13d0f5aedeb6fed5bf50725ba58b67f8e989b9ea606d9adbc40568a90136ed09

Analysis

max time kernel
149s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_13d0f5aedeb6fed5bf50725ba58b67f8e989b9ea606d9adbc40568a90136ed09.html
Size 6KB
Sample260913-e6r77afb26
SHA256 13d0f5aedeb6fed5bf50725ba58b67f8e989b9ea606d9adbc40568a90136ed09
MD5 a7266a3ef0fe6fb1002bd6047b7a3198
SHA1 372dc63d4f02b0c832b71cda6ab82b41d2dd6f68
SHA512 1819299d58d1cc37560cde0ab6ce28428a2fd10e43a8e36f3e1bd35b6a1d2249bd4c81f9bd729f2752801f4661b34c60c6f28d409a3745e824522b921cd86b10
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69gEcE8XECgUdDhQoKDejCPJu:zWLJlxe3f80WhtKDejCxu
TLSH
T1D3E1B55A9E4C853F4100059BF0A16A1CD8DB447BD302E8A6FCFF412E3FD9EAA45375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4396	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337476186213797"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{3635B263-9E14-4A80-A82F-B917E814F080}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3688	msedge.exe
3688	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 3540	2672	msedge.exe	87
PID 2672 wrote to memory of 4396	2672	msedge.exe	88
PID 2672 wrote to memory of 4620	2672	msedge.exe	89
PID 2672 wrote to memory of 4620	2672	msedge.exe	89
PID 2672 wrote to memory of 4620	2672	msedge.exe	89
PID 2672 wrote to memory of 2276	2672	msedge.exe	90
PID 2672 wrote to memory of 2276	2672	msedge.exe	90
PID 2672 wrote to memory of 1572	2672	msedge.exe	92
PID 2672 wrote to memory of 1632	2672	msedge.exe	93
PID 2672 wrote to memory of 1572	2672	msedge.exe	92
PID 2672 wrote to memory of 1572	2672	msedge.exe	92
PID 2672 wrote to memory of 1632	2672	msedge.exe	93
PID 2672 wrote to memory of 1632	2672	msedge.exe	93
PID 2672 wrote to memory of 1760	2672	msedge.exe	95
PID 2672 wrote to memory of 6056	2672	msedge.exe	94
PID 2672 wrote to memory of 1760	2672	msedge.exe	95
PID 2672 wrote to memory of 1760	2672	msedge.exe	95
PID 2672 wrote to memory of 6056	2672	msedge.exe	94
PID 2672 wrote to memory of 6056	2672	msedge.exe	94
PID 2672 wrote to memory of 3500	2672	msedge.exe	97
PID 2672 wrote to memory of 3548	2672	msedge.exe	98
PID 2672 wrote to memory of 3500	2672	msedge.exe	97
PID 2672 wrote to memory of 3548	2672	msedge.exe	98
PID 2672 wrote to memory of 812	2672	msedge.exe	100
PID 2672 wrote to memory of 4276	2672	msedge.exe	104
PID 2672 wrote to memory of 5628	2672	msedge.exe	105
PID 2672 wrote to memory of 2936	2672	msedge.exe	106
PID 2672 wrote to memory of 2096	2672	msedge.exe	107
PID 2672 wrote to memory of 2096	2672	msedge.exe	107
PID 2672 wrote to memory of 3688	2672	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_13d0f5aedeb6fed5bf50725ba58b67f8e989b9ea606d9adbc40568a90136ed09.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc37eec188,0x7ffc37eec194,0x7ffc37eec1a0
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,11592825453620665371,11237237987985002919,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,4736359638200671165,15693898873996833562,262144 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,4763492983992035796,7842807425538110878,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:13
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3660,i,3559593649547865419,2757591101711493921,2097152 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,1958529945862389932,70948269954496226,2097152 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4364,i,15669002725556666828,2294003219997991251,2097152 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,9435976593044012558,8932313245729256989,2097152 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:9
