fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 01:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8.html
Size 139KB
Sample260913-cb94eade99
SHA256 fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8
MD5 d5286dbc8ec07fe72e9b9f3f428bb6fb
SHA1 e0b001267660a62c014e3f3f37cc497d6bc70f0c
SHA512 0d18aadc9bb9645e0c0d43793b6247f56ded9500fa5d896038ab1e8fb4bf49840b77c0e7e5ac8f52d2faedf1adcffff04b3234ea4ef4f7d1413b055bacc9ce90
SSDEEP 1536:IPxaYn+h4w+2Rv+fwzlB6etenl7QDTtkNocx5L6KTbEaoQbEaowVP6Gy2xZoNQV:28iQSN7uKTdoQdowp6DuZWQV
TLSH
T1A6D3849763608CE4EFFC19B349D6096F3C2E0537980250B8D3ED8E969FBB91D0349999
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
480	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337381269556120"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{4B3BC7BC-5766-4067-825D-7427B8E5AD77}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 2868	3012	msedge.exe	88
PID 3012 wrote to memory of 4904	3012	msedge.exe	90
PID 3012 wrote to memory of 480	3012	msedge.exe	89
PID 3012 wrote to memory of 4904	3012	msedge.exe	90
PID 3012 wrote to memory of 4904	3012	msedge.exe	90
PID 3012 wrote to memory of 1004	3012	msedge.exe	91
PID 3012 wrote to memory of 1004	3012	msedge.exe	91
PID 3012 wrote to memory of 3120	3012	msedge.exe	94
PID 3012 wrote to memory of 3120	3012	msedge.exe	94
PID 3012 wrote to memory of 584	3012	msedge.exe	93
PID 3012 wrote to memory of 3120	3012	msedge.exe	94
PID 3012 wrote to memory of 584	3012	msedge.exe	93
PID 3012 wrote to memory of 584	3012	msedge.exe	93
PID 3012 wrote to memory of 296	3012	msedge.exe	95
PID 3012 wrote to memory of 264	3012	msedge.exe	96
PID 3012 wrote to memory of 296	3012	msedge.exe	95
PID 3012 wrote to memory of 296	3012	msedge.exe	95
PID 3012 wrote to memory of 264	3012	msedge.exe	96
PID 3012 wrote to memory of 264	3012	msedge.exe	96
PID 3012 wrote to memory of 3124	3012	msedge.exe	98
PID 3012 wrote to memory of 3124	3012	msedge.exe	98
PID 3012 wrote to memory of 4520	3012	msedge.exe	99
PID 3012 wrote to memory of 4520	3012	msedge.exe	99
PID 3012 wrote to memory of 2412	3012	msedge.exe	101
PID 3012 wrote to memory of 2860	3012	msedge.exe	105
PID 3012 wrote to memory of 5272	3012	msedge.exe	106
PID 3012 wrote to memory of 5072	3012	msedge.exe	107
PID 3012 wrote to memory of 4088	3012	msedge.exe	108
PID 3012 wrote to memory of 4088	3012	msedge.exe	108
PID 3012 wrote to memory of 4796	3012	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fd4d4dfc6aa4bfb94887749af74808b2f000b7d2cc6d6f1b4b3937f1194b46f8.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd0cc3c188,0x7ffd0cc3c194,0x7ffd0cc3c1a0
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,2373808448683406055,18099581048583315644,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
  2⤵
  - System Time Discovery
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,13598511987697703839,120612787117587242,262144 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,4934738974860146853,388598898598621995,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:13
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,1882315873351507421,8485676087057093470,2097152 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3700,i,10417857472630294121,3731868000140445452,2097152 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,7552831588259391982,17404943615052526778,2097152 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,4416546086018523819,3620210832558091279,2097152 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:9
