ca2f4c16028d1972731af0fa590afb40d703160ca038fb0483d3acf15e68b935

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 08:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ca2f4c16028d1972731af0fa590afb40d703160ca038fb0483d3acf15e68b935.html
Size 125KB
Sample260912-kl5wfaselb
SHA256 ca2f4c16028d1972731af0fa590afb40d703160ca038fb0483d3acf15e68b935
MD5 5b17eb57308a19b6994f471d22488abe
SHA1 cbc2a84cb2d19daabd5e6d5ad876180f53ecf822
SHA512 b86fce8fd97680d0641cdc87dac8c278a1ae75169b3f3c5d53b6ad80a33f9dca446bc6e632a8174d899cd1566be8e10ab00ee29a1b90e97b39210dad3954e532
SSDEEP 1536:pmxSYn+ht5sWRbt1bUf5ZH4t6lhQYTtnNo9xB9QRq5sVbEaoNbEao8fy2fvbjCfw:4wqQKNU9Wq5sVdoNdo8fy2fjjCfcoOOe
TLSH
T1CAC3C49752204CF5EFF81DB345DA086F3D2D0537AC0290B9E3ED8E962FA796D030A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5800	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{141C537A-1D69-425D-ABB3-A77301F2CFCF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 4460	2536	msedge.exe	86
PID 2536 wrote to memory of 5800	2536	msedge.exe	87
PID 2536 wrote to memory of 2432	2536	msedge.exe	88
PID 2536 wrote to memory of 2432	2536	msedge.exe	88
PID 2536 wrote to memory of 2432	2536	msedge.exe	88
PID 2536 wrote to memory of 5088	2536	msedge.exe	89
PID 2536 wrote to memory of 5088	2536	msedge.exe	89
PID 2536 wrote to memory of 3736	2536	msedge.exe	90
PID 2536 wrote to memory of 3736	2536	msedge.exe	90
PID 2536 wrote to memory of 3736	2536	msedge.exe	90
PID 2536 wrote to memory of 2856	2536	msedge.exe	91
PID 2536 wrote to memory of 2856	2536	msedge.exe	91
PID 2536 wrote to memory of 2856	2536	msedge.exe	91
PID 2536 wrote to memory of 5356	2536	msedge.exe	92
PID 2536 wrote to memory of 5356	2536	msedge.exe	92
PID 2536 wrote to memory of 5356	2536	msedge.exe	92
PID 2536 wrote to memory of 5540	2536	msedge.exe	93
PID 2536 wrote to memory of 5540	2536	msedge.exe	93
PID 2536 wrote to memory of 5540	2536	msedge.exe	93
PID 2536 wrote to memory of 5848	2536	msedge.exe	96
PID 2536 wrote to memory of 5840	2536	msedge.exe	97
PID 2536 wrote to memory of 5848	2536	msedge.exe	96
PID 2536 wrote to memory of 5840	2536	msedge.exe	97
PID 2536 wrote to memory of 5276	2536	msedge.exe	99
PID 2536 wrote to memory of 5844	2536	msedge.exe	102
PID 2536 wrote to memory of 3060	2536	msedge.exe	103
PID 2536 wrote to memory of 4368	2536	msedge.exe	104
PID 2536 wrote to memory of 3136	2536	msedge.exe	105
PID 2536 wrote to memory of 3136	2536	msedge.exe	105
PID 2536 wrote to memory of 4720	2536	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ca2f4c16028d1972731af0fa590afb40d703160ca038fb0483d3acf15e68b935.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fffa51fc188,0x7fffa51fc194,0x7fffa51fc1a0
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,2647687731421435974,10144561747575095344,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,10522302111927048788,16429868676861026947,262144 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,17911275932246284982,2299729191007758446,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:13
