235bfc8e6b8be6bd73df934195065121859aaeec040d4ea8119367c6233efb5c

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 13:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_235bfc8e6b8be6bd73df934195065121859aaeec040d4ea8119367c6233efb5c.html
Size 37KB
Sample260912-q18tjayapd
SHA256 235bfc8e6b8be6bd73df934195065121859aaeec040d4ea8119367c6233efb5c
MD5 f29728edeee8f29dff24d55606313c5c
SHA1 dbf0dba2949e7743451735e806f93d7262ab4fe5
SHA512 06e871e17345b933fb1689cbf01a0857b43a509f97d2f3200757c2581883718db1af15d4331d3689e898bf81030e321210863f12e3b8d5f1bbed0a7c89c58b24
SSDEEP 384:3mzFWHqLqpS/iyT2VDZ5GOuzslumallWzYgmty8IO1uzslumallWzYgmtyWwQQcM:WgHqL6H5GOytmalltF1ytmallhQMi
TLSH
T18603C76A525011A0E937F7F85BB37269FB630077E202854C7FDC9A818FB55A94893FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2680	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{94383253-C70A-4C62-B195-CAF8EB59DA33}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4772 wrote to memory of 3532	4772	msedge.exe	86
PID 4772 wrote to memory of 4352	4772	msedge.exe	88
PID 4772 wrote to memory of 2680	4772	msedge.exe	89
PID 4772 wrote to memory of 4352	4772	msedge.exe	88
PID 4772 wrote to memory of 4352	4772	msedge.exe	88
PID 4772 wrote to memory of 3324	4772	msedge.exe	90
PID 4772 wrote to memory of 3324	4772	msedge.exe	90
PID 4772 wrote to memory of 4316	4772	msedge.exe	91
PID 4772 wrote to memory of 4116	4772	msedge.exe	92
PID 4772 wrote to memory of 4316	4772	msedge.exe	91
PID 4772 wrote to memory of 4316	4772	msedge.exe	91
PID 4772 wrote to memory of 4116	4772	msedge.exe	92
PID 4772 wrote to memory of 4116	4772	msedge.exe	92
PID 4772 wrote to memory of 2024	4772	msedge.exe	93
PID 4772 wrote to memory of 4396	4772	msedge.exe	94
PID 4772 wrote to memory of 2024	4772	msedge.exe	93
PID 4772 wrote to memory of 2024	4772	msedge.exe	93
PID 4772 wrote to memory of 4396	4772	msedge.exe	94
PID 4772 wrote to memory of 4396	4772	msedge.exe	94
PID 4772 wrote to memory of 1528	4772	msedge.exe	96
PID 4772 wrote to memory of 3456	4772	msedge.exe	97
PID 4772 wrote to memory of 1528	4772	msedge.exe	96
PID 4772 wrote to memory of 3456	4772	msedge.exe	97
PID 4772 wrote to memory of 3148	4772	msedge.exe	99
PID 4772 wrote to memory of 3420	4772	msedge.exe	102
PID 4772 wrote to memory of 5340	4772	msedge.exe	103
PID 4772 wrote to memory of 5460	4772	msedge.exe	104
PID 4772 wrote to memory of 1112	4772	msedge.exe	105
PID 4772 wrote to memory of 1112	4772	msedge.exe	105
PID 4772 wrote to memory of 4660	4772	msedge.exe	107
PID 4772 wrote to memory of 4660	4772	msedge.exe	107
PID 4772 wrote to memory of 2160	4772	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_235bfc8e6b8be6bd73df934195065121859aaeec040d4ea8119367c6233efb5c.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff9b539c188,0x7ff9b539c194,0x7ff9b539c1a0
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,8681585474490259730,13235974096711293450,262144 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,10584550545148441787,11841581338604987955,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,14956895578888022607,7828933161874012181,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,11034414181608866734,18284624211832633507,2097152 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,10173683133120634966,12604055590714993166,2097152 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,15805413076432983944,15999494297299701796,2097152 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,9074546567344023551,11132747947595670964,2097152 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:9
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,4866310411278973545,17436897600354033435,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,16038190286396248065,10099713523668366002,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,113017055689745819,10605552051724669303,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,113017055689745819,10605552051724669303,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,16397989089211612675,7368355552221639162,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=1252 /prefetch:14
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1376,i,6291180452010915856,13197181453773196943,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=1352 /prefetch:14
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1388,i,1864963217657182248,17437756898851466559,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,6332443954179593856,14235665075084770577,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,12159761679202691099,4269539800320260974,524288 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,3862797627041494798,3463938748207336100,262144 --field-trial-handle=2440,i,7983523506503991908,1558944635646396708,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2160

