1df0e0f0d7e5d4b5d4ea6f74851283b3c0efbb5cd722a33cd8f995cb684c7e8d

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_1df0e0f0d7e5d4b5d4ea6f74851283b3c0efbb5cd722a33cd8f995cb684c7e8d.html
Size 59KB
Sample260912-3ey4esbf87
SHA256 1df0e0f0d7e5d4b5d4ea6f74851283b3c0efbb5cd722a33cd8f995cb684c7e8d
MD5 be0be9c8e156d49188c411f486292c9b
SHA1 1a4e57ef0c6f24ed9aaca64bd9304b53ead29191
SHA512 1ea94083053092d5323bdbfbe62793339f5e2a67cd21bc2a49f67c836a8b8b89a2747cdc5abda069dd9c23f2d65289cc0eb8aaa0803c28ec5b2ea747c553bc76
SSDEEP 768:JbRayHHvPWRoK2yAMsf6PO6N0FGbOasGSLkROSLkpSLkCGbOSBGjO89G9Ocv4OI7:JbR3HH2Rz2/MsflDMO2G4/f6Y6HfG
TLSH
T1B553C9B3BD94813A0912C2CDB472AF59F901E892DA43D490D5EEC79837C1E97E93E348
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{8974662A-998B-4D3A-8DEC-D6FE21A2AA76}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4912 wrote to memory of 5232	4912	msedge.exe	87
PID 4912 wrote to memory of 3568	4912	msedge.exe	88
PID 4912 wrote to memory of 3036	4912	msedge.exe	89
PID 4912 wrote to memory of 3036	4912	msedge.exe	89
PID 4912 wrote to memory of 3036	4912	msedge.exe	89
PID 4912 wrote to memory of 5200	4912	msedge.exe	90
PID 4912 wrote to memory of 5200	4912	msedge.exe	90
PID 4912 wrote to memory of 2580	4912	msedge.exe	92
PID 4912 wrote to memory of 2580	4912	msedge.exe	92
PID 4912 wrote to memory of 2580	4912	msedge.exe	92
PID 4912 wrote to memory of 5228	4912	msedge.exe	93
PID 4912 wrote to memory of 5228	4912	msedge.exe	93
PID 4912 wrote to memory of 5228	4912	msedge.exe	93
PID 4912 wrote to memory of 3056	4912	msedge.exe	94
PID 4912 wrote to memory of 3056	4912	msedge.exe	94
PID 4912 wrote to memory of 3056	4912	msedge.exe	94
PID 4912 wrote to memory of 1360	4912	msedge.exe	95
PID 4912 wrote to memory of 1360	4912	msedge.exe	95
PID 4912 wrote to memory of 1360	4912	msedge.exe	95
PID 4912 wrote to memory of 1396	4912	msedge.exe	97
PID 4912 wrote to memory of 1396	4912	msedge.exe	97
PID 4912 wrote to memory of 1396	4912	msedge.exe	97
PID 4912 wrote to memory of 3528	4912	msedge.exe	98
PID 4912 wrote to memory of 3528	4912	msedge.exe	98
PID 4912 wrote to memory of 3528	4912	msedge.exe	98
PID 4912 wrote to memory of 3556	4912	msedge.exe	99
PID 4912 wrote to memory of 5252	4912	msedge.exe	100
PID 4912 wrote to memory of 3556	4912	msedge.exe	99
PID 4912 wrote to memory of 5252	4912	msedge.exe	100
PID 4912 wrote to memory of 5080	4912	msedge.exe	102
PID 4912 wrote to memory of 956	4912	msedge.exe	106
PID 4912 wrote to memory of 2788	4912	msedge.exe	107
PID 4912 wrote to memory of 1164	4912	msedge.exe	108
PID 4912 wrote to memory of 5996	4912	msedge.exe	109
PID 4912 wrote to memory of 5996	4912	msedge.exe	109
PID 4912 wrote to memory of 3820	4912	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_1df0e0f0d7e5d4b5d4ea6f74851283b3c0efbb5cd722a33cd8f995cb684c7e8d.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff88f7ac188,0x7ff88f7ac194,0x7ff88f7ac1a0
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,5284535923359251455,4264925143322164160,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,12453807995685967699,4651742491721162163,262144 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:2
