6738596a2ebfb97e3d52a25d34fbf6ba914e9123282e2d26d3f8869057e68532

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 19:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6738596a2ebfb97e3d52a25d34fbf6ba914e9123282e2d26d3f8869057e68532.html
Size 303KB
Sample260912-xsd3hsvxex
SHA256 6738596a2ebfb97e3d52a25d34fbf6ba914e9123282e2d26d3f8869057e68532
MD5 90b4fa577a40d16d03baff451ccaf7a1
SHA1 d0781c967e9a028d1532c94a483bcf17358b68bf
SHA512 b230cb6bdf3c6962e5aa717052491691d04114f5ea7c97a2f97dbaa22535a224420944d2307374b5c194442c284f84e352a999b2b0149ef19412c0471a10d2c5
SSDEEP 6144:M6XS6IXMPj6uYf+G+DTm8K3zP/Q44g5XxlqvVrak1FIJQ3:M6XGMZYf+G+DTm8K3zP/Q44g5XxlqvV1
TLSH
T1CF646C6FCC18DD6B49F219CB3D8EBF117AF8400A65D48D26DDBA8E1C0394746311B6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337136073150155"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{B9CC2DBC-056D-4DCA-8E95-0D932A972E87}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5968	msedge.exe
5968	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5972 wrote to memory of 4984	5972	msedge.exe	88
PID 5972 wrote to memory of 3432	5972	msedge.exe	89
PID 5972 wrote to memory of 3440	5972	msedge.exe	90
PID 5972 wrote to memory of 3440	5972	msedge.exe	90
PID 5972 wrote to memory of 3440	5972	msedge.exe	90
PID 5972 wrote to memory of 5484	5972	msedge.exe	91
PID 5972 wrote to memory of 5484	5972	msedge.exe	91
PID 5972 wrote to memory of 4500	5972	msedge.exe	92
PID 5972 wrote to memory of 4880	5972	msedge.exe	93
PID 5972 wrote to memory of 4500	5972	msedge.exe	92
PID 5972 wrote to memory of 4500	5972	msedge.exe	92
PID 5972 wrote to memory of 4880	5972	msedge.exe	93
PID 5972 wrote to memory of 4880	5972	msedge.exe	93
PID 5972 wrote to memory of 4740	5972	msedge.exe	96
PID 5972 wrote to memory of 3160	5972	msedge.exe	95
PID 5972 wrote to memory of 4740	5972	msedge.exe	96
PID 5972 wrote to memory of 4740	5972	msedge.exe	96
PID 5972 wrote to memory of 3160	5972	msedge.exe	95
PID 5972 wrote to memory of 3160	5972	msedge.exe	95
PID 5972 wrote to memory of 1608	5972	msedge.exe	98
PID 5972 wrote to memory of 1608	5972	msedge.exe	98
PID 5972 wrote to memory of 5412	5972	msedge.exe	99
PID 5972 wrote to memory of 5412	5972	msedge.exe	99
PID 5972 wrote to memory of 1272	5972	msedge.exe	101
PID 5972 wrote to memory of 3488	5972	msedge.exe	105
PID 5972 wrote to memory of 5760	5972	msedge.exe	106
PID 5972 wrote to memory of 4064	5972	msedge.exe	107
PID 5972 wrote to memory of 2752	5972	msedge.exe	108
PID 5972 wrote to memory of 2752	5972	msedge.exe	108
PID 5972 wrote to memory of 5968	5972	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6738596a2ebfb97e3d52a25d34fbf6ba914e9123282e2d26d3f8869057e68532.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ffe6b24c188,0x7ffe6b24c194,0x7ffe6b24c1a0
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1700,i,9069120898252021809,3157594070945023460,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,4949096719892152003,9276447872361544113,262144 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,7202708109640891277,7323725957135667851,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:13
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,15317167444129404596,9048516779248021990,2097152 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,18287664051876440507,6818230451435476326,2097152 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,1034855590440931640,10903527571980565092,2097152 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,368923905731125306,2330627388163900005,2097152 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:9