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,3198495420059234206,17030430818384336846,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,4437233212822647024,5916156995700390859,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,15858738662141131618,16591778048061662751,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,15858738662141131618,16591778048061662751,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,7992245570526471540,5841580950033817367,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,8202095253299735642,14131945003264567278,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,9098885390863636379,17414779219143112143,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,14225504674890260082,2729686005115991548,524288 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5756,i,7226596285290014689,10901294588246513853,262144 --field-trial-handle=2224,i,9569267630817978166,16522854351497210337,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2d4d242a9b5276d784d8ab4e8072c2b41cfbae934dcbdecb160bdbb62dcc436b
MD5 e6f79817d183fdf7a209df6c8e8eab07
SHA1 822a5becf8d1208e2aee4201aa0639e114343eef
SHA512 c20dc6901b3bf998fd50d057ac58e74550a74b5ca1ba5a68f72afe42f9bb548cf4a210b0adf718a5e91ac38a251eb87555e3b1a3ab4018c850f26f5700fa17d2
TLSH
T1156172846E60424DF76A1CFBD3C14CB7F6366D8B52838D22E494EE78A423F7D7982064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ee82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ee82.TMP
Size 3KB
SHA256 5b8835d1e51e50f9e752f3095b914fc3c25336eeb44cd85aebe92e47155406dc
MD5 ab2547dbf65afd5ba19d3e4353a343ff
SHA1 24d05177618d7bf3b52ad422f2273dd17cd96684
SHA512 3c33beb46f31a5bf6da869499c847af49ebaf668a6b4408517d4000aa49a5c818970ca1bb3928c7aa4882843c7c24748b1d76b795255aba7d8edeed8bbda502c
TLSH
T15F6171846E60424DF76A1CFBD3C04CB7F6366D9B51838D23E494EA78A427F7D7982064
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d93e0ec8e23e6bdfb00bfcf484c56885ccccd1726caeb629032cdab9cde6355e
MD5 9fc6bc6617b64b0976b7e3c047a8e25d
SHA1 a9597759f73e5630bc0139e054b318674af9a164
SHA512 cca93d6ae78a542c04c1b79fa4ad53607008259a1df9c327c3bb2a6c39870914984601802f5adf772a5a06c7bc4a224d3a1f87fab77ac2a7892dfd0a68758701
TLSH
T18D51ADF7C3E8863E890156F4AB146E2BCE1D0916832C3C56C9E4EE1F57E28B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 43678f345351b3a46cd6fa0300801d669c96a97ae31d2dfb08db2247a80678d3
MD5 9b2adae99f73c3043aeffd884a192638
SHA1 0e9e8439fb8a35085189d2300d1a50da61a6e44b
SHA512 87b8942f526f88c4d5c0478ee443d554c7c1339fc5c6adbb44e54606d1ee92b240ef3d6d2e96a56f5952b42de6a392eda84fc1be184522b64c4084e368611841
SSDEEP 192:sxRPRUbL/fjszdzoA8p4G/g6+WNIYojUGZ+IgIJ:sxRPEL/fjszQr/5IZ2s
TLSH
T18F22A515AE28A97B8CCBD21DBB65BF53D2F91432A1911E48FAFC861C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fdbfb01ad5529d7f5dcf4f43f1b9df14e95371cbfbca00f1b0a2c8c5bb223624
MD5 96ff530a2ede47d868afda787b40a6dd
SHA1 9f33f120b3d56388c5b3e435c15a90795dfe1ee0
SHA512 a78dd6827434924a5ba3fc99ea25562f089cb8d748e2d2e65b6f9f1bd55d708da995cff9eda64f2dad90f47fd008656943e4219862a8c4f4211fe043a2afc84f
SSDEEP 192:sxRsRUbL/fjsjdzoA8p4G/g6+WNIYomUGZ+IgDNJ:sxRsEL/fjsjQr/5IC2D
TLSH
