03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8

Analysis

max time kernel
149s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 18:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8.html
Size 6KB
Sample260912-xf997asfnd
SHA256 03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8
MD5 57e0bc726440aebbd01f9a6ca65591da
SHA1 b778bca49c70d96e877977fcceb16e3846c91700
SHA512 0b6670435512b4b0c8c6422e373f606727f2135d29687617f64b08eadd4bdfc6abdc8ca6b0dbafddafd37a491b2289a79b6bb6545005dcfb02cfac9a5077ddc6
SSDEEP 192:zWLv15G5WDNlUeqmngZ1nZ69mEcE8XECgUdDhQoKDejCPJu:zWLJlUeBf80WhtKDejCxu
TLSH
T15DE1B55A9E4C853F4100059BF0A16A1CD89F447BD312D8A6FCFF416E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2936	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337125465681277"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{7DC5C352-589C-4A8F-9EFE-D355DE7B23B1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2288	msedge.exe
2288	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3236 wrote to memory of 6060	3236	msedge.exe	87
PID 3236 wrote to memory of 3124	3236	msedge.exe	88
PID 3236 wrote to memory of 2936	3236	msedge.exe	89
PID 3236 wrote to memory of 3124	3236	msedge.exe	88
PID 3236 wrote to memory of 3124	3236	msedge.exe	88
PID 3236 wrote to memory of 240	3236	msedge.exe	91
PID 3236 wrote to memory of 240	3236	msedge.exe	91
PID 3236 wrote to memory of 4572	3236	msedge.exe	92
PID 3236 wrote to memory of 4572	3236	msedge.exe	92
PID 3236 wrote to memory of 4572	3236	msedge.exe	92
PID 3236 wrote to memory of 1220	3236	msedge.exe	93
PID 3236 wrote to memory of 1220	3236	msedge.exe	93
PID 3236 wrote to memory of 1220	3236	msedge.exe	93
PID 3236 wrote to memory of 2908	3236	msedge.exe	94
PID 3236 wrote to memory of 2908	3236	msedge.exe	94
PID 3236 wrote to memory of 2908	3236	msedge.exe	94
PID 3236 wrote to memory of 5832	3236	msedge.exe	95
PID 3236 wrote to memory of 5832	3236	msedge.exe	95
PID 3236 wrote to memory of 5832	3236	msedge.exe	95
PID 3236 wrote to memory of 5452	3236	msedge.exe	97
PID 3236 wrote to memory of 988	3236	msedge.exe	98
PID 3236 wrote to memory of 5452	3236	msedge.exe	97
PID 3236 wrote to memory of 988	3236	msedge.exe	98
PID 3236 wrote to memory of 1848	3236	msedge.exe	100
PID 3236 wrote to memory of 6008	3236	msedge.exe	104
PID 3236 wrote to memory of 4636	3236	msedge.exe	105
PID 3236 wrote to memory of 264	3236	msedge.exe	106
PID 3236 wrote to memory of 1000	3236	msedge.exe	107
PID 3236 wrote to memory of 1000	3236	msedge.exe	107
PID 3236 wrote to memory of 2288	3236	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff87ea5c188,0x7ff87ea5c194,0x7ff87ea5c1a0
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12181456127590757302,1708516266962896859,262144 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,2595960018088223145,2305220112160201462,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,7923890903851057021,5170705997449765111,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,9190707125596948913,17217091532063090879,2097152 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,5331256389383409962,18148788693305525020,2097152 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,17290619471229090090,17511761361859610705,2097152 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:9
