228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d

Analysis

max time kernel
149s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d.html
Size 348KB
Sample260912-mxpppsaa93
SHA256 228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d
MD5 f37366a989d611110d4cf61f4ad3f92b
SHA1 7adcc3209cd70d5af69f5bec7688a83c8763512d
SHA512 03a61450a68cc2af492ff61ca6552b8d43f666f8c6e18417b09a9f1ff7f40608e45f38c8fd7f825c93682f0553213e4cb452104429449619b3f624994b868692
SSDEEP 6144:Cd2H1F29tMcME+i4fpvTmYDQX8GscE6Fe:Cda1Itnw8X8GnFe
TLSH
T1BE74AFA47601B03A4E5312EF53967B0C71396401FD914A64F6FDA2B029E7EE913A373E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2728	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{53583647-D55C-405E-B6D1-3E25DB93CA29}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2108	msedge.exe
2108	msedge.exe

Suspicious behavior: LoadsDriver 7 IoCs

pid
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe
1724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 4752	1724	msedge.exe	86
PID 1724 wrote to memory of 3384	1724	msedge.exe	87
PID 1724 wrote to memory of 2728	1724	msedge.exe	88
PID 1724 wrote to memory of 3392	1724	msedge.exe	89
PID 1724 wrote to memory of 3384	1724	msedge.exe	87
PID 1724 wrote to memory of 3384	1724	msedge.exe	87
PID 1724 wrote to memory of 3392	1724	msedge.exe	89
PID 1724 wrote to memory of 3600	1724	msedge.exe	91
PID 1724 wrote to memory of 3600	1724	msedge.exe	91
PID 1724 wrote to memory of 3688	1724	msedge.exe	92
PID 1724 wrote to memory of 3600	1724	msedge.exe	91
PID 1724 wrote to memory of 3688	1724	msedge.exe	92
PID 1724 wrote to memory of 3688	1724	msedge.exe	92
PID 1724 wrote to memory of 1128	1724	msedge.exe	93
PID 1724 wrote to memory of 4364	1724	msedge.exe	94
PID 1724 wrote to memory of 1128	1724	msedge.exe	93
PID 1724 wrote to memory of 1128	1724	msedge.exe	93
PID 1724 wrote to memory of 4364	1724	msedge.exe	94
PID 1724 wrote to memory of 4364	1724	msedge.exe	94
PID 1724 wrote to memory of 2376	1724	msedge.exe	96
PID 1724 wrote to memory of 2376	1724	msedge.exe	96
PID 1724 wrote to memory of 5404	1724	msedge.exe	97
PID 1724 wrote to memory of 5404	1724	msedge.exe	97
PID 1724 wrote to memory of 3204	1724	msedge.exe	99
PID 1724 wrote to memory of 2760	1724	msedge.exe	102
PID 1724 wrote to memory of 2640	1724	msedge.exe	103
PID 1724 wrote to memory of 2904	1724	msedge.exe	104
PID 1724 wrote to memory of 1316	1724	msedge.exe	105
PID 1724 wrote to memory of 1316	1724	msedge.exe	105
PID 1724 wrote to memory of 2108	1724	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_228becb135a3a47ff9d365a04c494719787c624eb2d95fd0e54f43a4dd88fb3d.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffbdc18c188,0x7ffbdc18c194,0x7ffbdc18c1a0
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,14922371147019743410,11175733639418516870,262144 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:2
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,12871350405147782242,16433299787980333819,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,1737860120271530474,17715104369082565576,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:13