T14032A615AE28A97B8CCBD21DBB657F53D2F9503261911F48FAFC861C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7ec2396f0cfa537a0afaa817862d438570f2b21579addeebd862fdc043e91079
MD5 80b03a1c48dfed2d834ecde5ff692f84
SHA1 bad82d90239128bb3ff4cc781ccac9f63122c93f
SHA512 ed98423bffdc00de515d19bc3ba19d954b591334316dacae1b2b238343b501452ed12871be9be41c5646d804eb6a2b8bd22511fdd241245561d753d37f8ad750
SSDEEP 192:sxRsRUbL/fjsddzoA8p4G/g6+WNIYojUGZ+IgD7J:sxRsEL/fjsdQr/5IZ2p
TLSH
T108329615AE28A97B8CCBD21DBB65BF53D2F9143261911E48EAFC861C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e05b2a99b1d0639dca76067ccfdb99982ca723405c7a4f19a547267640158f50
MD5 3987d9bbd9cf5b1fe7d4a726d321059d
SHA1 feb777c040e3b9e13c28c034d25b59b145292316
SHA512 775ac620d77a8d2648e0d48bdd28a29191e8e84b5325d8231a29ad387a36607e68a174fdb718ecd797b026810f92d60bc3b27f12f91444229bf39f408ff4fadb
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUDrondm:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VZ
TLSH
T183B2DA2B704DCB7E4FC04A9D9C196FDB6D9802C796588D8047FED94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1a3153094c5964ede789ba343fe43c4809b3a7e1384f27bb27764a4d5fd67fc6
MD5 9638f1ce2124e96e29d2c65ee2b2fbe7
SHA1 77c36f24a2cbc583eb199bdcf78d9079bfc97a00
SHA512 2f7d1687c6638b67a7f97b9b0de0c7e1a9536777df153f4d773fc79e69bfc5a09da4421b264140f7462bdd563bcb4d1374d354e75024627f9b95351368bad7d9
SSDEEP 48:KMb2XbVdtmT9oNIabmKVj9xmRz2oAB73yD5otJLnzUTHKfIaxUKVR9zURJEoKrLO:KssQKhiiia4KbacpmKK4KX
TLSH
T13A912269347F1A50797E3548A1A6975F038237A73168E62B3BED00638D6AE050DFCCDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

44637849-7b69-4b67-a0f4-8ab006507a48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\44637849-7b69-4b67-a0f4-8ab006507a48.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 8fcfc66c18a95943cb0507faff40306ae2522a3c21b3141b0f7e45670240a7a8
MD5 cf835ce5f4f5f0d39740e86fb69dbfc3
SHA1 3b03df65549b833d685b87d55cb2e352b6ef786f
SHA512 2137aec62d62c6852b5fcbf1ec3ccd554bdef08f38d2695bd7e2aa53276e48a99978acba560a5e2e6c31abee914ac1067c758b881ba3eff3fd675e66882d20a7
SSDEEP 768:N93UYeOOCY4f/9OA9at01j0iq00+IaiBcTRF3:N93UckCHq00NaacTRF3
TLSH
T1A3F2BF71ACB1CE73ACF6E2C5B60673875FF44653D6C94A80C9ED2A1E044BAA91307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 698e4dcdd7978266944733affa64ba67315ffd124dc7c4c4eb2574b3227f6e8e
MD5 24ced5d40d3c469ee91ad8a9e131dae5
SHA1 c8353d2034d5a21532f3b80fc5ae614a32f93558
SHA512 b9902280c1b724538f762101dbd79ade94b727098e1f9501a3085c10831f858713fc26a9501f4019ae10cc92728b5dc34103cbe3b202d9b4cd0ae3101cdd5ea7
SSDEEP 768:hFQi32wgw/eOOCY4b/9OA9at01j0iq00+IaiBcTRF3:wi3Jb4CHq00NaacTRF3
TLSH
T13803AF72ACA0CE77ACB6A7C5B60633479FF44163C6C99A90DADD290E004B5ED1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 81d185dc1344db8a3af3e5e2de910459606fdcbbe535474281257bb2182ea8fb
MD5 2731d2646e36b16055914d6004b0ca90
SHA1 5818c2cf783cdcb03fe0a816985f26fb1a72ace7
SHA512 8bea041b5ba08abdd066ade71ed1d959283ba39ff058e730835da943164236bcf8982e65b2098d03dc8c3ae6edf556842c331cd671f94f1d6deedd58defea4b0
SSDEEP 768:X/UxvxjgC+H3LXrOOCh/9OA9at01j0iq00+Ia2oSHxRz:KZj3+H3LIOCHq00NaTSTz
TLSH
T1E303C031ECA19D779CF7B384770A638B9FF44663C6C56A9049ED2A0E01876AD1307CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ac1303e-df1b-4d6a-a53c-2d3084b56353.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7ac1303e-df1b-4d6a-a53c-2d3084b56353.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download