3bd3394d91b5827af8a9671284d6e3c18a660c3a4216c9645f1cba3a50d92086

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3bd3394d91b5827af8a9671284d6e3c18a660c3a4216c9645f1cba3a50d92086.html
Size 653KB
Sample260912-tlkpyaed25
SHA256 3bd3394d91b5827af8a9671284d6e3c18a660c3a4216c9645f1cba3a50d92086
MD5 930a990e3ad789414c952f8f92d8f220
SHA1 b0dad91fbfc29d0d343385a274c57b9011519688
SHA512 f90f8d393661cef437818c017a5f1622e86ef283e2895c6a752b879cc13b9626438442eb839f0fce0a50db9b7bb35d82f7e8837dd43e6421024f9cc67cb34f31
SSDEEP 12288:5T56bs56bh56be56bz56bW56b856be56bz56bb56bP56bQ56bGsvIH6O6:5m/H6H
TLSH
T196E42E64486868B29857A54BDEF4EF7E9CE0066D4FC5C96EBDB7C39C01ECA004DEE412
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5052	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{354924C2-C22E-4B6D-AFF4-470950A25E20}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4376	msedge.exe
4376	msedge.exe

Suspicious behavior: LoadsDriver 9 IoCs

pid
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4872 wrote to memory of 2628	4872	msedge.exe	86
PID 4872 wrote to memory of 5052	4872	msedge.exe	87
PID 4872 wrote to memory of 3504	4872	msedge.exe	88
PID 4872 wrote to memory of 3504	4872	msedge.exe	88
PID 4872 wrote to memory of 3504	4872	msedge.exe	88
PID 4872 wrote to memory of 1076	4872	msedge.exe	89
PID 4872 wrote to memory of 1076	4872	msedge.exe	89
PID 4872 wrote to memory of 4376	4872	msedge.exe	91
PID 4872 wrote to memory of 4376	4872	msedge.exe	91
PID 4872 wrote to memory of 4376	4872	msedge.exe	91
PID 4872 wrote to memory of 2276	4872	msedge.exe	92
PID 4872 wrote to memory of 2276	4872	msedge.exe	92
PID 4872 wrote to memory of 2276	4872	msedge.exe	92
PID 4872 wrote to memory of 6008	4872	msedge.exe	93
PID 4872 wrote to memory of 6008	4872	msedge.exe	93
PID 4872 wrote to memory of 6008	4872	msedge.exe	93
PID 4872 wrote to memory of 4292	4872	msedge.exe	94
PID 4872 wrote to memory of 4292	4872	msedge.exe	94
PID 4872 wrote to memory of 4292	4872	msedge.exe	94
PID 4872 wrote to memory of 2656	4872	msedge.exe	96
PID 4872 wrote to memory of 1120	4872	msedge.exe	97
PID 4872 wrote to memory of 2656	4872	msedge.exe	96
PID 4872 wrote to memory of 1120	4872	msedge.exe	97
PID 4872 wrote to memory of 1996	4872	msedge.exe	99
PID 4872 wrote to memory of 5364	4872	msedge.exe	102
PID 4872 wrote to memory of 5364	4872	msedge.exe	102
PID 4872 wrote to memory of 5364	4872	msedge.exe	102
PID 4872 wrote to memory of 2216	4872	msedge.exe	103
PID 4872 wrote to memory of 4512	4872	msedge.exe	104
PID 4872 wrote to memory of 1396	4872	msedge.exe	105
PID 4872 wrote to memory of 5516	4872	msedge.exe	106
PID 4872 wrote to memory of 5516	4872	msedge.exe	106
PID 4872 wrote to memory of 4376	4872	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3bd3394d91b5827af8a9671284d6e3c18a660c3a4216c9645f1cba3a50d92086.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e0,0x7ffe5622c188,0x7ffe5622c194,0x7ffe5622c1a0
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,4169383490804997963,13818466616942750693,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,10458169009333706092,13567516555350898393,262144 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,18091562250510965113,1559828536672861298,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:13