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,2391469480022254711,313084758989649215,2097152 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,6176379398331684425,5567795263902608965,2097152 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,6385447190571278313,3245754278441635968,2097152 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4368,i,1461398427787143044,10222989951949129452,2097152 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,4443667582716996784,1080370371810453250,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,2119199861191611726,11133104747848060679,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,11219820783108966770,16292548330883208209,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,11219820783108966770,16292548330883208209,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,7985103334217802846,10336463209069783379,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,13953113230850739453,11925761198251132420,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,16083009724948165876,10662623024158856463,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,6543041454097282025,1191442106725541095,524288 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,10826964149006693611,11075418968878549006,262144 --field-trial-handle=2472,i,11827574503581771721,7523646827588732463,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7dca65bf-b834-4faf-8272-dd22594a5918.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7dca65bf-b834-4faf-8272-dd22594a5918.tmp
Size 34KB
SHA256 82804b691fe00ae259fee6fdce60461f1266ceafd0d0f674c85450c0187a25e0
MD5 ccba55ee19d0eaaca5fa3d7e7917e040
SHA1 ff70afd57fc035eae6e7540f9e3713f72c1623cb
SHA512 0eb03fcd26f4178b3c2ab111d9dfe269931e03326edabbd85eb9efdaf241867629070737f85eaf1d900173b063a074efa79a092d18a0eb8b3cf19405dad6362c
SSDEEP 768:Bh3hWUDwOTVqq5fgGM1TnXMqOaLcTRgOx:Bh3hWRgfgt1TnxOccTRgOx
TLSH
T111F2BE32AD949C735CF6D385B21A7255BEF540A3CAC91E94E9ED6F1E048B65E030B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d5f3e0b9b404e0f21b8aa486ea4134efe0e59399bf4be900f1f7aa70381fdc2f
MD5 54ab2e38e85be18668ddd74a75927b25
SHA1 f5c9bcddb68fa04a3d1a1723ff93ced260d1c81f
SHA512 1bf8045574eed9b6b765178e6d87601d81b8d1fc5a9e1157d082a37c2f4751774c015ca56b320da931bb98240073538e76c9f718d5940f257c1d07ca249f4dca
TLSH
T16561885D4773C294E7BD6578B4F00C5B3A34F6FF5CA78E522898E5BC684AFE040A1284
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59937c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59937c.TMP
Size 3KB
SHA256 0e3cec7d7e6fc9d068018f763dea2a79111489a3eb9bf2e22a36d50c710bacef
MD5 fedf5f1cdd7c06d613e5441ce1c3ae6d
SHA1 bc2a6d89c811247f5381a43f43a31c4f6d9c2b70
SHA512 a08c218c2dd5d87489b30d4b742ceb3a7d005f85f7df84581daad98bc48b5d09b18550f6bd1eaf0473a40fdf1216ffe5edf9c2321b43ee824c4ec757bb1e23c5
TLSH
T18861885D4773C294E7BD6578B4F00C5B3A34F6FF5CA78E522498E5BC684AFE040A2284
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 84489f4369be57a7e5154062f58f87a27bbeb541d9cc62bcb0f17333387d3431
MD5 db870eac4eebd557ea64fffd401884c4
SHA1 1674583a5f3ba1906c47cc0b8b7c38badff6ef04
SHA512 d840a98ec9725ee14147818d9b5f4aeb7dba5d6dd38664d7a102dbedfc6007b60fa927157ab63b001700a42ac9a1939803af583ee1b2671f84c78f1116c6bf83
TLSH
T11451B0F7C3E4867E891156F0AB146E2BCE1D0955432C3C5AC9E4AF1F63E28B1D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b147535e-96ba-4dd0-95ce-4fc0e6d79844.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b147535e-96ba-4dd0-95ce-4fc0e6d79844.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a5c6a267a049bc25bad1169879c3c65169cb43d0ecf07a22cf692c390082e4f6
