61cdfacc0f61acb1179b0997fbb1a4187c1201e437aa6ae4b2a7ad95b3342999

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 01:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_61cdfacc0f61acb1179b0997fbb1a4187c1201e437aa6ae4b2a7ad95b3342999.html
Size 718B
Sample260913-bta7csdc87
SHA256 61cdfacc0f61acb1179b0997fbb1a4187c1201e437aa6ae4b2a7ad95b3342999
MD5 7b7a51edff9b20fb8343fa7152d2539a
SHA1 1afab991c29e6fe7f2915cfac03896a7bc011d85
SHA512 d671c810cc92bfb72bd433bdd50fd8f956595755fea667d489ea217728a0396183cdbd9dca2f4ef2390dd5608b50fd6aa78041825daf5d7af7641f8505cad2d6
TLSH
T12301CBA7AC51893343A25064B5E2B1FDBA73F11B1A44C079B9CA40318F607EF84879DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2512	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337363500554171"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{826280D6-81CC-4539-96C8-355DEB60E420}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 3248	4624	msedge.exe	87
PID 4624 wrote to memory of 2512	4624	msedge.exe	89
PID 4624 wrote to memory of 4580	4624	msedge.exe	90
PID 4624 wrote to memory of 4580	4624	msedge.exe	90
PID 4624 wrote to memory of 4992	4624	msedge.exe	92
PID 4624 wrote to memory of 4992	4624	msedge.exe	92
PID 4624 wrote to memory of 4992	4624	msedge.exe	92
PID 4624 wrote to memory of 2508	4624	msedge.exe	93
PID 4624 wrote to memory of 2508	4624	msedge.exe	93
PID 4624 wrote to memory of 2508	4624	msedge.exe	93
PID 4624 wrote to memory of 5800	4624	msedge.exe	91
PID 4624 wrote to memory of 5800	4624	msedge.exe	91
PID 4624 wrote to memory of 5800	4624	msedge.exe	91
PID 4624 wrote to memory of 248	4624	msedge.exe	94
PID 4624 wrote to memory of 248	4624	msedge.exe	94
PID 4624 wrote to memory of 248	4624	msedge.exe	94
PID 4624 wrote to memory of 5184	4624	msedge.exe	95
PID 4624 wrote to memory of 5184	4624	msedge.exe	95
PID 4624 wrote to memory of 5184	4624	msedge.exe	95
PID 4624 wrote to memory of 1988	4624	msedge.exe	96
PID 4624 wrote to memory of 1988	4624	msedge.exe	96
PID 4624 wrote to memory of 1988	4624	msedge.exe	96
PID 4624 wrote to memory of 1368	4624	msedge.exe	99
PID 4624 wrote to memory of 5236	4624	msedge.exe	98
PID 4624 wrote to memory of 1368	4624	msedge.exe	99
PID 4624 wrote to memory of 5236	4624	msedge.exe	98
PID 4624 wrote to memory of 2772	4624	msedge.exe	101
PID 4624 wrote to memory of 1376	4624	msedge.exe	105
PID 4624 wrote to memory of 3432	4624	msedge.exe	106
PID 4624 wrote to memory of 2400	4624	msedge.exe	107
PID 4624 wrote to memory of 2016	4624	msedge.exe	108
PID 4624 wrote to memory of 2016	4624	msedge.exe	108
PID 4624 wrote to memory of 4736	4624	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_61cdfacc0f61acb1179b0997fbb1a4187c1201e437aa6ae4b2a7ad95b3342999.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x2cc,0x7ff90987c188,0x7ff90987c194,0x7ff90987c1a0
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,14727160853049763902,12138523710252331053,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,1376907753187364329,548468430747430799,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:13
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,18067057164437843582,1580602553423633828,262144 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,5594607347890263956,7022498872899350898,2097152 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,754157775604176179,2847475503751675273,2097152 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,7735656611691240399,10767237396837681956,2097152 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,15496481388961216149,15907863921063453629,2097152 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:9