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,7871558261154338220,11402161388458895325,2097152 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,6996612614992195053,15582325086423252228,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,14216177110972607024,12925361434695145713,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,15859337028385552245,6767253038508327688,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,15859337028385552245,6767253038508327688,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,9574581882840401915,17974522817347219004,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,1190716208127237957,12574437123764261038,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,6928084777668339311,4444039460913278369,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,687169426395534696,1728581209663181897,524288 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,4818552799388717934,633166619950720386,262144 --field-trial-handle=2140,i,8982599890888818729,13503918100641135564,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3b194fbd9802c262fc1cd9174a36691ea01838ec93a4d28104eee76473e78ee2
MD5 26bc4cf88958c77d21f54fbf6fb42d0a
SHA1 8fc1a405de0bb1d0d179d36d9592adb43f2f2c5a
SHA512 83fa0c5017336e84a583e2e2589301181411bb30355b9f16c3a28e51ba07fe22d6919c348624c0e5584e5cc94ca5551a83359408972935dc7eacdb9a4fbcc8b6
TLSH
T1FE41D84096747695FFB92772D9C036C736F58A84E6CBAE1305A5CDF99F0A3D483C4204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bb86.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bb86.TMP
Size 2KB
SHA256 ce28456028d2c887bbe0291034cc73b0c3ea5ec4c8ac5531491564fc695ff6ae
MD5 278bafd5132edb60cbcdf00ce7ae85ed
SHA1 97d66b32a0d95e977d379bb2a1afeefccb4eeb9a
SHA512 49b53a6f988378019084878d8ba9cda477b6121b77232fc4b0e2c24751933b42bd71c1216d6f98c62dc9718e1c7b8d038acc4273393c56085645c7fd056c38ea
TLSH
T12341C74096747694FFB92772D9D036CB36F58A84E6CBAE1305A9CDF99F0A3D483C4204
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 334150a2541034357f258c7e4a0b73d80ef1bb16f9a81067f9758fcf1046d056
MD5 79140fa512bdc0ea2eac213f6aee809e
SHA1 b02b78922b4b603a149fb1c1a613cc740169c56b
SHA512 e0171fc56689ca056541ff721c904748dc273d2013d5e602264914356ea23bf299e4339f667c4b659f6251c09205bab59f5205ed2a6bf7c74a4f6bd2b6eb08c3
TLSH
T12951CEF7C3E8867D890156F4AB186E1BCE1D0955532C3C56C8E4AE2FA3E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 08371be04f069decb337c53c2cd861765717206ac14a1bcaffd53c95282d4ac5
MD5 e1f720961891127499ee16c87a4f20e8
SHA1 227886f92a26d89bcf16dbffd5cc0a7d88fb7e40
SHA512 dffce984fd4bf6bd1809f2a76592aa07cfdea9fce62d997a20e4672e23cee6dfeaf63467d95fa37506c78c8896c4f109d1e4dac165af8601b2658259e2cdecff
SSDEEP 192:sxRcRvbD/fsjsXyYhMzoA8p4M/g6+WNIY2WclGiIgD7J:sxRcpD/fsjsXb9V/5IhF5
TLSH
T1A632C816AD28A93B5CCBD20DFB657F53D2FD5033A1941E48AAFC8A1C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 85d4f8defc540c31950216bae624d12ac7c39fef156eed1bc47640c4eaaf3b90
MD5 a690fc26db086bfde3be66790804677a
SHA1 3172d223bf41aa4a7da396cd48f34a0366300859
SHA512 002ce4fea82c40c7f566eb0598fcaf51f94914d6c8fbd693572d25b13d0619ab4a960076a062c5a200e470c3b29e8c76032a1ae7da8865e028a43cdec6b2d9a1
SSDEEP 192:sxR7RvbD/fsjsGyYh2zoA8p4M/g6+WNIY28clGiIgIJ:sxR7pD/fsjsGbrV/5IPFs
TLSH
T12332B816AD28A93B4CCBD21DFB657F53D2FD5032A1941E48AAFD8A1C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 727376cd96a224f65e01154cee9733420b0bbb98af258f924b85ba0f1c3b2395
MD5 718fb459829664b65e45d7c2c1ee81eb
SHA1 fdd810cda2bbd012fcdf41e69c67a0e18a18a17e
