5dd3f4726d64dafa9a8e99d727f4ca3b82a1f8130c1479868f0080d46f2bf728

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 01:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_5dd3f4726d64dafa9a8e99d727f4ca3b82a1f8130c1479868f0080d46f2bf728.html
Size 147KB
Sample260913-b59jasar3t
SHA256 5dd3f4726d64dafa9a8e99d727f4ca3b82a1f8130c1479868f0080d46f2bf728
MD5 407683f7507a0b8da493c18a645ccde9
SHA1 e439d91416f2d89027b20f6c53cdb7d5b70c05e6
SHA512 2717166a45d1cdc9e0c45e10c1d42ea499ce2215928e7d072b4f0fd2799f06d64b8949d94856dc207a7ac8cfed2a159cdfcfc3322b5880c8410b560a1761d23e
SSDEEP 1536:MCxlYn+hma35RlqgY+UsAzyGuqQxTt0NohxVu0gbEaombEaoIxi8IxhFolMDrMx6:FNiQgNUZgdomdoIRIxKMDrMx6iMcH98
TLSH
T1B1E382A363208CE5EFFC6A7349E6496E3C2D0937980260B8D3EDDD999FEB51D0309855
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6020	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337374965756611"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{82325F8A-D1FF-47F8-B3BB-786DA4DE1AB6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1592 wrote to memory of 932	1592	msedge.exe	87
PID 1592 wrote to memory of 6020	1592	msedge.exe	89
PID 1592 wrote to memory of 3344	1592	msedge.exe	90
PID 1592 wrote to memory of 3344	1592	msedge.exe	90
PID 1592 wrote to memory of 3344	1592	msedge.exe	90
PID 1592 wrote to memory of 4472	1592	msedge.exe	91
PID 1592 wrote to memory of 4472	1592	msedge.exe	91
PID 1592 wrote to memory of 3632	1592	msedge.exe	92
PID 1592 wrote to memory of 832	1592	msedge.exe	93
PID 1592 wrote to memory of 3632	1592	msedge.exe	92
PID 1592 wrote to memory of 3632	1592	msedge.exe	92
PID 1592 wrote to memory of 832	1592	msedge.exe	93
PID 1592 wrote to memory of 832	1592	msedge.exe	93
PID 1592 wrote to memory of 5412	1592	msedge.exe	94
PID 1592 wrote to memory of 5068	1592	msedge.exe	95
PID 1592 wrote to memory of 5412	1592	msedge.exe	94
PID 1592 wrote to memory of 5412	1592	msedge.exe	94
PID 1592 wrote to memory of 5068	1592	msedge.exe	95
PID 1592 wrote to memory of 5068	1592	msedge.exe	95
PID 1592 wrote to memory of 4392	1592	msedge.exe	98
PID 1592 wrote to memory of 2712	1592	msedge.exe	97
PID 1592 wrote to memory of 4392	1592	msedge.exe	98
PID 1592 wrote to memory of 2712	1592	msedge.exe	97
PID 1592 wrote to memory of 1600	1592	msedge.exe	100
PID 1592 wrote to memory of 1516	1592	msedge.exe	104
PID 1592 wrote to memory of 5040	1592	msedge.exe	105
PID 1592 wrote to memory of 2296	1592	msedge.exe	106
PID 1592 wrote to memory of 4616	1592	msedge.exe	107
PID 1592 wrote to memory of 4616	1592	msedge.exe	107
PID 1592 wrote to memory of 4432	1592	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5dd3f4726d64dafa9a8e99d727f4ca3b82a1f8130c1479868f0080d46f2bf728.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffc0b54c188,0x7ffc0b54c194,0x7ffc0b54c1a0
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,15393536608479681695,9383318857487321201,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,5977873216569290313,3306125563213053682,262144 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,16570377877407476696,6721316278641458997,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:13