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 92aac10325df3ad5dc7d3a6115d6318d40600cb300e22267deaab30be5ddab15
MD5 370d5258bd965d867d23198ea6177eeb
SHA1 dab76d97c65e40dc801150c013609669e7f4b482
SHA512 6a31d1bfed9b49d13354b5596b3b1c0c82192d02d0b4c23062cf08fd3e299d590d20560f7fe30cf1d0449d6b41b74a6e1cc774be7f2832faa8f5b71b6ed4744e
TLSH
T13F61D940DB906982EFEE40F7A5F2598336BAAEB394474D9307C8F5B8D802F5614F8C48
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59710f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59710f.TMP
Size 3KB
SHA256 8f22398de952c8d5b8a3a7f1dd1a3be938cb4c893203b03b7ef8b68ab8dde595
MD5 1ec5b540d5df274f5564d487dcb6d1e9
SHA1 579a511a8420bc172f655f47c84e48ebf56d0ad6
SHA512 c608381f7c3a3c7c0f246b962fe4a000a578c43c2b47bcae3114c3b2f3c4de79ef4c06b6fcc986bed454e4b3bbf389e90a19b92a55bdf1c574b8489b791f736c
TLSH
T18F61EB40DB805982EFEE40F7A5F25583367AAEB394474D9307C8F5B4D802F5614F8C48
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 80d30c007e65f0296b9be8dd20c64aaef4054505826a18a6a26a04a780ee2de9
MD5 a7a6bee7c4488ff75f7483d962b9b5e5
SHA1 ab2a16023e1830c9b90e2d9e895dee32d5ceac35
SHA512 73fd5883d8819b297f4d8be83c5a63b5b76bef62e811ad372b323f1f16be0d4a21d9cb8509c083c53e1cea3d01016b3a5abd1000e724f4c1115f3c8e875ac9a6
TLSH
T1D2419BF3C3E4966E890156F0AB14BE1BCE2C0915432C3D5AC9E4AE5B93E38B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1a08b2b036bab6e33c458138279cef46a0b41732cfd2a6424c5b831a571a55e0
MD5 acd0f204319cdffc11d4c9a88bbdfa6d
SHA1 0e4dfa97b14c4511fecc1bcd0b249ee060578872
SHA512 b0c6482bb06cb3ca2a4e382440e6fa57b468c34f86cd1a6778f17bba3dbd3206fc5854988e163d4280db88f4c1f8befcd158a34434445832afbede197d3ccbfe
SSDEEP 192:sxRNRmb+/f+xskHzoA8p4s/g6+WNIYFIfGWIgIJ:sxRNu+/f+xskut/5ITs
TLSH
T1F2228415AE28A93F8CDBD20DFB66BF53D2F91032A1D51E48A6FC961C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a7fe1571cc4e191c0d073820593edafd20311a78ba3082f67e390aab113bd5a4
MD5 2e7a02cda6184607a003d8237703a45c
SHA1 2378da4913b6228c787a0fb5e066e107039c707c
SHA512 f561a01ce126767337ae2f802783ae733556858cd5e7708e04703b6e8e14d6ac9432ba4e54c7551cf0aa7b48be1e964b1def38e739bac7bbec915dae085836c2
SSDEEP 192:sxRWRmb+/f+xstHzoA8p4s/g6+WNIYFIfGWIgDxJ:sxRWu+/f+xstut/5ITH
TLSH
T182328515AE28A93F8CDBD20DFB65BF53D2F91032A1D51E48A6FC9A1C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5da8d6666e64dfe0df8afb19c96da9458df2ebab6e8ef8829e8e3df2868cd6d1
MD5 b79b871ab79da2125dbde573a7e9cecc
SHA1 a9fa870c9a4d885c802f3233ea3f067444150118
SHA512 8f2d4717cdef30d0aac623807e11ab71eee11fa152726fcec6a88f3d80fd4e3dde852c655867b877bb29abb00f944bc22fa724c883b236096c04160368a008a5
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnJro+PY:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0Vr
TLSH
T167B2D92F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a0c46.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0c46.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 48fcbfa00a99d7b40132294d65a6b95d435ec47c09df1da7d8e7a4fc6d0f1ef1
MD5 f6f8fef14f0e1ce574a747c5f350cfa5
SHA1 a2425d47ea681347ee0d58926816b88981a9a3fd
SHA512 a8e27dbe337696f6977f22d4f85d7ccfcb3d22b4f3fedf4f5eb7ff3f92128d9b583f2b222035819ad45859438573979e349531ed352f1bc7aca5f85b6b83e827
SSDEEP 768:nh38uYf9cBqVyEMbxyJugQVTJ7vvmeXHcTRjI:nh38jAqVyEmxyJJq17vlcTRjI
TLSH
T11DF2BF309C718C7798FAD281A646B747AFF5419389CA1B84D4CD6B1E118BABC130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a3bfbe47e6f1d66dd30775ec410721bfe028d7167b807cb6c16a69885826e0a3
MD5 aacb52e7a0aabab4b0e6a6af855fd85b
SHA1 a491a0935d9ceb9d466968a78533056d95803ad2
SHA512 1e5b406de9fb1c83d1ffd172c6161af5923c6a3fd05bc8ac9949602973536179e086aa32538b1fe1b0bb97ca98a40c6bad5d2460ff5b803f77095f0ac3a2e8de
SSDEEP 768:jVFQh36wgsjYf9cBq2yEMbxyJugQVTJ7vvmeXHcTRjI:wh3PWAq2yEmxyJJq17vlcTRjI
TLSH
T1AE03AF314CA4C87B9DF6C785A7497746AFF541A388C96A84D5CC6E1E108B5FC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2993fb0bdc92fbaf32c358aa77c737d163df30b8d055febe031a0c0178122a21
MD5 0b72420fd8e788b614d3fd9dced39296
SHA1 8a94c4aa2653c6689c6a9c585141739d5113564c
SHA512 9b95d2448a18d89b95d89652e394cd5f48c3e804de09d26571b55f55987df70196a39edf4c2dfb943aaad99a07883fcca0ed3199c15119a407fbe114539c3214
SSDEEP 768:p/UxvxjgC+k3m2f9cbyEMbxyJugQVTJ7vvmevrSHtBk:cZj3+k31iyEmxyJJq17v1Sbk
TLSH
T1FC03C035ACA59C7388F792843649E787EFF505A398C62BA485DD6F0E128B3BC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2039cc72-62f5-4b65-aa23-d876e58cf1d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2039cc72-62f5-4b65-aa23-d876e58cf1d7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download