f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 23:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f.html
Size 2KB
Sample260912-26ryray1bs
SHA256 f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f
MD5 d2c8ccc0d8bfcf8fca26da2724dd24c3
SHA1 05d3be1f37c4c30bc208d7cf1634ce2940aa2d0d
SHA512 6b2759f738b830ff38229d0cc179ce3ff1196ecdd2c9b1088d61d687b87c212f8c283c4684a4d40fe47e68ec7258cd51301f4c14c6c5f5da2defc6a015182812
TLSH
T10C512F1A5E1BCA11033099BBFC13F14CFA55D24AA2589CA531E9016F3BE439D9D77ACC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{7C11BC6F-7900-4206-A053-19107260482C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3960	msedge.exe
3960	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe
5252	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5252 wrote to memory of 3300	5252	msedge.exe	87
PID 5252 wrote to memory of 2232	5252	msedge.exe	88
PID 5252 wrote to memory of 2432	5252	msedge.exe	89
PID 5252 wrote to memory of 2232	5252	msedge.exe	88
PID 5252 wrote to memory of 2232	5252	msedge.exe	88
PID 5252 wrote to memory of 4136	5252	msedge.exe	91
PID 5252 wrote to memory of 4136	5252	msedge.exe	91
PID 5252 wrote to memory of 3280	5252	msedge.exe	92
PID 5252 wrote to memory of 3280	5252	msedge.exe	92
PID 5252 wrote to memory of 3280	5252	msedge.exe	92
PID 5252 wrote to memory of 3276	5252	msedge.exe	93
PID 5252 wrote to memory of 3276	5252	msedge.exe	93
PID 5252 wrote to memory of 3276	5252	msedge.exe	93
PID 5252 wrote to memory of 3860	5252	msedge.exe	94
PID 5252 wrote to memory of 3860	5252	msedge.exe	94
PID 5252 wrote to memory of 3860	5252	msedge.exe	94
PID 5252 wrote to memory of 1336	5252	msedge.exe	95
PID 5252 wrote to memory of 1336	5252	msedge.exe	95
PID 5252 wrote to memory of 1336	5252	msedge.exe	95
PID 5252 wrote to memory of 5492	5252	msedge.exe	97
PID 5252 wrote to memory of 1996	5252	msedge.exe	98
PID 5252 wrote to memory of 5492	5252	msedge.exe	97
PID 5252 wrote to memory of 1996	5252	msedge.exe	98
PID 5252 wrote to memory of 2004	5252	msedge.exe	100
PID 5252 wrote to memory of 3568	5252	msedge.exe	104
PID 5252 wrote to memory of 2488	5252	msedge.exe	105
PID 5252 wrote to memory of 4568	5252	msedge.exe	106
PID 5252 wrote to memory of 3208	5252	msedge.exe	107
PID 5252 wrote to memory of 3208	5252	msedge.exe	107
PID 5252 wrote to memory of 3960	5252	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f495445bf0d0d25d69208f8a0e0d7251ae9a919261307799579c39324765675f.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffafd0cc188,0x7ffafd0cc194,0x7ffafd0cc1a0
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,4031954491912005582,252579821182517823,262144 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,5394983776392040289,831631776573585989,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,17142719248474840931,7958973360253392639,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:13
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,14509702068276607372,15752173306259516296,2097152 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,4923395010594723451,16483805545301446742,2097152 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,7722126440225550771,14302120506371967984,2097152 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,14508695726290110278,15853799734904140098,2097152 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:9
