3226931bfaca734de46c7bdd008dac99269ab81f9ab051d9ab0eb42f7ea686cd

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 16:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3226931bfaca734de46c7bdd008dac99269ab81f9ab051d9ab0eb42f7ea686cd.html
Size 66KB
Sample260912-t74pya1arb
SHA256 3226931bfaca734de46c7bdd008dac99269ab81f9ab051d9ab0eb42f7ea686cd
MD5 18d5a27b9f7dba7ed6d41264600a0ce4
SHA1 efe9c531c0cf185da62f8be43572f8c343c095a3
SHA512 6468852f9a42436126d49402ec62eb942576e1742c1f56c1658255e08aa1c8d54ea24998702dbc855b50a6a398802fd0793f86b0b75f03f1270f16e0675d19db
SSDEEP 1536:Fa3nUpOSz/iVT9zDl9Q955n52nl9j9P5b9u5q505O9C9O9q9F9M9l979p9F5Z9I1:FF9/iVTthiLtMlRd18YCEUwAHSD9HjPM
TLSH
T13663851C0A002F3FD7A24D99FD66790D5AF829D730790632F06DD6A46F38B6E872B905
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3368	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{0830A11D-336A-4C00-88D3-82A5DEA62947}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 5092	1316	msedge.exe	87
PID 1316 wrote to memory of 4844	1316	msedge.exe	88
PID 1316 wrote to memory of 3368	1316	msedge.exe	89
PID 1316 wrote to memory of 4844	1316	msedge.exe	88
PID 1316 wrote to memory of 4844	1316	msedge.exe	88
PID 1316 wrote to memory of 3300	1316	msedge.exe	90
PID 1316 wrote to memory of 3300	1316	msedge.exe	90
PID 1316 wrote to memory of 4868	1316	msedge.exe	92
PID 1316 wrote to memory of 2484	1316	msedge.exe	93
PID 1316 wrote to memory of 4868	1316	msedge.exe	92
PID 1316 wrote to memory of 4868	1316	msedge.exe	92
PID 1316 wrote to memory of 2484	1316	msedge.exe	93
PID 1316 wrote to memory of 2484	1316	msedge.exe	93
PID 1316 wrote to memory of 3660	1316	msedge.exe	94
PID 1316 wrote to memory of 3660	1316	msedge.exe	94
PID 1316 wrote to memory of 3660	1316	msedge.exe	94
PID 1316 wrote to memory of 2856	1316	msedge.exe	95
PID 1316 wrote to memory of 2856	1316	msedge.exe	95
PID 1316 wrote to memory of 2856	1316	msedge.exe	95
PID 1316 wrote to memory of 4812	1316	msedge.exe	97
PID 1316 wrote to memory of 2924	1316	msedge.exe	98
PID 1316 wrote to memory of 4812	1316	msedge.exe	97
PID 1316 wrote to memory of 2924	1316	msedge.exe	98
PID 1316 wrote to memory of 3136	1316	msedge.exe	100
PID 1316 wrote to memory of 5988	1316	msedge.exe	103
PID 1316 wrote to memory of 5424	1316	msedge.exe	104
PID 1316 wrote to memory of 2548	1316	msedge.exe	105
PID 1316 wrote to memory of 4048	1316	msedge.exe	106
PID 1316 wrote to memory of 4048	1316	msedge.exe	106
PID 1316 wrote to memory of 4080	1316	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3226931bfaca734de46c7bdd008dac99269ab81f9ab051d9ab0eb42f7ea686cd.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffdea79c188,0x7ffdea79c194,0x7ffdea79c1a0
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,4903299050671856035,3872177417505539581,262144 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,3774910522435098533,14091025039768963341,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,449815084150933115,9632800530052272014,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:13
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,10692410769156547947,15118260570245381918,2097152 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,13810558882495188112,6451458029703076853,2097152 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,3200227415215392047,2365692536423635725,2097152 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,5991943730825326644,4153156407390014646,2097152 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:9
