adff324d10c226523e51a268dbe70420ae41392b6f1ea3806aadecc50cfe6233

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 06:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_adff324d10c226523e51a268dbe70420ae41392b6f1ea3806aadecc50cfe6233.html
Size 112KB
Sample260913-has2dsdm3w
SHA256 adff324d10c226523e51a268dbe70420ae41392b6f1ea3806aadecc50cfe6233
MD5 91bc219cdcd35594c2a215b2c0f667c8
SHA1 3eff8f034c1d47283a262e2e8463b2712892b18a
SHA512 915ec4a39b786d37680aaae0ef4a3938df0b6fb24b1670a86dd7c360b081bd20e02c5f23fbb624abf300f36e33beba5ae44d2392b6c97f1df42ccfbedcc299e2
SSDEEP 1536:2mxzYn+hgvhdRSEebGkF5NuGQGTtyNoQx1TNvbEaohbEao9K:vn9QNNTpvdohdo9K
TLSH
T1A4B3C59711205CF9EFA40DB3459B086B3C2C1437AC4391B9E3FD8F972F9696E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
624	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337547502574719"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{D988DD64-6195-4B8F-B886-001F38752012}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1444	msedge.exe
1444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 3564	4876	msedge.exe	89
PID 4876 wrote to memory of 624	4876	msedge.exe	91
PID 4876 wrote to memory of 3048	4876	msedge.exe	92
PID 4876 wrote to memory of 3048	4876	msedge.exe	92
PID 4876 wrote to memory of 3048	4876	msedge.exe	92
PID 4876 wrote to memory of 2528	4876	msedge.exe	93
PID 4876 wrote to memory of 2528	4876	msedge.exe	93
PID 4876 wrote to memory of 2288	4876	msedge.exe	94
PID 4876 wrote to memory of 2288	4876	msedge.exe	94
PID 4876 wrote to memory of 2288	4876	msedge.exe	94
PID 4876 wrote to memory of 4528	4876	msedge.exe	95
PID 4876 wrote to memory of 4528	4876	msedge.exe	95
PID 4876 wrote to memory of 4528	4876	msedge.exe	95
PID 4876 wrote to memory of 2260	4876	msedge.exe	97
PID 4876 wrote to memory of 6040	4876	msedge.exe	96
PID 4876 wrote to memory of 2260	4876	msedge.exe	97
PID 4876 wrote to memory of 2260	4876	msedge.exe	97
PID 4876 wrote to memory of 6040	4876	msedge.exe	96
PID 4876 wrote to memory of 6040	4876	msedge.exe	96
PID 4876 wrote to memory of 5172	4876	msedge.exe	100
PID 4876 wrote to memory of 3692	4876	msedge.exe	99
PID 4876 wrote to memory of 5172	4876	msedge.exe	100
PID 4876 wrote to memory of 3692	4876	msedge.exe	99
PID 4876 wrote to memory of 5932	4876	msedge.exe	102
PID 4876 wrote to memory of 5284	4876	msedge.exe	106
PID 4876 wrote to memory of 2576	4876	msedge.exe	107
PID 4876 wrote to memory of 2628	4876	msedge.exe	108
PID 4876 wrote to memory of 3512	4876	msedge.exe	109
PID 4876 wrote to memory of 3512	4876	msedge.exe	109
PID 4876 wrote to memory of 1444	4876	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_adff324d10c226523e51a268dbe70420ae41392b6f1ea3806aadecc50cfe6233.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffed4f1c188,0x7ffed4f1c194,0x7ffed4f1c1a0
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,9388818826774432921,8368627660157058074,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:11
  2⤵
  - System Time Discovery
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,12479048022088827093,12336938237428361128,262144 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,600793849544565404,1126801426502399082,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:13
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,15218563506363289968,9616575523984428596,2097152 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,16638772876502972454,15946135554405003506,2097152 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,7855139443560754556,7840518602295850630,2097152 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,17108019690693346461,12342897082429137558,2097152 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,16039636212026064865,6895145274207145582,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,7994204323957953419,9241189952796601421,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16743599798362196873,12201221558259393496,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:14
