4c9f9f258e281ce4ccca22dbc6a13bfe7ea7a89a4e66905c8fadc1ebb77b0c6b

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4c9f9f258e281ce4ccca22dbc6a13bfe7ea7a89a4e66905c8fadc1ebb77b0c6b.html
Size 703KB
Sample260912-wt21asff48
SHA256 4c9f9f258e281ce4ccca22dbc6a13bfe7ea7a89a4e66905c8fadc1ebb77b0c6b
MD5 852d03061c1c3baae505aa12c847efdb
SHA1 930042b0138727c214ff764ce56c05c07bfa7944
SHA512 111f3beacf1b5faf712661aac34182e957f0aaaab8ec9e3d367a03420e81cb9297d109c178b8647fa4986a7f0a2cde57b66c4433eef186bd0938a67274f0b617
SSDEEP 12288:F8D6liD6l5D6l+D6l5D6l6D6lYD6luD6lFD6lDD6lnD6lcD6l4cdRGmZf79wZBAd:FdO9wZBm
TLSH
T1FAE44D64086868B29857A54BDEF4FF7F9CE417684BC5C96EBDB7D39C01ECA000DAE412
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3356	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{E0AC22BF-CFBB-47BD-AFD2-E45F3DA0084A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: LoadsDriver 9 IoCs

pid
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 832 wrote to memory of 4872	832	msedge.exe	86
PID 832 wrote to memory of 2976	832	msedge.exe	88
PID 832 wrote to memory of 3356	832	msedge.exe	89
PID 832 wrote to memory of 2976	832	msedge.exe	88
PID 832 wrote to memory of 2976	832	msedge.exe	88
PID 832 wrote to memory of 4428	832	msedge.exe	90
PID 832 wrote to memory of 4428	832	msedge.exe	90
PID 832 wrote to memory of 3932	832	msedge.exe	91
PID 832 wrote to memory of 4688	832	msedge.exe	92
PID 832 wrote to memory of 3932	832	msedge.exe	91
PID 832 wrote to memory of 3932	832	msedge.exe	91
PID 832 wrote to memory of 4688	832	msedge.exe	92
PID 832 wrote to memory of 4688	832	msedge.exe	92
PID 832 wrote to memory of 5020	832	msedge.exe	93
PID 832 wrote to memory of 2004	832	msedge.exe	94
PID 832 wrote to memory of 5020	832	msedge.exe	93
PID 832 wrote to memory of 5020	832	msedge.exe	93
PID 832 wrote to memory of 2004	832	msedge.exe	94
PID 832 wrote to memory of 2004	832	msedge.exe	94
PID 832 wrote to memory of 564	832	msedge.exe	96
PID 832 wrote to memory of 564	832	msedge.exe	96
PID 832 wrote to memory of 2524	832	msedge.exe	97
PID 832 wrote to memory of 2524	832	msedge.exe	97
PID 832 wrote to memory of 3788	832	msedge.exe	99
PID 832 wrote to memory of 6016	832	msedge.exe	102
PID 832 wrote to memory of 6016	832	msedge.exe	102
PID 832 wrote to memory of 6016	832	msedge.exe	102
PID 832 wrote to memory of 1084	832	msedge.exe	103
PID 832 wrote to memory of 5004	832	msedge.exe	104
PID 832 wrote to memory of 4780	832	msedge.exe	105
PID 832 wrote to memory of 5012	832	msedge.exe	106
PID 832 wrote to memory of 5012	832	msedge.exe	106
PID 832 wrote to memory of 5108	832	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4c9f9f258e281ce4ccca22dbc6a13bfe7ea7a89a4e66905c8fadc1ebb77b0c6b.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffaf0dcc188,0x7ffaf0dcc194,0x7ffaf0dcc1a0
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,18130333169660980888,1181840123709807949,262144 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,5106073082417108491,3834427772718114727,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,471874802472204624,15077180875097406038,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:13
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,14273571099965437260,3173066324535287218,2097152 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,326577656427859507,8345398570864876579,2097152 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,5422997723062429932,14628254916136138786,2097152 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:9