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5208,i,9654636894876899916,6778243667242372487,2097152 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,14057233926751108697,3463487833226194026,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,964935232528434028,4602886406165464824,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,16127344953718021374,14539613351926375706,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,16127344953718021374,14539613351926375706,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,2897576092598417745,12113291585709813019,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,11899103190866980737,13191490691998908257,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,7164310850237483509,8365182278189330948,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,6425084339839605287,5284515316721394012,524288 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=840,i,1738484918942469439,9712376784484607573,262144 --field-trial-handle=2172,i,17049647155933837691,11493335226761280237,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 106KB
SHA256 60ddd8fb82d1bb191614d3f7b069a86941ff6e36e96ba2c31da51f29663aa00a
MD5 0f24771de95424d604dbb8f68525c130
SHA1 3baff01bf030b9140ed0ac65eaeded3dc413083b
SHA512 adf8524baf31e6b8cd6c79e1109044060c444811d21f9ef2debb929aad6b55aa46f9c827cee56777fcdb172bf7e0f685872499fd672a955eda325e8030e851b2
SSDEEP 3072:eeJ1qvhsloUohsloUohsx4ErkQN3j5FBVuW:RWvlplpTTSjBoW
TLSH
T14CB3E173656CC44D504B76FA752707E38FA220C44CF599379A64FAC28BB323C52D8BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3a2a138774e156dd0f459bba9c006edb8f73658e029683da21223f4b70ae79df
MD5 21a1bd9fab3c24b7c6817240d21b2212
SHA1 df58c5e22879f2b382343f947d876b3d137209ab
SHA512 9599cb1a6ae0adeaf1d4b2430032f79ab1c5bf8cb74bfeb7687d3a69f15d18f00bf3ca68e1483d77cb00798de28c4be7486ad759c804d9b1c4157cc5ab7ab2e1
TLSH
T1A87171AD6BB58C71EB8C0038C6E16887363487BD55C31ED21A78EE7BD85BBE570B9440
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 7a049d6c71da1966a1eaedd6b3f5b366067426cbaccc1cd34bdf5c20d9a9cf9a
MD5 d9f8751100a510af7882cbd9eacd242e
SHA1 3c8e2f9f403893b96f0b09a50f3c0b47daf27af8
SHA512 713c9411e2f103b89f7a19578abb2f323c59f5727e813009887ab7d29773e380089ccf55109677bc671cfe31a2431607829c27f1eab8108e4092dc69b5cee275
SSDEEP 96:DEzgOXM2PVaVIuNGyzBrfAtBrFf2sYxI72TPNwQ:DEz7XM2PVaVDQy1rfArrFf2bxI6TPNT
TLSH
T12CB16DF7C3F49A2DCF1592F1AB186E5ACE1D0924821C3C2B88E4AF5B93E2471E14165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 84b439975ae54e275e8cbfdcfef1238c79633d7b4c01d09d0d0e7b4cfd3dcc59
MD5 8c9c77f4d4dad1f45425a60385362a20
SHA1 52d5609ae6591554c65dd9b053b873e5d3c3f072
SHA512 e09688b5053cce24b6a10c39b618b91a0db712bf6da558da7e3d3ab382b617751aa2abcb667968509914d4c28614e6034585065e8d47ff42596e97c6421ce777
SSDEEP 192:sxRURP7bA/ftsiDzoA8p4pg/g6+WNIYFwm+G3IgDmJ:sxRUVA/ftsiyL/5IilW
TLSH
T12332A615AE28A93B8CDBD20DBB55BF53E2F95032B1951F48A6FC961C04E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b26162885ea59fe4f432065dd161e8b027754543b2c6b0aea225853280285809
MD5 be8bfbfa99dfc2227967b59593f37529
SHA1 59de6331d76ea125e72cb07744fe96608f72a1e1
SHA512 739c14163fcc33aca2594dbfefcca0f616fc3187ea19dd3b3a693e32c1598ec770bbb06e2c5a0b3bb56b15fd72e6fe10010b2f8ac946c8e08b0b6252b6994d7a
