53e9b924991fe2bf512372fa698fa801c46cadbdd84fc637bedfbebdd08a1cc0

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 12:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_53e9b924991fe2bf512372fa698fa801c46cadbdd84fc637bedfbebdd08a1cc0.html
Size 113KB
Sample260912-p7yfpscb89
SHA256 53e9b924991fe2bf512372fa698fa801c46cadbdd84fc637bedfbebdd08a1cc0
MD5 2a9902e3531d29102d90c926ad89825e
SHA1 78c46aa7dab8e04cf80cdd40720f478428f1cefe
SHA512 59e94be9f2f9fcc9e844b101ad49ea2e3b4f77678ee5001a3103c7eae344ad39e70e697cb2f0285db22ea2ba9e465446e015559e8bd4712dabf96f8af43b2120
SSDEEP 1536:JPxMYn+hIgsdRmIknDusrcNvXUlH0zTtENoa0eqw8mJKbEaobbEaoTtAPxNnden:hml0qNXK7dobdoTeZNndK
TLSH
T1CEB3B59702204CF9EFA50DB3459B086B3C2C1437AC4791B9E3FD8F972B96D6E034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3320	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{1B681C1C-8E49-4458-9F36-589EF0B4083A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe
3984	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3984 wrote to memory of 1040	3984	msedge.exe	87
PID 3984 wrote to memory of 5012	3984	msedge.exe	88
PID 3984 wrote to memory of 3320	3984	msedge.exe	89
PID 3984 wrote to memory of 5012	3984	msedge.exe	88
PID 3984 wrote to memory of 5012	3984	msedge.exe	88
PID 3984 wrote to memory of 4804	3984	msedge.exe	90
PID 3984 wrote to memory of 4804	3984	msedge.exe	90
PID 3984 wrote to memory of 1548	3984	msedge.exe	93
PID 3984 wrote to memory of 5320	3984	msedge.exe	92
PID 3984 wrote to memory of 1548	3984	msedge.exe	93
PID 3984 wrote to memory of 1548	3984	msedge.exe	93
PID 3984 wrote to memory of 5320	3984	msedge.exe	92
PID 3984 wrote to memory of 5320	3984	msedge.exe	92
PID 3984 wrote to memory of 3352	3984	msedge.exe	94
PID 3984 wrote to memory of 3352	3984	msedge.exe	94
PID 3984 wrote to memory of 3352	3984	msedge.exe	94
PID 3984 wrote to memory of 1812	3984	msedge.exe	95
PID 3984 wrote to memory of 1812	3984	msedge.exe	95
PID 3984 wrote to memory of 1812	3984	msedge.exe	95
PID 3984 wrote to memory of 5876	3984	msedge.exe	97
PID 3984 wrote to memory of 5240	3984	msedge.exe	98
PID 3984 wrote to memory of 5876	3984	msedge.exe	97
PID 3984 wrote to memory of 5240	3984	msedge.exe	98
PID 3984 wrote to memory of 3436	3984	msedge.exe	100
PID 3984 wrote to memory of 4088	3984	msedge.exe	104
PID 3984 wrote to memory of 3268	3984	msedge.exe	105
PID 3984 wrote to memory of 2708	3984	msedge.exe	106
PID 3984 wrote to memory of 1544	3984	msedge.exe	107
PID 3984 wrote to memory of 1544	3984	msedge.exe	107
PID 3984 wrote to memory of 3520	3984	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_53e9b924991fe2bf512372fa698fa801c46cadbdd84fc637bedfbebdd08a1cc0.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffdcf81c188,0x7ffdcf81c194,0x7ffdcf81c1a0
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,5701201089365373926,10868320457570411360,262144 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,9816817383973801272,2605732190633427251,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,15001287322226408546,9667649988502681508,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:13
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,912598819034528777,11556790121335876352,2097152 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,15025013691404890838,6113234346546006366,2097152 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,6640982313664302644,9347355590111702991,2097152 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,5381883087417768933,10787129756732131216,2097152 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:9