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,1289949884912483965,2678775440884141843,2097152 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,7142269436535117395,8538889087584793785,2097152 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,13608792686192893946,2444439925814780250,2097152 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14691306087392671412,16564963373370086048,2097152 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:9
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,12635204450700889746,16108368852648503335,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,12857884071301097486,907397460870030361,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,1191264436432814098,11524936864058889726,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,1191264436432814098,11524936864058889726,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4688,i,7428785021075030048,4973115454158918600,2097152 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,15530424175773001045,1495505777022789929,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,13840107929662443909,9568336854544082827,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,3529934132531136253,8842239579675364013,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:14
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,11407419605935805926,14990377323072911012,524288 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,5968439582333306623,16707555463692037043,262144 --field-trial-handle=2452,i,3433415708816805803,10245170574333846504,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6004

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 36b1c73b404cf7b8c50d5ec86fc748f059023324ca033899c9bc73ca907750a0
MD5 fdd6fe5f00a9f028d7dc30b13fefa0b8
SHA1 ea157935b7e5dd58fc8e7d198e4ddc087dc63eec
SHA512 c7fcfa9c1f33f46b504f8525b1caaf75c1d786341706f5fdb33a729086b85ff0815c4f0073b8e96426b0b8b251907a299bb472b963a5e351a37ccbfc7fd3cf38
TLSH
T15A5142815EB189E4F75C01718DD91DCB3AF4468ED3C31E6107A8E0BC7B96B634D4A894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5956e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5956e0.TMP
Size 3KB
SHA256 fff2dcda2dd449b9ee5a0497cffa63fed328c93781a2f2d76e614d9aa1971636
MD5 d547cb7a3b4f649b371f3ab1913e657b
SHA1 e9678356e9cb30ff55f82878c0036904e5715e4e
SHA512 01c98cdc50d509fec6064a5df1278ada8efca7e5a06671f95bbcc611e85bac7537411f6e93a8ce4ea5f9c810d01f093dfc5c5c84c9a7e68bd57892c79dc252f9
TLSH
T1985142815EB189E4F75C40718DD91ECB3AF4468ED3C31E6107ACE0BC7B96B634D4A894
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5cdcd76c89e9e16e1a79b7d7cf170971b9f9a714989cfbb88c26ee99fd55432e
MD5 82ca8c2756d4d87a5591afb04208792f
SHA1 e20391aabe6d31321baf0a9312746ec85b4db646
SHA512 074e3561d7e75eba4436e2d5425529a680c8539984de9d07ca69b88b0f184b1ae9084d87258f6793d1c5d39e002a562fa52a8dd6dfb6c08b62050ee0a86e3b96
SSDEEP 48:YALlNXBOgEkgMgYgRYsVaVCZsqfoKsZgmzsLzEsRGsHCKsuXLsBaNsxdzsVaNsGz:DTOjkFdi1aVmKsz9ZNQaiGaR5wE5p
TLSH
T1D491AFB7C3D8837E881156F4AB256E1ACD1D095A922C3C568CE4AF5F63E24B1D20159F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 492060c40f294881577a2c6ab16a38197ebf131c662d4a782e96fed1fb719a9c
MD5 ffa60eee83abe392df58677d599f087a
SHA1 d214215242910a243d3edc426fc186a31e3d8c7e
SHA512 7744066b6a454875b72ec4a0c3a959f88074fdb8a710e8d049923ba34a6cf9625410c1c37d202926ef351316522e6b4df5200875e6e5a1420c1fd91493a6b0a8