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,1211295635471320726,8664777946545851782,2097152 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,18355386378405707545,12524128458351721057,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,18024189149140508834,7133110432879537663,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,10822055740793533181,8726693312215511947,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,10822055740793533181,8726693312215511947,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4252,i,6914041317637358725,9940122671114921661,2097152 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,5808166360115354626,6518830919647770786,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:14
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1380,i,6122766650959986495,17645551610761099134,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1388,i,7152088236377742708,17487994407783780722,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,15628082806764839693,2895839172043069153,524288 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=820,i,8329859763127054225,16017398787657598224,262144 --field-trial-handle=2496,i,17917961973330300664,3158682718950293119,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ddd6202cdd1fc117f931b684e13eef033ee61873a10869d21ad3d074dcd02c0e
MD5 eb7bb3b3d829c2657480241b0a61b479
SHA1 591b24b36b8a90a86860a0bd11f55bce27a2532a
SHA512 d7a6acac91e625ff21d29a0cba3274aad70993a0921583dd5320282dc3e01c9b20f0d67c6ecd8fcade220eb7ebbe7de14f78e2e5da022f4971d5a40425420692
TLSH
T166615FB848808241FF7E407DD7D09CC336B34AAB52432E612A58FE7CA4463D1B25781E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595c4f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595c4f.TMP
Size 3KB
SHA256 8be7765506342301464d659328fde2b08bef32197cfa751136f9f610421b7df6
MD5 e1c263deac24d0bc0b580b6912534fbd
SHA1 9fef3d818fdb474cc9a5f039ea00186715a72ba3
SHA512 42a96d92abfb271dce44ec50d1d2402f241196fcdbb78a3c6f53edb66b934611fd70f3c102395da0ea6f702ada1769610e234ca6fcfec7d27826bf075ea64b43
TLSH
T1A3615E7859808245FFBE407DD7D09CC336B34AAB52932E612A58FF7CA4463D1B29781E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6e4024504ea102523ef3efb09e809693722cdcc5f3424967ddfe65c75ec031cb
MD5 756539956204a06410de57f19b7d66fa
SHA1 bffcec430480cf9b4b0d44727a9509c26ef6c250
SHA512 91e96ce5e9b352b77beb7b9b39ab4c7916249658433e729e1c4b7ea6ccff8b568ff9d92e7ff91c66aeb97d1237a5b2a44ed5cf02fde9ac8b22624c4f843848ac
SSDEEP 48:YALlgIgugegatAsiRsafo7CZsVgmzswjhhnONzsIzEsqGsaCKsRXLs4NsAdzs5a+:DzfDVtaRaZTjh6zeEOxDqa55wj5p
TLSH
T11691ACF7C2D8873E890156F4AB253E1ADE2D095A523C3C5688E4AF1F63F24B0D24169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0ee11f16712278b22711136eb51e663cb8b8253eb9ccd034e5583453af7370bb
MD5 76d5575f6b4057084fd393f839327113
SHA1 475428f2085df25d1f82d8e262045c4eadeac8cf
SHA512 f6b99daf8691e951416b8a0d7bae25bc208ae4871232c9736a8e2bb5b6db8030698734f1aef7bed0ee3d69347ec3700dd9d38053e972e5edf6af04c347348fb2
SSDEEP 192:sxRxXReby1/fedlskxKzoA8p4p/g6+WNIYceXtiTPGJIgDSJ:sxRxXGy1/fedlskxHQ/5I+9iTMi
TLSH
T10E32B715AD28A93B8CCBD21DFB55BF53D2F85032A0951E48E7FC8A1C14EB6DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 17e0c2b9ffd24a02aa7dc05c3485968989e373a4473b4e7183867cf6880ceb00
MD5 42c9a019c1b6ebf320ba1f897a422a9c
SHA1 729a17cc8df1a53291604952394acf68af979300