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,1746940121483125613,18398918926052464765,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,4969495479444119742,13816281343010134416,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2860,i,11107652879351586399,9263718726664983310,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2860,i,11107652879351586399,9263718726664983310,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,8983282676025156407,9827823569541268700,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:14
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,17118936498326923800,856164788771486520,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,2674680176503322991,18027348369070731006,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,6752099127164794929,14675417769535266710,524288 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6276,i,11210805313454489069,15282851926150600800,262144 --field-trial-handle=2300,i,9914137749744479880,15744295609513396410,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5968

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 fc23ba69af204cfac75f240684c4d98984c427bcfadf04523790bc338e1d1159
MD5 613a78cac81d4ae66b08ff670593e12f
SHA1 17e42a765066705a8af794ceb334c9a07ffee79b
SHA512 0f4b45ed08fde5eb59ac606601741e35749eeaafe66f5fad4469f5db2efd3b8cff93a68140e9817652a022437ddedfd9b4c30965eacb96615d1effc9eacb66ee
TLSH
T15B415148FAA800A5FBF41171B4D7A3A7FA306AB2CBFB5E4A2478C1F9A7463204118056
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5981c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5981c9.TMP
Size 1KB
SHA256 207fa8e622a98ec4ac24394258980fd993082833807a7e7da95efa46a31c4f02
MD5 7bf893bde10d01b38d6e20183208a69d
SHA1 db85bba941932f08c3c62041ee120bf4bcad5eda
SHA512 0dbb0b60fc5641e0414c5d63236d4f09e71c97c9ee220688a844bbe2ad9eda357360ad21898f63a94341073d26efa45d26d4ab1c3db8b7282362a5b3f25b999c
TLSH
T1D5415148FAA800A5FBF41171B4D7A3A7FB306AF2DBFB5E4A2478C1B9A7463204058056
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 dd2051f957d3a47c97b192831fb7e3ac559202c92b143f737d1df5b82c6af280
MD5 c574931973167f42ee499608fc0a3ffa
SHA1 93f126e2ffac6794b904409567376f6ca3c48202
SHA512 052837c35f3882cd94eb9d5669a8027d48dfaf9c158865f1e49bf797652a22aa19a01195fa0e72763bca2cc00dcbd2c882a26a8fd613e84b569e19ec8f38ede1
TLSH
T17551C0F7C3F8867D890156F0AB146E1BCE2D0515432C7C5AC9E4AE2BA3E34B1E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c060a954bdd4f6c4a661b17b427e905462b2103808335f9ad2bae47b46f36341
MD5 72bc68c804e52d3b1f238865cd538681
SHA1 38257c05cb6d9d8da843df033ff22730d613a21a
SHA512 a55922246893b385d06a3124182ca10a81a62862495107edb720f8c4db93f02f2ce069fdb3b3e393a4ac1b614187871210aa5f52dba7f1ef9181875c15e8709d
SSDEEP 192:sxR4R7ba/fQsXK7x4GzoA8p44/g6+WNIYDFGGTIgIJ:sxR4la/fQsX6AZ/5I8s
TLSH
T1FA32B816AE28A93B4CCBD21DBB56BF13D2FD5032A0951E48E6FD861C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 22f3f35892b363c0a9542b42c49cfa1142c060d9aca1896d06db9ee0d53beac9
MD5 c66ee5f6c3b2745f98402e33df55bc98
SHA1 5795697028f1a27b21ac431a10d655d46619e3e3
SHA512 8b6bf262a8598ade28c764a7f7e7c7233bd9b693491ced7193069349ddd6cd3e90c75b835b297f9239e43faf95c97af1291bce76bcd3082810276e22afa36731
SSDEEP 192:sxRjR7ba/fQs6K7x4GzoA8p44/g6+WNIYDSGGTIgD1J:sxRjla/fQs66AZ/5I3T
TLSH
T17132C916AE68A93B5CCBE21DBB56BF13D2FD503260951E48B6FC861C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bea28c6aa4abf5fa35daa5f3d61c2029da2c699b1ebce69052f06bba69826629
MD5 1fcfd0228d2d15b772d07de39ef3c3b0
SHA1 016f66dcfbb67df8ce21a881e5acbd40537e7187
SHA512 897ff1c71c35a9ca3aafc48aa447e2772ad68cc4e61f824568722de4b717b2eb978727017ae9c38d6bcda245846bac7a9f6513bb7cc287a96e8cfffa5c9d70f7