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,12031988014565267900,13236967279698132413,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,15220288111441074261,8362695109347032194,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,5012582987062728405,1760079952639780131,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,5012582987062728405,1760079952639780131,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,6142429226465543309,10124296315375529895,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1560,i,13877143824254940445,5696413814437197711,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,2431347948721046561,13469156756147603404,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,17342089510507504723,9845936375273300968,524288 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6432,i,9405129079623616504,9540266577267531558,262144 --field-trial-handle=2288,i,81430104247504966,4288679031602737477,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3688

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 daa79d8fad547dc05acd52a391ba064f57cc38c52dd540e21e5be431b4be9ba5
MD5 5b054f50d643e18315b49f13f7097a65
SHA1 f621c0ab659189897b620fb19e39e0c2f343d09c
SHA512 1450ca0de06aa273bae4720f7f0184a531e8f0f90c0ada08349591d9bff00a644b7891ff29a184c6560db39373f3823fd2bbb51a2504f32382c338886a9b6894
TLSH
T1966184414357FADCEBAC85F1C9D6189B367069B15E832F12E4C5CDF86B06FA242CCA84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594646.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594646.TMP
Size 3KB
SHA256 4e5269b9ef31eb3fc87d4b77c7e1852d3646b358125423eb3f39bb98381e5079
MD5 f48ee7887c3eff4b54957b3010f661e3
SHA1 590f6a01fa3f7692f85ac5fe586cbc60e9d2c79a
SHA512 9e5e639e198648020c4b98f0ec74765a8f7fd45d2999224eb1c45b5e7225d396d93f2fc0f613ba1c27dda9ea9a64b6e89bd7fccba336606f840a47a960bf9ec2
TLSH
T1A16185454357FADCEBAC84F1C9D6189B367069B15E831F12E4C5CDF86B06FA242CCA84
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 57a5e83f89dd64fb2245171c825ae99b596798f855d42f133b651fb1b614f1c3
MD5 6e9e544abf486c27eaa0f89b13049af9
SHA1 e3708c7e55181d3910fb26d6550b229578e78431
SHA512 dc37c8b7de308591e2ea535511c7f242e31381d90c6dde7dd9f2dffaac26aa35ec267390b8eb564896fe0abfcff5d2b03fc09249bfc96e38f650cc196c308fcd
TLSH
T135518BF3C3E8967E890196F4AB14AE1BCE1D0916922C3D16C9E4EF1B93E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 18312cd250ecbb3d74e06af659442a59ea450b7fc4fbe5b40c77ce858eb7cf04
MD5 58e90ce1bd0cc9bf801833bcb6951a4f
SHA1 1ea883c8dc448f2b215458459b0660de28c00de4
SHA512 645d0174e9916ac1e043912fa21092f1f34ab91da20594063a2e10b48f8ac6d58b93ed94f11c17970aaf4f00e56df4ed14b132842bfa4a23bf70628d12d2b8b2
SSDEEP 192:sxRDrbD/fas4MXzoA8p4r/g6+WNIYoKKGhL6IgDTJ:sxRDPD/fasn+q/5Ikah
TLSH
T150329515AD28A93B9CCBE21DBB55BF53E2FD503261951F48ABFC861C04E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0d2c8e05be3903f2262538ef1591794831158d05ea35c3affda1f23263b088e2
MD5 c4387b939c12c6df3be683fe7f51ed71
SHA1 26bd070aaf380434131b32e9be748e1dd3d33890
SHA512 1b1bb96b663c1cecd4955081f3d2809f7ca4bfd1469191b8f657f401eccd764e20574314ac82fa1cdcc7e8b62a108a644d0e6a48dfe9c91df688e18e979938bd
SSDEEP 192:sxRwrbD/fasQPzoA8p4r/g6+WNIYojKGhL6IgIJ:sxRwPD/fasQmq/5Iras
TLSH
T1BC228615AE68A93B8CCBD21DBB65BF53D2FD5032A1951E48BAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 141be3f9ad0ad4cad00865a9bc369796257223b64a988a39c40e6c266d49adf0
