6e93d60fa95039c5640451f42261ff360838aecd6634444d297b1eaa23968fb3

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 08:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6e93d60fa95039c5640451f42261ff360838aecd6634444d297b1eaa23968fb3.html
Size 40KB
Sample260913-klzpeshd78
SHA256 6e93d60fa95039c5640451f42261ff360838aecd6634444d297b1eaa23968fb3
MD5 f27bab907804a4ff9c73b6c3041431f8
SHA1 21c6f8a6953a59544bd61f8fbd0ca23c4a91b099
SHA512 d617ac85a8bf092aeb72df81eed3955d2aad8194b515639fc1fb9e1100369fd1cc29590218353c137a028ea3f75d64e0486dd9d684809f365463e9d7a794090f
SSDEEP 384:CJ58kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8p/QJY2:0Hw8hW8VgJG8yJMOh2
TLSH
T127039464B8C222230133637D9BA79608FB74511B820653407EBC27EB1FF1954D5AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
612	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337625281173140"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{400F2981-97E5-4C53-9A15-5215B7AD77E4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5868	msedge.exe
5868	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1128 wrote to memory of 1720	1128	msedge.exe	87
PID 1128 wrote to memory of 612	1128	msedge.exe	88
PID 1128 wrote to memory of 1880	1128	msedge.exe	89
PID 1128 wrote to memory of 1880	1128	msedge.exe	89
PID 1128 wrote to memory of 1880	1128	msedge.exe	89
PID 1128 wrote to memory of 3396	1128	msedge.exe	90
PID 1128 wrote to memory of 3396	1128	msedge.exe	90
PID 1128 wrote to memory of 4092	1128	msedge.exe	92
PID 1128 wrote to memory of 3384	1128	msedge.exe	93
PID 1128 wrote to memory of 4092	1128	msedge.exe	92
PID 1128 wrote to memory of 4092	1128	msedge.exe	92
PID 1128 wrote to memory of 3384	1128	msedge.exe	93
PID 1128 wrote to memory of 3384	1128	msedge.exe	93
PID 1128 wrote to memory of 2312	1128	msedge.exe	94
PID 1128 wrote to memory of 6092	1128	msedge.exe	95
PID 1128 wrote to memory of 2312	1128	msedge.exe	94
PID 1128 wrote to memory of 2312	1128	msedge.exe	94
PID 1128 wrote to memory of 6092	1128	msedge.exe	95
PID 1128 wrote to memory of 6092	1128	msedge.exe	95
PID 1128 wrote to memory of 3388	1128	msedge.exe	97
PID 1128 wrote to memory of 3388	1128	msedge.exe	97
PID 1128 wrote to memory of 1148	1128	msedge.exe	98
PID 1128 wrote to memory of 1148	1128	msedge.exe	98
PID 1128 wrote to memory of 4136	1128	msedge.exe	100
PID 1128 wrote to memory of 472	1128	msedge.exe	104
PID 1128 wrote to memory of 1772	1128	msedge.exe	105
PID 1128 wrote to memory of 3192	1128	msedge.exe	106
PID 1128 wrote to memory of 1684	1128	msedge.exe	107
PID 1128 wrote to memory of 1684	1128	msedge.exe	107
PID 1128 wrote to memory of 5868	1128	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6e93d60fa95039c5640451f42261ff360838aecd6634444d297b1eaa23968fb3.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffaf23fc188,0x7ffaf23fc194,0x7ffaf23fc1a0
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,5172189639441478228,5929853195289755398,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
  2⤵
  - System Time Discovery
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,1460936652074183237,3046606758040746082,262144 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,975867235957935701,4544452124304377367,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:13
