedge.exe	91
PID 3592 wrote to memory of 5668	3592	msedge.exe	91
PID 3592 wrote to memory of 5668	3592	msedge.exe	91
PID 3592 wrote to memory of 4528	3592	msedge.exe	92
PID 3592 wrote to memory of 4528	3592	msedge.exe	92
PID 3592 wrote to memory of 4528	3592	msedge.exe	92
PID 3592 wrote to memory of 4416	3592	msedge.exe	93
PID 3592 wrote to memory of 4416	3592	msedge.exe	93
PID 3592 wrote to memory of 4416	3592	msedge.exe	93
PID 3592 wrote to memory of 4316	3592	msedge.exe	94
PID 3592 wrote to memory of 4316	3592	msedge.exe	94
PID 3592 wrote to memory of 4316	3592	msedge.exe	94
PID 3592 wrote to memory of 2612	3592	msedge.exe	96
PID 3592 wrote to memory of 1576	3592	msedge.exe	97
PID 3592 wrote to memory of 2612	3592	msedge.exe	96
PID 3592 wrote to memory of 1576	3592	msedge.exe	97
PID 3592 wrote to memory of 4592	3592	msedge.exe	99
PID 3592 wrote to memory of 4260	3592	msedge.exe	102
PID 3592 wrote to memory of 5668	3592	msedge.exe	103
PID 3592 wrote to memory of 2564	3592	msedge.exe	104
PID 3592 wrote to memory of 3764	3592	msedge.exe	105
PID 3592 wrote to memory of 3764	3592	msedge.exe	105
PID 3592 wrote to memory of 5948	3592	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8e8d7feddd3e823f2a8afdb999f462cc1f41d83c8c3583c67ff69d381350d893.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7fff190cc188,0x7fff190cc194,0x7fff190cc1a0
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1848,i,1617828383434333951,1614130418748711032,262144 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:2
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,12951245437494066079,2018457244040325091,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,17244621900445864410,2599959149602431305,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:13
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3360,i,1470902797149816211,6277070161999686494,2097152 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3364,i,8561317057942085767,14108874806801629492,2097152 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,14408291095328011696,1112187722334493798,2097152 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,7276491124467170626,7276849363013026985,2097152 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:9
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,7869887330927372846,9028369687500251061,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,10746815629689996974,8160054329727312783,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,2869239346079486756,6507836669528280274,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,2869239346079486756,6507836669528280274,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,10403986699602176504,4946816227836596600,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1136,i,9724323230852817098,14544944005584418297,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=1332 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,4170011043257615189,1952909475384256753,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,6186051520886885856,15533312025701244190,524288 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5424,i,10423465734727364429,13423804469434347217,262144 --field-trial-handle=2908,i,10313400371439222646,16698074340090895056,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 af22bc70a54929abf70cf3e44273ca8fd192e27439435743ea3c1d7e8de86676
MD5 b1be1822d2d1ba8fbede13bb896f14a7
SHA1 7b5cc7132add83486d540f75b5e2a40e470a10ed