SHA512 791d03155ce15fffb42670da9cd4ab8b86f91b6fbb47eace7086133fbe69b8624a26ef1ce875be486288acb7eeef5b1e259486129a914bf4e30c2327ce4b1650
SSDEEP 192:sxRx8Reby1/fedlsBmKzoA8p4p/g6+WNIYckXtiTPGJIgIJ:sxRx8Gy1/fedlsBmHQ/5IE9iTMs
TLSH
T1B622B715AD28A93B8CDBD21DBB557F53D2F85033A0951E58F6FC861C14EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3cae1a9328de0cfeafaffe9dfb1f0e1265a6fc7de423ce90519af9f61406d215
MD5 7e2b514ce832387b43407afd7125391d
SHA1 70a6fe09a003dc3c6200501ccb4b64bb605f1c21
SHA512 37a7858f2cc5548e25332c060d538f35c6e86793197d2d00a282a5c42f7e399dea639320c7b1d00f12272cd76a13e88f935838d533b825a1ef09d001ea4b3986
SSDEEP 192:sxRxXReby1/fedlskmKzoA8p4p/g6+WNIYckXtiTPGJIgDSJ:sxRxXGy1/fedlskmHQ/5IE9iTMi
TLSH
T1D432B715AE28A97B8CDBD21DFB557F53D2F85032A0951E48E6FC8A1C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b1dff5985050e16a97c7fe799e861a657227b283e5bff4857fabcd47158119d3
MD5 800412706edcf5e6ab0827d16b19c5f3
SHA1 d4ab5c93f0741f7f9c265bd4b5760c2223e6b756
SHA512 883d9498156eefba4c2c546be50cf85a0093eac8a860c92a06bb347e10267da1b134dd2ab2e41f158425a0a65eb9a1b01f62f9b31ce14ec877a7f69c07915559
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwfroMX2:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0Vg
TLSH
T198B2CA3F744CC77E8F804A9DAC196F976D9802C79A588D4047FE994C03C77EAA2294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\80489a9f-525f-4524-bbb4-a600f7015b05\index-dir\the-real-index
Size 1KB
SHA256 85adba356608337b7efc95fa9e9947a9e3b3fa950a47288d3586f4591b477d02
MD5 2c6e2b6cb4330ae824c37bd21928ca38
SHA1 71da32e45e4f473bcc4bbf43028521acf3413412
SHA512 c5f3ca603a49a4b130034ebb0eb7f6947ada23b95485b77dea17f4095c591a01049086835ad5eac4a751383c74f3329e921bc7abaf94cebf96537fdcd355caad
TLSH
T13E31639DD9805B8EE83013B62948107613B82835FC49C39A40507166B402AAA8B933FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bbd4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\80489a9f-525f-4524-bbb4-a600f7015b05\index-dir\the-real-index~RFe59bbd4.TMP
Size 48B
SHA256 4d41a3cefd3c65b7eb329899342f768e1d14a6617a5aed8756a56542b9e95904
MD5 940dd41cf7e1d019770095386c0afff1
SHA1 3f3fb6f025e6e5af6c3c0a33b4e0672712477dfb
SHA512 1abc20c97bd7f5162985753931ae99a39b78880f001d6cad83dee5dfc237c000eb22e8230263e82cd9f22b35b88cb59bdd0826ff7860b1c2ff3a734c23c85302
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 182B
SHA256 3208a7d5e5ab51e67740da225f5165167e394255f55f5804386e3f9d7a18cf71
MD5 4b45c9060ded7b48f2d7064b4515370e
SHA1 2b8aeadf9fc4d9219f09f5267599f70d693c04c8
SHA512 773b4c970d0b278a313381ca2d91ad83b0ecb35e956888ce8bd9cb0e1f4e5f50e7a6e9d7eec489fb549b42aebd13992dcc4b886578716a299c29d68d2097d8ea
TLSH
T1E7C0128862726D9273A94A44525810771D29AD12A424D5C8F6DCB15A15B9422C9806F7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 98B
SHA256 1958ce6e59a6e5b23fd6782847487d8afc9c97ae5f49f9c6a8adbdaba1d87335
MD5 4260804c8423a0b61dde899eb18ba27b
SHA1 8f1bb1d0cb456674a77b6794275410fbf7a6557f
SHA512 6e2f59c6809fdb66a4f91727019d93e582f8814814a63550a6b372e8ae0b1551b299c867964ba5480ab43ad80137f05bf28a374da9f422b6e5cf3d4bd893746d
TLSH
T10EB012C466326D9753BD4B08220820333D1AC1066034D8C4F1CC010540618268C804F7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 100B
SHA256 164c0f3b449ee1f4ed528d8ac4167918d0c1ed6a0f40ed25f41c5abd616f3b9e
MD5 8a2a1a78547dff60e14e81b2aa58f760
SHA1 258e70f789a8a28930daf00020468aff40bb42fe
SHA512 077a35a84791b9959668c5547eac93797785b10b53b5badce7d251760ada4f31b57faa4dde56e110e1735d35ee48d6040e3e8a3f3898ca708be7202d45d325e2