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9479921268714048195,94076023680914232,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,16986529420114910720,1337724052197761079,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,3300722707505567960,11568925574208492701,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,3300722707505567960,11568925574208492701,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,14140447501323047130,6001278631527422839,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,10867296060675299458,11871847713430829370,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:14
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,9884772189530086188,10843090788730579884,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,3945737267597047580,9865796764774081621,524288 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,509292183018222295,11386761720251653484,262144 --field-trial-handle=2012,i,12395106164952459272,16061879705366594646,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 51b09730855217701959ffb744bf499705c3698a5db0c5ad2b2e05eced2806f5
MD5 b5bfd8578c61814c281ec3076efb3939
SHA1 8c8cde24dced1a63eeabc7b95123d260b411626c
SHA512 0fcdfa1f0b7481cea516ecfbd59964e23bd426ed0707d9714fe0ac6820765a33f0b3231e1b04768ecfde5824fdc9e1897e795e4cdc7e681f6b24a91f7cccb0c9
TLSH
T10A614E4411975BD2FBA805B19BD24CCB763C45F8AACF0D71156AFBBC9C6EBB24092580
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ae95.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ae95.TMP
Size 3KB
SHA256 19c4d57db496051919fc8f5ecfdb88c9840d9ced403a1d637b2eceeea74c3932
MD5 8adf6b5c75cc854cdeccb7c83d615d9f
SHA1 4b16f513e80f74952a8328a0a0ef4347e1d06bbd
SHA512 b87962b25e21855a3bb7023db3a01b59b63db2a30b233ea61996e4f4c74030405adbead798143b8266703527739b7e017f60bda5a8dfe544286cdee4b0d57031
TLSH
T1AA612E4411965BD2FBA405B19BD24CCB763C45F8AA8F0D71155AF7BC9C5EBB24092580
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ccd2fef-7324-4555-9716-7d5bbebd744a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1ccd2fef-7324-4555-9716-7d5bbebd744a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d8933ba5147f15c1f1c89928d928adc3402915e7901257180e4b7521aa8831d1
MD5 82edd445c1d224d9489fd9a1200a1140
SHA1 419d5c6e04fa52d85cebe3a68a00dc4db6d2cafc
SHA512 446df53dcc7744f6ca87892a05fde025cdf861bb5117e1871498c2e53f73130ad7518b05374fe7c1ab85cc2047fc8a4a958262d47937e19d15a3d6a3a7229590
TLSH
T1EE51BCF7C3E8866EC91156F0AB14AE1BCE1C0955432C3C5A89E4AE1BA3E24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 71fd74f249e6a7a73e2a1067c77915f168f285f348fa5c6a7012b966589ce741
MD5 0ba36f6a59cf39afac5a48f210d59d3c
SHA1 5b8c866d1ebf2a15e799ad46b04f62bf6c95bf33
SHA512 64f51315d9f5a5c1ff4f269160f58784b0f4bc4e9ca02e5a520d8298ceb2b2559a3d44c3799a9c95343c12e7c0ad95f40f03c3a05135ce0b11bb772989f8a6f0
SSDEEP 192:sxRyRNb3/feIsDrqrVi2zoA8p4w/g6+WNIYxsqUZGkIgIJ:sxRyn3/f9sXeir5/5I2Ujs
TLSH
T1D4329615AE28A93B8CD7E21DBB65BF53D2F95032A1951F48A6FCCA1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b1b302682c18ecb6029c4082159a58f3f42ed5c79384211a8e8f3c6b04a017b2
MD5 3c76c4820d82a28751a3b722965ad495
SHA1 b4ee469e46d6ae09a414730b6b6336bc92b9ccec
SHA512 b6a37f2bcb49c0149a81de0c70dc50151101155c8bc463761b01fff78a8a6189dd56fdb6e2555e62465546f5a9919f42acb2af893f3a35dcc935111c1aa7063a
SSDEEP 192:sxRBRNb3/feIszrqrViazoA8p4w/g6+WNIYxuqUZGkIgDjJ:sxRBn3/f9sHeiX5/5I2UjZ
TLSH
