ed7c4e65f2ee936865153d24153db0e88fbcd7ac5923e2d553b5f140169ec636

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ed7c4e65f2ee936865153d24153db0e88fbcd7ac5923e2d553b5f140169ec636.html
Size 105KB
Sample260912-3cm85sbf53
SHA256 ed7c4e65f2ee936865153d24153db0e88fbcd7ac5923e2d553b5f140169ec636
MD5 89499c9d8b5a36ccdc446397d531732c
SHA1 dceaf281b5f7830be30e12b332fef46c9800977e
SHA512 de68d09634952b8b49a82177da19dbf92148669357b30104c30420111b5ad950902498c72243c168038e493ec6485d7396826f0069554f099e5b9955c3f27de6
SSDEEP 1536:5XxUYn+h1g+gRltjh4jFCE/alFQSTt7NohxwYN+2bEao5bEaoI:ReKQYN9W+2do5doI
TLSH
T106B3A38701205CFAEF6149B3425B586B3D2C5437BC4791B9E3FD8FA72B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1152	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{A669BB4A-15FA-42FB-8E0C-CDB1608367D1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3400	msedge.exe
3400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5116 wrote to memory of 3672	5116	msedge.exe	87
PID 5116 wrote to memory of 1784	5116	msedge.exe	88
PID 5116 wrote to memory of 1152	5116	msedge.exe	89
PID 5116 wrote to memory of 1784	5116	msedge.exe	88
PID 5116 wrote to memory of 1784	5116	msedge.exe	88
PID 5116 wrote to memory of 5488	5116	msedge.exe	90
PID 5116 wrote to memory of 5488	5116	msedge.exe	90
PID 5116 wrote to memory of 2220	5116	msedge.exe	92
PID 5116 wrote to memory of 2220	5116	msedge.exe	92
PID 5116 wrote to memory of 2220	5116	msedge.exe	92
PID 5116 wrote to memory of 2084	5116	msedge.exe	93
PID 5116 wrote to memory of 2084	5116	msedge.exe	93
PID 5116 wrote to memory of 2084	5116	msedge.exe	93
PID 5116 wrote to memory of 4764	5116	msedge.exe	94
PID 5116 wrote to memory of 4764	5116	msedge.exe	94
PID 5116 wrote to memory of 4764	5116	msedge.exe	94
PID 5116 wrote to memory of 3296	5116	msedge.exe	95
PID 5116 wrote to memory of 3296	5116	msedge.exe	95
PID 5116 wrote to memory of 3296	5116	msedge.exe	95
PID 5116 wrote to memory of 2408	5116	msedge.exe	97
PID 5116 wrote to memory of 4548	5116	msedge.exe	98
PID 5116 wrote to memory of 2408	5116	msedge.exe	97
PID 5116 wrote to memory of 4548	5116	msedge.exe	98
PID 5116 wrote to memory of 2292	5116	msedge.exe	100
PID 5116 wrote to memory of 3224	5116	msedge.exe	104
PID 5116 wrote to memory of 3324	5116	msedge.exe	105
PID 5116 wrote to memory of 2836	5116	msedge.exe	106
PID 5116 wrote to memory of 2876	5116	msedge.exe	107
PID 5116 wrote to memory of 2876	5116	msedge.exe	107
PID 5116 wrote to memory of 3400	5116	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ed7c4e65f2ee936865153d24153db0e88fbcd7ac5923e2d553b5f140169ec636.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffbf424c188,0x7ffbf424c194,0x7ffbf424c1a0
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,14995811246868940273,17132000634248932542,262144 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,9504499192316952819,9864076704550622986,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,17697876894425643144,16420044015393321457,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:13
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,17335473207068189172,4063829663283530143,2097152 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,2172144943506366779,11941778613852740342,2097152 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4396,i,12453434854739404779,14371123125857409638,2097152 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,2602821585790801766,9358619679892662647,2097152 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,6371137073169785844,935818285856280429,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,8200766976903491678,1605900952989279216,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:14
