a184f201358ce868bfbe4faa41c38420554f733c547768eb88a2b8deee64350a

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a184f201358ce868bfbe4faa41c38420554f733c547768eb88a2b8deee64350a.html
Size 84KB
Sample260913-dy66psszhy
SHA256 a184f201358ce868bfbe4faa41c38420554f733c547768eb88a2b8deee64350a
MD5 83db20eea96274496d79e3153f2095c3
SHA1 e3082644679b468cc90c28fe9751ce7bd0524212
SHA512 6e1f8659dddc412e1a3fe2b6923d4f2fd4541d8624b69109cb61b46ff330cb4a33b07203bfabb4becc4d348651df88d2220fc3a9af989763b79652dd0d279a86
SSDEEP 1536:SrthXBs6DW20OWZ7+5nff0xgVZCjx+BkOGRnPxRtga/v6LCcqPtDnUptdu1zgliK:OilOWV+5nffNLCjDRn9WqPt4u1c
TLSH
T172833C1AB30C9C370E774F95A4937519E66E0027CB859AC4C0ED6FBC19CF7B8321699A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5304	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337435721524791"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{B50DEFC0-8011-4079-90B7-525F25230214}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5736	msedge.exe
5736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4424 wrote to memory of 4624	4424	msedge.exe	87
PID 4424 wrote to memory of 5304	4424	msedge.exe	88
PID 4424 wrote to memory of 4376	4424	msedge.exe	89
PID 4424 wrote to memory of 4376	4424	msedge.exe	89
PID 4424 wrote to memory of 4376	4424	msedge.exe	89
PID 4424 wrote to memory of 960	4424	msedge.exe	90
PID 4424 wrote to memory of 960	4424	msedge.exe	90
PID 4424 wrote to memory of 2480	4424	msedge.exe	91
PID 4424 wrote to memory of 2480	4424	msedge.exe	91
PID 4424 wrote to memory of 2480	4424	msedge.exe	91
PID 4424 wrote to memory of 4604	4424	msedge.exe	92
PID 4424 wrote to memory of 4604	4424	msedge.exe	92
PID 4424 wrote to memory of 4604	4424	msedge.exe	92
PID 4424 wrote to memory of 2524	4424	msedge.exe	94
PID 4424 wrote to memory of 4212	4424	msedge.exe	95
PID 4424 wrote to memory of 2524	4424	msedge.exe	94
PID 4424 wrote to memory of 2524	4424	msedge.exe	94
PID 4424 wrote to memory of 4212	4424	msedge.exe	95
PID 4424 wrote to memory of 4212	4424	msedge.exe	95
PID 4424 wrote to memory of 5348	4424	msedge.exe	97
PID 4424 wrote to memory of 5348	4424	msedge.exe	97
PID 4424 wrote to memory of 3236	4424	msedge.exe	98
PID 4424 wrote to memory of 3236	4424	msedge.exe	98
PID 4424 wrote to memory of 716	4424	msedge.exe	100
PID 4424 wrote to memory of 4616	4424	msedge.exe	104
PID 4424 wrote to memory of 2980	4424	msedge.exe	105
PID 4424 wrote to memory of 3608	4424	msedge.exe	106
PID 4424 wrote to memory of 3008	4424	msedge.exe	107
PID 4424 wrote to memory of 3008	4424	msedge.exe	107
PID 4424 wrote to memory of 4088	4424	msedge.exe	109
PID 4424 wrote to memory of 4088	4424	msedge.exe	109
PID 4424 wrote to memory of 5736	4424	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a184f201358ce868bfbe4faa41c38420554f733c547768eb88a2b8deee64350a.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7fffae6bc188,0x7fffae6bc194,0x7fffae6bc1a0
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,1808634820995971419,15233611775296890804,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,6379783199601714168,7451676359670655641,262144 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,15099052312796188841,8087716898134657666,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:13
