96bf7586e4560cb286d2736ff0ee665e87630f0839d405bd1e11c46f2d9ed6a6

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_96bf7586e4560cb286d2736ff0ee665e87630f0839d405bd1e11c46f2d9ed6a6.html
Size 105KB
Sample260913-d64qjsbr5v
SHA256 96bf7586e4560cb286d2736ff0ee665e87630f0839d405bd1e11c46f2d9ed6a6
MD5 bce7093ac2ccbeb097268e1d104620b4
SHA1 0c7ec5f0814c42eab0c658394e66fd21e43e75fe
SHA512 bfae427c76ca25b790ca9867839241eef8c91325ff45cb766dce04a8fd809dc3a82df27d7ea951cbb3ab817353115c63d28795fca3ba8bcaa33217c224e1eed1
SSDEEP 1536:kmxDYn+hGIsPRrwf2bxlgplYQSTtdNoXxxxHaD9rbEaoobEao/e:1PIQ4NKUxdoodo2
TLSH
T1CFB3958701205CFAEF6049B3465B586B3D2C5437BC4791B9E3FD8F972B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1864	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337442961652618"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{98BD69B1-A82F-49A8-BA92-625DC85D4D2C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5628	msedge.exe
5628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe
1212	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1212 wrote to memory of 5704	1212	msedge.exe	88
PID 1212 wrote to memory of 1864	1212	msedge.exe	89
PID 1212 wrote to memory of 712	1212	msedge.exe	90
PID 1212 wrote to memory of 712	1212	msedge.exe	90
PID 1212 wrote to memory of 712	1212	msedge.exe	90
PID 1212 wrote to memory of 2816	1212	msedge.exe	91
PID 1212 wrote to memory of 2816	1212	msedge.exe	91
PID 1212 wrote to memory of 2188	1212	msedge.exe	93
PID 1212 wrote to memory of 2188	1212	msedge.exe	93
PID 1212 wrote to memory of 2188	1212	msedge.exe	93
PID 1212 wrote to memory of 5140	1212	msedge.exe	94
PID 1212 wrote to memory of 5140	1212	msedge.exe	94
PID 1212 wrote to memory of 5140	1212	msedge.exe	94
PID 1212 wrote to memory of 5692	1212	msedge.exe	95
PID 1212 wrote to memory of 5692	1212	msedge.exe	95
PID 1212 wrote to memory of 5692	1212	msedge.exe	95
PID 1212 wrote to memory of 1508	1212	msedge.exe	96
PID 1212 wrote to memory of 1508	1212	msedge.exe	96
PID 1212 wrote to memory of 1508	1212	msedge.exe	96
PID 1212 wrote to memory of 5444	1212	msedge.exe	98
PID 1212 wrote to memory of 5444	1212	msedge.exe	98
PID 1212 wrote to memory of 3480	1212	msedge.exe	99
PID 1212 wrote to memory of 3480	1212	msedge.exe	99
PID 1212 wrote to memory of 6112	1212	msedge.exe	101
PID 1212 wrote to memory of 3256	1212	msedge.exe	105
PID 1212 wrote to memory of 5992	1212	msedge.exe	106
PID 1212 wrote to memory of 3564	1212	msedge.exe	107
PID 1212 wrote to memory of 4712	1212	msedge.exe	108
PID 1212 wrote to memory of 4712	1212	msedge.exe	108
PID 1212 wrote to memory of 5628	1212	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_96bf7586e4560cb286d2736ff0ee665e87630f0839d405bd1e11c46f2d9ed6a6.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffba30fc188,0x7ffba30fc194,0x7ffba30fc1a0
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,13160764743080140008,13083069237989464386,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,9908437173477506715,6729147993051731294,262144 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,7177585625274443149,13604058344118658820,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,10242124876879039527,6233984106477562585,2097152 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,13849946491553758248,14286266974409970959,2097152 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,16204462103452530788,3348990883730661430,2097152 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,7481372863704476002,13498628572422585140,2097152 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:9
