a59ba396685a18a56e22ab5e58688ca998e58a17e1cb9e611fbfb690899ca1c6

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 02:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a59ba396685a18a56e22ab5e58688ca998e58a17e1cb9e611fbfb690899ca1c6.html
Size 105KB
Sample260913-dfct5sec22
SHA256 a59ba396685a18a56e22ab5e58688ca998e58a17e1cb9e611fbfb690899ca1c6
MD5 aff60857d12d43316619b7d6f86ace82
SHA1 0aefe0c45ddb181691e5413b693cb6ab1da17c7a
SHA512 014b87db5556773d1be40cfd9d320b56a48ef2f9c4f686a348e78bbc5e11ea09ec473d945b995e25d8ee8176666c26340774a57fa50958aaa2b0b180bb253145
SSDEEP 1536:3PxgYn+hTi+lRlVjLt8alqQATtqSe1NoXx0UaxbEaoIbEaoq:fWWQzSe1Nf5xdoIdoq
TLSH
T1ADB3928701205CFAEFA04DB2425B58673D2C5437BC4791B9E3FD8FA72B45DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6000	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337418085766768"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{D091BEF8-2F70-4FE2-AE33-3DBD0B1D1223}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3340	msedge.exe
3340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4500 wrote to memory of 1892	4500	msedge.exe	89
PID 4500 wrote to memory of 3552	4500	msedge.exe	90
PID 4500 wrote to memory of 6000	4500	msedge.exe	91
PID 4500 wrote to memory of 3552	4500	msedge.exe	90
PID 4500 wrote to memory of 3552	4500	msedge.exe	90
PID 4500 wrote to memory of 2684	4500	msedge.exe	93
PID 4500 wrote to memory of 2684	4500	msedge.exe	93
PID 4500 wrote to memory of 2472	4500	msedge.exe	94
PID 4500 wrote to memory of 2472	4500	msedge.exe	94
PID 4500 wrote to memory of 2472	4500	msedge.exe	94
PID 4500 wrote to memory of 5748	4500	msedge.exe	95
PID 4500 wrote to memory of 5748	4500	msedge.exe	95
PID 4500 wrote to memory of 5748	4500	msedge.exe	95
PID 4500 wrote to memory of 5552	4500	msedge.exe	96
PID 4500 wrote to memory of 5552	4500	msedge.exe	96
PID 4500 wrote to memory of 5552	4500	msedge.exe	96
PID 4500 wrote to memory of 4852	4500	msedge.exe	97
PID 4500 wrote to memory of 4852	4500	msedge.exe	97
PID 4500 wrote to memory of 4852	4500	msedge.exe	97
PID 4500 wrote to memory of 6100	4500	msedge.exe	99
PID 4500 wrote to memory of 6100	4500	msedge.exe	99
PID 4500 wrote to memory of 2080	4500	msedge.exe	100
PID 4500 wrote to memory of 2080	4500	msedge.exe	100
PID 4500 wrote to memory of 1404	4500	msedge.exe	102
PID 4500 wrote to memory of 916	4500	msedge.exe	106
PID 4500 wrote to memory of 5312	4500	msedge.exe	107
PID 4500 wrote to memory of 2788	4500	msedge.exe	108
PID 4500 wrote to memory of 3236	4500	msedge.exe	109
PID 4500 wrote to memory of 3236	4500	msedge.exe	109
PID 4500 wrote to memory of 3156	4500	msedge.exe	111
PID 4500 wrote to memory of 3156	4500	msedge.exe	111
PID 4500 wrote to memory of 3340	4500	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a59ba396685a18a56e22ab5e58688ca998e58a17e1cb9e611fbfb690899ca1c6.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b4,0x7ffe3edac188,0x7ffe3edac194,0x7ffe3edac1a0
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,17454780600448051485,7685732370053863106,262144 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,13803912366814003319,10946320302746533334,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,6081554941262617815,11204445030241038253,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:13
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,26846054478224620,7865462509061806651,2097152 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,5561290845890191190,17940144378626469963,2097152 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,10560253551564643602,8478392696632419108,2097152 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:9
