bd5051db7483bdd3c04256cc9e203cfb0ef15c693fb60ae296da7681f036bf89

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 23:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_bd5051db7483bdd3c04256cc9e203cfb0ef15c693fb60ae296da7681f036bf89.html
Size 57KB
Sample260912-3plababg97
SHA256 bd5051db7483bdd3c04256cc9e203cfb0ef15c693fb60ae296da7681f036bf89
MD5 3b7fc123fadb426dc08ba0f27f642d3e
SHA1 f8d8c71020b88051dc23870cfbfe8d2666d595c1
SHA512 bfeff9171cff59bcb7199458dfe0b7c2d9d81429b84f98fe89305494c3e0416ae1684fed82ec5b07ec6acebb559c00955ff78b8edba22688187a3450dc2614c2
SSDEEP 768:6NGCXdIzfGgTGpXx1DfFYyxLf8RTHCg2T18EFyjY:KGCOTSHDdYyxfF9
TLSH
T1F8434062DA51C7DD0C37D91E41B1AE3AB214D805BDE81B8F37F490BCAE976C2056EE42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2816	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{FBB8DF38-FD37-4502-B573-C052217A5553}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe
3588	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3588 wrote to memory of 4416	3588	msedge.exe	88
PID 3588 wrote to memory of 2816	3588	msedge.exe	89
PID 3588 wrote to memory of 4692	3588	msedge.exe	90
PID 3588 wrote to memory of 4692	3588	msedge.exe	90
PID 3588 wrote to memory of 3008	3588	msedge.exe	91
PID 3588 wrote to memory of 4692	3588	msedge.exe	90
PID 3588 wrote to memory of 3008	3588	msedge.exe	91
PID 3588 wrote to memory of 3144	3588	msedge.exe	93
PID 3588 wrote to memory of 3440	3588	msedge.exe	94
PID 3588 wrote to memory of 3144	3588	msedge.exe	93
PID 3588 wrote to memory of 3144	3588	msedge.exe	93
PID 3588 wrote to memory of 3440	3588	msedge.exe	94
PID 3588 wrote to memory of 3440	3588	msedge.exe	94
PID 3588 wrote to memory of 5496	3588	msedge.exe	95
PID 3588 wrote to memory of 5496	3588	msedge.exe	95
PID 3588 wrote to memory of 5496	3588	msedge.exe	95
PID 3588 wrote to memory of 4720	3588	msedge.exe	96
PID 3588 wrote to memory of 4720	3588	msedge.exe	96
PID 3588 wrote to memory of 4720	3588	msedge.exe	96
PID 3588 wrote to memory of 788	3588	msedge.exe	98
PID 3588 wrote to memory of 2564	3588	msedge.exe	99
PID 3588 wrote to memory of 788	3588	msedge.exe	98
PID 3588 wrote to memory of 2564	3588	msedge.exe	99
PID 3588 wrote to memory of 420	3588	msedge.exe	101
PID 3588 wrote to memory of 4116	3588	msedge.exe	105
PID 3588 wrote to memory of 3324	3588	msedge.exe	106
PID 3588 wrote to memory of 2384	3588	msedge.exe	107
PID 3588 wrote to memory of 4844	3588	msedge.exe	108
PID 3588 wrote to memory of 4844	3588	msedge.exe	108
PID 3588 wrote to memory of 4328	3588	msedge.exe	110
PID 3588 wrote to memory of 4328	3588	msedge.exe	110
PID 3588 wrote to memory of 4468	3588	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bd5051db7483bdd3c04256cc9e203cfb0ef15c693fb60ae296da7681f036bf89.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffe15a9c188,0x7ffe15a9c194,0x7ffe15a9c1a0
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,2227698741044688242,14531946477973349193,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,3174724697348987096,8564668066883390223,262144 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,221779653984227405,15895354103914658869,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,13916842496662128356,17551715548454706848,2097152 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3672,i,17058182620600076547,4088885286942168522,2097152 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,2119869804013513647,7042607100816000880,2097152 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,18071135913767769949,15887336652605628434,2097152 