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,13032503512765872979,3558985361461925186,2097152 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,12481811036620819045,8480901959942452139,2097152 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,16811966933194820351,11881858779501732569,2097152 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4384,i,16084625110728389718,4418175494646997213,2097152 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,4423567561249167032,6243640426786591465,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,6011498069268841316,3501501180388340038,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,7003131808924826473,5376773996544734808,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,7003131808924826473,5376773996544734808,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,3332516638705801713,16512531138253138028,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,9492607155533387395,2423414836237335165,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,2525089539349469971,12795891682744025653,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,8209141496561526477,15814191452471115686,524288 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,14151841833159746499,753841742008734541,262144 --field-trial-handle=2248,i,18313168888803800886,7286912822006869378,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d49502c355b147f2940fb9a150fab4928bab776b046ac430251a74a9314fad49
MD5 2cede9b328c2e0bee40bc15b8124e838
SHA1 888abd16f3cbb4ae5d23e985c1c6d74daac3d68f
SHA512 460bf154bb6c31ec2ee064d4c3d8f56d49492ac83028c3291bd6284bfab0e36675d1234b4413ee13a26c893bedee2c839f657ecc55809443d66f8a2ff67f3302
TLSH
T1F35185A2B9A972D4FB6461B0CFE05DC37E36CD71EC83AE0705A4C4F84B463D8808C258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594e84.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594e84.TMP
Size 2KB
SHA256 036f079121b15cefb196c1029b3807323aac9bd08e1e59b0ad8a61d00d3ff945
MD5 ca87a42f8a63d5cce93e9169e98949d2
SHA1 cdd91393f52b7354fcad274731b4dc146e8aa5bb
SHA512 f1de1ef2008b22df3d8ff1b409617bbed6573abe1cded80e3bd272a9d24b0415671a6cb25fdd0c85ef1f940b3c755c3fa75c0b355cbc9fc2abc32a8cc5de2faa
TLSH
T1E85185A2B9A972D4FB6421B0CFE05DC37E36CDB1EC839E0715A4C4F84B463D8808C258
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18e75225-46fb-4556-890a-b81018aef8e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18e75225-46fb-4556-890a-b81018aef8e8.tmp
Size 3KB
SHA256 f84b84e9dd7672109929ec2675ef6b77f8565a54f9c8819ad5521d3fc7029f20
MD5 c585d2c23dfd8400bd3d28d5bda81b64
SHA1 053d967fba3b23ae3f6a2b2854cfed1f0e4047ec
SHA512 73cb6502b18717fa00198496f4e9667e38b5ba6ac9461a1c70cfba6bbd1f2dc129d07e4b2481fb8b4ac61429265c38f15e6833a65c8c82a0f41ed6e5f79bff0e
TLSH
T18661BDF7C3E8867D891156F4AB146E2BCE1D0955532C3C16C8E4EE1FA3E28B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3cbb823d11364234f0952ec9750a6d9a5334d0d4d5816c2d6cb84f74af88643b
MD5 2c1b11e05dfebfd1c6fd7ff848b299d7
SHA1 aeb20198382b88cbca480f19aca1f95c112de82f
SHA512 ac34f3b483d941016e84de11e218ea3f5595ec332d51d50c8dbc483b6c53244f6b39f9a5f03182c23a131796ccf8b675089b4cdab40d586fc5e151a656febee3
SSDEEP 192:sxRuReb2/fsXs/yYhtzoA8p4M/g6+WNIY28cJGNIgIJ:sxRuq2/fsXs/bgl/5IPys
TLSH
T1FD32A715AE28E93B8CDBD21DFB65BF53D2FD5032A5941E48A6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 474476fd5c6e33942c144c2441ef29da0f569cdb41bafadedc5f3c4e2ead30e9
MD5 7ea1d913687d377dec46095cc7a96f3e
SHA1 613bf9ff7d6a0563df08422fac6cb6508caef46d