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,9202150906309257089,6642718229260842363,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,9202150906309257089,6642718229260842363,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,13262403830193203966,4926988771044010055,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,10898269230360308272,12132580506396285957,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,1520843083654329423,4834756410022575607,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,10066156731762802285,14484023286972791062,524288 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,9721599773469454329,1236882020670886668,262144 --field-trial-handle=2328,i,1672853892659617282,5228164397812554168,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7a6893ec4097628d78f3bb437c4c0a0f3a69215b9c5f34ba136f2e6ea33b4894
MD5 8c8d182b359c5dd799f7d62bb2b089dc
SHA1 6dc9b19e8c9475348f5793d0b97ad6afca271bad
SHA512 3e9e9801bcaf6b03e51ec81cc42f094d47a2b06dbc04b23a64a110e7985b82b357c09b1981b99a69667ae27038b711461827a0ddef6ccb3583a05b910069f108
TLSH
T1FE613D0DA7B00099DFED393084E6409B3A3246F55A430FBD61A4DFB8B94776249E483F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59936c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59936c.TMP
Size 3KB
SHA256 87e14812692498502dd2236b2fcc90e0b2180d35d59fb2cf2b105ad16670979d
MD5 6b06cc4d2015c096874d380cfa02d0ab
SHA1 740becf5a17e3cd10e803cf0ec92cf871b785016
SHA512 04d022a711373c9c17d759cdffd12443be853c2837c48b178223e4ed47370005c957c2cce98adee716d096bc6ca4ea956a15733ad2ca3e936a085c83c9acb544
TLSH
T1A4613E0DA7B04059CFEC393084E6409B3A3246F55A430FBD61A4DFB8B99776249E493F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

eba14584-c736-4546-9f0e-9949b2cee6df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eba14584-c736-4546-9f0e-9949b2cee6df.tmp
Size 3KB
SHA256 84f5cd9b631d5e3d9ab06bb8294cdf4a01cacd7075b75697fa56a53221347742
MD5 2f7508c4e6e21104d40f7830323290a5
SHA1 a83150a4a27c97f69e7ab6b9dab7e1062e55e2ec
SHA512 bbc0b42c5ba0f0135c07433ed40379732472973c2ebcad9f9c5d3534d290bb47df28782e991323c39d3e677ea74b37e5eb015e8202b6b7c99dfedaad090451eb
TLSH
T15E619BF7C3E8867EC90156F0AB246E1BCE2D0955432C3C56C8E4AE5FA7E24B1E24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e74dd85f069a77126fb39dbe3f781eacf3ffe2f76d825d0fa5d0886a0b673b5e
MD5 1f850237362f8b12071d1d6a4b7984d2
SHA1 47ba37173048a8553c5251d7e1577bf035030c60
SHA512 5c02e1659724b7eaf0774cc189caa3791eddb179f2285401c9492061ff4f8da4ff2dc504aed287ffe49a643d4b68b09ee0e5b655a4bb72ef7a88449077ee87d1
SSDEEP 192:sxRaR97b3/feMsxqrViTzoA8p4v/g6+WNIYxsqUzGEIgIJ:sxRarf3/fpsxeiCu/5I2U9s
TLSH
T19F32A615AE28A93B8CD7E21DFB55BF13D2F95032A1D51F44A6FC8A1C00EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f7e449171cef271132bc464c6681f3af105a1cbd7c0d7d4e293d6700bc7fab37
MD5 ecc27b977f2282dbe0b0fa4f4a406c20
SHA1 e39a01250af410f7219f61569713c5046dd73053
SHA512 4b279a840f64cbfaaa5c09f1ad1d8b0ca9dccfb5e22e5a23c063fc37362f960f6879f990880d11f69e942fb64a39b992a08df8a02e7f606881989a53475a3a94
