ea1077f3f589fdd9e5b9ab65a6c4354afd9e5da558fc675a27d870b3d67a26e8

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 01:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ea1077f3f589fdd9e5b9ab65a6c4354afd9e5da558fc675a27d870b3d67a26e8.html
Size 102KB
Sample260913-cb79tade98
SHA256 ea1077f3f589fdd9e5b9ab65a6c4354afd9e5da558fc675a27d870b3d67a26e8
MD5 966ae6e5356bef75389c233ee1a8aae5
SHA1 9f9588aa19f013730b5393080dc183d9fab58fc5
SHA512 13e6b7bb19573eabda55cc91840df44111585f386a41c20618d1352d29a5f30a0e31f4b2e71fb155dd2b5c604c32ec1fd7cf300b24b20c7e767162c6e7ee83d0
SSDEEP 1536:umxYYn+haY7qRnrw0mxgVS283lOQeTtsNoXxuKVYbEaoZbEaom:3WaQvNp0YdoZdom
TLSH
T146A3938701205CFAEF6059B2425B18673C6C5437BC5791B9E3FD8FA73B51DAE034A229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337381221772570"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{26CA7182-6E4C-4974-850D-383F1FE1A461}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe
5256	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5256 wrote to memory of 3428	5256	msedge.exe	87
PID 5256 wrote to memory of 940	5256	msedge.exe	89
PID 5256 wrote to memory of 5060	5256	msedge.exe	88
PID 5256 wrote to memory of 940	5256	msedge.exe	89
PID 5256 wrote to memory of 940	5256	msedge.exe	89
PID 5256 wrote to memory of 2888	5256	msedge.exe	91
PID 5256 wrote to memory of 2888	5256	msedge.exe	91
PID 5256 wrote to memory of 2608	5256	msedge.exe	92
PID 5256 wrote to memory of 2608	5256	msedge.exe	92
PID 5256 wrote to memory of 2608	5256	msedge.exe	92
PID 5256 wrote to memory of 4248	5256	msedge.exe	93
PID 5256 wrote to memory of 4248	5256	msedge.exe	93
PID 5256 wrote to memory of 4248	5256	msedge.exe	93
PID 5256 wrote to memory of 2112	5256	msedge.exe	94
PID 5256 wrote to memory of 2112	5256	msedge.exe	94
PID 5256 wrote to memory of 2112	5256	msedge.exe	94
PID 5256 wrote to memory of 4168	5256	msedge.exe	95
PID 5256 wrote to memory of 4168	5256	msedge.exe	95
PID 5256 wrote to memory of 4168	5256	msedge.exe	95
PID 5256 wrote to memory of 996	5256	msedge.exe	97
PID 5256 wrote to memory of 996	5256	msedge.exe	97
PID 5256 wrote to memory of 3552	5256	msedge.exe	98
PID 5256 wrote to memory of 3552	5256	msedge.exe	98
PID 5256 wrote to memory of 3880	5256	msedge.exe	100
PID 5256 wrote to memory of 4388	5256	msedge.exe	104
PID 5256 wrote to memory of 3560	5256	msedge.exe	105
PID 5256 wrote to memory of 5564	5256	msedge.exe	106
PID 5256 wrote to memory of 3536	5256	msedge.exe	107
PID 5256 wrote to memory of 3536	5256	msedge.exe	107
PID 5256 wrote to memory of 3284	5256	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ea1077f3f589fdd9e5b9ab65a6c4354afd9e5da558fc675a27d870b3d67a26e8.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffe5622c188,0x7ffe5622c194,0x7ffe5622c1a0
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,10732600707253225716,634524315052257507,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4115271810468055519,9599276151405862515,262144 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,10903213890528035094,1735869486383948717,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:13
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,15627220798780109585,10454097524859200729,2097152 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,17602287845410256224,4867977171194228929,2097152 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,7308196375170640250,8802076086906729662,2097152 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:9