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,16041244472734699113,4469913675764795798,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,14083767058302262282,16116309484450410016,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,13591274296019071028,14216830802148157511,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,13591274296019071028,14216830802148157511,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,3921912216121133213,8705198190940270631,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,4865674701451275832,9461557017113326765,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,2179929698842874201,9312148692852967263,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,5789093358671395468,10366812307061062725,524288 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=1872 /prefetch:14
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,1641922536585286045,13672365728056686625,262144 --field-trial-handle=2368,i,2911493432124939774,16318256108285020070,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 badf03c2e08c6b39b8bc3c05090a8c4d6515036e96019d30364e20b0822e20e6
MD5 07305bd71e2714087a5ee0d5c2b4a783
SHA1 60c83949d35f840808ee2f2734430c37f53f1312
SHA512 750173daf560ef0885662d1a040064df035a5eafa90c2d7d6ce8ffc759b874f1be8b4a4ed309c0184b5fa9640890cadb842dd508edbfad8ceda44a25309572cc
TLSH
T11A61618067943592D7ED52F4D3EB118F3A3869B729973F1007D8EB78A98532DC05E388
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599ca4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599ca4.TMP
Size 3KB
SHA256 33db3c55895e1eae80aece9874b6b0a3ef2afeeaa1cf6b0257e8060cee060503
MD5 9b32f1b524f80f568ffd2b9ba9f27ee3
SHA1 0033f1e3ac284be8453f4229fa566667a0b33fd9
SHA512 06c93c5e8abc3a2380b6db7e958cfe179a25625b03b8698a18d418bd4ad55bc4e8c2aaaf916e8e89ae98f14bda30fa0ad55793cace1b2531a2dfbc999ec81bde
TLSH
T11E61618067943591D7ED52F4D3DB118F3A3869B728973F1007D8EB78A98532DC16E388
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1d7a17fb3189d421f3300d217c1102673196f7d9631d0ecf3cb2c224906a4f7f
MD5 e7b056b22a23f17e70a567c73f48e42f
SHA1 11a6179f6226c3b3cec15076d9c0418540516687
SHA512 cb4199ab86891af6793b3d33c315c70dbfef1f7a6982c4144b6918a236454d2d50d0ec7950ceff474ebc0de61267894f23e71baa12fd51cbc9d32b74fded5337
TLSH
T1DA41A1F7C3F4867E8A0196F0AB186E1BCE1C0556431C3C56C9E4AE1BA7E34B1E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f428ea01a7f37bda17b3492f6171199cfffe48be84ec16c3c6fd8f0b30b8da1e
MD5 ae5e27c39fbb48ecb31e0a27c6b4b2fe
SHA1 5084929653ecc626187e511f89148936fe22fe67
SHA512 12bc5a798c390ff47686732eb17bf48ebf10f41f1eaa9019a139d7acff303e218ebcd42788e6a8f3bde4b1b9311edfe403cf77c95fa1181c1d225f0ef196333c
SSDEEP 192:sxRUORRb2/fEsASqRSzoA8p4e/g6+WNIYRL93jcGFIgDaJ:sxRUOL2/fEsp0n/5IMxq
TLSH
T1CC32B815AE68A97B8CCBE31DBB657F53E6F9503261D11E08E6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a2be4bf3da1cd9dab5b5e12e363a8e642a6ace30d282b9acd634a3a311326fc4
MD5 1ad4edb0324d67fba40acf14c1019382
SHA1 2abe9462fb8002b90105774b4c3c92178545c257
SHA512 5771c0f3a5f6da0fff2be41933db1d3b1652498c19278f1eb5922d7368607eb774aebc64a4794c3437ce26e13261f8e83fdd8f1eef718e5e3218e9a515605954