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,1995471471376812928,11301057141578047556,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:13
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,7125568277032305623,5082349320493850490,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,17781731779868473673,1238227972853917143,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,12229320426447236262,14191541972110247622,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,6489477942301252367,5463738404301452639,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5388,i,8520040907384374785,15196044830081551706,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5480,i,12956845336349845424,14452744583183065756,2097152 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,9028951068039981231,17646248040449896423,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,11886330073358486297,14274249205087145410,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,14785597442149821901,12224569189960680008,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,14785597442149821901,12224569189960680008,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,6143581613074080054,9417611322208934987,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16972482803502969527,3451490375537807902,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,17145702893620600409,5790111525383052843,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,696833708478545116,13394729199688616412,524288 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=836,i,7111946293155944212,6843088672036911750,262144 --field-trial-handle=2588,i,4954054089461620854,5649322927182642721,262144 --variations-seed-version --mojo-platform-channel-handle=840 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 57KB
SHA256 1142767abfb8d036697a68a5be5d86049573fdca3f3abb24bbcab1cdd0d0b427
MD5 38e608bf30215b479452114afdd69e51
SHA1 16c7fee7ebb102546de4d3bfd6856d9d93259c06
SHA512 bb10b2e81e99c5dee6f6767b2c44fb95c17a255f5a17726e1c3cf24174cd42a37dfab2a2693791a45cf0f3c69531561ba901d3174ab1c7140f61c9205348cc0e
SSDEEP 1536:zkUkOZNZyk8Qb7X6j2oZd1GLHasHnziiuiSzsoFZ+:bkqvF8Qbj63dEasHnGiuhvK
TLSH
T1F643F1B4B1D080D1936A1B0EEB99CEB6AE5C315834CF3F8651D7FC6D28F614345680AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 155KB
SHA256 3da2a613d38da753cd9736e1bba9c0c521592b1ba4d996e237f822e5c9ae368d
MD5 4545caa9317acc8badeeae97191a9ea9
SHA1 af43d0884ddd992e5f40469969ab553367e155aa
SHA512 efb331b3d3c226b4b96d9c7154eceef92a9a39331677c50b4e0db1da9a41db89bd039d57784a366d68785ca6ffd347b865e05fa1f1dabcbb20b50bcf133ad9b6
SSDEEP 3072:tENTO0Do0rKbp9xBoqCL5HlqDGAxe/Id3cDqMfSQ8NxeHM8EkJaT7aoJrRbQrzo:tENTO/vbp9xByhlq7xe/1qMabP+JaT7d
TLSH
T17EF312B6E6D3F0801FB891DACF9A61A995B759621CBCEE4CCCB315B321439073DD9806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 472KB
SHA256 183219c9f512028db29b53259725fcaa8429e969fb7fbb8362a6ead1f3793779