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,6619874082318469040,13485447312699710521,2097152 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,8485268824140154004,15358030642710119298,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,1753588679778443141,6818003948378188774,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,17599932700910227431,10060988073962084108,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,17599932700910227431,10060988073962084108,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,16527208445091211384,17548410234663427845,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:14
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,15243402921378289670,12520501119429703177,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,8609906339725723208,3042853178186384550,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,7567223722579900623,1027036644058930037,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,9657646062857205640,7868555934743233911,524288 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,11782319546062437437,5665719757548137800,262144 --field-trial-handle=2116,i,11272150674149210466,4809287855825913366,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a3857f2439df465c08025611f4ce279e20125ab509236b9a27be1f46840cfe1c
MD5 dab9b7649395d1b78cb539ef8101960e
SHA1 30ac069a74585d0fd9c95cfd084d5876c27f6614
SHA512 da70030ed5579905f31cba63dc52ee0b0b35e40233b1b756bd09c91afd1a3303841061a614ae8787cdaabb06305325137b06c1317a34c4c7e0505e5d5886c5d4
TLSH
T19B619869A280C0B5FB5E0474D9DF8D973A34DA8FECC31F520698D43A64C63278758758
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59745b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59745b.TMP
Size 3KB
SHA256 2407229fc47fe7403eb9d4ea8e6004363c40c6f8cf5228612694b746e4ce63f9
MD5 04adcec9056eea34ac2ae18163a45688
SHA1 ae018b4a1daa0c00669758e630e0a6668cb841cb
SHA512 6e8349af726404f59331fb19d273df023988851b84398a8f5f7b4ce40deb63a0bc6b9aa9c9ee6cb6e209e77fb2152b59ad5b2aa01e7987d60abc80892c391c34
TLSH
T1B361C869A680C0B1FB5E0474DADF8D973A34DA8FECC31F020698D43AA4C63278758788
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f92fe176a33b39c21ed1c7698e9368ccfaada359bbfac2ddc61de16f6839fd00
MD5 11ea459d43807eec75bf8a985776c536
SHA1 7fc0b5a08b236bb023be0bf50c06e758e230090d
SHA512 5c57f09013744849f0706aab9879c2158a95501c94134d9476881e26415118510fb40d5beeb2048f175d9381bc6cde440fe1ec65bf9393808790da06176aec31
TLSH
T1EE619DF7C3E8867D890156F4AB156E2BCE1D0915532C3C56C8E4AE2FA3F28B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b1fb15736bc57a9acb2ee195186a947c2f9ca139272a2d5fa7759cbac8bf377c
MD5 59c75e96b8c80c7ffd7046ff698b5050
SHA1 18ebfb62175fa4d025fba2fe58e504bf78d8e9e3
SHA512 e67df4ab923cfe77a8d85912734afc30891126e628b306fbefd271aebbb189db4e7053fa87cdc8d1fd11364ce531a9a51d0e48e1618c30d120c85b12782a94b0
SSDEEP 192:sxRJRyb2/f0s8aPzoA8p4my/g6+WNIYU2RVRfGuIgDAJ:sxRJK2/f0s8amw/5Is4
TLSH
T1D032B915AD28A97B8CCBE21DFB557F53E6F95032A0D12E48B6FC861C14E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 694e5211869f10510bc4c558cab6f0cd9535072cfee025ba3bc5ada35a7e0602
MD5 458a96738dcdd9e7c2a43e4b15a0331c
SHA1 3eacb8fa49c85445743552655eea53aa943be8c4
SHA512 4fc0d5659d581eecdc75aaae745f19b44742cfb353db487ac448646bbe35a2b6dda7585db88d09f2b297fbef1499dd5afd435bc22003874bc7bfaa86d22c100e