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,2081127239907108751,9431902979829540967,2097152 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3676,i,17164845174669489595,5669092015490988551,2097152 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4416,i,675130248796952902,12619580627153584003,2097152 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4436,i,11749941943979405438,15651590342067336328,2097152 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:9
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,7063313828434653037,5677207221741692334,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,17157798102509008749,4221736231653193934,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,348042319922068057,6524049733293640149,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,348042319922068057,6524049733293640149,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,661827126443013523,5242493110918097633,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:14
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,4307732910495353365,11661648130586486825,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,16534053630847345029,877398330465757466,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,4565108250041463506,12975583562445999103,524288 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,10769091176958929759,4716949137679134052,262144 --field-trial-handle=2384,i,7654323953384802542,11179279862285302894,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5868

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

8580e11d-28e8-4399-9fda-3e81c6197c53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8580e11d-28e8-4399-9fda-3e81c6197c53.tmp
Size 11KB
SHA256 a27dad8c91ffbcf2baf4995c9995aa776e8efed9865b74765ad08ae776aa7380
MD5 9f3a4dcd084fdab612b479d11ea85cf3
SHA1 56affc9b624bf929789746175c4b1ba14f3f5c89
SHA512 5fda4e8c9cdf08194379e77ed5e0c7c164e9c493d296e09f70a6086b215289294ce5b87bf8703fce5dee1f53c924e2d4682306d53c8011e6fab53f5f1fde8aee
SSDEEP 192:sxR6RHbP/fsTsdSXyYh1zoA8p4m/g6+WNIY28cJ+GaIgIJ:sxR69P/fsTsdSXbYb/5IPJQs
TLSH
T19132B8156E28A93B4CDBE21DBB65BF53D2FD5033A1941E48A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c030525654d839792a5153809d519ef24dd1d3204a5d56b57a14ef2bed4ff849
MD5 e186b60c9a0ef13a48ca5c9dcb605663
SHA1 7ac94af8250d3a0b1b8e29f08fb1e18aef67fc7a
SHA512 0c0cbd1b8c7e4508ad4383f651cb8656cab2a5728d028d002bd396b916f3e0e9e100564033ccc58b647bbb1e9ff0d6d0f0a5ca6abc3cc0dbfcdcebeaad4c3035
TLSH
T11151B6BC42AF0559DB54493353E0618B3B38E6FD0A673EFF1DAAC8B45B16715DE05004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cb26.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59cb26.TMP
Size 2KB
SHA256 218d99a2ce1c64e3676badf1d130a35faa29c66f355cdd6d946aa2476656ed8b
MD5 9c8e0ff46fc2ea2457e2616ff653c8de
SHA1 eee3322ce58fcf05e59b2dcbd6a6e19fbc3f08a2
SHA512 be91274e1d327754e005b53c6079b8b116269a2a9c383e2574b552f8a240ab00adfcb2b4a9ce2a966f20b64ffe0730d93b5f9c7ab8504e2c412440593c1943e0
TLSH
T16F51A5BC42AF0159DB54493353E0618B3B38E6FD0A673EFF5DAAC8B45B16715DE04004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e19a5da0322d19b318bc26ec5b58d0f94f3544538c6a100d3414c37b05ecafde
MD5 0f0c2e22707f3d2c1e6f3abf01d34d62
SHA1 475dd8f09c4619800f72eb452e4e73603fb5846d