SSDEEP 192:sxRzRP7bA/ftsyDzoA8p4pg/g6+WNIYFIm+G3IgIJ:sxRzVA/ftsyyL/5Ials
TLSH
T152329515AE28A93B8CDBD21DFB65BF53D2F91032B1951E48E6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 15e0affd78d83d2bd9c9ec74787aa70a23b096050538f4ed6895130b10f46bc1
MD5 1dc73c8f9d403f05f48b0ea339b94847
SHA1 6ad4a039cf670e5d4cac8ffc84e22277172fdbdc
SHA512 94c3528e4f82b85572e5e262983011d59e9ed4c4fbe0a86632d932ca0b4f5518ef94eaad50f3f31e7e2b19b8f67958bb6404f5c38d8ce43ed9f4648d5189e118
SSDEEP 192:sxRURP7bA/ftsLDzoA8p4pg/g6+WNIYFIm+G3IgD0J:sxRUVA/ftsLyL/5Ials
TLSH
T1F432A515AE28A93B8CDBD21DFB95BF53D2F91032B1951F48A6FC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3d493969e64e6f585975cd43c56499cbdab1a4822eaec1696c3dae7e2253a82c
MD5 43174725121dce09ff168f9495fa3362
SHA1 c5d15bd26e6cfe9fee2f3a34b3628767a96521e0
SHA512 e611235606f3d02aec74bd24f26180c32716be76f0f0374138cb16ed0ed7844ca0004fc754f9d71ebc32b5b54a0916b02ced333983bb66810564f780a5fd48b4
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnJro+Pp:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0VC
TLSH
T136B2D92F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE990C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f57823f988be6e711b843391413b3fb55c10c2dca1c9b1ecfcc169e4d2321c78
MD5 11cdc082ef96d0e16901fd3269e0917b
SHA1 d581c160ea5a87b3a9f6dc1b309f3b928d57fa1a
SHA512 5f4d5344f6f329177b59edd76e4a69c2fb8fa2d032547137ef96330c9f164fe1c50553543de597ac5b88486b8c0c87426aa82e5e1a0779b9539b3b479fd7328c
SSDEEP 24:Ko+5248IxKyhY1KSbU1yXKF6hEZIvKVhi1aSAb3CVSwYIFKOhs1GSHENyXQMLpMF:KwvIxKEYcDyh2IvKTisvHIFK4sQzyC
TLSH
T11C912114313B1600387D3549A5B29BABA74231A33074E67B3FAE50958A6BE044EBD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a203b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a203b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 271ca660109a71d65e3776426148b27d56f2a31f41986c56b9f61eea86996662
MD5 fedb1366cafce9e295420d331e4c66f2
SHA1 b8db5bdfad190f365233514627bf30229eb4dd52
SHA512 209d72ee61f73e385a9a403e2a6976f0ca1d5039c4eb12ccadc5ff8c1c6f6fd97d2b4f9cc9ed935b74d2764182ee4d05f20ad7f5728da59c04d2fb8d67e77268
SSDEEP 768:HE3UbGf9c3IFryEMbxyJugQVTJ7vvmeX3cTRya:HE3UUeIyEmxyJJq17vlcTRya
TLSH
T1F7F2AF719CA59C7349F7C285664AB647AFF441A398CA1B84D8DD9F1E018BABC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 a7fdee2af52d4ab6bd986ae86d5a5c0997224ba51a2d8f563dd3b6b6d82c2d8a
MD5 3d222bbd1f6925d7505edeb2010ef609
SHA1 f553bd2154190098f7624b5bf9bb04498a7d000b
SHA512 3ee3d4058ba99a5a02b9fd182bc6f03f2107a8d6876bf8cdb8b158626c69232c09d9cd017d9742d639a00146c8e25351c98ed73739f309aea25642055b1f0bfd
SSDEEP 768:gFQq3UwgWIGf9c3IFLyEMbxyJugQVTJ7vvmeX3cTRya:Tq3FjeCyEmxyJJq17vlcTRya
TLSH
T148135AF148D78877D8AE8783A77D6E429EBCC1A3B4855A40B7C85A0DCC4B5BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 dbeff8cf4fd21d18eb8db0c9609875e0674348be602d03bc73ffe6937b624de5
MD5 151b76f26faaf4512bff45c29b3c2205
SHA1 646c07ca30f738ea70d7a6ddef11d1dc1108da53
SHA512 608261dba1679aa44e9ff76f0f172d95b110e72e3aa17495a6591e7cd384c5fa256a2835a8abd2961262643ff4dc377bd462f842c755a19d39db64127ad05b16
SSDEEP 768:p/UxvxjgC+k3ohf9c3hyEMbxyJugQVTJ7vvmevdSHtBk:cZj3+k3kehyEmxyJJq17vLSbk
TLSH
T1C503CF35ACA55C3388F792843649F787EFF505A398C62BA885DD6F0E128B2BC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7f2bf3e-4092-4f2f-ab49-1e7c16c87116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c7f2bf3e-4092-4f2f-ab49-1e7c16c87116.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download