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,9128092288521781836,10002501736164879895,2097152 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,1396003343667262510,2280799300692156359,2097152 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,13288734050532757799,3308895308060412709,2097152 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,18196861862577563612,13036845589809971156,2097152 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:9
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,2334153490503436079,15389330129412361875,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4700344816505089054,9497516081209946155,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3662385060127934705,17367078326134552475,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3662385060127934705,17367078326134552475,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,8927575214152752482,4989542703817373362,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=164,i,6763761727875716481,9941160341091499975,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,13047302778622863002,17946663159729043436,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,9133327229248856243,17759820000613214715,524288 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5640,i,6741242234765101850,8860057535168056992,262144 --field-trial-handle=2612,i,10530701044499524662,11587301745508936018,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b38f3d083b6e47294c8d9039bb46673ecd69ba2a6ef6cfa11cc54a045502f768
MD5 a0c0c056774251a58afa0966c498c97a
SHA1 2ccc6f8d28df7b894f48f599828161987f9c3a5b
SHA512 40f7212342546a52ef9b9ef4521018506b3d165e68af3fa864325cfd38238b6867e4c5560062a00b53858493fc794ffe2ae2d7bcfd6e2b396e2a82470c2e307e
TLSH
T10C6172C06F13B0E9FB8B2174F5D11CC33AF413CE7293BE221298D6B86A66365AC640C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595c7e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595c7e.TMP
Size 3KB
SHA256 d14dd87d927d592ec27c3f7dbe9f00cf0c3106b2ec8756d7e4f2c348391adc82
MD5 21f8a350505c6bc00caad8bb2336b049
SHA1 bd28a25ce721323581bd0e49bbae6a59448bfe13
SHA512 9a8784f74ed1633292b483c83d992f784bb40b372a3f2f66849913d2b05677496b2d72ad8ab8d8bd864b36a0e4148e299431a3b5d6dda39f1aab19307b35ec2a
TLSH
T10E6163C06F13B0E9FB9B2174F5D11CC33AF453CE7293BE221198D6B96A563656C640C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9165823d-f618-48b0-a47d-3658aadb7107.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9165823d-f618-48b0-a47d-3658aadb7107.tmp
Size 3KB
SHA256 a637dbd7de13b1b54c1b293e71a047e1f103021d1cf808d9198da047577e0bac
MD5 79a3d4b8ef79253428c836a64ca97561
SHA1 839946d4cfa620eb04fcf47e53bf5c3f824f81f6
SHA512 1da5bef395ea09b46c32e7e2c788a594e5e089e70387243807a306f53d608ac182c630da0520be4514104ef7f751a9f5a73554a36c61844217a2a59682b9808b
TLSH
T17F619BF7C3E4877E891156F0AB196E2BCE1D0516922C3C56C9E4AE1B63E24B1E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 56b3616b959e5af481cd43c7b6a0ffc5c7a25c4cdfda0b851f1a08044a533371
MD5 de792d4b2a832afe5bee2d10adda809d
SHA1 2dfd11e594a6423233ace7062db43096634b982e
SHA512 e1db2ab1cd1ec0c4e9ccb5b4090e736f6dab82ff47c93fac1a79d37c2691aa46f5f09984000ee0b191d555fc2f16b978b5a975c6a1ec1801e549f9cc176b6dc1
TLSH
T174719DF7C3E4877E891152F09B196E2ACE1D0556522C3C56C9E4AF1B63E24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 30e32aa1d363036552d111917254f0b0380dc623ca1ccd68753b8904fc18d7f8
MD5 91d63330cfea4e1bb6eb88332941bd6d
SHA1 db59cfd3856af40bc8881188ad8c4f0d6e2757d6
SHA512 99252621db251c2331a3542408975afe242b19b216b138077e883dea05b40c2452781beefa53022f5933c07099ef7e81ec8d28e28bf27a3eae85d99e4e8ffdf8
