2d7d7492ded1ac57a2443417707817e95028780f4ac0dc6d370138df8851dc6c

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2d7d7492ded1ac57a2443417707817e95028780f4ac0dc6d370138df8851dc6c.html
Size 105KB
Sample260913-dk91fasycs
SHA256 2d7d7492ded1ac57a2443417707817e95028780f4ac0dc6d370138df8851dc6c
MD5 541812e073f92418a3c05098e1700be4
SHA1 07931f7b0b5ca1b748aa27f46a6d77321e03d904
SHA512 3ae696a17c5d9269347f22ef7d58a9262ffcc45c47aadcb580b21d20cd956f22a4f0bcc2cd8768d51b62efe0a138375fca33e99023fe3a14dfd3df6a11b1f040
SSDEEP 1536:3Px4Yn+hrtXR5RSLUlLeC1hlvQzTtrNoBxaWtlbEaohbEao9:fqrfQlN1Ildohdo9
TLSH
T1C6B3928701604CFAEFA049B3465B58673D2C5437BC4791B9E3FD8FA72B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3436	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337423224126300"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{BDB07E63-39D2-4412-A384-1C5BD66A7B3F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5616	msedge.exe
5616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 3704	4368	msedge.exe	87
PID 4368 wrote to memory of 3436	4368	msedge.exe	89
PID 4368 wrote to memory of 2420	4368	msedge.exe	90
PID 4368 wrote to memory of 2420	4368	msedge.exe	90
PID 4368 wrote to memory of 2420	4368	msedge.exe	90
PID 4368 wrote to memory of 4664	4368	msedge.exe	91
PID 4368 wrote to memory of 4664	4368	msedge.exe	91
PID 4368 wrote to memory of 5184	4368	msedge.exe	92
PID 4368 wrote to memory of 5184	4368	msedge.exe	92
PID 4368 wrote to memory of 5184	4368	msedge.exe	92
PID 4368 wrote to memory of 2708	4368	msedge.exe	93
PID 4368 wrote to memory of 2708	4368	msedge.exe	93
PID 4368 wrote to memory of 2708	4368	msedge.exe	93
PID 4368 wrote to memory of 1456	4368	msedge.exe	94
PID 4368 wrote to memory of 1456	4368	msedge.exe	94
PID 4368 wrote to memory of 1456	4368	msedge.exe	94
PID 4368 wrote to memory of 5252	4368	msedge.exe	95
PID 4368 wrote to memory of 5252	4368	msedge.exe	95
PID 4368 wrote to memory of 5252	4368	msedge.exe	95
PID 4368 wrote to memory of 3428	4368	msedge.exe	98
PID 4368 wrote to memory of 4888	4368	msedge.exe	97
PID 4368 wrote to memory of 3428	4368	msedge.exe	98
PID 4368 wrote to memory of 4888	4368	msedge.exe	97
PID 4368 wrote to memory of 1904	4368	msedge.exe	100
PID 4368 wrote to memory of 3736	4368	msedge.exe	104
PID 4368 wrote to memory of 3388	4368	msedge.exe	105
PID 4368 wrote to memory of 5716	4368	msedge.exe	106
PID 4368 wrote to memory of 3472	4368	msedge.exe	107
PID 4368 wrote to memory of 3472	4368	msedge.exe	107
PID 4368 wrote to memory of 5616	4368	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2d7d7492ded1ac57a2443417707817e95028780f4ac0dc6d370138df8851dc6c.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffda034c188,0x7ffda034c194,0x7ffda034c1a0
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,10278803729203229812,6703139354234743359,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,11881200192832005488,6648439392446964097,262144 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,3162174805879715028,18061265117961295313,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:13
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,15854475347547010705,3002866808264125582,2097152 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,8765135909504006161,12767973253731137145,2097152 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,14452400648391007169,9740344275459201510,2097152 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:9