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,13097026079492045391,11452249735345734520,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,9602620142184640313,3121299352954295202,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:14
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,12097501344738269435,3493235134841947046,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,12097501344738269435,3493235134841947046,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,6005199697363139508,8846052134533241064,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,13690712363549919207,12054115160234334393,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,16257232047955809378,1729702187974282926,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,11504145710248037602,8697462135565642322,524288 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,9375379642979186082,15279543627783193526,262144 --field-trial-handle=2292,i,14437843964866691991,11323394494255511790,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 90cd810ac0104f80a5444e3f415a768a27c62b280f986c5f12a93184dfd41428
MD5 834868820287a64dd98e05d5314b0670
SHA1 80680db6efbdcaf654f8290f35fcd5b942127dda
SHA512 92d3e339ef658103c6730b8a00d06ea86550f49e34a63794c32a2add1e5a36c37456952b9a7778eca9fb9e036b7133d3db162281ebd8e198cd67209b2b459a29
TLSH
T1DE41094B12B84867F79854378ECC8ED7B73CFAA191C3EE112694CDFA5E653748164704
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e412.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e412.TMP
Size 2KB
SHA256 495ea4b3072744edeedc59a0dcf2e7b8e119716cd11d14b71250bf54f99c130e
MD5 a86d8d5da2337da4eb6cc683723b5fe9
SHA1 cc180eaab865449a4bf9c9ae10dacf7adbf460f9
SHA512 d1898e981fcc4d0bb6a342f7c4eea9e03a2cbdb302b7fa17269166f44156b12a8b88657d1906bc29477ee0274e29b72abafcb26d06ac673a2df1f2302c6d9a93
TLSH
T15341F64B13B848ABF79854378ECC8ED7B63CFAA195C3EE112594CDFA6E6537081A4704
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a4e2bed6b455afd50abcfffe73843bca6464d2f1074f4d229245625f2b46dc54
MD5 31c7b46e1fc436acedc1b9dca25d6ccc
SHA1 1d1c7afe1eccffac8937c076fffdf0684fcab66b
SHA512 ed97f74539cc3502d10eec2c357f916a5f60dfb14233fb7abba24c0689773b4060dedd7e93de2b4bc70735693d99faa556ed525dc219d1428def98b05e2fd6e2
TLSH
T15561ADF7C3E8867E890156F4AB146E1BCE1D0915532C3C56C9E4AE1F63F28B0D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5d93c27596c5d886c8f76d032706db8acb0324208382a4eb708646588e04c50b
MD5 b6ae8955e4ec3b7b65a941107983fca5
SHA1 a78cdc0e0e2de9dc53117dbc6562fe7faa839bb9
SHA512 7ff5cd92641fa9698172ef81ad0b6a4d840949fe5db0cc585aef1365f57a2a222bc6791e3e29f62f32678da6135c6390d4527ab1e50c430175ac9e42574b1123
SSDEEP 192:sxR5RxbYv/fusdDLzoA8p4o/g6+WNIYueikGqHgIgIJ:sxR5rYv/fusdDq5/5I9s
TLSH
T128229615AE28A93B8CCBD21DBF65BF53D6F91032A1911E48F6FC961C14EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3ab75fb6497bad803ed39defafcb5968d198af7a6d3f45c46e9e9e19b9df1c74
MD5 2c9a514283b919b5b3b7929b20859152
SHA1 282091a9b90be70a5b6edad5a5abafceb9e4467a
SHA512 14d08056f28d38a4f74da18a5f160d7dc5b18b12d8d333cc27d8dc60a3618fc93b3c6dee386096d47e2077eca043111c304d419ecaa61baf89dc1e8b2762e581
SSDEEP 192:sxRmRxbYv/fusWoLzoA8p4o/g6+WNIYuGikGqHgIgDhJ:sxRmrYv/fusWoq5/5Ipn
TLSH
T1D932A815AE28693B8CCBE20DBF55BF53D6F95032A1911E48B6FC961C14EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d11f7b6da949c1f9f3c2113cec746df1cb9c4634b5f2e6468d7633b96093652a
MD5 f54fb676e0b4074be04317bfd269c5f9