SHA512 33acc8a828a92c066111ad0eb3b28d83db4a8d39db7afbbfbaf91311d4b7297aa7f6122a54d8b9a5fafa11c2abfdb3e87b9c5c56080e7d7bdcbd5a1d4cd31c70
TLSH
T18961836C65D580EBF769143486DCAC9B3A3A5AB023C32ED20FD8F5746B53368FC45048
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595f3d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595f3d.TMP
Size 3KB
SHA256 37afafeb7b67fc9fc13ed4ca0f60649ddf9893cfbea38465ecabc6f92d9e9d46
MD5 1fd6b6ddc91a98bc7b2e442c6d09e3fc
SHA1 2d99e4f55f0ca1b7f0f0a8eaba909dab43b26b10
SHA512 b4481355dce7808be62cc63f724f3ea3b33893c31451edb221da183d8686df38a523180fb3d8512c6cbc35c4c480012297b8e417eb625590713ff3a3de99058f
TLSH
T12661856C65D180EBF729143485DC9C9B3A3A5AB023C32ED20FD8F5746B53368FC45048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6f3687c6e6eabdfb9b61fcd8dd219aa31201c2eb9bfe44855f24600dff47eb8f
MD5 cc5da111b2af7fe8a906181e65368328
SHA1 fb8d05ad8277b50bfebb054927e9e229fee80870
SHA512 76aae929616e58071cd52d6cfdbbd109800e6498fe5e0b2c79220db90f4aa6c7cba34cd822323c400fdf28390f1965f816f1b9268fb6c66f677d5ea4fb4c45a6
SSDEEP 192:DY4ZNsMaRaZTjhnYO5ZB0jZXpsxZ3GZpWj2Onn2qeB2tGhyZaT:DY4ZNsMaRaZT5YyZB0jZXpWZ3GZpWj25
TLSH
T1C2D1AAF6C3E84B7E991192F49B256E2ACE1D1517432C3C668DF4AE1B63F24B0E10169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d5c13b1a969d6f8d14ef9ed68fbec211c5292ca2b986f0378fd54cbebebcd3eb
MD5 a7f9fed3a6aaa46b0a6a69f9675f7304
SHA1 39d1bcf854e5844044efd6d4d5525c12db831226
SHA512 f6720970cf4fd292d6c03139b44ad8d0bd4775fd9ae22dd3ebb229e8dfd145d9f8e6f4477d46b2fc825616022d6f7fdacb25f2974c8616655c6af858badb36f3
SSDEEP 192:sxRxz7R8by1/fedlshHKzoA8p4G/g6+WNIYckXtiT8+GVIgIJ:sxRxz7Ey1/fedlshHHT/5IE9iT8rs
TLSH
T1B832A515AD28A97F8CDBD20DBB657F53D2F95032A0951E48E7FC8A1C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d7d39ee56ed8d9e8e48b3a38a5c1b64690eed3a92b1ef6d1b684e62a417b5f1d
MD5 466fb660ad590a67a7973913bb18d3a0
SHA1 b2009f914e05f17cafea1a1f587e190c7c27612c
SHA512 9f52e078db6d75b601007b43eba831eb1daf854b4d72a248da3ea40d3e4bf7112eabaeee5a73d8eba2952e546987425ae8e78c8c89e160841a609636d89625a1
SSDEEP 192:sxRxq7R8by1/fedlszHKzoA8p4G/g6+WNIYckXtiT8+GVIgDfJ:sxRxq7Ey1/fedlszHHT/5IE9iT8rd
TLSH
T17232A515AD28A97F8CDBD20DBB65BF53D2F85032A0951E48E7FC8A1C14EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 38d6c1aa1fc5ff0c8c9520d89c92c6046b3a2da2c427e22cb1c2923ef9175583
MD5 2433d68756d1fa5e753aa37c135f1bad
SHA1 f009415d55e662bb119c1b368b5cf3263f188abb
SHA512 2c91b75899cf286572a2c3b5e356e15f2c1cd9749ce1d00d73776b4186eea1b2d31ce53c4b44651185b9bd08aa6690ca5614dfbdacf96cf1977ec2adf4f2235d
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwwroMX4:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0V/
TLSH
T129B2C93F644CC77E8F804A9DAC196F976D9802C79A588D4087FE994C03C77EA92294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 114B
SHA256 ecc658b0109d5de7793f987375ae6f507fc51ef429608e23c8fde0748992abc0
MD5 ffd8863bb593f11abea650ed3b1a1d18
SHA1 d932f004509cce8ee3cbe21f22bfc817da8ef889
SHA512 1038c44da7c030297b674ba115fc77d8edf0bff31179388c106f263db26234660b8e96e50b341b3e00dbc3a60ca8951e81896a1eeb3820a49a8b0bf8adb15d8e
TLSH
T1D6B09B10E3967B6457540995057514911D5B7C102D126018F05D31555631D55C1E91F1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 107B
SHA256 74ff1b94a1e0a427790bce8253e2fcbc42d322c66b93b6542efb2e38cb3eb151
MD5 a4cdfa70e6a53f4c788d7008f6e241cb
SHA1 c5f4cb3af4b3b010cb2d711b10ee1d6ec1c4c97a
SHA512 699b88bd9dd12641045bc3e0899cbd75df05c3af079de9a9289c1ed37c53da5feacba938ad6524934c7e45a0fa20f7a4a3b5c9bc045826b91a40ea48766bc526
TLSH