SHA512 f45790a93c648819835bcd6793e154345ba0cb241b39ce67fc88241594c11c75c765582102eae0cd868104f1fbfb079a0d636c58528db41c16812f497f5ca207
SSDEEP 192:sxRcRvbD/fsjs3yYh2zoA8p4M/g6+WNIY28clGiIgD1J:sxRcpD/fsjs3brV/5IPFL
TLSH
T1DB32C816AD28A93B4CCBD21DFB657F53D2FD5032A1941E48AAFD8A1C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a3c5843677c959094689bb726865c106f29a7a2af6034f77bb3252681ddc0dc2
MD5 2d1866523d5de07ff9225858cca3ef13
SHA1 2284ab99d9f230dd6bf40b868e0bdf8e6288e280
SHA512 5d5ba7172684531340ec841f99ec6566b2cdf287982e8e62385741d693eceb6f06fb3fca3629f31d5d3c02681b3d54d65d6e96a4824e7647a4917aa1bbce3984
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW1roHrB:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vg
TLSH
T1BFB2DA2F644CCB7E8FD00A9DAC596F977D9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4ec892652f3ce42da1fbd21e317f376424fe32c33367fbae212ea63fb06e6ae3
MD5 a09ae45a14f2b277ffff6db0104ac4b6
SHA1 cbd2e22e08fb6f025af33a394e54885392b52dce
SHA512 9c6d9d7d812e54e7e347805fa98d69f28eb9d2c987d0dda17e267174a3212824ce7b888e2402656f7b8863fd1ee7c844ef5a76c7d6e2ced372a468e8387c04c9
SSDEEP 48:K0bef7F99ebtAFISbeK9Py7PxRxKbJE5ISfKK9/11KxvaY89/jyLRAthrvzMb/KF:KUAgKbMYKhOyKe8KfKQaYKnql
TLSH
T19A91F101347B465038BE694991F6A71E024576B73219E62BBFBD04F39E6BE084CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 66bcfa5770aee4f2241f578de4d63f165b3e99e0525e113643b28eefc164bd6d
MD5 2b41bfbdd58daed3040c0b520caf971b
SHA1 ae16f9f4d93bc79bc090dc0d1de48c6d3676260f
SHA512 241aa1c2aeb5cd3312f2a1385306c1382dfb63c8bd4f2e5e09fc47236f76f43ab1161721b8487949f5fb9e263884059eb0230e4a7302fadfcff1483039158e94
SSDEEP 768:A/UxvxjgC+N3w1ogm1nVESIDmGA5b65Q92RQMPbIrggtAW:tZj3+N3wioAF65dQjrggtAW
TLSH
T1EC13C032ECA0ED739DB692D03647A35BAFF44563D0C959E849EA6F0D0AC76CD430781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6c61048d8742b02e109557db89a5e2918bcf036f82b83982b8210a83f41dc26d
MD5 897cf250294de7a7c27efa7cdbcef319
SHA1 80b5defac0238a12580776a7030a9a75a6b2c757
SHA512 241a2ca3cabd34fceb6a801230d018f15ba7598745259d931cb0917d64c0b9a64a8563fb09c601816f9440b90a1a9a258df935d8f36893daa003141c0578b877
SSDEEP 768:wg3wrogm1nVESIDmGA5b65Q92RQMPbIrggtRY:wg3wEoAF65dQjrggtRY
TLSH
T18DF2AF72ECA0DDB39CB992C17A87B21A6FF88163D1CC559458D97F0D09876CD430782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ba9629644e1905e21506ba2e836a37cedd4cc24df9fafddb0860c83e005f34b9
MD5 99e5d767ed55006003c5727c37417f08
SHA1 d7b4117e244418563f2a10cbc2089ee88963d45d
SHA512 182aa63f6da113861ba8598c4b75793b4fda9680640801d1fe93afadb96c6eaf84da5ac3bdb338768a2cf1e5e88e4e905b76f95a244d4fd0d13b083ec74c4770
SSDEEP 768:6W3/rogm1nVE/DmGA5b65Q92RQMPbIrggtRY:6W3/jAF65dQjrggtRY
TLSH
T179F2AF72ECA1DDB39CB992C17A87B21A6FF84163D1CC599458DA7F0D09C768D430B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b7ebbb913f197fdd0f3f512eaf28bbf08dcd56ca454d86017b03abfed471e378
MD5 ada7d4f023ee16f0da5d6da904f906fd
SHA1 95c9f088c199d06ddc62941f2e27eabffd3c2294
SHA512 5ad19573c4e02bee3507a5a22704ab52867d3f870fefbd0eb6b51104344795e713556633a571a878803ec768249f681a75c2afd1dc8c1f923ecf9c13d885d1c0
SSDEEP 768:U/UxvxjgC+B3bPFtgm1nOtDmGA5b65Q92RQMPbuFj0O:BZj3+B3jA3AF65dQ9FQO
TLSH
T15203C036ECA1AEB3DCF95180364BB35BAFF94473C1C555E049E96E1E06C768C830B85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df07fc3c-9c77-4ce2-9992-5ceb88d071b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df07fc3c-9c77-4ce2-9992-5ceb88d071b3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download