SSDEEP 192:sxRORHbc/f+sAa8zoA8p4R/g6+WNIYi3asGunIgDlJ:sxROpc/f+sAat0/5ITL
TLSH
T1E9329715AE28A93B8CCBE21DFB65BF53D2F9503261D51E48EAFC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 37ef23b330ee9c317c56805a71c00e296e5a26be820144c88e4586380b7c97b4
MD5 3af575f01a0ee530278880e641aa72a5
SHA1 0924522d5bfbc97a4104075c58e6778dfdb51e71
SHA512 ab014d8debf08d145b7b0ebeb7aca357542a6952034174f1ee73fb3e2ff416b619216e00a29b1e7f6fd7d16ce5f458d4544343229b82e7325d667042f1f9d169
SSDEEP 192:sxRORHbc/f+sAd8zoA8p4R/g6+WNIYiVasGunIgDlJ:sxROpc/f+sAdt0/5IRL
TLSH
T12F329715AE28A93B8CCBD21DFB65BF53D2F9503261D51E48EAFC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 abd42935ad8d6c7e15bd822a353b91fad0f8c83c42b5b489c162fef6b38d5be6
MD5 da0884261d4b0fe24ce6b06eab7101a5
SHA1 ac5dc99e21d3267ef8c2a0100a25c4c3b79a5c2f
SHA512 9e882e79dfe234a2ce2ba6f670737f4fff182d5a2c2d3df7f47c984b3e2f27c2e8bf9056d61a1335f64e7689937e6119ec28a82d5ab370adb2933fa53701bdcd
SSDEEP 192:sxRlRHbc/f+sSd8zoA8p4R/g6+WNIYiVasGunIgIJ:sxRlpc/f+sSdt0/5IRs
TLSH
T122229615AE28A93B8CCBE20DFB65BF53D2F9503261D51E48E6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e5ea17282a6276b779b0775c7742d5e64336c1c204472c44e639213a1c2f05dd
MD5 7fac9263bc2a4ffbe9edd9fa30a071a7
SHA1 6858fd6a14e4ff1bc2faf3505617b20ed83d157a
SHA512 6bc5d5f11e47ee0b732a5fad935cfba1cae84cb1657e3fc1ead080452a178b4b0a59f620a34769f252065f2afbc6969530973718ce70250088d130e76377bdfa
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRXrohZP:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0VJ
TLSH
T1DFB2DA2B640DC77F4F800A9DAC296FD77D9801CB9A588D4047FE994C02DB7EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\afac8248-b969-47e7-8993-1622c69e921f\index-dir\the-real-index
Size 1KB
SHA256 0649274912acdc6ce36ba93226cfe7dbb83a2842f87641e3b0af0744648b731a
MD5 5e531708bc23faadb41c837e23715604
SHA1 87fd1517e336e8bbcff51d6713f9ab554061e569
SHA512 d328679bc620311a888a09bac9c51b7b9b90ff06daab7f950ea9731fcab01d32272ee6985723e4cc2734e922c0e20ad35a56e5e755d7e29670f436264804b33f
TLSH
T18F31469DD55157AFE87103BA298850F253743D76FC89D74A811471693421BA1CB836FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b656.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\afac8248-b969-47e7-8993-1622c69e921f\index-dir\the-real-index~RFe59b656.TMP
Size 48B
SHA256 f1bfdde33f0a75f34dd3f0384a0818126b40d6a397a3cc365a82822536eccdef
MD5 eb4322aadc2235656b457cc615c3ee20
SHA1 33c27ac10e41739ade9d56ae555e599fa9835db7
SHA512 acada095653394b2f04d338cbfc9eb29e66556861b5ca31b08eea617cde61d953575e24d4a7e9d3d191b8750a86b24bedf1f656b90edb930d280c4b7bf932a0e
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 182B
SHA256 cd7b69f1111f372a922cfb8e39d9a0dc139d49e5a07684bead39b4410003fdf7
MD5 1daf0e3575fba4d4a11f221d871e1975
SHA1 35471cff2323cca83c8377878e5c870dce37d454
SHA512 fc91390e306475aeb6a354bf47d7a07db522591ed5c2585cb55a26e1c39253c5bf4130f4ebf04348e878609b29a73af86447bc907d6a6204e0d0d5ea305062a3
TLSH
T1CEC0C08493B22C9927B40F194B0C020F0C39DC22A844460CFBDD308210F410394427F9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 98B
SHA256 ec1271dfd7b839549a13f16bd7b6cf1ba0b5fa6e52853b7a7264a4cc29d2aab2
MD5 0850323210193c966839e5ad9561879f
SHA1 43ce1514a151d786d145d58939ebdd46f6d2663b