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16743599798362196873,12201221558259393496,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,3671470129135308984,16269216571597591618,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=1372 /prefetch:14
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,3348315818975953776,16367128176445187771,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=1384 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,4857241564096594510,15638531921696996072,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:14
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,7332567338270032850,6781505114671704101,524288 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=1440 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=836,i,9798059021220809715,13880041986794050663,262144 --field-trial-handle=2744,i,15643952625701807788,16991486731391136237,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2e49437a-ca52-422a-bfd3-89c2e1326d03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e49437a-ca52-422a-bfd3-89c2e1326d03.tmp
Size 40KB
SHA256 7fda335d7cbf59224404201a5c093ebd0af3019b7252af951477a79485979157
MD5 e71dfedd10dde10ecc62e620fdca94c8
SHA1 9a383f10b85f298e9854ff0d263733a015934580
SHA512 c19131550fb6b862b33e992e2adbba7e67ce19fc92185b883e836fe7de6003315249fde50213dea1dab2326f6f130179e06a521a1104047b9654b74e97e79ed2
SSDEEP 768:E/UxvxjgC+W3A0nKnJXUanxDc9bsMSJz/Fn/UMgiYJ:xZj3+W3i5UqVQbs7JTiMgZJ
TLSH
T15913CF36AC905C67DDA6A7807A8B6747FFF4495381C9299886DDAE0D06CB3AC130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fef0e58150aa7004b58154b54434ebbb88af9b893ec1904dc4b853573168fb36
MD5 995181944878cc4c757291aa87a2d4dd
SHA1 562b326e8d3eeaedaadd8276f67dfdff6df627f2
SHA512 1e7a8fb678c00d3bff1e26a378e3d69c1aa75b9851012fba1853dc4ee1b3130767929985f2bb8d60e19cbd62c038806b5cf4eeca29f8b10fea51f1ec06154e86
TLSH
T135618240DF508274F7B8003380D0FCDF363382B699871D5E1659D4B8994E7B583B558B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a52f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a52f.TMP
Size 3KB
SHA256 6bc31edacc680126a998a59d0f2938bb68a7f1b8871d47e62791315291413a13
MD5 a3d7deb79cd4d607e953c9533520e5ad
SHA1 85a531ffa75f4d25c7bc2a89056079656768b203
SHA512 cf0439140dcc9bc208921bba3ff7b2dca7924ef626824fe0b0db9ee392b25f7656ce9c6a969baa52d12efe2358ea1944908411f31bbab8af93ef83263b00aa43
TLSH
T195617140DF408274F7B8003384D0FCDF363382B699470D5E2658C4B8984E3B583B5187
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 990a449f872bde00adc1ee17a92816ca19bd5c86a81ca0b208b801f188d5cb50
MD5 0184945871a7a5afc3c24b081857d632
SHA1 9d6051ebe3a0524794158b00726bb0903e8d83f5
SHA512 0c86452e6de09cc8b39490f487db22d5206934d370b86f32b38e44fc15b92c1972d25f2f72a47e65da1036bbbc21b4740dc4eb50a87262d484717fd1564a493e
TLSH
T16D719EB7C3E4877E890156F4AB286E1ACE2D0916522C3C56C8E4AF1F63F24F0E24159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b59ff8e558cb36d8135d189f9b565249acae4f0633940ea808c6510b1db167f3
MD5 f87cba7f7858da21c497ba3360fc0dee
SHA1 187ac1edcb5b44837be88adf656a10a1516b7cd5
SHA512 bf97cc43aba16d769e211ff7e34fb4f5a94f08b6841d5c36f6a39f3e50fa4510ec71cc0993a4c64c79287330b2d66ad9ef9f3e75071f06df99e6899b2b2a4dbf
SSDEEP 192:sxRSRsbQ/fLseD+wzoA8p43/g6+WNIYtffGWIgIJ:sxRScQ/fLs/p2/5Iis
TLSH
T177228515AE68A93B9CCBD21DBB557F53E2F91032A1952E48F6FC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b6e3a830556c02891fda7f5d618d774388a053700428e6887978db42a78d6115