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,16282067484534025615,3342839487105160651,2097152 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,12516961383384155105,4193667498156564328,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,12978844072629741244,2343891021515677171,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,5293648350002547366,12627259275038369108,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,5293648350002547366,12627259275038369108,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,6085997812361324616,18363939150769743910,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,2505237433559158067,17569812821756469382,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,2094390727658789960,11297719059031478986,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4748,i,17427746737073191760,16872537103263322177,524288 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4852,i,2675286418212955900,16535144581850609250,262144 --field-trial-handle=2600,i,15817508919696402352,14767542810281995773,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d77fbc7ac97e668db1ab98ef25d2e293718d8d4669c42c489b22343978c5267a
MD5 b69505b52a952be6b5e8d086f14e1648
SHA1 4b1e23817dec280f01e71f2ad8d2b3424001798b
SHA512 0cf924be0238d4b79646d79f1a809cb6ff2bebafc76cc2cc9122abaccfae1d33d2a795c6712bf34110c8fb82f9e6a889bae177ba664ecd3e7e589902c404f3a6
TLSH
T10B615E6018A0B351F79B807489D5AC877638D2E46FAB3F42CB9ED8B1744233D72B2144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5988ed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5988ed.TMP
Size 3KB
SHA256 7705eb9845ab84ce7e423206c7569d99f47c77d748fd2a2328cf5929be834dc5
MD5 e9ba5e17558e3c2a83e73e63cad78399
SHA1 b352b596a8b6deb9d035636de0fb27dc9d687284
SHA512 f0308e907ba694d559262331c403757cb0da05b676310dd5e78e200a0673a5cfa6c6f54841c7ce851607a3f7d39a7edf481471056ea898fea12c0a0fd2af34da
TLSH
T1FD615E6018A0B355F79B807589E5AC877638D2E86FAB3F43CB9ED8B1744237D72B2144
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ab9a1af176bc530a8ee64a7be876e9f6c0ab8b3db588d7ad2fcaa2cac185e3dc
MD5 e42b57d7bb557cd23c811c388224c0fb
SHA1 f024ebab70077277b26f781ed867e2932e1a6992
SHA512 e643d5a8bcd162a865f735897587968663597ec6a6f413fc584ea1fb84d1840a222b7dbf2e1a61077e71b2b593fc3cb0638fc61d68387aa3b18f8beff87a7751
TLSH
T1CB61ABF7C3E8867D891156F4AB142E1BCE1D0959532C3C56C8E4AE2FA3E24B0E24099F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 389040267e40b1d3f2ec89c1e30a0f00eb4e04d6a6fd8c4beba93c3e5bf7225f
MD5 5e93483439c665323c10be4f301def76
SHA1 605124da109d4266d5837a7338d675e66bdb777a
SHA512 70c5bba4cf93a2144b80c5c9e28e258b0ec4d579ddb421053be3541f3a4f2acd89275ef486345d921580baeec06c13b944c61ba0681abf63bbfd4b3fd54c7366
SSDEEP 192:sxRaRybg/feJsi3mzoA8p4N/g6+WNIYckXtiTDG8IgIJ:sxRaKg/feJssbk/5IE9iTJs
TLSH
T168229615AD28A93B8CCBD20DBB557F53D2F95032A0D51E58AAFC861C14EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3fc7291432a5c404de57c640309e133e2a130903cd0c9e85f4d203c2c05329a4
MD5 b987505ff436c8a30c9634d7e49cb30b
SHA1 13459bdb8ce437cf29721495f92acd5f4866678e
SHA512 170475331414811d3ba71946b61dd80d36a8a23da3733e2fa213771ae07a96debda0a83c7b37aa72967db76cf0a357e7685154852aa5047bad2613e9dff95cf1
SSDEEP 192:sxRVRybg/feJsM3mzoA8p4N/g6+WNIYc1XtiTDG8IgDGJ:sxRVKg/feJsSbk/5IV9iTJG