SHA512 46a62722e9524b60b6c922b91dbcdd564d9baa0f802f9fb4eb563eb3a849d9be55d26df102cd6d42412d06a97b3ee73f5a7c6894072179ba219649994ee3ca38
TLSH
T1BEB0128173650E5A0AFD0F1D020C120E2D1ED43458905944F2ED004250608520CD27B9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 100B
SHA256 278ee4e6c862d46747e2d18cc9ee7f6f4bd5b2b54636deadf8a3f3b5a5061c45
MD5 fac95520e209d1c19968132536812b88
SHA1 c7acff40ff79042567ba98b9304139b4b065f421
SHA512 2c28d29dd061d23e1267e7f176fa53f348ce2bd72efa5f75abf9c9552a6a28862c306096b5ff84f29d7c616a756d69b3b6ced4d7d0f131db70fc3e06d25a0c17
TLSH
T189B0128173690E560ABD0B1D020C110A2E1ED43458D4A944FAFD008250508520CD2BB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5962d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe5962d7.TMP
Size 105B
SHA256 3f9adf130cf7330e3b9b69f86ede3a3bd3c2ec8919345a1f663097271cbe392e
MD5 a1b48a996c86f62a0ef768d947ec6d13
SHA1 8a59bd70036c974a06d0fa3cec43eb52a9e8e602
SHA512 b6e45b0fcd006998303118048ebad78790a8ca69bb4f0b189889df8f34c37ac48438e7352655ae9514f80711cc1ace87ce4933a5a31192b2df15e71e7502f0cf
TLSH
T1FFB0124173750E560BBA0A1E021C110A2D2E9C395C805944F2EF314260708538DD17B9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 19ea507078925d51e8579deab38f3ff0cc3e52f2b75e7c69b6bf8198528d7a2f
MD5 b5d3a4d1b0a48f7426adc9bc0eac96a4
SHA1 f39389e52db9f453f9595ef4cbb38582ab68022a
SHA512 f2f1a5611f805c6134c149db0332bec1b01965628a2d751930f43751b51c38021aa2def09b97439a749ea10e8c009ae7735b1079352b6c7276da832f1addc98f
SSDEEP 768:y/UxvxjgC+Y3xQKcZ0rfZWaYoHYoYBw4Ot5AEl94BHYjHyoWh:3Zj3+Y3xMBVa5AEncHYjSoWh
TLSH
T12303BF39DCA15C238CF7E385B60B365BAEF19963E9C12DD44DDC6A0E0A8729E4347807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 51fb1ceed53c0f40b290445c04068cb92e205fba336e469674bb3553ac5b99c6
MD5 cea5cfdbfe0e9ea9564e5750a241e8c8
SHA1 f24e8756d5a12bfcf9ebe416a48c49de81c6ff2e
SHA512 531ebca84cce8ab9df70f268ea16b6ce28e9f00da7ea635a07884f5f42592a6fbdd50bc84ec1f8dcc549bb35235c4cacdffc4e8ab46d9b67444137e8e2844231
SSDEEP 768:yh3xfKcZ0rfZWaYoHYo7Bw4Ot5AEl94BHYjHycTRIB:yh3xqBVa5AEncHYjScTRIB
TLSH
T102F2AE75DCA089638CFBD3CABA07360B6EF19553EAC52EC0D8DC6A1E098755E130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f5997a2a1237894c5bf6471ddaf37c8c2bcff1be44514c35cf5c3800dd0e09cf
MD5 6eb2d270779e42e6caac351f6b2dc5b0
SHA1 04a169f2286634504f60a0aadde127023f867033
SHA512 b17c1e6faa10e2c9928efc810c0daaf8da6c910551746d9d961eb09bc07ed9604d6391eee2a7a13435dfabe705fdd503aacf0e0f4b87626abb73028400157fc9
SSDEEP 768:sFQh3MwgLfKcZ0rfZWaYoHYoMBw4Ot5AEl94BHYjHycTRIB:fh3CJBVa5AEncHYjScTRIB
TLSH
T1D003AE76CCA0C9679CFBD7CAFA0B36069EF18193D981ADD0E9CC691E094759E034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d9a072bdd4a9c250a1592ab1fc364137d7e4f17b276ea35eb2c3e304fba7e1f5
MD5 f1964838a1e43f89e893ade8d9ad321f
SHA1 53f4cfccacb3a66dc49de82fddef96826d1d8e28
SHA512 4198158514ea786f8a9d4fb7699d7068e3d88abe9bec853b7f36e114aaa81f62517a93f436b325951feb541fbbde303f1bde35f9f1d125c8b5e4fce2a8ebfb6b
SSDEEP 768:z/UxvxjgC+b3PocZ0rfZWaYoCBw4Ot5AEl94BHYj/oAFTN/:GZj3+b39BVa5AEncHYjAAFB/
TLSH
T15903BF39DCA59923CCF7A785771B339BAEF18463A5C12ED489DC2D1E0A8724E534780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45d95f22-5d3c-4e6e-8203-31e4d63d9e14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\45d95f22-5d3c-4e6e-8203-31e4d63d9e14.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download