MD5 1e55b0b46df2d53782cb681042e82d94
SHA1 4ed714b20760061b1d027fd32cc0342d497ce5ec
SHA512 9204a230c0717e0a728e97a6a49113c5b7831d2b1477aecb62d4e3e0943e81e0b384aef0969191d5d32381d3bce5ffa8b4e87bacd91de55f1467fea94763cfd3
SSDEEP 192:sxRtRsbQ/fLseC+wzoA8p43/g6+WNIYtXfGWIgDHJ:sxRtcQ/fLsmp2/5IgF
TLSH
T112328515AE28A93B9CCBE20DBB557F53E2F95032A0951E48E6FC861C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ad10fa6e82e5f7b8c5f79e126de7c6accec0749b633aaac2111bac0de00646bb
MD5 be84ce2dd11d667a30cf39e3261ef4ce
SHA1 5144940f8552a6c8fca5441f784b47a52a80a0a4
SHA512 55024d2125c208b4368e791c1d7eca27efbac8e19ef4e8573d02f376c6bc023e207a4834675b91d8623cd9df5e88d44a27d4eeecebeec526437a726d57bbd1a6
SSDEEP 192:sxRtRsbQ/fLseD+wzoA8p43/g6+WNIYtffGWIgDxJ:sxRtcQ/fLs/p2/5IiH
TLSH
T16A328515AE68A93B9CCBD21DBB557F53E2F91032A1951E48E6FC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 128999a1314a2c88208d5fd057e821ce96ea1d308e2e8d919c99c2bcb1a5b3e1
MD5 1a8c51dca13333e03825100cd9571419
SHA1 85f055f8aa50c135f1f501f2eeabb33c17e75737
SHA512 db597692993a7d32d7a6906fc4865c514e8722887b05a304a66697714ba6379a5e5791331de77468d86d45b8be32a4859753c87cfe694dd104411bc8086f3d0d
SSDEEP 24:KDjRA/wA1DPfpiD5UkI1LpKI2hA9p1+15S8rGuW/ayXCSyRS7S0SPASEDSCSeSgq:Kc6IfKnqs3yBgILKFycZ3IdKkU4PyB
TLSH
T1C19168613037660039BD3908A1A1A7AE13427393352DE66F7BEA40528D6BE481DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fa80c1ec-1014-4db1-aef2-7ddc5d6faf49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa80c1ec-1014-4db1-aef2-7ddc5d6faf49.tmp
Size 23KB
SHA256 86969ba14659e9a11e451864ddcce8c4728609b800d283bcbd5700419de54617
MD5 69f6824f140555c7a90b1badfcea49f4
SHA1 1a1913f048f7d9fce1aa57db77a6bdeb4cf68341
SHA512 c232df3615e21f5397339b1272cdd191fd0ca4df79962c439bbf9b9304832acda6b260cc0104af193dc525a89169b865789bc6f12da9250426886f08dd5b5fbb
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhbromLF:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0V4
TLSH
T195B2CA3B744CCB7E9FC00A9DAD196F976D9802C79A588D8047FA984C03C77EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3ff8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3ff8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d5aa6b5380e283b7e20f62a83d9faf47f090e2bf2c54f55ca064e12119476d81
MD5 187a8f0aac7b1e2ade911ca6f36755ca
SHA1 3987471b744b2d65de8193b108838b88f6008d70
SHA512 7f7b3a4dc711cc28db4d01b4b45fff55afbcd0ea858edeab7632629434a586174805dee22c4fb195ce909e25358ade6a77610fb14376a88d746fcf6eabf20f3b
SSDEEP 768:XFQN3QwgKCnKnJXUaKxDc9bsMSJz/Fn/UMgiGf:qN3z5UxVQbs7JTiMgXf
TLSH
T1C103B0739C80C9BBEDAA97C1BA4A7607AFF44153C5DD6984D2CDAD0D02972EC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f3939f38202d4a8674a449c8c894cd744728e2558ee48610f2c5a895bf2ae5c4
MD5 18fb8da8a298c853e33e3f9255596f60
SHA1 65bf72cc1e37dac59945b2b0e6da052fe6a03ef5
SHA512 16f0f52c9414ce0770913f2772833825adf654266724b13ec8d6f0ff11bc89dca0e39dd5bcc5b77653dbd2ed3870ea2288fa1471dce369e0ef3f35dd54521b32
SSDEEP 768:sT3QCnKnJXUanxDc9bsMSJz/Fn/UMgiGf:sT3o5UqVQbs7JTiMgXf
TLSH
T1E4F2B071AC5088A7DDA693C1AA877607BFF48643C6CD6984C5DDAF0D02D72ED1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a20540c41674a4b090e19a26931f9b8f28fe2f74d8e62eeb07a3c188085a381c
MD5 d189a8fe2dbaf7fd22d1fc471d97cd62
SHA1 7b7c3ae09597655f75c51aa5915c2b6b6067a588
SHA512 91ad77cafd1a2d5cb4b18ee59ff725f0c2f19865f08162b4ab6f1db04b2f4afd6c59caa5d4dacc6bc5dc00cdf964005f5d858f77e3f2d797debb0045710111f3
SSDEEP 768:z/UxvxjgC+U3I9KnJXvxDc9bsMSJz/FnnDSHXPyK/:GZj3+U375vVQbs7JT9Sb/
TLSH
T1CC03C03AEC9058A7CDE767803A8AA657FFF44953C5C629A889DD6E0D07C73AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download