T11BB01410F3C57774575C4DD4057501511D4F70103D117014F05D01555711D54C1F71F1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 7376548b4e9a366ad2ddbae2b7d996422b06746a5ef432070ec60646e82d5924
MD5 2a2daaa8cf7b6d1cd5d826dead45d0bc
SHA1 abd315adf9d0b2349c100213686cec1dc53cfdca
SHA512 ecea25867c0371805e9fbbeec4c8c8de793f6d9e6243796a7209af3f34b5ed4f32ae5b083b96bb8c68e15134f31478b72551ae299ed94a15b707a22cb4a1e24d
TLSH
T146814450317F0A4439BE391891E0A76E474535E37168E62B37E905A98E2BE081CFE9FD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b83f58cbfb21be44fdec71dfe75bc6edc6b80a0a8b47b047e5aa868f9ff8b400
MD5 fa48d804a9204be048241754fe713624
SHA1 feba40ce819e6a9ca9ff7a3fa7defcf864b69ecc
SHA512 fc866df724cf875710f089f2d66b5a22b3ba4fbe7e4b01936e4421a1c9dfa2df8b29b50632d7bffb047a65e70514975d7c819387b5b81998d040ca00d7c301c9
SSDEEP 48:KQRIlKqwwPyXPcTvVN92HN69Iov2KlT9p25XmKCZ11IpKu0Mbyy0vQkKH:KQRGKqwyiwQKpGm1SKu0aJ
TLSH
T156916550313F0A4439BE392891E0976E474535E37168F62B37E905A98E2BE081CFE9FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

27ba0636-1dda-46d6-89ee-16997d48b22e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\27ba0636-1dda-46d6-89ee-16997d48b22e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e56c0b2c2bfddbef308ef2738a16de15c5102126ed587705b802faa4921c0dc9
MD5 ff2aa5a76c52975172220f473742b2cb
SHA1 535eaa7a4e0829f06f760f4418488dcd2814d8fa
SHA512 1d3681b403745516101f2ba55d93fa902ae099f4fe993c8715d679d3ccfcc6ac57e0b9aea31bf3592443f1cfc364a201dd078a3c203eee35fc1301f2af65a825
SSDEEP 768:DvY3/L2Q5xfieO49gitSOnUPO4Qp7cPAiSm2eo4w4cciGrTFlsMgr2:DvY3/L2cRD4OwQpYoimeoR4ccFFKMgr2
TLSH
T10DF2BEB1ADA4AE739CF293C17A597702BFF0419395C91A88C5DE6B0D118BAAE0307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 685e0e0594d0a3bd55ef199e06ab1df0f917a1920c914b866b30030f25562e9c
MD5 790f68ef14f14b79619dd95aac51e14d
SHA1 01f63ca19777eb3772abc08af3e95bf4de5da7b1
SHA512 7597e6f9d05ab72c4b091777f388285beb588cdc895ed30775cc50ade8bc222a8f69d85a7e26591dfcbcdc7b842b66827e0f4c4db23aef2dc07c846b8a68774a
SSDEEP 768:DT/UxvxjgC+R3mL2QG5fieO49gitSvnUPO4Qp7cPAiSm2eo4w4cciGrTFlsMgqM/:DmZj3+R3mL2JZD4vwQpYoimeoR4ccFFu
TLSH
T17013C075ACA8AD339CF3978176596383EFF045A394C52DA8CADE2E0D168B79D4307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 355fb9797a4cb1f7657d5a3596c02a227cf4ecb3c5212e87c62e486a356d4616
MD5 b5f964a6cf0499988fc3467447446b68
SHA1 20823af91792589423d5f018bca56ff975c40c76
SHA512 5836c4587754210a35c04ec1885c23f6abb589dac40637b4f6847a45a3df1eae33e03f94616e1bf3f46d199d1e5144cd3ef8a0a626a240a424295df8b0540484
SSDEEP 768:7fFQY3fwg/L2Q5xfieO49gitjDnUPO4Qp7cPAiSm2eo4w4cciGrTFlsMgr2:7iY3ZL2cRDlDwQpYoimeoR4ccFFKMgr2
TLSH
T18103BFB29C94DA7BACF687C1BA597302EFF041A3D8C5AA94D6CD6E0D11876DD030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a45da600e959c53f1528e022a374a8db0ee0f916496f232a2182afe4a95c54be
MD5 db3f5755b886a2e4acdcc7e5248312ec
SHA1 49d815b83575cf263d1644dd1358980088561e7c
SHA512 f0b6d01ab02233d433b41d17b317c348d680f5e6ca455e3cdfd8862fa4669425a0e875ec915ece32c0e8190efe495a7c338df384caea731110e3be1e428b1965
SSDEEP 768:vw/UxvxjgC+5j3GVKL8FieO49UjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5AAgZbCMc:vdZj3+5j3GULaDUjFwQpYoimeoR4ccFn
TLSH
T11803BF75A8A4AE77DCF39784365D6342FFF0416395C22AA4CAED1E0D52873AD430BC46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ec4941d-bba8-459a-9f26-f72b84159f69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0ec4941d-bba8-459a-9f26-f72b84159f69.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download