MD5 4730c1f2ee0f7e71db7d341b332e597b
SHA1 164e6577dc15c9d4f649db848c990c37df424e11
SHA512 200cc37b3453ee861cae1496b7d1af4485f8b9266f5bba884e32017bc027f7b5db35fc2c2fe8395de0d43c50f09e9a1226a9809dd6b292067b2a18684995b894
SSDEEP 12288:RNMBWLmdd05LVx+F25JCHDe7P3qytn9HiR730ho1XVA:Podd05Rxx5Jm9yp9HM73qYK
TLSH
T18BA423E64791A61A33CD12E07B27A0498A0C4D9924943C87F77FE1AB5EF352314DA773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8b1be68e4f2575d0b7b83a0fed51e4daa35c0cea66429770d5311c57e2388b4a
MD5 f39ee7411ba60c5f009a021794d9c7cf
SHA1 fba1d6e3abf07c7078a202f9fccb573245914e81
SHA512 17dcd55eb35456b10edad350eb09d7f37cb43819cd7829f9a70256e912c4d56cf50b3cd602c8c0d0975b7e827dc8afd9f282224b291a0ea8ca7409fed104f85e
TLSH
T115713F4AA759D009E7AC09B8FAC4144B373083B1AC4F1E62079ADAB4F476FD84A90C41
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597edb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597edb.TMP
Size 3KB
SHA256 c6daa3c72f4348ce3d0c210dec151098dcffeec4a9df3e4592358159b6c0204f
MD5 b4f0f2a4aa44cabf2e0146578841b941
SHA1 fcb8668dde9df3d1dce870ac3ecabda21a7aa9d4
SHA512 047a10416c4d21b0ba7f3fe1f0d978382770ac0235a6fb1bd1c0cdcc903a72ce401389904b1661919a980612935591604536f2077072054d76ac9a8688dfecf6
TLSH
T11A711C4EA759C049E7AC0938FAD0108B3B3083B2AC8F1E12179BDA75F476BD84AD0C55
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 735f53566d85576c0574643e01458393bf6061693359aed56a8a170154838535
MD5 c308edb1c59b11447c9157020335aa57
SHA1 3ed69a626d58285ec2d4ba71ef9b5273155a4b03
SHA512 651d7177d4be04b9384b15dc8e786b93125d17689e3cb38fbe425733729512acc1a2e6079ad79c004792f6334ff636b92e6330218775a5accc8b4429c926def2
SSDEEP 192:Di+4Sh84reD9aXF2ljkbUoumXwrqD070G4TT:Di+4Sh84reD9aXF2ljkbUoumXwrqD07o
TLSH
T1D0D19BB6C3D8837E881152F49B256E2ADD1E1A5A52383C568DF8EF0F63F14B1D20259F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e47bd45b79a674dac37c30ea0770432356728b4ef099e901d6b4c74a42ad27c6
MD5 524d0bbe1cb928015cb5e01babf95497
SHA1 43ba413f33ed1105dd6df9e1cb977572e31f0d4a
SHA512 5fde5e76dfa3351731ab4a03909c10c3b176959afe0a7cc2d0de368f9ace7137cca11460660b3872d8891b76fc3ab9b5e20d5a554758cdc3bb7f04fda7ed59af
SSDEEP 192:sxRBRwbh/fostGzoA8p4I/g6+WNIYojcGuk+IgDoJ:sxRB8h/fost71/5I2k2I
TLSH
T1D7329615AE68A97B8CDBD21DFB557F53D2F91032A1D11F48A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 af7c97bed773e58e32a7e064a893c6c2d4fec23c661bc5ae364c82b541fc6aba
MD5 aac71c64061257f9d00b003817b8017a
SHA1 4783107f9929a18a9e46b6a4457712a9daa0d5db
SHA512 cf2ea051ff4dc8ea084079ff93f7f7da3a0111766b771af3fd57f9c28cdb2f1940c232b54d2d129e14a732d5ed3d793ce00539a7e27f664105ede19284b14936
SSDEEP 192:sxR6Rwbh/fos4GzoA8p4I/g6+WNIYojcGuk+IgIJ:sxR68h/fos471/5I2k2s
TLSH
T120329515AE68A93B8CDBD21DFB65BF53D2F91032A1D11F48A6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2ce3feab8ad54e5df92f1a3791815ff6216d517c18372a4752150b29cb94e8cf
MD5 2b68d59fde3b6c3dba4eabc106cecce1
SHA1 b85751af415bdc3074f8ca2c5c4d421ec589daf9
SHA512 1b1f258c7900120c958a1c56afe4109c4972d5d5a2bed7fb5dad55b59ebed41832966f6c319c5c231dc86f833bafc16b155c2ec7699640a468ed45e8dd239510