SSDEEP 192:sxRU3Rgb2/fEsrqhzoA8p4p/g6+WNIYRLf3j6G/IgIJ:sxRU3w2/fEsrlc/5IEZs
TLSH
T17332C719AD68A97F8CCBE21DBB567F53D6F9503260D11E48A6FCCA1C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bb3e0a45ec503e7d4a8ab4219e0efa1ce7f720fde4fc650a15db4228351879b9
MD5 95e4d1cfe9d2ae70f6cbbd55786677c4
SHA1 58710b4e39405b2da71f792431f9d7d079206ddd
SHA512 4f814705a1dbbbe813676e64b173ab985885345bf292c0d4165425a13cf908dc4736513599aa500c0cab8c8d7a4a9584fc0360cb589d00f8bcf54c52441929b7
SSDEEP 192:sxRU4Rgb2/fEs7qhzoA8p4p/g6+WNIYRLf3j6G/IgDGJ:sxRU4w2/fEs7lc/5IEZu
TLSH
T11132C619AD68A97F8CCBD21DBB56BF53D6F9503260D11E48A6FCCA1C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2b5ed46ca323d14409d47c31abc2e861255373eb1647f01a123913a6d3220ed6
MD5 1082acd1bacfc6479f6156dbc2df7d70
SHA1 3b133d48e043c13dd553f5524fabfcd91c2439a8
SHA512 14c718c69c1ed8df9bc8ff786a4833d29016d7a2a3efc4b828fdaa78169af300b958955e1ca7f7ea8c171813e1a3a2db90b7fc63dafcf42d2bfb4ad79622d88d
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkvroqYn:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vm
TLSH
T15DB2DB2F644CCB7E5FC10AAD9C1A6FD76D9802C79B548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ab16e03e7a64d54c9c88f1bdbb09a5391d6660a7dbf20560409552a7e3844c5f
MD5 d3d8c24ccde7db97462b6e99dc774565
SHA1 2808bf431075dda96ac06232a5420abeaa53e29f
SHA512 fa118b010ed3fe2d1c75c83fb8170cc0c6ec0b9ff0adbcca530426da9443ae17266a3071bbfe7ad943661d49017d505d8b6aa16108ccd0ae12e9f68b9a424b95
SSDEEP 384:+ZcIf38NMvFI/AgLuVDfKAXOVrXKXpB5h19hgGRSp14gB+EgH18nbpOfErluZUOg:8f3jODwOhSpB5fgGM1TnXMqOaecTRV7
TLSH
T175F2BE72BC659C735CF2D285B21A76526EF28097D6C91E88D9EC7F1E058B65E030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 30e4f04dbc0f327f81831f33c998c9a3dd501e2596cccd284e772c2ad4f3393d
MD5 534dec94c388ac0027c1d356da22db78
SHA1 87b09f3c738b25b45396b3fd3d005387a3a9e36c
SHA512 65ccbca243976cb5f0aceca939551d857a426b365d063f711070b05315354ae8bca386494f126f3068232b41f7218b0bfe72f3b9437d5a05f7acb34af9400de2
SSDEEP 768:U/UxvxjgC+23j+DwOhSpU5fgGM1TnXMqOaeI3:BZj3+23jZafgt1TnxOBI3
TLSH
T15003C036BC65AC235CF2D284B21A6792AEF14463D5C51EE889ED7E0E05CB35E430BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f5e20a320401704252aa84d53ef3b63d74036bb924a7fdaded7ba8af16a72644
MD5 5bcbc0c996a5ef727364a9eab088809e
SHA1 b763958a1c98da9da520c7514aa692d7d67e86bb
SHA512 18dc0f00e97733e45a7cf6f77cec5fb9e845b6134339b0fef08409e29a42dd9fdb5f62897779741c339d76aba52903537546a1bbce30ffc33c4a092fc113975c
SSDEEP 384:FZcIf38NMMFI/AgLuVDfKAXOVrXKXs5h19hgGRSp14gB+EgH18nbpOfErluZUO6j:9f3UODwOhSs5fgGM1TnXMqOaecTRV7
TLSH
T127F2BE72BC659C735CF2D285B21A76516EF28057C6C91E88D9EC7F1E058B65E030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c470f4eb5977237bd83fb4e2615245b70b4058a7371471f616ceb444fcfe3643
MD5 00c1bad540b4f9014099f86129c19487
SHA1 d5bba3c1ca75c271de9a1febc7acdccfbb60b0f8
SHA512 6c29c25939c61c6f98f28a89c89075192f2c7829bbe46cbe71720a5762da4def9a1e27694a902574402c6c37f492ed93e55f9a373765cfc6d8ec26fc39a785d2
SSDEEP 768:5/UxvxjgC+933BwOh0u5fgGM1TnXMqOevAaP8:sZj3+93Acfgt1TnxOIAG8
TLSH
T12403BF36AC556C779CF2D384B20AA296AEF144A3C6C51EA889EC3E0E05CB25D530B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ce2227a-feb5-4b51-92e2-c9372f6cd705.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5ce2227a-feb5-4b51-92e2-c9372f6cd705.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download