MD5 6b3eb7fa4f8536f5c5c784b9b933edf9
SHA1 7010da78917286892df7c187ec050a6d7f2a10ba
SHA512 7d22180e6a66451e9bd85d2ae421764138dcf1ff44de776fdead6cf3c06f77c78449f112469af507d7b111ecbd12364c8f558c5246bfc1f6668ddaefc53d5361
SSDEEP 192:sxRU7Rmb2/fEsFUqLzoA8p4i/g6+WNIYRLf3jcGTIgIJ:sxRU7q2/fEsOzj/5IEzs
TLSH
T19F32C715AE68A97F8CCBE20DBB667F53D6F9503260D11E08E6FC8A1C04EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f7db7aab8e0fdbd46d85c4ac1d4cf87cf52144cff0218817f9784f4bef34a27a
MD5 6eb015cdeaf40dfa3d9e29c1d10b6e96
SHA1 1c382b460007866a761bb051fc2273cf450206ee
SHA512 97efa1057e8fb0d5c7c023dc7473c631d4b1f69533c640892ce41abdff9f960499a1ab0f8f66467df4f076a4c3d1b2ea9a811d3163bcbb0d1bf4fd2edade6a89
SSDEEP 192:sxRUcRmb2/fEsYKUqLzoA8p4i/g6+WNIYRLf3jcGTIgDnJ:sxRUcq2/fEskzj/5IEzF
TLSH
T12032D715AE68A97F8CDBD30DBB667F53D6F9503260D11E08A6FC8A1C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3b7c02ee02cc48599cdd8c7b76e4a4b9d3b169973692a29b6f4640c3528f2bbb
MD5 e3ae1d91bc3a6c87ec58fad2951f1446
SHA1 44901c4b5800c733372905715db7a1e7581a03c6
SHA512 19ce1364a140dde2f97603f3a0bf3dd3cedb6a44632e7f4647040bd78e15e0acb000255caa17e961288baa5117e972c5550279127d12d245a9871aea5bd622f9
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkIroqYa:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vy
TLSH
T1BEB2DB2F644CCB7E4FC10AAD9C1A6FD76D9802C79B548E4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 9877d4f5b462021647441d80357a4d2c3c2d2a46dd72832fb05d2385a83a1bf9
MD5 cb7e8baa6f3ad726d2e25584be4cc838
SHA1 8ed726392a1996ba5773315498f2b72a481a706e
SHA512 5b3f9216574645b6c69e472be1ab2ea6259c8d20f0e956ee8f1fb142a6f59d2b0d878335bde72e63804cb90d67b6b58887050fb9fdc9645a00047135a68586b7
SSDEEP 96:KlsJY8SGqE6GfvYUEKghYKEEc8/ScZyeIK/K4J6KCMqG/CKUA1BENRv:kRv+VdiBENRv
TLSH
T1AFB1E465707B9201387E294980E4A72EC942F2A37065EABB77EE00664F77E044DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

548dab14-d3fc-4a84-bf9c-068d707fa1e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\548dab14-d3fc-4a84-bf9c-068d707fa1e2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 ea8e477579292d8d4b2fec56b18c16b5c4cfacff59fab0198b5c6a74b1c8d6c1
MD5 447edbb5dbb7f717f230a2e370481c3e
SHA1 d709d3fa10582ab5c48c827e89dd7321d4bf4a2f
SHA512 8c0d261c977083ddfd3a94bb3dba2d8c9ef7da7a23a39b6f946a8748c50554d038b37021fdfefc5f560a2c5509c39519172982141127d94523404037af8e5c81
SSDEEP 768:cFQh3xwgoWYDwOTVP5fgGM1TnXMqOaLcTRgOx:Ph34WEfgt1TnxOccTRgOx
TLSH
T184F2AF339D94CC77ACF6C785F21A7215AEF140A3CA895E94E6DD6E1D008769E030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 093dc8a68a1c785e5633c5956b8d2f07992f0ba649866ca15377056225b9eacc
MD5 21a3cd365556494435fbf1d37e7fc207
SHA1 c74bfde1d98f11dcb3829a7da65944fb7a4ef293
SHA512 2bfdd89ba2691b17a42c338ff43ca9aad303f8d31b558d4c1cf199ef109a0a330480613b03e7b66d5fd84ca27ee8099914ab1ae7ebc25fb103f6862dd018d6a8
SSDEEP 768:5/UxvxjgC+93XBwOTLu5fgGM1TnXMqOe2AaP8:sZj3+93Fcfgt1TnxOVAG8
TLSH
T16103C036AC556C778CF2D384B30AA296AEF144A3D6C51EA889EC6E0E01CB35D530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98b4b600-4e24-4956-80f0-88a0f62bf27a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\98b4b600-4e24-4956-80f0-88a0f62bf27a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download