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,12072308285509885725,3508747825699362640,2097152 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,17463706025088631083,6287236848036847628,2097152 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4384,i,5890278474975421225,6260040589269942495,2097152 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4412,i,5059887634562510890,10635788040922499801,2097152 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,3642744857014171601,16455869945748086536,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,6311840930142630681,2480090919383905279,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,12857146648135906259,400413627873395816,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:14
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,12857146648135906259,400413627873395816,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,9184059791900150984,12396275157630495981,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,12530043009093500083,6816363107068291448,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,10442128743331519246,15328587269853329062,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,16605138519719493708,17480115156167150651,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,13316580843134382807,488301797382073853,524288 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6352,i,5634327481951777273,7261426536967488024,262144 --field-trial-handle=2236,i,2165059758345222013,6943756834760697697,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59574e098ce0efdcdc03234edc5a8f6d1a03e36f62216f53377ebaee989cda52
MD5 7a9312cc8dd7cc47f1a5941ad82767bc
SHA1 66383093916f309371fac80eef4ffe698b6bfadf
SHA512 2eb1ea2567c8ad8ea182d9f83af0b3cbc5a619c85be073936d477a80a085826be7c134744c7b267a03e720918aca51337cd54ea3dc7acbaa761fc9de8dc83c56
TLSH
T1FD61C680A6918CA1FFE41B3085D5DFFF3237B5C18597CF2A15B8F775A8A2725E881048
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59959f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59959f.TMP
Size 3KB
SHA256 c78a8cac39088102bf558f585f13fd31bac3263af5a1d478d5e6b383bb47a241
MD5 21a5a5b60c3c4872809be19087f03655
SHA1 947f1529361042b22137b7f4b55de81d8dd4a0ad
SHA512 b3cd57b5eca1bbbbd3213027dde51ce770fae87b263d71f80deeb4249977c91b1d9050976da7d4d38f48cab2e37a77749d8586583ab1b72426143491a4807a5b
TLSH
T1A161B580AA918CA1FFE41B3085D4DEFF323BB5C18597CF1A01B8F775A8A2725E881048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0c66cddd728f32290cb49bfff776676b15246c12a529f1d0704169c09c6708d2
MD5 4abd90b24c603430311b372e2a359c07
SHA1 cec65e4eea42718807c4b567a825af0a5d2795d1
SHA512 2d1aa6e85f574ee33061cd960d0aabbc8faea236e6360d076670e3f43728a2ed608a5446d8e3f167e154a81ced47bd56e2255a762dc9768928a83614d0b8bfae
TLSH
T1B181ABF7C3D8833D881656F19B247E2ACD1D091A92283D56C8E4AF5F63E24B1D24269F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d6851a39-307b-48c7-98fb-a88993c482fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d6851a39-307b-48c7-98fb-a88993c482fb.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6d9d4330d223350a28df37853c111f4efe01584d14d38584c87576a3a62ab6d9
MD5 48910307eb7c5959944254fabe161d07
SHA1 94388a304ed0537655533b0b7a48fbc472be737b
SHA512 d36e933f7bc9acc8b8c1fc9cb9705fc173acf594a4de5ce85554a14e008b8fb481b4895cbbd19c6b6f3ba14fbc4bfcdd62ad292ddf7b7b32e7a0ea8bc49e7231
SSDEEP 192:sxRaRIbY/fisU2qzoA8p4s/g6+WNIYFIqGBIgIJ:sxRaUY/fisnnF/5IXs
TLSH
T13D228315AE28A93B9CCBD21DBB65BF53D2F91032A1951E48A6FCC61C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cbf955e8a49cc4a54a0ce0396cb4ae8159092ed71dfc28d900ce561625a12eb9
MD5 c39d9da6759f6f28d494e6507dd3d02c
SHA1 eb043e00085c1afbd773bcd0633ae7f1be4e24e2
SHA512 e948eba05a5dd9471208f1f67d9f6ccfdf6e11684602b80618d486de25a4c2ee945ec050baf73c083df449c4a371b02fae524ddbd62472427f4994a8a654f030