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,1115147623828100810,3639571092119632586,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,11723766823440065915,17839242906099096216,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7161015939752632983,6043787808261052215,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7161015939752632983,6043787808261052215,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,4389190507488675120,286808175463566054,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,3837475569248126014,5085289391550715253,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:14
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,14013535968741861739,8248182113600672009,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3184,i,18237610913286005364,4468021695346207364,524288 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5504,i,17392486446864224248,4447003174566233369,262144 --field-trial-handle=2284,i,5428759417831167545,11559267234443654926,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3ccbd9b883a4f1ba9385f674b6c301e778659979dd2bcf93b4c0b778131edc15
MD5 80fab057a34f28eb9b7e91772de5e476
SHA1 c7b1a6fd8f7254ce4cc19287b6525cbaca9a05b1
SHA512 e07763f08c1e1d72930033ec22aac57695b66fb82de48b45d8f7cb680f8200804796b0ded2e3f339ab3b79605dfdf7fc4ad05c80281f5c48655169d09b6e61ec
TLSH
T1B851648290B393B2FB57053D82DDDDFB3A344671599F9D020C98FAB6B78E799C140298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a417f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a417f.TMP
Size 2KB
SHA256 4a12e4eed7e47737de6b7d74c56e1b6d0191543ab979eb0c6201d99e398b42ba
MD5 1175b75a7b075995eeb5d2529c9c5428
SHA1 1e265e4bb34e716c4b7cce9ea373f0defab651f2
SHA512 f31df7e9ffedd8ec2d48fe0afe666dc673d0cebcb198214d4b0fbd5d403844a37070be654bd9c4264c2b35ada27231872163d57b055694fd55215f92131c49b1
TLSH
T15451668290B393B2FB57043D82DCDDFB3A7445B1599F9D020C98FABAB78E799C140294
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bf5ebfa2ae1500694e5b113bc024c8400a838dd6f705d6a0a53331a9fd67e5e2
MD5 dfaeb7e07ffd09cb3b73f12952ec0a52
SHA1 b29159966d9ff3d822800e814ec0ed44328efb34
SHA512 d52e14b3fa2ebd41bdcabcaf8e9c34fd8f82a6c1c025501e8a21391a16bc67fd2524ff1ef16d3ba4413de23078719a051fc0f5999f86382989166f5dea3034cb
TLSH
T1DC61BDF7C3E8867D890156F4AB186E1BCE1D0965932C3C56C8E4EE1FA3E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fe900e11326fbda9559a43cb9bc447827b555629f970239eda0c8168277f286a
MD5 010a7a97b2b510ba5c6dadd062f0e3e9
SHA1 05d110df1a68f609bfa706151ac5e20c2fd84c08
SHA512 1885607a8e2b42a5fd081708b9581dca5a30bc5cc98ca5614c28025b3e93e06cd94329c4ebc977dcba27cdcd940ef54ddc496624e69cf38571bdbbec1ff2c81e
SSDEEP 192:sxRrR7bA/fsesByYhNzoA8p4j/g6+WNIY28ca+GvIgIJ:sxRrZA/fsesBbA+/5IPaVs
TLSH
T14832A755AE28A93B4CCBD21DBB657F53D2F95033A0941E48E6FC8A2C14E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7d84673a1b6e2bb43f587d2b7d34b0d3e7d025c4c556df440701978db864acd1
MD5 6f80707737ca84ecb9a3af07ac8d9634
SHA1 27588ba040c4e78380049f8c62526ed3c76ff706
SHA512 551d0dc1a6ae95e3b4bafd781e2b0ef35eb858518b3aee52d529c425d2ac26de7c6375e5c60c30197cc2abcd8e957c6d8a18e118954c23e123de492b356fbc7a
SSDEEP 192:sxR4R7bA/fsesQyYhNzoA8p4j/g6+WNIY28ca+GvIgDpJ:sxR4ZA/fsesQbA+/5IPaV/