SHA1 f01db5deabc43b8d9ed36991de4bcefe2ee7a94a
SHA512 8a7ba0d332466a86be79219f35b9fa59d72e494a3e3b2dd8c00e175afca414533519836c27d74c6112b540a419e2e8158976c93d420e89e36487c082d9a17e99
SSDEEP 192:sxRmRxbYv/fusWDLzoA8p4o/g6+WNIYueikGqHgIgD/J:sxRmrYv/fusWDq5/5I9d
TLSH
T18732A715AE28A93B8CCBD21DFF55BF53D6F91032A1911E48B6FC961C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 748d5f7a956246efdb8f35d26b49de67259b2a94bb73bedfc60c262f69e5a694
MD5 9db71fda16e740007a22573e1dd526dc
SHA1 8ab0e5c521e92bafb107538ab466fdfbc8d3149d
SHA512 b6b1aede859ab63b807ba2041aa08bae60f3946914912a6f91578e8ceb01bb79c6cbdda78cb74d3505cca8bd1a9a8f3365a949d9e05482590ff3f3a6383f36e3
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6urocbP:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VE
TLSH
T14AB2DA2B644CCB7E9FC00AADDC196F9B6D9802C796988D4047FE994C03C77EE911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2b90b54592667bd0d2c82ca0998decdf0dec5450ddb78caf76e6b89c2b742a2
MD5 03f774799b1b728e7e402f487df8c91e
SHA1 e403d61eee5baf4505fec4749b1e90ec28579d86
SHA512 94bc5d2a6edff1d8018dfafca8c4e2d69490de327e05b51aba64a3cbf7a016ad40e7c72e2e37e3546cfa6d00566cc243a8cd3681f366ecb38616c901159fc529
SSDEEP 96:KgbeKU4uiEIKRyzf87vdB101h6/rn0Kzxr10nvv69PpyHkjXj:o1fif87vdB1Wh6Dnjxr1Gvv69PpyHkjT
TLSH
T103910264323A1210787E792896F5BB2B564272773124E92F3BED1062DE66F040DFD6CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 e622f3154645b285b691b857f457ed7c274dc44a06b6140e15b4453813514a25
MD5 3b078435d40ebe4ba2c97bc275e8942e
SHA1 f7d5b2e7867b30466547885954bd4ba9aa5da64b
SHA512 c6e4f64f1bf8a7835505696d6091ec8d4f261aa69446d13a87ba7f4fdecfdf9becd9c818706003d26756a4124b2d9f43ce40d62b9c3caac86d0c87a077177ced
SSDEEP 768:5p/UxvxjgC++3qqTSO5YhLlMIYNa8S5oYklnA+HMgzm:iZj3++3JkHTWRdA8Mgzm
TLSH
T19E13B035AD94AD739CE693C5B74B6353AEF1522391C92DE88ADC1F0D06C72AE5303815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a531369d79835cf5a9f0fd322a5750679997f380b90befdf20c6816c9246871a
MD5 4dc484057e27f726add76368ab2be4df
SHA1 9b117ea9dba353603ec1a8dabb48d768424db887
SHA512 3a6c94bd81a832555fe65b948497d417c90b6e584ff6d94e56cba91d78bae90ec3f58fb3e52e3c1c447cd4f154d64e1e2333f6490932f8259fb0d0da572d741c
SSDEEP 768:5VL3NcTSO5YhLlMIYNa8S5oYklnA+HMg25:jL3ykHTWRdA8Mg25
TLSH
T164F2BF35AEA4D9B79CE693C5B64773436EF05223D1C92ED8C9DC6F1E05876AE0303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 61c22997a59ee3a106c2a795a977eb0b44f78ef1bd772cd6f13eddb5a4b534ab
MD5 0b3061c46888cf0050831b016b724d11
SHA1 c7376df67954a98a064e817427d6197bfb6ba4ba
SHA512 210b3ec2e6bc219ab469ef56bab7e70588e758ce91676caa5e347551dbb1125deee2e5cc071bfffbac9dfbc6ca27fada0d12f54274d67e2815c1c166a0ba181d
SSDEEP 768:Rks3McTSO5YhLhMIYNa8S5oYklnA+HMg25:ys3NkzTWRdA8Mg25
TLSH
T178F2BF35ADA4E9B79CE693C5B64773026EF05223D1C92ED8C9DC6F1E05976AE0303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 17d223e6aaaa82bce8c607285b5129b82a67fe1a0d8c51002d7bd27f6f27b8a7
MD5 6455c42552da1e6790f9821ac08d725c
SHA1 bbf98e5471819d1bc41a35a0462563365bbcbef3
SHA512 6e95a270e580f36be7b22855d348372b33fb162a040f219aafcd445ede0fda5114a76a33cd4466c4491af1217b9b9f040f20f41bf2190911a15a02a624f38826
SSDEEP 768:do/UxvxjgC+23WfGSO5Yh9JMIYNa8S5oYklnAaQSH8L4:nZj3+234Sk9HTWRdAXS04
TLSH
T1E203C03A9DA4A9738CF663C4770A6357AEF55263D0C16AF88AEC1F0E17C72AD5303451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6d207bf-8b67-4a72-b1ad-8cbf7d00d5d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c6d207bf-8b67-4a72-b1ad-8cbf7d00d5d9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download