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,9904202726210880293,4214461173677203999,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3936,i,1706525483915993255,11158361121030786632,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,10055105373221459545,14035245455335792612,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,10055105373221459545,14035245455335792612,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,18170340685609202862,13610665789687308281,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,9468033709374395594,6060032262627934877,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,4968332275254461166,2589971477254765279,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,14773165384338461530,10275324336806681729,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:14
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,6622665186668123148,2544921652797205190,524288 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6456,i,15325066009811175404,9423206123231736741,262144 --field-trial-handle=2836,i,7366185191867385411,15156451399690177149,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a79dfea85c579deb9076127701b25d7e769d5de3517e1351e55ac6ec520b3b56
MD5 013ba225d96fa9a20538eb41f2aab786
SHA1 46f8a63d33bf1f0961916af8f85708c2ce47082b
SHA512 94d4b6ddbb8627be57a4f6ef370f03c1b02594afdc0489dd4a4233e0413f480b470f21d6da861848ca006372b7384c7be0c1413c1de2c671b73c1144e38379d5
TLSH
T1B9E0268476CDC2AFE244688742689B0CC6A13BCF92CC6A0B27448CC970C1048B7E2AD1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c48dbaf742e0c80d5646e30f72efcea30adce263d8a12434321d77061d0b54f4
MD5 87efa3245003356e969bcf6e63a31489
SHA1 95d9c3487c2783885e7e2430bc52c3a1220db802
SHA512 d37510c32c25895059a1ef3d8b2ce51e3f9f8b287058cd004014ee985250c6cd0002c1ebaed3d30c2dc8d568631a8354c43a812936f95f4e921bef15b67e4746
TLSH
T1BB6118C360F0D36FFB78A930C7D3ACCB3A307B95144B4F11A991C4B41886B1BA1048E8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598469.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598469.TMP
Size 3KB
SHA256 730f80f23aa16bd01d4807b3e8c8ec8619936376eec4ee40895c6a95b8b70982
MD5 3ad986d4aed61ddbe1458de845988626
SHA1 4e733bc8a1e98383d7b6c5f322d8df3f988cf36a
SHA512 40c5572e6a51463d1874a22106d97081dfed3f110398bd2360cab604649598170871718ad066619d16f8e158c2a5823061bf393b3f72aa5daa989e661b637aa9
TLSH
T16E6118C360F0D36FFB78A930C7D3ACCB3A307B99104B4F11A991C4B41886B1BA2048E8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a41edfa-8dfd-4d8a-aa60-4b4aec6ba7b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7a41edfa-8dfd-4d8a-aa60-4b4aec6ba7b2.tmp
Size 2KB
SHA256 3b43ba1c516361567cfeadf85279e111cd1397c06a3d2c35fc9c3745a47f13c1
MD5 4c93d70a0ade26c928643ea4d742f355
SHA1 457866be2420512c4c539544b0650ab28a7c0ca2
SHA512 91499e6aa1beb3b75bd19006a16c3952a557436cc8ba8c2ce3f8d963190c5799702a706e8d0e42ec3f602cc0566f899c278c6632114e00126fcb732149dc71e0
TLSH
T13341CFF7C3E5866EC90196F0AB187E1BCE1C0915431C3D5AC9E4AF2B93E2471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 01220b42226f914b96b11804c2d980e8cd693ed3eb727d0bf7623e7b0a4cb3c1
MD5 c8961ee607243cef91f9e88274635f8f
SHA1 a9b02c8e1c254930cf3ffe02e17b8cd8b2bf9385
SHA512 6e37f0a53953311829353855895ac08f2a354c623775994c74201de6d47b0a4540d3613dbef2aad456b656be70646bf2e2ef92b1c28806c5d6ab21b65b03dced
SSDEEP 192:sxRkR7b3/fens/qrViMzoA8p4o/g6+WNIYxsqUNGUIgIJ:sxRkF3/fys/ei9N/5I2U/s
TLSH
T159329615AE28A93B8CD7E21DFB55BF53D2FD1032A1951F48A6FC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ba6c4d8bdcaac329cc32371b925525d56b1a95fa64f9f811326f8829e4f7cb18
MD5 454fd1e2e909473f0cec6d9cdb7a0202
SHA1 72eb0dc527b2ecf2d779a9a2f28e2f019ab1cde3