SSDEEP 192:sxRjR7ba/fQsiK7x4GzoA8p44/g6+WNIYDFGGTIgDzJ:sxRjla/fQsi6AZ/5I85
TLSH
T19D32C816AE28A93B4CCBD21DBB56BF53D2FD5032A0D51E48A6FD861C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 993967236ff4159ed3deb17cbba320631fa20d3b925427b7b5e0c1f68ccb7dad
MD5 e66a978fd05c81addae0b00e5ea65d2b
SHA1 63d6df6bff8e9a129691ba2691e720b5939be1e1
SHA512 3d891ded3b622d3670d3e9378b249f7f1ad0abe63e8cbd03b08ca20642d3ef200c6e59c8d7be70940a26bd484ce972b59d6e6073cfd17a391300428d1bb930ee
SSDEEP 384:ScwYbpGfCtgaEFfM6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9LroTy/:SzYbpUWgasfM68F1+UoAYDCx9Tuqh0Vm
TLSH
T185B2DA2B640CC77E4F804AAD9C1A6F977E9802C796988D4047FE995C03C77EFA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 742ea96a730c807bd98d347b0b2ca4b13a722def5bdec9d8babee59cccf3c452
MD5 91e694db367386d4b5713efe18d4f07a
SHA1 125efe49d194a695031ac4f2f8278c892dea0aab
SHA512 5bb08950a2ba4f86dabf295e5dee071d133c80c95e9472a647391d101be8d82fb5c61bd7c94c880f445f6aef80dd9b10a481082c2ad2cbfdbd50125912b197ec
SSDEEP 48:K0jGnDtFVWbtltot9IStjt2K9tT1tBFx+VYvws+yLKV4kKIYJbUzEIScJK9A16Jt:Ks5bI9Lx2KjTL7iOpOKi8ZZaKigiiz
TLSH
T190913354727B868038BD385880F5875F12433273302AE63B7BBD50B68E6AE455DFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

240b13c8-0859-411f-b6aa-e3076d3174ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\240b13c8-0859-411f-b6aa-e3076d3174ec.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 9947e3a82ae845fac92ec356fba91d6e1d47087a9fdce1c86ee9d5cc773b7574
MD5 bd79c64e3aac08ce0c3114e715979c22
SHA1 5485d0467de24e8a49b23b022d19881e4b6139ab
SHA512 0857b4960cfd46c85a3d2a532e6ca8debb4ecfdd36d90709a32e4c0a60276f8c368f967c217a84bc1d7577c8b5c23d75bb2cc4ad9f824fef71c856609725ea5b
SSDEEP 768:cQ3HcyeJybNbNvmti4OeRFZD1fTos7RjzMgI7:cQ3HcycAY1fT/RvMgI7
TLSH
T14CF2AE36BCA49D734CF6E285B2467A43BFF4916386CD198845DD6F0E04CBFA9130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 48c0f51f130800abd0b801fc65dafd82f366b355eaaa2ad11350a9c3190c26b0
MD5 f516774df45f6f1a77a8ad2cc7cc8aba
SHA1 ffcb24edf99517732d3e2db6dd96978fabe0a390
SHA512 1446bde15227ee22072edc8ccf9607db8dbb531130ed2bc0c0be1542c87d30ac726d31091a026e9ca9f79a213cf9033e01d49559434b79618c58d65db9ff20b0
SSDEEP 768:0/UxvxjgC+d3jhcygJybNbNvmti4OeRFZD1fTos7Rjz/+UZ:hZj3+d3jhcy2AY1fT/RvhZ
TLSH
T15303CF3AFCE45D234CF6E240B24A7647FFF4557386C9199809DD6E0E098BBAD130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 94584b6ed48b5eab62e0e045aee5c108c882f0bc70f15a2fc36335138bf0b88e
MD5 92eba30e78057e5feea8627747616787
SHA1 9104fa9aa5090d8be3631e1828ce35c32ad5967b
SHA512 932453d27c6e37f75730bc732acdd31afa3181bff540d916017e1fc0f86144378f5a3a16919942e33589e8bccb1ea9a2f339c71456e456fa970876ef822fdf75
SSDEEP 768:+FQK3LwgjcyeJybNbNvmtisOeRFZD1fTos7RjzMgI7:VK3lcyc6Y1fT/RvMgI7
TLSH
T12DF29E33ADD489779CF6D785F64A7603AFF041A3CAC9599496CD6E0E009BAEC0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d1266dfff61e26900c9fd06919b87730b7046f2968f23fec2d09caf80698f4a6
MD5 a3a40af00f896ace42f3c2e0cf36bee4
SHA1 1388fb9cfe0185296cf8b7e1c4323a632dd062ba
SHA512 cfe827c722055a9884839ba6eabd1bec7c6fc0777c781508dac245d8d9ff8668c4448c32aa9e34fe769aab4618a9a61a3dcef0c0e6f51bb2c22cd4bbfe6a53ef
SSDEEP 768:z/UxvxjgC+k3+d3ybNbNvmtAOeRFZD1fTos7RzD/+Pu:GZj3+k3+tBY1fT/RHKu
TLSH
T19103BF3AF8D86D338CF7E244720A764BBFF455B385C91A9809ED2E0E158BB9D1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90a542b9-a7eb-4a78-a146-1f7d45667dce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\90a542b9-a7eb-4a78-a146-1f7d45667dce.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download