SSDEEP 192:sxRFR97b3/feMsVqrViTzoA8p4v/g6+WNIYxsqUzGEIgD2J:sxRFrf3/fpsVeiCu/5I2U9W
TLSH
T18432A615AE28A93B8CD7D21DFB55BF13D2F91032A1D51E44A6FC9A1C00EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4e6b41aafb0db69468b002e1dc6461830a8ebed864ffc8a8514abecec152b035
MD5 fbfcd280f4549314ce49ef68938324a7
SHA1 2c4862d98e7c5117a4a73f8b9641f2c6b6d57aea
SHA512 0780ac2175c0cd1c25f07a82ab6714d54355e5ba49510820c4cea59864c055aa75cbcdf2d4882d21b534a9515aaa1d01b52deb3a45f2df9fea0ee71bddbd87be
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMLrowfn:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0V9
TLSH
T1EDB2CA2B644CCB7E8FC00A9D9C196E9B7D9802C796548D4047FE994C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 316eac122041499e761f50c0e57518fb6ea36b5da79a78c89226984e441d33a9
MD5 8424c3ff32afd071386e95167b148fa5
SHA1 7b1ffe7024f4745c787c5a2df2b50bdba4d76fac
SHA512 e7dbbb37820efa51a609e7a5c91d99a35a5d02f026a4d2f10b4e5f11cc296aa70195b8d1e3f6a5eb20f1b6819374b9c903c0a538561dd1f9ac87dbe4a17d3079
SSDEEP 24:KicvEEmIhKMhU1qS5a1yXumbJc78olK+kOKoIPIXIkKUHh8ek1ig0SgaarqSbQ7M:KwRIhKaU8LyNjINK48wIFIdKmAAPyI
TLSH
T14C913021713A1240787D650C81D1EB5ECA8171A33468EAAF7FEA1065CE76E584DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 c36cb147fefc6b65f66b75741d72bf5695abe94daa2dc6e22e87e588e2588280
MD5 4640fb88d05c1f5a748254eb2179c8ac
SHA1 40d6c07b2f7d4eb8d56f35f1b321b68745c34a48
SHA512 86b4634c0e952e628c4225825814d4d3a203d8becb83edd77ecd8848f0d2aa8fccd8c99e7ac16c62eb97bdfac78220f8e405870aa823ddb14a134c021bbbd438
SSDEEP 768:A/UxvxjgC+I3+mfd9TOf/fLZfJyJYe1ELsAvC8/YEU0MgLVR:tZj3+I3+m6f/fFfqYe1EQujYWMgpR
TLSH
T1B103BF32ECA49D375EF2A699B74A0713FEF4852381C85A6486DD2F0D05CB3AC534F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0b79485af4c10969c5714688184fd790820eb4a5ad6edc612640b60dd7408358
MD5 75abcafad504b972654c2f14d59641d6
SHA1 d70cbd362a571918a6572aa58b0b55484f201399
SHA512 61e3aed2931baa71c920482c68d3a9264ba6b97fb1458d8a1d112ba1c51ac5d451ff1878f7333faa88465b2ad226e8ab75c2ba5e280dc1c91884dd804e5db168
SSDEEP 768:oZ3Pm4d9TOf/fLZf+GJYe1ELsAvC8/YEU0MgLhD:oZ3Pm5f/fFfXYe1EQujYWMg1D
TLSH
T134F2AE71ECA4897B5DF196D9B7461713BEF4821382C85B54D2DD2B0D04CB6AD234F82E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 8a434e21dd4bd4170b63fcd70e0430194445b6b3652b32dddca8e8b23734cc5e
MD5 be7c480e264ce188a62fb617687be041
SHA1 160f41d94a4ab74158f2d1d1b7f516b635d32886
SHA512 da1b41384488c83a289354e1b174888b904bb1d285899aecd17132ac2710d3dd4cc22076d0504d14a78f2a5399a59c81242e0cdf7b3d2404868c42e6803bff3b
SSDEEP 768:cZ3qm4d9TOf/fLZfJyJYe1ELsAvC8/YEU0MgLhD:cZ3qm5f/fFfqYe1EQujYWMg1D
TLSH
T1A5F2AE71ECB4897B5DF29299B7461B13BEF4821392C85B54D1DE2B0D04CB6AD234F82E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a4609270b9fe4025d1ae3e1697d7831f23ac2203141ea61e07228abb0fca713f
MD5 6bf134f91ecd636009b8cda3e5556bc4
SHA1 1638a1ae653bb22d3a846754f937da7c912f7d98
SHA512 2243cd4c54478fedbbfbc74a57a24df2e7757d12cdd4fb404b9d5a089b772271d5577d9d5a24881f2526559b3c5179c9eb56ead9c3705998d0977ee0fdc45366
SSDEEP 768:h/UxvxjgC+i3t/9TOf/fLyKJYe1ELsAvC8/YMz2SHrkw:0Zj3+i3Cf/fXYe1EQujYfS4w
TLSH
T14803CF31ECA48D375EF2A688774A5713FEF4812394C46BA496DD2B0D16C72BC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55e0fcb3-f79d-4b97-88b1-a229319b427b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\55e0fcb3-f79d-4b97-88b1-a229319b427b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download