SHA512 8c61d46c4a9c16aa68ae8fcbf1581aeb72959fb579ac792a6a28520a07ba14fe26b1283cbc91afd1502884ff5e06d612454a1045aa9187049e48d05fe7bf862d
TLSH
T1AF51AEF7C3E8867D890156F4AB146E1BCE1D0915532C3C5AC9E4AF2FA3E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 de3507d53b60513a955b3c6603408155b441684d8b796eb3558b73b6c5e5700a
MD5 e1101da7c31665d367670687eeb52e4c
SHA1 42ba4b0e560650a71f40977ed63495f9515298fe
SHA512 1e156c20e49fa33ee807d694fc5fd8c100cc8e12274b8adb8057ab231e12a4488a824f1b3123aa89e82738b7d60ea497bbe9db1b21333850393037d6d44850cc
SSDEEP 192:sxR9RHbP/fsTsCSuyYh1zoA8p4m/g6+WNIY2BcJ+GaIgDzJ:sxR99P/fsTsCSubYb/5IYJQR
TLSH
T19F32B815AD28A93B5CDBE21DBB65BF53D2FD503360941F48AAFC8A1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 13cac0f6d3e8e3df3103cf16e46be102e29a8b4befb8398cbe47165c5b413ea7
MD5 8d8c49de5b302d2031a416c5dde1574f
SHA1 a91db485a91bc358dd052c1d1ac93201b567a9d8
SHA512 a548b459d7d7774165ce16caba8aaa1d3713ce791144391a844329b36a51d5a6887d6e5efbf1f6decad05c5c5fa15fc6755a96ed87e23da52bf419ad4e47ba5b
SSDEEP 192:sxR9RHbP/fsTsCSXyYh1zoA8p4m/g6+WNIY28cJ+GaIgDdJ:sxR99P/fsTsCSXbYb/5IPJQT
TLSH
T1A332B9159E28A93B4CDBD21DBB65BF53D2FD503361941E48A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cd802e68a1d93e1473b78d00d37dbc2a742695bd60cf5734556f6268d336c714
MD5 729bee32116f471b4c739f056d79d5b7
SHA1 85ef9a2029814ebf736ab986e813d3c4728ed595
SHA512 cf28f7cb9e45bdfcc54bcba317ae266a4b5fc0918f59f19205fdc7158f4508ced10629c9fec8c715c276c457af1ac87b894198609915303296887b725f1ea86e
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW4CroHo:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VP
TLSH
T1A2B2EA2F644CCB7E8FD00A9DAC596F977DA802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d842a4c838888664bc7856ee3a2a3506926edeadd51eec3017f73bbb61354489
MD5 09470f704c603a66ff4077db2ff23acb
SHA1 08ddd37f22509c50f3d0f509a11f72d3788987ee
SHA512 f3547691393072962fc8391f2598d9977c6ef98fca4320c1489cd8090693b3e2549bf999653ff275acb4fb2faf3fed7306ae81887c864361e767b5b1570fb1cf
SSDEEP 768:2z3rdygm1OgJLDmGA5b65Q92RQMPbprgKg6:2z3rwNAF65dQmrgl6
TLSH
T183F2BF72ECA0DDB79CF9A2C13657B2026FF88253D1C8569449E96F0D0597ADE030BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0900a7c9ee63a26d90ee3d1a94195b94c3e88cfda21ab3c01132ab98205457bd
MD5 7d7b06014f18801c18669960a59cb476
SHA1 3b357745f822d7f3d5116d5885afd454ba4af8df
SHA512 4947e8ee68b134595b21f7a4c68308e143cf2943ef3b7ec4fcdd591033194860effacf024d2c2a8cfeda5ce6036b5af98ddc6b8714fa94ee02e0e2774d2fb791
SSDEEP 768:h83AFygm1OgJbfDmGA5b65Q92RQMPbprgKg6:h83AYbZAF65dQmrgl6
TLSH
T1BEF2BF72ECA0DDB79CB9A2C12657B2016FF88253D1C9469489E96F0D01976DE030BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6c201a13a9a9805e71c9f9ea616d5182794b01954bf0769f8c3fda8e50e30a37
MD5 fb155f7f967e81e0ae42461edcac00b2
SHA1 35a3e2923a4fda589834f6042f023350a8ccabe4
SHA512 173d199e7dc3c5894cf1486cdc2ae910d027518438169650914e1a2037e4b081fe470ba90d658ef7b19c73a543dfbc74739dae26490709e96e0b2e601a82c805
SSDEEP 768:U/UxvxjgC+B3q8nxvgm1OQtDmGA5b65Q92RQMPbjNFj0O:BZj3+B3qMd3AF65dQWNFQO
TLSH
T1EB03D036EC90AEB3DCF95280375BA35AAFF84163C0C556A049F96F1D06C768C830B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed798e45-adda-4ea7-885b-7fba74d04774.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ed798e45-adda-4ea7-885b-7fba74d04774.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download