SSDEEP 192:sxR9RIbY/fisHTqzoA8p4s/g6+WNIYFPqGBIgDcJ:sxR9UY/fisznF/5ISc
TLSH
T137329415AD28A93B9CCBD21DBB55BF53D2F91032A1951F48A6FCC61C05E76DE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3654b2db40d2445c015c61a7118e2b834db113b56feaed0690c6d2be8e8c8d43
MD5 1632b18c0498710376bacbbf7bcd9852
SHA1 cd851bd6791ae2e1e5bf3abd647f83592fa853fe
SHA512 75a951bcd01c909ac55d1e1272db1d0d6114fd4ddc4e5e0936c1ae777ec49c3e3c7eb366679340451f8fda89a0b7a3620a25510736df78fe9a4e35f81878069f
SSDEEP 192:sxR9RIbY/fisH2qzoA8p4s/g6+WNIYFIqGBIgDGJ:sxR9UY/fisWnF/5IXe
TLSH
T138328415AD28A93B9CCBD21DBB65BF53D2F91032A1951E48A6FCC61C05E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9725692d3e75aef5201d9a392162c55288601eaa02a3f3ac42504fcee2a0ff48
MD5 5b5b2dd89cb200d806b5307164b12e3d
SHA1 a606eded60ecd50902d73fb7395969259ad8aba2
SHA512 99afc6d80dabd6a0ed7666aa10d2b3321f4f9437bb54edb3f791d0ce40e6255f4ccfc07b8eefae0eb5fc26c6e1bd34950be96a5ace9267dac408c3a302ee465d
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnZro+Pb:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0VE
TLSH
T1EAB2EA2F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f48abcb42977a1c8907de9775b83f5f8d544089f28d20068f223b7f9d7123886
MD5 0258fd73d6805bd7ffc8e386e9cd5e79
SHA1 c3b8b58d55446cfb7a9802dc771d394990c190cb
SHA512 27ca5a42fa2f06f0da841d4e3b564262eab5dd33f7e858e4c151d1d01ebdabd75c928aaaa0a2b9fafcfc68028eb9523ff8923f85ed4523f481716f80c0179160
SSDEEP 48:K0qI/KXKEnypuIXKLqMHfICKbKYry1nq7X9p1kz:K0qoKXK+quIKLqMfpKbK2qz
TLSH
T1FD91023632361300393E791C98F6972F8A4135A73559E62B37AA4491CA67E0A1EFC4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 52d951fdbf03a843f12d50c934eb782251de14594336c92d00713c6526c88031
MD5 88b75993ffbd262abf86ae345c25845d
SHA1 c2c1c94ad147d6380acc9d687acbf471c8f048fa
SHA512 b21cb7b3d492070392151c6861ce3dbf91ff37c4e8d4e2c369d76c79b226576e96ebc71de6275e835494ceba283a1db0df1885e7cc206bfd2d9e11d4d4cdd8fe
SSDEEP 768:Wu3R5bf9c/+DbyEMbxyJugQVTJ7vvmeXzMgjE:Wu3R7PbyEmxyJJq17v1MgjE
TLSH
T1AAF2AE716865CC739CE782C1B645B787AEF4026395CE1B9484DDAF0E108B6AD1707C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b46c598b6bd9912f0311ec6a2279457ae4ef5dae345348c5e7b3e9323a8a1de8
MD5 a1325a35a89f8b00c63b098dbdc5adf0
SHA1 eeb1a5cc0dbaed23a6002f41ae73e30f9462edec
SHA512 dfb9dbe2e091d2fef4b1819a810eb74493410e0b5799b96da92831265a25c53fd4942c25d0fbcdd8698b4cc46b5538d6cd237236f3064cf9103978ea24193313
SSDEEP 768:Nn3R5bf9c/+DXyEMbxyJugQVTJ7vvmeXzMgjE:Nn3R7PXyEmxyJJq17v1MgjE
TLSH
T11EF2AE71AD64CC739CE782C1B645B687AEF4426395CE1B94C4DDAF0E108B2AD174BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 1d8d7d4da005251e87637601ea8174781017f4a8bc199fd81eabe126ba808c0d
MD5 985b2efa9e90980bdafec7e514237bb1
SHA1 c1d52f1bf8b0fdd6652ada393060e681e703fd88
SHA512 5314723eab7a9ae02893a33485251a0e51a88840e34469e6411fb0eb97f28f27f7ef0c290f44e58bae3f6217696aa106f7259fa845d9b8c9fbc062eef6d748c8
SSDEEP 768:h/UxvxjgC+G3X6bf9c/+DXyEMbxyJugQVTJ7vvmeXzSHtE/:0Zj3+G3XgPXyEmxyJJq17v1S2/
TLSH
T1B103C036ACA59C3398F792807649E787EFF5056394CA2BA484DD5E0E168F3AC530BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 fd14fe1a8e40b0a3dad48bd5f059c0bb325db1c3ebc22e58e472f7ea2e50ca6a
MD5 1dffb9b1af664134bcd073b480120f2f
SHA1 7a925af59c62dd1b78c3a925ad8768933aaa8f5b
SHA512 48e4a00a10820b0ea01971afad276dd16410480a71732114966a450d13abbe451c7da344cc8a21f98f07b5e3fadf256d5f62c6b1d21ba25f43c180ede93c0390
SSDEEP 768:p/UxvxjgC+k3YYf9c/syEMbxyJugQVTJ7vvmevCSHtBk:cZj3+k3hpyEmxyJJq17vcSbk
TLSH
T14E03C035ACA59C7388F793847649E787EFF406A394C62BE485DD5F0E128B2AC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download