SSDEEP 192:sxRUhRRb2/fEsGSqPzoA8p4e/g6+WNIYRLf3jcGFIgIJ:sxRUhL2/fEsjvn/5IExs
TLSH
T1FA32C815AE68A97B8CCBE31DBB657F53D6F9503260D11E08E6FC861C04EB6DD220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 adb51c3cdbcdd23aa270ace6e77c2a300a6fd618479e8efad43bf457e857f419
MD5 e0f171afb39b0ebe69b22ca8d2064d1e
SHA1 a838cbf74e4852887861a5729b8634a2ceba1fd6
SHA512 d65cba44c50d1ec81218f014a47b47c5b8433f265cd4768899833bfab7867ea92939d82506936bb8f9c82fabb2baeae32a19e1ba65b94bc5407dc2e2cf1a9fec
SSDEEP 192:sxRUORRb2/fEsASqPzoA8p4e/g6+WNIYRLf3jcGFIgDaJ:sxRUOL2/fEspvn/5IExq
TLSH
T19932C815AE68A97B8CCBE31DBB657F53D6F9503260D11E48E6FC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b091dd89743c00bbe6b34574424dc4f42202ab42c33e03e21f77c228fba866de
MD5 2cdc26060e00f1c8ca25dfa69d1c470b
SHA1 0183db6a12c85821b8842d1a66cd7e5b9448fc8c
SHA512 b96e993f9b202b2cbc424b2dd37e443b5fe5f4a5473de54f3178f078dbf7d3f5f6476487b227d9c4e221161d06f6b2576bd7b978d74210b74e21ee338d925b74
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkTroqYU:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vx
TLSH
T1C0B2DB2F644CCB7E4FC10AAD9C1A6FD76D9802C797588E4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b24a3fae-8cc1-4362-970a-4e28186746de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b24a3fae-8cc1-4362-970a-4e28186746de.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 b435d571bf6414cf602d09664ccea10e5185013d1b36ac3f4ecc4c4b3036f7f3
MD5 48277dba2043f50630643d19e7c163ea
SHA1 dca59d88e1bd1eada42a72b0f6029ffc77f0ba15
SHA512 8663a6f8e5b7601b16d8f238599f495e2f8463fc79ce952559e4d428135e82fa1b408ddf75e8277b26adac12c59270881c88313513aa7b6a3298fc4a974f3d0b
SSDEEP 768:z/UxvxjgC+e3JDwOtNCQYR5fgGM1TnXMqOaMAaeX:GZj3+e3Ijzfgt1TnxO3A3X
TLSH
T19703B036AD55AC739CF2D384B20AA293AEF184A3C5C51DA889ED7D1E068B35D430FD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ecdec4b863a99f15e5a4bc983ebdb9006a6249c7fa76a41037d29b6aa33b9ec4
MD5 ebbddf9c8ec30e8583fa582a49e1a56c
SHA1 5ecb09c4e9022b20c127b56c5f7997673a4f62d6
SHA512 1648cbf50f0e1d6b62b36d4c899c336d131c145736ad506da283ff3ee51b7fcc93c92865564860d503cb1be1dd4b640dd0e5a57ddbf4634e341d6b6afa119e0e
SSDEEP 384:nZcIr38NCTMfTAkLuVDfKAXOVPNCQYn5h19hgGRSp14gB+EgH18nbpOfErluZUOE:Pr30DwOtNCQYn5fgGM1TnXMqOaMMgBY
TLSH
T1B0F2AE31AD549CB39CF2D3C1B606A2536DF181A7D2C92E98D9ED7E0E059B65E030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 acf417ebcf03d69109bbcc3b5f75814171edb1ec2dbc423efb947b7924385207
MD5 b9830f69a934cc9ba39f32836ae391fd
SHA1 2b6693ec41afd1591ac14346957814dc4c09f039
SHA512 379cdd47e3270a7f81fbf977bc48fa274b97c5dfb9df6a56caabe7313622eb1e80536cf666039d9037eb629d7c3f319661c2284cffca776c01738f40711fafe8
SSDEEP 768:sFQr39wgqDwOtNCQV5fgGM1TnXMqOaMMgBY:fr3LGfgt1TnxO3MgBY
TLSH
T1D6F2AE32AD84C8B7ACF2D7C5F70AB2526DF181A7C5C56A98D6DD6D0E019B25D030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 0164325c0566d5ec4ba24d61dc1508b04ff10887b46ef32adcb9bbc2d787cd98
MD5 9ef2170029ec09643e737e9e3706cd23
SHA1 4c04d361380667e296165122861eee62907c8394
SHA512 d4a82b7abc8add893f859b7019b9ab33d5fbe7028ada2eedb31028ef4b8f441103517e45fab77d53817952111e9f6c09b7b812952552a9ba5079219e7e4d95c2
SSDEEP 768:5/UxvxjgC+93DBwOtwu5fgGM1TnXMqOenAaP8:sZj3+930cfgt1TnxO0AG8
TLSH
T10403BF36AC5568739CF2D384B30AA397AEF144A3C5C52EA889EC2D1E069B35D530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download