d3541c0ac893f8818e984f8b02d4b37185a86e0f63783994def37ec3cde20d99

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d3541c0ac893f8818e984f8b02d4b37185a86e0f63783994def37ec3cde20d99.html
Size 107KB
Sample260913-dwptms1bpd
SHA256 d3541c0ac893f8818e984f8b02d4b37185a86e0f63783994def37ec3cde20d99
MD5 597870a891a6ccb442791bad4a0e53e3
SHA1 a59a2b56f430f166e1c8dc45eed83251bef6b423
SHA512 5aa4c5bcd3f5ccb3153d7527ed6a3b12314ded7e34c2c97e0a4dc3d9cc897efea5f5806fe2f279de97cab0adbc6d59e0497d38e6d0db109c6df6204d22970a37
SSDEEP 1536:PUxpYn+hyk+5RF8ffVc5hcPmhlOQ9TtENoDxAYYlCObEaoCbEaovK:sZPQENzjndoCdovK
TLSH
T1A4B3A48701205CFAEFA04DB3465B58673C2C5837AC5791B9E3FD8FA72B41DAE0346269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4588	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337433118571235"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{B4E3C8F4-0423-46B7-9AC6-FE9A39519D9C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5360	msedge.exe
5360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5972 wrote to memory of 1816	5972	msedge.exe	88
PID 5972 wrote to memory of 3360	5972	msedge.exe	89
PID 5972 wrote to memory of 4588	5972	msedge.exe	90
PID 5972 wrote to memory of 3360	5972	msedge.exe	89
PID 5972 wrote to memory of 3360	5972	msedge.exe	89
PID 5972 wrote to memory of 1948	5972	msedge.exe	91
PID 5972 wrote to memory of 1948	5972	msedge.exe	91
PID 5972 wrote to memory of 4452	5972	msedge.exe	93
PID 5972 wrote to memory of 4452	5972	msedge.exe	93
PID 5972 wrote to memory of 4452	5972	msedge.exe	93
PID 5972 wrote to memory of 5044	5972	msedge.exe	94
PID 5972 wrote to memory of 5044	5972	msedge.exe	94
PID 5972 wrote to memory of 5044	5972	msedge.exe	94
PID 5972 wrote to memory of 1284	5972	msedge.exe	95
PID 5972 wrote to memory of 1284	5972	msedge.exe	95
PID 5972 wrote to memory of 1284	5972	msedge.exe	95
PID 5972 wrote to memory of 6060	5972	msedge.exe	96
PID 5972 wrote to memory of 6060	5972	msedge.exe	96
PID 5972 wrote to memory of 6060	5972	msedge.exe	96
PID 5972 wrote to memory of 4752	5972	msedge.exe	98
PID 5972 wrote to memory of 3216	5972	msedge.exe	99
PID 5972 wrote to memory of 4752	5972	msedge.exe	98
PID 5972 wrote to memory of 3216	5972	msedge.exe	99
PID 5972 wrote to memory of 3228	5972	msedge.exe	101
PID 5972 wrote to memory of 3836	5972	msedge.exe	105
PID 5972 wrote to memory of 4988	5972	msedge.exe	106
PID 5972 wrote to memory of 1240	5972	msedge.exe	107
PID 5972 wrote to memory of 5716	5972	msedge.exe	108
PID 5972 wrote to memory of 5716	5972	msedge.exe	108
PID 5972 wrote to memory of 5360	5972	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d3541c0ac893f8818e984f8b02d4b37185a86e0f63783994def37ec3cde20d99.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff84b13c188,0x7ff84b13c194,0x7ff84b13c1a0
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,17902546880890034764,16166538318324256155,262144 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=1796 /prefetch:2
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,17250975580489188039,9518539541695465985,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,12298457176294677956,2571923960720761536,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:13
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,17412015516488853251,13113911604956240295,2097152 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,1710585103438610226,3172797976646890195,2097152 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4400,i,12854553909976503228,15099638496707760510,2097152 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4412,i,7613528780164416648,5374794576851052337,2097152 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,5634304754755598015,16309863236357505752,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,4750469568534835686,6791888938809593435,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:14