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUarond/:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0Vz
TLSH
T140B2EA2B740CCB7F4FC04A9D9C196F9B6D9802C796588D8047FAD94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe592e3a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe592e3a.TMP
Size 149B
SHA256 887c019a25cfd1bfaa5dbf267ae464a35b01f62bf41f6984e0d3201b10c467ac
MD5 407243ef2ae3076e17a99bcc7f43bb7f
SHA1 48b399ef16bad7ac3c4630c5b81d930d85919dda
SHA512 13ddd79c4b29ae15090c4574b1ea2a5f9b94a7d2bce22edad85ffc0418cb8584269cd4c4e43ace92da0fb83fd9edaa6f740cdbcb00dc49703d3a109644314718
TLSH
T16FC02B6BC73141067720EDD060B8110DB10FAF89CCC0CAE8C904F38320FD623C0015A0
MD5 SHA1 SHA512 TLSH

Submit Download

d5bffd72-8a00-432e-b4c9-c4609df2c899.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d5bffd72-8a00-432e-b4c9-c4609df2c899.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 daf2becc1890b26a23702914eb4336bd9c9897c2511a5ac56be45ddcc0a8a3cf
MD5 e54a2fbc68a83fc5dc9c3c64b0268b82
SHA1 30b7245331f8d68c4ce9e84ed929617a78554383
SHA512 6257162b6704a7714caa0815160674ffa0d3ddf28dcc439a9ec5ab7fc995093294cf21e762f0b940b28d8277c41e80129572d9b6e60c882a798a5f9d928e3efe
SSDEEP 768:E/UxvxjgC+V3URhcGSOE+3n/9OA9at01j0iq00+Iai7SHx68:xZj3+V3pOoCHq00NaUSQ8
TLSH
T1FC03B031ECA19D739CF6B284730A63879FF40663C6C96AA449ED2E0D058B7AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6d3c999dde4e1090bfdb1f5dfc103f8ffe79e5c9cb523b7cc4415b6afb3d9169
MD5 bb89d80ccf6c0816d6503bec66918b46
SHA1 6f06c1cf78f40fd4399823537654fd803a0cb89c
SHA512 e0fc6cd3136822773215154e0501b8bf0579a122285672466b5ee625118b7c7fff031e4f62bf766d7d9282cba88fc17196afe4f2a03d9f56cec594a8b387d0dd
SSDEEP 768:eFQA3zwgVRhcGSOE+3b/9OA9at01j0iq00+Iai7MgZKG:1A3EOUCHq00NaUMgcG
TLSH
T1B203AE729CA0DA77ACF6A7C5F70663479FF44263C6C9AA90C6D96D0D004B6EE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 4903512dd1807ef925dd873247cede39bc761be9a35a9631ae0a1c0ade2a0fa2
MD5 e393b646e8c8dfc0db5902925b699a65
SHA1 fd8834207f17d9293e1bf54c51cbfdedc934738c
SHA512 b8dfb279169d2c0190d117563f2bbbac9e6d1fd05a4975b435fc0f62f8706409c3db552e8f183570e44334b409de934912cc87bd5f0481b44a340e289e3633f2
SSDEEP 768:sA3KRhcGSOE+3X/9OA9at01j0iq00+Iai7MgZKG:sA3LOYCHq00NaUMgcG
TLSH
T1BBF2AE71ADA09D77ACF6A285B60663475FF84253C2CD9A9085ED2A0D044B6AE1307C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4950ca3ba302161acb1bc47e5281ce2e7d9aefb2079a303f82960b04f395eae7
MD5 3e371383777fdb84dd69c9cd248aa6a5
SHA1 22bcb65c47f3912dad45188cbdb150077b9eb962
SHA512 c4eb0a40e9be2e51bea1f0298653e924d8276cbeb6c7ce042bdc0303ad437cdf1bd75e1ee8365cf0ea30c9d8308443f3da2edba5e5a849906d5b92fa4fe2e0e5
SSDEEP 768:X/UxvxjgC+H3VnEOEA/9OA9at01j0iq00+Ia2sSHxRz:KZj3+H3VuCHq00NajSTz
TLSH
T13103C031ECA19D739CF7B384730A63879FF44663C6C56AA049ED2A0E15876AD1307CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

169053b7-f337-4166-9d47-138bd18ef4d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\169053b7-f337-4166-9d47-138bd18ef4d3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download