SHA512 8e69254224b2e13538b9af0305ffbcb5571044169344fd221ab554a4d5f5be58ce70e0385340239395e2164bb6f6715ca7be7c121130fd03ab20d1216bc132d1
SSDEEP 192:sxRLR7b3/fensIKqrViMzoA8p4o/g6+WNIYxsqUNGUIgDLJ:sxRLF3/fysIKei9N/5I2U/Z
TLSH
T12932A515AE28A93B8CD7D21DFB55BF53D2FD1032A1951F48A6FC9A1C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 6836f9f6cd83428f8226672ea8455696b5b2574bfab226b8cef0b2e2394d1454
MD5 ebf5040da091ae5b3811d31979384435
SHA1 d495072c45e049e48d6a787829e3e592f2039226
SHA512 571e5d1669e0bfb46a6729e5d85835d86fa3c7587a0abb32fe67888a843b7da5e1622061c6e62fbc827cdcb0b2e2c20e8877f304c9f90ee1d953f01c576068d9
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMtrowNZ:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0V7
TLSH
T145B2CA2B644DC77F8FC00AAD9C196EDB7D9802C79A548D4047FE994C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 688318308278c282c1fe2e03bbe6fb13e38f0092714a19d26b4420f980ad05f0
MD5 7b11c5e0dc5862f29e30bd794dfc8be1
SHA1 6d50fd49d92af626bde7318b6eca9fd4ca8d9e6d
SHA512 f90b0817e19884f3be433cdeb022d3d4d218a66d29b705b0a8ccf47b6c530ee2f6505a3d23e43240a80f70be1d515da7c60494fa5a81aee5dfa4f2958dd3f2c7
SSDEEP 48:KYxIpKikUc5yVzIZKg48+WdkAeQEDd07yIcYDKPaHCDjmTiDMkAyz:KYxeKikR+zqKg43paKiMK0
TLSH
T150911D25713A1701793D3908D6E4A76E264231B37038EA2B7FEA14A5CE66E181CFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ed6dca47-8135-495d-8cc3-970ec9b21358.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ed6dca47-8135-495d-8cc3-970ec9b21358.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f9976d641b750700306e084234a201b561e32383c08280239a7469955e030bae
MD5 918f34861133927ec6a76d0469b0bd57
SHA1 daf796611fc973ef4a8f0157d162c957bd20e14c
SHA512 7321a2900032af60ed6c15732e19a8be268c94a65522e7dc75936323179495da020cf8ed78ccf860948f314950cac11607155c0441734265a0650a8f418e17c4
SSDEEP 768:p/UxvxjgC+M3XR9TOfZf4t5f2yJYe1ELsAvC8/YE5moFq:cZj3+M32fZfof/Ye1EQujY9oFq
TLSH
T1C403BF32ECA49D375DF1A299764A1B53FFF4811390C81EA886DE2B0D05C77AD630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 2f922361d5d2b8602cb93dbdb417e081898fd8db3a0118616c9035ff2a23c529
MD5 be1a5b40601432ff3bb646f975490f66
SHA1 7ea58a172f871a18458ee81ba4048955c0a04e3b
SHA512 e86f1ff6e714afa87545fcd27c8b99024c384798240f1804cde0a33d9838c5b9559a1c056a956b9585096a187b5dfab51efcc10c9ecba9a1ecf3d29dd796aa29
SSDEEP 768:4FQB3twg2R9TOfZf4t5fjGJYe1ELsAvC8/YE5mMgXl:bB3PfZfofwYe1EQujY9MgXl
TLSH
T1EAF29D72DC94C97B5DF69BC9BA462713AEF48253D4C86A54D2CD2A0C00C76EC234FC6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ab95b9e8acaf9df86853b9581b516a3092784f30ce2a28dce019c4820aaf3aa3
MD5 36eb6d868e40663580eaac9273f3169a
SHA1 62ee4ee71b8d8772e26c2d7c37b302900c7d7531
SHA512 da466aea9e16c02e547f186e09d1755a8968dbe99b64939dca639d70502b64a02747155b5d1356bdbd36e4593b3f956f7377ec480a7a08f9b44f1884fa1088e5
SSDEEP 768:VB3JR9TOfZf4t5fIyJYe1ELsAvC8/YE5mMgXl:VB3ofZfofBYe1EQujY9MgXl
TLSH
T1CBF2AE71ECA4DD775DF29299BA462B13BEF48213A1CC1A5496CD2B0D04C77ED230F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6acd08c0cac0cb7159328e6a987dad5bee0d239b51a246f0a211ee3d63726a0f
MD5 edebfd3e51399101060c6c1a20767e46
SHA1 df57a8bdbaba7424681e0db8b506a5e870cbe887
SHA512 433f74bd5a33631a0cf485bdb84cee971e5b6118c95095a83c84f4332d2b7682b4a9f624ddd8d466dd104270a24af7830beb93a3370ac4c3b3062f3a29b86e9d
SSDEEP 768:h/UxvxjgC+i3zj9TOfZf4tSKJYe1ELsAvC8/YMtxSHrkw:0Zj3+i34fZfIYe1EQujYyS4w
TLSH
T18603C032EC648C375DF2A788774A5757FEF4812394C46AA486DD2B0D15C73AC630F89A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9af5a568-b42b-46d8-bfd8-4a0956016513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9af5a568-b42b-46d8-bfd8-4a0956016513.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download