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,10157467298914358888,1366903106640930593,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,10157467298914358888,1366903106640930593,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,6985215233465519720,6704501773588738965,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,17103527398302661489,2339902768735934460,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,1373503778246239674,631126438801879399,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:14
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,1693155374779897325,1309226479700270822,524288 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5572,i,5877154145879718078,2132751322106918084,262144 --field-trial-handle=2232,i,14196995348026166235,1166695523103843419,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9ee87105-0ac5-4675-a2ef-cc8e9e8feda0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ee87105-0ac5-4675-a2ef-cc8e9e8feda0.tmp
Size 40KB
SHA256 061a31f4d07905933f24328c82385ee52c0b46313f006cc0cca403247cd23632
MD5 72e08846ba97cf4e53ae95cfe4406c5a
SHA1 49003124b12e78a7abde5dbd19dfefe1710e5d1e
SHA512 7b4637007d06b8ad772148b3f7f1ef001c59a6cf40ced1398584955fe21e82274bef0c72f530ddd0a792066b269e6d2ba9def4ffb08514f12f037b993e99a45d
SSDEEP 768:zm/UxvxjgC+K3qHHEzvOuwwh/9OA9at01j0iq00+Iai4SHx68:PZj3+K3yE8CHq00Na7SQ8
TLSH
T12C03C031FCA19D73ACF2B284720A6387DFF44563C5C9A9A445ED2D0E058B6AD130BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f49a9d770e4c3e76ca8e20dcabb89de55d698d2c4dca7080187652cc27d0645f
MD5 46bf002dc3fb869438d8fd2f9258a693
SHA1 8f014b39fa08d9e87ac372beeebfe10a546091a4
SHA512 c17f74b321faeadb1e980ee61ac164510459db673a24982f1222f31c749390a6e434ac15d01b376096a2ecabe77daba8a91089f79d49cd6c12f539cf76303bee
TLSH
T16B51760D3AEC40CAF744003159D39E4B36BF89AAA9831F21458DDFB7DA433B752A55E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a32c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a32c.TMP
Size 2KB
SHA256 379a710312e9f98c6de61fbd2b923ab641fa45c5107fe383580499ee696d273f
MD5 d258b8be172df229d93455efea0e3910
SHA1 e80325a7fc607733b1d54ac3cccc5d510f19b776
SHA512 e9be93790c6371c03f221c3bdd09b603acc94b7507836f90c4753acc32ccb511446da973434a1759988c32ac30e3cf165e774f819a03fe40cd2b1889bb63728d
TLSH
T10251650D3AEC40CAF744003159D39E4B36BB89AAA9831F61458DCEB7DA433B752A55E2
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1dcb69948193982243d894ef60e0e11d447453a34bcff8d7812ec4a0454914df
MD5 e6a9c06567934b69f85fa8439a28c83f
SHA1 4e8c4f9fb46430529503f909ed753579c80df715
SHA512 f4790c15838b2dbf8581643214e71d3d5b98faa2c505e2e2c384f25a2f43b59ac08c746092cba93c5070697c34db7d56e792da2849ece4b20b498f7d925d9f0d
TLSH
T10351DCF3C3E8863D890156F4AB196E1BCE1D0916932C3D17C8E4AF2B93E28B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5d4a1e7fc36f008388ae1b69aff713ff61d50c81ce96362598598d0a43eeb5d2
MD5 1137564826cde40366f68ca7e7c5f181
SHA1 f595abef31e45e46c19fc975eb72f99cb3b258e6
SHA512 6b2597b1776feceb05ca7a216bea2ed6f49db8deac680cec002982117e098ce5053d50faba8f3a991684a442d53ea64a24b50ce75e32c9c281c00eae6e9d1bec
SSDEEP 192:sxRprbf/frsKNzoA8p4k/g6+WNIYoLVGR4IgDxJ:sxRpPf/frsKAl/5IyU/
TLSH
T17732B515AE28A97B9CCBD21DBB65BF53E2F9503260951F48A6FCC61C04E76DE130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b75a4b0176650eaf4b5625d3ca576d8499eb887b4553494257f9ee8fb755ab3c
MD5 5f23add9e3f11b2b6a14eec5cec1f234