TLSH
T17132A815AD28A97B8CCBD20DBB55BF53D3F95072A0D51E48ABFC861C14EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 40f3a8c394f7a49f8b71c1f4275608a1c339aab0ae5cde7fe617ac60b3b2f24e
MD5 dc1cfa2e41583107909589db56b5424e
SHA1 2504263067c5ab637a59c81c6479ce62a83c48f0
SHA512 9c1cf7aca3d306da9ccbad53319eb1ade42a9505a97c59e5cd24f1ff9b605b0b193a55178c28a0945bc49f9fe7e24045837975ea4813aebef4f7a2b33df9a54c
SSDEEP 192:sxRVRybg/feJsb3mzoA8p4N/g6+WNIYckXtiTDG8IgDUJ:sxRVKg/feJsrbk/5IE9iTJc
TLSH
T13C329715AD28A97B8CCBD20DFB55BF53D2F85072A0D51E48AAFC961C04EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5e8f16d5d8b7b38ca448a5970bc620c89552c9da6a0a4dddee3a0db91f84d057
MD5 5f526126cadcb86f3f36f4688c7b4be6
SHA1 ce5cb6e15131e9ef44d32aeed116c4f273a29082
SHA512 8b9c11e53ff71408618efc4cf510dafb48c1078668f329d22c4ee07e2b8f844850c683ea31e8c79c9738c23eecc4557880d81d6de9d287c20eaba5ede96bf178
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwGroMX4:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0VF
TLSH
T1FCB2CA3F644CC77E8F804A9DAC196F976D9802C79A588D4047FE994C03C77EA92298DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 846293354a5f08645fe25fefec46e93d625fb0db9833dc89e5e3ab6dfa4f6dc2
MD5 54e1b9a6785a86655c9391a2a93c9c6e
SHA1 a427b476fad3e75cc49d5ce7a0767f3edb2ca26a
SHA512 72d89b99b66d3a24c839630f5dd0d4268f1821f95400b18817b156f8073a00bd93d84d64b4d4ad90e31ef273b70aaddbbd70cecf606c83231b62f21c93593cb1
SSDEEP 96:KYlWKuAbq8AKF6xgjcQCmSwW+lj4IwKAl4qw84I1KgdB:84X4lB
TLSH
T10391012235B7031038BE794D94E6E76B03433A733225E62B77E915528D66E052DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a9d10d53bcddfff189bea445b6dea1ec20c0891be6f3f97e02d009ec1ecf97d6
MD5 deb43ab009f15feb791056b767f7eef6
SHA1 ce9f5fae95874e2b27dd6082afaa6d9f10beb846
SHA512 6b34ad54f14bc54c76403d60a67dc473cfc3303114f29988a37e4301b46f110b1852379def84827b6fd0d695be708a8cadea6d69f1b9b117dc975e0605d77c55
SSDEEP 768:DgQ3do3eieObItvsionUPO4Qp7cPAiSm2eo4w4cciGrTFlNcTRzw:DgQ3WuCiowQpYoimeoR4ccFFPcTRzw
TLSH
T160F2BFB1ACA49E736CF3D28575193302BFF081539AC95E94DADD6F0E418BAAA0317C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 19620b73e3eec5b7cf6e99e1d30e19c6f5fb5098b8b1999738aa74e73d249fb3
MD5 4c7bb4456f521c9c64e41d072cae561d
SHA1 6ddbf4d26ef0561658df2c89926dc651dad1d479
SHA512 065245539e0f332799fc9f7125c6a1c5b331da3d5c5234c0874f0383b77e229314c7e3a34bd9b20ccc59122be860710b7eca3f7f5e4eac03eadab595b54be746
SSDEEP 768:7dFQC39wgm23eieObItvsTwnUPO4Qp7cPAiSm2eo4w4cciGrTFlNcTRzw:7sC3ZuCTwwQpYoimeoR4ccFFPcTRzw
TLSH
T164F2AEB298A4DA77ACF3D785BA193302AFF04193D9C99E94DADD5E0D41876DE030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c64e5abc957440d46e0abac6925c3800bbfb4e863db31b255d929933116625d7
MD5 0b4e42f7b01d1305d4cf42e3bcddc118
SHA1 13ea4f36c5fd11e581b753e712fd32c14b3d3f0a
SHA512 8d6130bc436490a7109603d72a590598ae988388bc2ea56233f29ac17d7649401824a01e1f2c0dedb5e0a5996fb4036d7245e2508bc05ec5aaa5563385bca323
SSDEEP 768:vw/UxvxjgC+5j3pVfg8YieObItYjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5uAgZbCl:vdZj3+5j3pVgf2jFwQpYoimeoR4ccFF3
TLSH
T10003CFB598A8AE73DCF39684361D6342FFF041A395C12EA4CAED1E0D42877AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3084bd38-b6a3-45db-87bc-9658d6a73350.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3084bd38-b6a3-45db-87bc-9658d6a73350.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download