MD5 ef302e82746866f7c4a6cf72c2a7002d
SHA1 8c922db071471408f0d6a1810ef3b3a197735681
SHA512 b23a97549aaf1acba9aba4fe531a26f1c9623b6cf707c31e7bf5303fdc8f47d3996acbed5228b5f5ac07be412c862d0904c0510b706cef1498624c4dcdd1981a
SSDEEP 192:sxRDrbD/fas45PzoA8p4r/g6+WNIYojKGhL6IgD9J:sxRDPD/fasSmq/5Iraj
TLSH
T125329615AE68A93B8CCBD21DFB65BF53D2FD5032A1951E48AAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a80d4a4630f7c834672b36249f2b7a761e79b427044af2a040acdc1a6922b3c9
MD5 e89b2a8d6c888e63368a80d06d63c51b
SHA1 20401a9a3a252edb2cc8dcc1debeb80fc3ed29ed
SHA512 e46dd7b42b02d27a70c716994729cb952a83133a27093ce48bf5cec7c93abfd5b8b4197fec379f6494ac8c2343ba0ab08a5ea188610e3067e296287a13b9bd20
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUbrondN:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0Vi
TLSH
T100B2E92B744CCB7F4FC04A9D9C196F9B6D9802C796588D8047FED94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ea21c7f878989c03e4ed88c805dd2f1e3f20289cf8a55b74da29e3b702500545
MD5 f1e17b1ad63e985af1c14cc0b5340371
SHA1 510d051c1765337d30c02a140036c0c8255a8275
SHA512 6fac71d2c356d78f19e44f5e20921e65c7d4cb21300c78501b2fea689d788068578b9bfe9c8f96aee6e5a5206408fc69307852ea086fe6f8aba014c20938db01
SSDEEP 48:K8gI3K5uM3y52IfK3KkP9IFKGQgfyGH8BVHxRxz:K8gYK5u+62oK3KI9qKGQCyz
TLSH
T128914394707A1345383E640C91E6E71E8A8172A33124E77B7BED04628EBBE495DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f9ceae47-c5e1-40bc-b975-ea9b776997d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f9ceae47-c5e1-40bc-b975-ea9b776997d2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 72433a89cd815b52380a7c70f89ba6bccc41a216074e0ae348612fe8d4218f47
MD5 bcbeaf746a219e3e23554a9f760734a2
SHA1 7aee56d6b89cc9c4eb111feb4c369d823f26553c
SHA512 4ed8149c3f9e82946e5081218b2fcafef77532849489295d078e3df575bbcb65f938cbbccdce56d5304c2c1d4ffb41764fee8ebea1a3543e54b8e590c9993c98
SSDEEP 768:Z/UxvxjgC+63uXBU8Oxsq/9OA9at01j0iq00+IaiGBSHx68:MZj3+63yXCHq00Na1SQ8
TLSH
T13D03C031ECB59D639CF6B284730A6387DFF45523C6C96DA44AEE2A0D05876AD130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 935184388e9d5bb18e73a8f3c7da20ce232dcc52b774982e97ada2bcd5b908bc
MD5 080233284f297618fe06a54921d9f20e
SHA1 321e989c90e77878cd855a5aff7f82edb29b435b
SHA512 bc326ae925d75acae4ef5c0c8b1246c99825d59d92c566e048da291824db04d9cae36dea072873864c3ef4ae11728e9ae6037d53117c1437b4d0cb6457193a14
SSDEEP 768:XFQX31wgTXBV8Oxsp/9OA9at01j0iq00+IaiGBcTRrg:qX3ZdCHq00Na1cTRrg
TLSH
T15B03AF72ACA4CE77ACE6E785B20933429FF44163C6CA9A90DADD6A0D00475DE1307C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 faa0d21fcd618a67e2b8528735352d67dbde57f9fd3a728c9483ee675ac40ef7
MD5 99d8edd7c9090e8aed2ea5940445e917
SHA1 a00ab6ba7e03cfc398563ca0ff9a996349079c67
SHA512 1a776021efe84eba39bc9c0b83f2ceec852908f534b6b28b73577a62798899731609a4acc9b1cd82bcb4aba20806728b4148e6158d76ef90bb08dfbb04dd12da
SSDEEP 768:Fb3eXBV8OxsV/9OA9at01j0iq00+IaiGBcTRrg:Fb3iBCHq00Na1cTRrg
TLSH
T1DCF2AE71ACB5DD776CE6E285720A3742AFF45113C6CE5E8089EE7B1E0047AAA1707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 94ca5da3ffda40af517f41a59f3b95343288af03c43826b34171518f67f3b881
MD5 23fd464000e005ca998101669d3b54f7
SHA1 3c5174de347dcc5ab638d8876d73abaaee608340
SHA512 eca5445f2b15663bed7afebf14819947940a492ede2355dcf70785c2cf62e623ee6faaf7389fd2395eb20be3be508618058549620699fdf90efa1ce4a37c5886
SSDEEP 768:X/UxvxjgC+H3OqQOxi/9OA9at01j0iq00+Ia2GSHxRz:KZj3+H3OGCHq00NaxSTz
TLSH
T1F303C031ECA19D739CF7B384730A63979FF85663C6C56AA04AED2A0D01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download