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,10257930355118979889,9514817248770163715,2097152 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,17976381556490531500,1465230404762971314,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,13193323360983326461,15329406951249678250,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,10569765529786197277,3237163514877027112,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,10569765529786197277,3237163514877027112,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,17723635091624685246,15133921574300540044,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,8528603793658436705,6544903141179898496,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,9129287035700854958,9284149287264441615,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:14
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,1126187924067594270,180889691810757613,524288 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6448,i,11055909467397890587,5802348424805532487,262144 --field-trial-handle=2032,i,18206305559594724106,4271878769909344722,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

2dcb0c5a-941e-4cce-8f77-d7a9f28e5539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2dcb0c5a-941e-4cce-8f77-d7a9f28e5539.tmp
Size 10KB
SHA256 29dfe85c0e8a2a62deb87c941555fae7da552e29efb291ccc654b5ba5932381f
MD5 77c67c70f0fe4379e2f632bb61a8bf3e
SHA1 8a1a8ea31606c6bfe83eb4a8ae1a95eebf65d7c1
SHA512 64a408e358c2d091eb537a1521ca353a34db26eebc60d619432847d5b70b1e77162a57926020fcd49f949dfe08441913ea36188e4332de9610a7eef0a8a061d4
SSDEEP 192:sxRIRHbd/fWsIIwFzoA8p4g/g6+WNIYiVaI+GkIgDWJ:sxRINd/fWshwot/5IDiG
TLSH
T1FB32A715AE28A93B8CCBD21DFB65BF53D2F95032A1951E48F6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d64afbd51115329d316817dec01dd484f65f57092ac9466fe26602f56e02f40e
MD5 85fa7e43fdaded50651595c211f31afa
SHA1 ea5ac2644540a67ca6d003b63a07f94befd119b6
SHA512 0dd918f003b11904c872dee1bd0d8ed90ad48a0b2b407ceab93ceac5ddce67c3afd32bb64349b4eafce4b4791131fe4ae4b6f9cd07ab90e561cb7110f09017b8
TLSH
T1045142815EB589E4F75C01718DD91DCB3AF4468ED3C31E6107ACE0BC7B86B634D4A894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59575d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59575d.TMP
Size 3KB
SHA256 9fb92d9a24c3ea8a44d6d49f9c4c2398203a70f1967c481c618a2866ac95c02e
MD5 16325c608fe9ccb1645f182cedd150ae
SHA1 43d613069b41c7ad75778dc4412fceeb04a94fd0
SHA512 3f71897c7687cf41282d33e72d7d17f00ce3d29088f08b8a41dec1b3c573fb29483e4e18f6ec052e7ec908afbf97f631ee106559918d7c82a8a550b57248e0e5
TLSH
T1B55142815EB189E4F75C40718DD91ECB3AF4468ED7C31E6107ACE0BC7B86B674D4A898
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41e2d28d-7ed9-48ff-824c-76c3c77a4c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\41e2d28d-7ed9-48ff-824c-76c3c77a4c24.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 18534c35d76d2ad58ac34b673412719533b88bd4e4aba6f61ad98bc49ad9b8a5
MD5 cebaffdc47cd6f7f545f1bb8695aa0a2
SHA1 ee80fdf3460f46bcd87a52deacb922a0338aebfd
SHA512 6f5bc72c268aa2c3ae15da82e9116c5f20a8ba45b4348dab531579243f3c217a44dc85ff4d0e2e3db16372266d570cc7df0e215be9cc395d94ad1b77c3818abb
TLSH
T13251ADF7C3E8867E890156F4AB146E2BCE1D0915432C3C56C9E4AE1B93E34B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 304af20257b48e9d4b3160c7629689d05f92a4dc2995e833e55047da5185c8ea
MD5 0c2a6711438160d57f0f6e128a5b11b5
SHA1 d6ca229d72404a71f4f1c39b1de16eb3296fb09b
SHA512 e7bae898a2f473469b662e4a2f784c97fab3c2f12cf07041c9f8f7b135925fcd2cae0241276bf57415fbc7ec4f0c2b4ef069c9557e26e2a4c906d16f752a5a29