TLSH
T16C32C855AE28A93B4CCBD21DFB657F53D2FD5033A0941E48A6FC8A2C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5c980aeb6cfdd0b0aa900253a891458fe522d74341b247ba1e721c2cb953f5ec
MD5 9194bb3be6a49fd38c128bc5246116d1
SHA1 612c46ffb6abac1b92b5151978cb3ffc5684510a
SHA512 cb149bf971fdaa11eff83a2216d25dd5d180efa331266f05fcfa86707318d892990f982f07920f83e7dd45178896f771ad88fe45d97859161ea76545d7c2b161
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWKroHrr:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vj
TLSH
T196B2EA2F644CCB7E8FD00A9DAC196F9B7D9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5add03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5add03.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 d5f60633207b648906b697a3a69a79c97a55ec3a2813597b3d8b6c9e72100fce
MD5 055a7dd307303d3818aeb540260e6e21
SHA1 e9179e1f53352f1e505c8ec3efa12be7e1d40014
SHA512 6910124552553c25f19644e0202e164d751a46413a340af693befab87be2668104c296a6e755c8f5cb13fcf7fa89b5a72e008ede7441e6719a59cf0772e1bf54
SSDEEP 768:N/UxvxjgC+S36iQlIgm1Jp0UzDmGA5b65Q92RQMPbi0b:wZj3+S3U6VAF65dQB0b
TLSH
T1A203CF32ECA5EDB79DB5A18036477356BFB84423C5C899E409EA7F0D06C769D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 341533f3337ea1a12fede754024d17361e77c5a121d8f4a94bf07df483d64de9
MD5 f9d8ec05658acf61f25553ea8cb7fb44
SHA1 432e8f2e2e3f15a2ad7c4625a31de0a184dedb0a
SHA512 63a6eccfecff698d3b02cc2fa6c0db3d41e805ad06d302b128e0fc946f4f71d1ccd542facf7a0dc97443d5f99af9081bc55c8491422af10caa603dc7c16cd908
SSDEEP 768:Z/UxvxjgC+S3xipbIgm1Jp0U+DmGA5b65Q92RQMPbiVTRiM:MZj3+S3iIWAF65dQBVTRiM
TLSH
T19313DF32ECA4ED739DBA919036477356BFF84563C1C995A409ED7F0D098BA8D430B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b4b1cdbb866eac18b451a6778e2899f642021c976015105d099a50f01c9ddcdd
MD5 8b36d226f6bfefc1a175039a54fc7496
SHA1 ca7b28d962d01a1e43f80c8839d3d6ab8072fa53
SHA512 44f6dfda7dbbd99233bd1f7549c9bfbecb335b52e035f21cde9529855217c2e7e2b54a1aaa45be5e243ecfcb513d0bebd59794b0424e2fd47775eebda7cb7d44
SSDEEP 768:F73kipbIgm1Jp0U+DmGA5b65Q92RQMPbiVTRTx:F73PIWAF65dQBVTRTx
TLSH
T18BF2BF72ECA0DEB79CB991C1364272157FF98163C6CC869098EDBF1E0487A9D431B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e78904a8c2769dd25b3a4b80bbf4a8dbb45bd35d5ebc20ade9844b9838033567
MD5 eb940bb971a6ab060be8225a86f6ebb3
SHA1 a848556fc807ae20e82c156aa2e9fd9c8450516e
SHA512 d7399e859dab62a6dd72a9ef62e24c9eff216e88fd9fc6181d037a50599b3603170a5f08b955182ec0a94fe609c0320aeca91229672e26740351831b897ba3f9
SSDEEP 768:HFQ737wgAipbIgm1Jp0iDmGA5b65Q92RQMPbiVTRTx:a73h2AF65dQBVTRTx
TLSH
T15603BF73DC90CEBBADB986C17A463215AFF94163C5C9D690AADDBE1D00879CD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 829d06516b2dda13cd1500d5c67f9662a8ce7ec59e7a544a13c7bb693332d9eb
MD5 b6fbc1c91294415c166b0b00c0bc741c
SHA1 65ef7768463f55ce8173c20f2877cd72a9c74dd0
SHA512 5143bc9dd30c325a8cc8764edefa83283065c32583ed32dea28621fde59e9a06dac08f5fbb7aba2fec2b99ab687b3e41eb065804ebde573f6dcd83534efab0b4
SSDEEP 768:U/UxvxjgC+B3IaOugm1JpLtDmGA5b65Q92RQMPbeFj0O:BZj3+B3lF3AF65dQRFQO
TLSH
T1E903C036EC94AEB79CF95280374BB35AAFF94473C1C456A049F96E1D06C768C830B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76c81258-eace-4620-abaf-789e58b368d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\76c81258-eace-4620-abaf-789e58b368d8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download