SHA1 1611153a9d8eb7916eda867b7f7e56e440aa37a8
SHA512 471cc9df19251ca04b8575b28c474a04ead19e92d970a44b0c55ffe39fd1aa57d74b6c345ca6e108e04a192ce7a5133206418ef763a7ac1e6d0622ee2e99c740
SSDEEP 192:sxRSrbf/frsUNzoA8p4k/g6+WNIYojVGR4IgIJ:sxRSPf/frsUAl/5I6Us
TLSH
T1DF22A5156E28A93B8CCBD21DFB65BF53E2F91032A0955E48EAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 24811c75a2857d3464474bbcdd1323af92fc04ca3fa156c825775bd34ec0ecec
MD5 fefda5cacf43866d2332fe51d4ab83dd
SHA1 09361599d60a210826b2d2be8326d25f65644527
SHA512 430a046d532f4417b3a4f2c40833719c7da4f0dea82ae068fca597ba8c866484f11d891748b7538db4f8c393e6999907b4637cbab19f37ee417d1f12f7155835
SSDEEP 192:sxRprbf/frsKNzoA8p4k/g6+WNIYojVGR4IgDPJ:sxRpPf/frsKAl/5I6UF
TLSH
T16432A515AE68A97B8CCBD21DFB65BF53E2F8103260955F48A6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 1100cf8aee967dff6c88c9fdd95809367a6ade13d949acd9c384dd44bee9bd06
MD5 efec1e22fd720be71cdeb7fd6c376424
SHA1 640903bbdad5c1edfe62086456569392d64874bf
SHA512 4528a6b3db227ede84627c3399a51e46444d25748ca7573b33c2fb83452bd2c9b16a40b8859c81cb6478b7a80babbb496cb87f792d8a7751bd70f64512cea32b
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUZrond4:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VR
TLSH
T191B2DA2B704DCB7F4FC04A9D9C196FDB6D9802C796588D4047FA994C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc0e821ca16b6f8eaba68f7e89fbaf2a482efbd648bdccb7770145022a46c828
MD5 797e7a70a0f8d206e556486cbe7cde98
SHA1 13f08a981b329f44137c18baf20ec851557f713f
SHA512 759be09d1255bd3b8be93d6f33846842d10c0c4b0ac4c987fb9fff804b627c9cf89946e3118e9ea5c8c871a3385336a4ec13311eae1ae0cc8e7718d905e6c2ca
SSDEEP 96:KHa1G6gYI2yYz9I62KwTI82MCabsanq+gKrytITcoGm+ROzPJbL18HQICn1KKECB:85PuITcoGm+ROzPJbLiHQrndECZ4xJIB
TLSH
T11C915059713F1614387D7908A1E5A76B874137A33178E66B3BEA00628E67E041DFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3f6c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3f6c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0eb2e7da79d7799833b5f7d550347a6321ab140eee42dcaf3dc909eab98ec148
MD5 eae046a4ea01145387cd79ffbf70e9ee
SHA1 6cf03d9755988a7c7ae6fbe07535eb94f80689c6
SHA512 c2e5ca6395deaf3e7edaea3a6560d89720c6d62d9be788d8a0d28d60f6498318ae5b9e0b73fe4376bf72d9a9efb202b9c89b8c50837697a2f5ab3612a7af79c6
SSDEEP 768:PhFQY3FwgHHHfvOuww8/9OA9at01j0iq00+Iai4cTRZ+:IY37PCHq00Na7cTRZ+
TLSH
T1FF03AE72ACA0CE77ACF6A785B60633479FF44163C6CED99086DD690E005B5EE130BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ccf4646d6792d92e04dd25c8f796da5ea6a28b3beacd318a814638a78c2b6244
MD5 bf5545c079e4b12bcb7b512bea436b1c
SHA1 f78d4b788d3fd48bf89846b4e1748f69edb80cf9
SHA512 3200556e7a6a44a980bc55437c2823be70c214b20bf9fa678c8b3584c1f24735c7ef0d8bb6de83c9f8122acf42de253fdfd2cfa149de8f976645f0d852d1c31a
SSDEEP 768:3m/UxvxjgC+K3qHHfvOuwwk/9OA9at01j0iq00+Iai4SHx68:rZj3+K3yzCHq00Na7SQ8
TLSH
T12703C031FCA19D73ACF2B284720A6387DFF45963C5CDA9A445ED290E058B6AD130BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 64b59975e89919055a07d2ebf39439e9d7952182218bbefadacad8e07ac8d26e
MD5 4be8db4e0d85ffea45fb2192f1278c1b
SHA1 417b368f3e43e55b7904eb6bb0825775222740f7
SHA512 8bf51db5d0d2631c47e3dcb47266f8d7080ca7219b9114a0189c8efc49070a0cd21b81032f23d2c9ef2e14b311bce82dac74861ccab05c2b907a59b23fbddcc9
SSDEEP 768:X/UxvxjgC+H3FKHOuwz/9OA9at01j0iq00+Ia27dSHxRz:KZj3+H3FWCHq00NawdSTz
TLSH
T12303C031ECA55D739CF2B384730A63879FF84663C6C96A9049ED2E0E05876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e45bfb81-2395-4d40-9bfc-cc7ef81d9353.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e45bfb81-2395-4d40-9bfc-cc7ef81d9353.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download