SSDEEP 192:sxRIRHbd/fWsINwFzoA8p4g/g6+WNIYiaaI+GkIgDsJ:sxRINd/fWscwot/5IgiU
TLSH
T17132B815AD28A93B8CCBE20DFB65BF53E2F9503261951E48F6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 78020459b772a0753a55642948049078943119896ab24965ec880f69c3c1e4d3
MD5 20c7a8fdda9a302c19191d2793382d63
SHA1 45c459785ca854c428708ae6daac8e3004366303
SHA512 4e654c89e4a1005bee754ec4dfff8dea69f2681803df70f3e34e90150add234c4d49ba293e38a9f42c3027f0e88c2513befb043aa1dbea13dee9fb9588e73eeb
SSDEEP 192:sxR3RHbd/fWsHwFzoA8p4g/g6+WNIYiVaI+GkIgIJ:sxR3Nd/fWsHwot/5IDis
TLSH
T10F229715AD28A93B8CCBD21DBB65BF53D2F9503261D51E48F6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0c4bb61883bab8b85b561474abb2b28e3252a753943b6f0b5e4df9c7dff834fe
MD5 f8def0612fb0c9ca52ebd580b0f7cfc0
SHA1 108cfc51f0f90a5e30b9e2d8a5ef3d525d030290
SHA512 d579e0d95222fa2fb619650d5a93815f95a46766ceedfaa116eb6d0e8d9b868514e3e68ae3c061d529255dfd5f0194cd58e5d0037fb230bdc58929594c1fcfc2
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRR4rohZ1:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0Va
TLSH
T194B2DA2B640DCB7F4F800A9DAC296FD77D9801CB9A588D4047FE994C02D77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

28042f9d-e60a-4d28-9138-39f36198c1fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\28042f9d-e60a-4d28-9138-39f36198c1fc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 75e933dc679f462b8f4c6b0a120c7e3f5d07d55bb21e31bedf546f45b00b353c
MD5 5581521922b5898ddb72d2b5cf4185ac
SHA1 cbd5e27c84ec9e94a75e7151929cabd4a74e5b8a
SHA512 79aeb72f5203530e9adbbe44530698453459ce5d6e9bd998f738793d7fec262859048f78ab0fb932ea9e2545236fd16915a2054b5fa1cc5ccb639002b799d48c
SSDEEP 768:C+3S4scZ0rfZWaYoHYooBw4Ot5AEl94BHYjHccTRQ8:C+3SCBVa5AEncHYj8cTRQ8
TLSH
T131F2BF75ECA18D738CF7D3C6B60736466EF19153EA811ED0D8DC6A1E098B69E134B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ff322459376d468df6646619be7089f38fc65c6f1cf2260ed7e5cd22d4e3abdb
MD5 24932781763003b92c8b607bcaab4eb9
SHA1 95354f47dc0936234b1d181beb3cdf4a24094aed
SHA512 6ad073a42119d7cf474271a1e2602ddfa20a63bcc703328336d247db7b3fa8cee0ccf4436100b17f0a4fafb94c9ed18f908fee29eb1050b357433c93031e0e44
SSDEEP 768:C/UxvxjgC+f3B3scZ0rfZWaYoHYooBw4Ot5AEl94BHYjHcAFTUQ:HZj3+f3BhBVa5AEncHYj8AFoQ
TLSH
T1FD13BF39EC659D238CF3E795760B3287AEF18553A5812DE489DC2D1E0E8B25E134B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f1bc51c796c4676399fee3982a0ce3fc268d4a637a2774ef00836feabca063f2
MD5 185726fa6874834d6cbd044a9bd48f17
SHA1 af0aeaaf3d601274bcc67027d3c4840e50738cd8
SHA512 2dbeaf93724b085ae119f47f368a264ae63c779d09e277b68c5cd1b8e999c674938269b7041956a31b98b5418050139efbf66f3ba827075297587755dd5625cf
SSDEEP 768:DFQe3pwgw4scZ0rfZWaYoHYooBw4Ot5AEl94BHYjHccTRQ8:me3IGBVa5AEncHYj8cTRQ8
TLSH
T19603AE769C90C9779CF7DBC5FA0A3206AEF18193E981ADD1EACC691E054759D034BC03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2575e12b9e151b30532e049a547bdf69f02ce4615a4c965f6c719c1da232ba15
MD5 e2857856e10e7a5244866093307ab51f
SHA1 d64840355d49968f7d666d3386ce6c13014753b0
SHA512 18796f182513f99581ef548f84b6bc04f45f7ddf5741d8108d49c0f23c843dc09af07073f6cca93a6d0430f0f29e08947b2332dc90c7a359c0b4d52ebc747f53
SSDEEP 768:z/UxvxjgC+b31ocZ0rfZWaYoCBw4Ot5AEl94BHYj/kAFTN/:GZj3+b3rBVa5AEncHYjsAFB/
TLSH
T17E03BF39DCA59923CCF69785771B339BAEF18463A5C12ED48DDC2D1E0A8724E5347806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61547595-0b9f-427b-a012-60d06cab9c62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\61547595-0b9f-427b-a012-60d06cab9c62.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download