T1D532A615AE28A93B8CDBE21DFB55BF53D2F95032A1951F48A6FC8A1C04E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b7c167d2e232a4bdcec7cbef527f37173e8398952e13660b89b4dcb20a2efc7a
MD5 f7decc012278aec64ccea5d7f377fe93
SHA1 5a7075a432d67bd342076cc90a4eb4d2a5fb0d48
SHA512 dc43fe140b8a853f7d2e2675d2f0be20b42e0aefa71313ed77225da8c8331203bcb4561cf68d60dc82a9d00628a69f3c480eec4630630620cf5710ce8cc7cf13
SSDEEP 192:sxRBRNb3/feIszrqrVi2zoA8p4w/g6+WNIYxsqUZGkIgDjJ:sxRBn3/f9sHeir5/5I2UjZ
TLSH
T1EA32A615AE28A93B8CD7E21DFB55BF53D2F91032A1951F48A6FC8A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 74438d9b18e035338a09fbc7bf7e3524f384e8815c5f537013ff8682c8a1778b
MD5 f3a1315e2eeeeab979ba777cf6906600
SHA1 3de554ce0eb38df4175523daf94d1d5792886df0
SHA512 84d927d697570f0efda065f3d458cc8ea5dddc6c22412139a4a82647ac1b9d6fdb4b117b4f2bbb5e48677c19cbe7c8f9dd8d12b4cc9f5f117853a5c8971c68fd
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMKrow8X:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0Vx
TLSH
T1D6B2DA2B644DCB7F8FC00A9D9C196E9B7D9802C796548D4047FE994C03C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5e1faff0-1533-4369-9f8f-3a34c2759742.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5e1faff0-1533-4369-9f8f-3a34c2759742.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 14b82b2d34f9ee3786d22f23ce2006b6da78b222ccea4a5c7655c519068614fe
MD5 e7cc7aff02840e5dbfe0f8e5130f259e
SHA1 7344879ee6e3b3f8fef3ab793213b824dfa60a4c
SHA512 ff43680acf39ea4cbb8f88c2d212ee2e95d16edb69c451f438a6add7cf8def57c85e7dc56e49fef5797fd629ef824b2c83478041a23dee9d0d35a295fc19274c
SSDEEP 768:L93YeK09TOfYf49JfJyJYe1ELsAvC8/YEOkMgZb:L93jqfYfEJfqYe1EQujYwMgZb
TLSH
T1F6F2AE71ECA4CD7B5DF296C9BB462B13BEB4811386C85A54D6DD2B0D04CB7AD130F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 986f42ae75dd5ed164208f5d3c9540c54991a5c99ef920b9595f799f1b26e1e2
MD5 cc928b5b81472464080ecb8091b3636a
SHA1 13d3627118d97d2e5ef8210561780f26b017b24c
SHA512 7aabbdb2ebc666b625b4ecac43528d0f7b1de53fc7689d5bc8725a82ff4fb0ed3ab88a8d663ee9dcd520cf4bd58542de9ef1ca6b4f3032571a386ace5606993b
SSDEEP 768:3/UxvxjgC+I39eI09TOfYf49JfJyJYe1ELsAvC8/YEOkSHrRT:qZj3+I3U8fYfEJfqYe1EQujYwS1T
TLSH
T16F03CF32DCB49D375EF1A298774A5B53FEF4811385C46AA486DD2B0D05CB3AC530F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 15a6ea62bbe6fb0a23e55046fced833ac1f7c58acb324258e04bea9bfff19ee0
MD5 47192b833d4d2a6638fa5490aa46b394
SHA1 e4b569e5422c14150816635ff58c322b539e1834
SHA512 253e899dbd6c6abf63760057f768878881b8b5d823f743e7d50a5aab1b020a63c1f39d74b01ec340c76156a4e7c8d6f3afb1f4b8c6bbd6ca4e699d98b04e4bdf
SSDEEP 768:EFQ93hwgWeK09TOfYf49JfyGJYe1ELsAvC8/YEOkMgZb:n93RqfYfEJf7Ye1EQujYwMgZb
TLSH
T1F7F29E72DCA4C97B6DF69BC5BB462713EEF4815385C8AA54D2CD2A0D10C72EC134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e5323010fbc46c3db29a508ddeb33324f8944cdcccd16faa817451827cdaf2f1
MD5 dab97e424ec04f0e32216b1301076332
SHA1 97b3d5d4671f8944b35fcd096c38b52448aed719
SHA512 94c3c55dbb75c6ae9018aec698067416ed55f79b9d03879766e96f4c47b9e9cd2bac598624820637286bf8c5ef9388e4ad9bf5a6a00bd1487603fa86a718d46c
SSDEEP 768:h/UxvxjgC+i3mC9TOfYf49CKJYe1ELsAvC8/YMh/SHrkw:0Zj3+i30fYfEzYe1EQujYkS4w
TLSH
T1BD03CF31ECA48D371EF2A788774A5717FEF4812394C46BA496DD2B0D05C72AC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e097167c-1f7b-4323-b8b9-8a52ca51038f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e097167c-1f7b-4323-b8b9-8a52ca51038f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download