TLSH
T13EB012C46A366D9353BD870C320821333D1AD0066024E4C4F9DC004541118268C804F7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe596826.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe596826.TMP
Size 105B
SHA256 22fff8a4e04786bf0cfc121d96d2956211cee953e36d9d1abbc19c1c0a86da98
MD5 1e94fe7f5a35949b5945913991fd1186
SHA1 dbb13c963123659c429ce085aff6f02d61372bd3
SHA512 25c78bf45c4ee013c903d1cf44e03f47447b83fe33098a191ab7db0512f72abae1abe041b3a1e95684a08966a2bed994b58af1b89f561381c88a570720a21bb3
TLSH
T179B0124467322D9793AE4605231820233D2ACC176414D4C4F5CD30456031827CEC44F7
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9908f3235923e7715f7b6f39ac5787b62e111a1dcce4f3038a04c557897fbd2f
MD5 94b97c81112f17ff06cafffaa496cfad
SHA1 f919e3e38fa71de00bdb8d6def506d85c6a4876f
SHA512 7e4ebf6113ba868e32461f04c68514af9135425f37e87f4bb0967bef84feede5b2a5b0af268d47440b6bf211c242e310e92bddc80c5d66e75250d334ceb69f7e
SSDEEP 96:KsYoKRqmuZ+KqcbdkRtHj/kvj+PxlkKZBxfk1NteHN5R:6TBQdkRtHj/Sj+Zl5BxfCNteHN5R
TLSH
T1A991CA2174B702503C7D3D0C92D49B6E838236A3B424E62B3BDA08969D67E444FFC9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 3b7044f0b4c2f274963c699fc4bba1eecd4d310e9a0a9abb35091d7cf0258fe9
MD5 f02b323c536f69276135b88f9c349e79
SHA1 bc260fcf32e2dd04beb95f872536e9ff554fe6bc
SHA512 397f4158da417543f436ec03312372c94cad84a131472211c0fc0bc15877eb915aaa76cbfa740dd74c62aee0393301b500c2d9efafdc6a70ea58c6a8c13e79f4
SSDEEP 768:DI/UxvxjgC+z3b5eB/ieOT93x/SnUPO4Qp7cPAiSm2eo4w4cciGrTFlX1cTRtM/:DVZj3+z3b45CpSwQpYoimeoR4ccFFJ1v
TLSH
T17C13BF75A8A8AE239CF3A245361E2343FFF1456395C61EA4CADE1F0D06876AD431BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0cbcc5a58a24ef5bd3d2ad84a4c1fc36a8cacdffe6db1c7d009259bd93b9b8b5
MD5 d012957737be2cb4624f2710d2f68472
SHA1 4782939bdd4fbb63be0138f2c34821cecbd7deef
SHA512 68475254e5ade458d2f80f04d8464e00d4121b62a09ca547c03d56196992edacfe12f9be37ae7ec675311135efcc77a5724d38ad19d7a3f311188cc296064f87
SSDEEP 768:D423b5cJ/ieOT93x/knUPO4Qp7cPAiSm2eo4w4cciGrTFlX1cTRAE:D423b6RCpkwQpYoimeoR4ccFFJ1cTRAE
TLSH
T16CF2AFB1E8B49E736CF3928576193702BFF4815395C51E84CADE2F0D0247AAA471BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ad391d709cd43328a0b89a0e44f30fec3b0e93971fb9f848c6e586774928a496
MD5 42a92a27cb2c87cffc04aa59e9fa0b26
SHA1 146747a0394c63dedb30b9feb06f686a9a9c5157
SHA512 02cc7c08d82d7f050b2a81ab8f90571f2a01ee21515d4cd4d94a6f1c2ba59ad7d81433a559a8b8325116814fbddbddf83a4ea32da524101cae2b3f9e547e8bd6
SSDEEP 768:7h2305cJ/ieOT93xudnUPO4Qp7cPAiSm2eo4w4cciGrTFlX1cTRAE:7h2306RCkdwQpYoimeoR4ccFFJ1cTRAE
TLSH
T19DF2AFB1E8A49E735CF3928576193702BFF4815395C51E40CADE2F0D0247AAA471BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 875191cdd0ada6d2db62ee738d1a474d551fc5598f6b49702b5067e6f938f735
MD5 6465de7f7f488a41ce584d282e086cc3
SHA1 f7d542733dfafcfa0a9b6613585b0fbcc3d0f127
SHA512 c7e9177c71b36d2c0081c9a8687b9713497e506c9773743a8a8d79e0f3135356544d742dd1996c746751536dd54979decda990f8cd90b3c552ab18ce5781e520
SSDEEP 768:vw/UxvxjgC+5j3wVKL8lieOT9TjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5+AgZbCMc:vdZj3+5j3wULyCTjFwQpYoimeoR4ccFB
TLSH
T10503BE75E8A8AE77DCF39784365D6342FFF1416395C22AA4CAED1E0D42872AD430BC46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cc8d087-841a-4130-9a24-3d62e2437cce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3cc8d087-841a-4130-9a24-3d62e2437cce.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download