SHA512 f2019e43123874ec8d73c2191d9a9dd7b1b6cc1a5b282996fbab6cce0f5aaa70831943129d378448373cfc3dff20bfb9694ed22cfbf9144bfd61601ad13f98bb
SSDEEP 192:sxRRReb2/fsXsayYhtzoA8p4M/g6+WNIY2bcJGNIgDsJ:sxRRq2/fsXsabgl/5ICy8
TLSH
T11532A715AD28A93B8CDBE21DBB65BF53D2FD507361941E48A6FC861C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 65502f78cbb153f6d1df05e88c6959d80e8ea55e365f474fc2f06e133a61d180
MD5 84fdb8b4e5eab34df44ba436ce720d98
SHA1 140ed9edbaba5634f65bf5974d890f35dbf9a706
SHA512 ab93327fbe062132c815e9a617b0e822350e76e04bb22947702a644802c9bd05948ec748bb4b1c3d4555da9df8d2623f55d088edf9e75b4f975f6a9769c07e56
SSDEEP 192:sxRRReb2/fsXs6yYhtzoA8p4M/g6+WNIY28cJGNIgDWJ:sxRRq2/fsXs6bgl/5IPy+
TLSH
T19832A715AE28E93B8CDBD21DFB65BF53D2FD5072A1941E48A6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 70f79dfd36cc3a5ddf4718a867ff8048d283e81841580781c663e5af64609f94
MD5 c0b67db687c10b31135716332daa7dac
SHA1 aa72a8d23c346795068cf9d6a42af2b0cdb26aeb
SHA512 76dc0c71bd14ab4a2ed9f144b4215e1f3cc31707550b4f6cda79a3e700f026f3a62409ed2e5a4fff1e5c7b635d7ee956f2178c1113e5478f7b39e2db6e8e18bf
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWlroHrM:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VR
TLSH
T106B2EA2F644CCB7E8FD00A9DAC596F977D9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d39ce0cafe4557390b2a20bd2cd98cc8faa01afad4afa7867d0fc13f3e7b4e95
MD5 8b45a81ab8dd69dbfd642525bd2a3244
SHA1 78260673ca551756f3b4cc65bc86572ca8e0eb2b
SHA512 afe5bc3b66e7bee068b88337b9e430e0f21b8896186df45bb194fdf5052592d109be84c55bd81d2338efbbb92ade5a10a2ed8dd9425e0463c4b1b659c5c0348d
SSDEEP 96:KwVCKGEiV/KKkAq1AZkAmOOuQ+X1GguKebGquSIgPd:QV4ZV7
TLSH
T133914F4532BB4201387D6949B0B69B1A43413273305DE72FBFBD10A28D6AF095EFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b9ed935af36ed1eb4799b7800ab3621d47fa33877c39e1160ddc77d58d71a141
MD5 943648f75db6d878dc03acf1da790652
SHA1 55d90b9f6792060a11740a4b0b3f8bf38fd1cbd8
SHA512 23682ae0072975ee9cef553510368ebb33b8c4bcef26fa5b01d07221b9ed3b225c815c3241dd09194e724432cd46ac8e3d910f4a60d5fa015e1ac796bb9e34c5
SSDEEP 768:yY3Xmgm1B9cNYDmGA5b65Q92RQMPbiVTRi9:yY3/4AF65dQ5VTRi9
TLSH
T155F2BF72ECA0DEB35CBA91C13A47B2026FF9816391CD4A9055ED7F1D0587E8A430BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f13b73b69ab8b8620fff829b30b4f3f025f754f2f1ca369d016b0aa5e8dedb17
MD5 247abbec55abcb5083ca4ef24c83457e
SHA1 2db86f151423a9add7a86824b7185390fdfe1a3b
SHA512 3e0dce5dd5838a28cfae9a7b39e2617803f1919cda7a590689ced1b969ed083a1c36c614e54fb9c7de86bce79490bc926633d1654696279cc9867977ade5910e
SSDEEP 768:XFQN3uwgymgm1B9cLDmGA5b65Q92RQMPbiVTRi9:qN3RAF65dQ5VTRi9
TLSH
T12D03BF739C90CEB7ADBA96C17A47B202AFF54173C4C99690A6DDAF0D01879CD030BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c6987f32fb49f4f654d8d795c5be01be9590a9eb159de90559dad3e7dd0847d5
MD5 62b30cf8885237e946c331b66c10a979
SHA1 bd231e5cd457da6f95a87b568fc98cd09c68e5c0
SHA512 9b0c5d51a1314eb8293a722cdcaaf9525c43e96981d52f4d199c3b5f60851a615509969736f900d10c917fcc9fe90300b3ed4c0873d1d9c158d2d3f52a5325d4
SSDEEP 768:U/UxvxjgC+B3nsgSgm1BTtDmGA5b65Q92RQMPbHFj0O:BZj3+B3st3AF65dQ4FQO
TLSH
T12F03C036ECA4EE73DCF96280374BA35AAFB84473C1C955A049E96E1D06C768D430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3aae1f7c-512b-45fe-80f6-6275d1410f80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3aae1f7c-512b-45fe-80f6-6275d1410f80.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download