SSDEEP 192:sxRORyb2/f0sHaPzoA8p4my/g6+WNIYU2R3RfGuIgIJ:sxROK2/f0sHamw/5I8s
TLSH
T1542297156E28A97B8CCBE21DFB557F53E6F95032A0D12E48E6FC8A1C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b010d7360c6e2f91339069ffc985bd7a6f34d69197b8882b95eaa2cd6184cb6e
MD5 fecfdbc83d9110137b9cfe0db21ea581
SHA1 229e9c29b8657dcc5611b395b778bf4d60a4de6b
SHA512 552a7e58d17dfa9d537e444b09d6d8bfe993583e97ab1805146829dda84712449c79c7f31c01f2cc3726a1ec0337072766cb875df4efbf3b36e0b22a0ca4866b
SSDEEP 192:sxRJRyb2/f0sKaPzoA8p4my/g6+WNIYU2R3RfGuIgDaJ:sxRJK2/f0sKamw/5I86
TLSH
T19132A915AE28A97B8CCBD21DFB557F53E6F95032A0D12E48A6FC861C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e38f530c14ac598bacc64b4dbf9ee5c64b1d769c0e5c278026be06ba35bc79cc
MD5 0f888c99333c893cde720c8cda146944
SHA1 dbc241bf8aab0ada35c11dd0f5a6ef306aee3788
SHA512 9f394f44c39e0ba7919fd960f8dc43d4318feec1cccfa21764b14b098ed87996268f7fee88478f49ca92e39d434765fc07e853a55ec3988f478664304bdc4a9f
SSDEEP 384:64qajXwfCtgmcFfsO7nKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+a9mWRu4ro5:6JajXKWgm0fsO7n8F1+UoAYDCx9Tuqh2
TLSH
T170B2C93B640DCB7F5FD00AAD9C19AE976D9802CB96588D4047FE984C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 c6b158ff9304197bd4e1d8c76ac42089bff0aad163b6a7ff17cc8728eab138bb
MD5 ec9534c104970775e38dd8c7f4ef666b
SHA1 f204ffacbb45a46df4a98156d638ee8e5527ab02
SHA512 874cad949d4eadfa8af4df700513a7d9ab2a74c77df08c5987200297da2241d3a8b2098e259a773bb731425901bcddb098eb432faa623719013c24729d3d5262
SSDEEP 768:p/UxvxjgC+834oIMKvHxE57Y0GZxJsXBdK8Z3cTRTn:cZj3+83eQ70/JsXf7FcTRTn
TLSH
T1ED13CF30A8A49D675EF7D291360A3797FEF446A3C1C60D6889ED9F0D05CB6AD030791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 539abd10735a0ff8990b787dfb87f88e07d3df133deb003d44ae25587928e700
MD5 3c519c138b43e8e1c58bc7d1db8bb960
SHA1 18417f54d74b7db3e6f141ebde28e71dbd8e6907
SHA512 f4e1306b0f58b7f9268ac168f17a72f299e105aaadc2ec86147034888dfc95c996b2fb17371da71df599c62dbc8e39b3afbeb41f52e3ef12e78c53f374958027
SSDEEP 768:1B3kHqMKvH2E57Y0GZxJsXBdK8Z3cTR3L:1B3lt70/JsXf7FcTR3L
TLSH
T18FF2BF30A8A48E775EF7D2D57A0A3643BEF482A3C6CA4E44D9ED9B0D04875AD0307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8d43b76aabc70e0510625d1ee0a673c93d744c41af8ae7d15808bb3cf393611c
MD5 c2f4ef24b64ceb94339718c23df6ccf2
SHA1 a86dd50971d2a37365df234f8973d7a105f2a43f
SHA512 603caf1e94dcd648b68c748a7ebe88ccb2313b2a18a12a92e0702868eb1c5976023159d670a930faeb386b935bd5085a2e404f23f4242be145150f7e1492a263
SSDEEP 768:A/UxvxjgC+I3LoDKv3E57Y0GZxJsXBdK8lYSHUPpMs:tZj3+I3E70/JsXf7qSfs
TLSH
T1AA03B034E8A05D775DF7D3903A0E7397EEF446B3C5C55AA88AED6B0D028B26D030395A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e73a84a4-3c65-461c-a67d-5a7e733557fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e73a84a4-3c65-461c-a67d-5a7e733557fe.tmp
Size 34KB
SHA256 5d30cf7467993e993c0b2a9dce0d27a0055c915334d2d9e619b8c305bbfc8204
MD5 60f8fc484386e40f632c3e514bb3f01d
SHA1 2ae8c86d74c99482fc2aefaa0f00973876b7cc49
SHA512 a8f200cd1661f13c11d110c695e5b81fc5ac1f1853f6e855f4cb87ea28f9572561399ede4a227ceb573f00c1d97cbaab20415d2f3fbd0418eb798a472ec925ca
SSDEEP 768:Vp33HqMKvH2E57Y0GZxJsXBdK8Z3cTR3L:Vp32t70/JsXf7FcTR3L
TLSH
T17DF2BF30E8A48E775EF7D2D57A0A3643BEF482A3C6CA4E44D9ED9B0D05875AD0307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24071b49-093d-4924-a7fe-98cade4f5257.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\24071b49-093d-4924-a7fe-98cade4f5257.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download