3a97ac47b1e3186a1e2a7f8a4689905f929bd6bd8111ae038dcb82d5222b058c

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3a97ac47b1e3186a1e2a7f8a4689905f929bd6bd8111ae038dcb82d5222b058c.html
Size 131KB
Sample260912-vfneback7x
SHA256 3a97ac47b1e3186a1e2a7f8a4689905f929bd6bd8111ae038dcb82d5222b058c
MD5 2fcf16620a5a37685e81718987841d10
SHA1 e9a8f827d3fd86c1a68de68fa13f628d6808a59b
SHA512 784e6db4ad99d5714bdb73546093080429f00cdbc23a6e07616182263d01b93f8b8e4b57c157377b6e7659b27296ebb278788c31696f3ff92a86181713d21951
SSDEEP 1536:kaZUXu/aXaUWd2DJ0MhLzUu+06Mp585wuxXBh+q3ZRvIOuP1lJck1MfK9f6IEKY9:v3GLi3P1VYq
TLSH
T1DAD3D9166105F3065DB2CE24633ABE3E809ED327D7B8D4ADF34DE6A51B8413B0BA7854
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4976	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{66273F25-7F80-47F5-84B4-601BB7B908C6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe
1784	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1784 wrote to memory of 2876	1784	msedge.exe	88
PID 1784 wrote to memory of 2736	1784	msedge.exe	89
PID 1784 wrote to memory of 4976	1784	msedge.exe	90
PID 1784 wrote to memory of 2736	1784	msedge.exe	89
PID 1784 wrote to memory of 2736	1784	msedge.exe	89
PID 1784 wrote to memory of 2432	1784	msedge.exe	91
PID 1784 wrote to memory of 2432	1784	msedge.exe	91
PID 1784 wrote to memory of 2852	1784	msedge.exe	92
PID 1784 wrote to memory of 2852	1784	msedge.exe	92
PID 1784 wrote to memory of 2852	1784	msedge.exe	92
PID 1784 wrote to memory of 2588	1784	msedge.exe	93
PID 1784 wrote to memory of 2588	1784	msedge.exe	93
PID 1784 wrote to memory of 2588	1784	msedge.exe	93
PID 1784 wrote to memory of 4436	1784	msedge.exe	95
PID 1784 wrote to memory of 4464	1784	msedge.exe	96
PID 1784 wrote to memory of 4436	1784	msedge.exe	95
PID 1784 wrote to memory of 4436	1784	msedge.exe	95
PID 1784 wrote to memory of 4464	1784	msedge.exe	96
PID 1784 wrote to memory of 4464	1784	msedge.exe	96
PID 1784 wrote to memory of 1168	1784	msedge.exe	98
PID 1784 wrote to memory of 4576	1784	msedge.exe	99
PID 1784 wrote to memory of 1168	1784	msedge.exe	98
PID 1784 wrote to memory of 4576	1784	msedge.exe	99
PID 1784 wrote to memory of 5552	1784	msedge.exe	101
PID 1784 wrote to memory of 3384	1784	msedge.exe	104
PID 1784 wrote to memory of 4512	1784	msedge.exe	105
PID 1784 wrote to memory of 1016	1784	msedge.exe	106
PID 1784 wrote to memory of 788	1784	msedge.exe	107
PID 1784 wrote to memory of 788	1784	msedge.exe	107
PID 1784 wrote to memory of 2324	1784	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3a97ac47b1e3186a1e2a7f8a4689905f929bd6bd8111ae038dcb82d5222b058c.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x234,0x7ffb15adc188,0x7ffb15adc194,0x7ffb15adc1a0
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,6542458624845858880,4612888836870700863,262144 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,13055589502689393509,6988273813335368871,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,18091662011117722465,5969828737391586808,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:13
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,2404786886949462355,6380922434514136517,2097152 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,12357531119144965618,9861530236519873643,2097152 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,9086551614710292364,1056718906075653351,2097152 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:9
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,3268984588869955462,10907046982482983657,2097152 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,6966827172797554009,5037361299140890597,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,7329568980475030359,6496517939320003881,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,4332560915473053524,8232615933634061548,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,4332560915473053524,8232615933634061548,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,17489842915624003309,3413233258352604789,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:14
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,17628511090678057728,11644364828528784033,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,18309365081601343734,2359367923031184867,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,14619273677455201745,2475821885486738166,524288 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,12179597225949748615,3834277296058685977,262144 --field-trial-handle=2224,i,3383307626552136594,2969669040207981218,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 661afe623c2e66755e06853cbb6a149a2e0373275fb8f6b8da6612725e139bee
MD5 f780e405766b4d385e8fd7dca645fad8
SHA1 e5c2e84368b2b0b288c27551e2ff1cbbd63349d8
SHA512 44e65bfb1f4579c8ed7a32dacd7ac25a01578992f9cc25ed23f047169464e6bb6b2bf1f9fbcfa62cb5e145b7f78c82bd844c375c14dc4c78c97c97e67a3196d8
TLSH
T135512C8043BDB19DFBD8033AF6C55DBBB631974C15AF1E720AACC678581E726C014388
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e476275a11e1f284082b6861e0fe94519a90becf3a7da022e3f7582890552f83
MD5 18df4e489bfa0a7e3e8ef2924e782c4b
SHA1 39ae61f3bd31a352cd962e229ee4138575e1892e
SHA512 7bea49281dae2334d8217dc3ca0ebbb7e669615c4a2c6d8f7ed8332e9872ee627921838fc31869219fff92a177fd761c16745a14b57e197f95b4bc5741eda48b
TLSH
T1C261AEB7C3E8867DC81156F49B147E1BCE5D095A422C3C56C8E4AF1BA3F2471E24166F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 86dfe13c1072bdab87557d0ba5db9a2de59df7eaa1d327dea0abe1b5f0bce01c
MD5 f54663431d050f1bbeb46b0d5408d3f9
SHA1 e43070dea69ccb18cbbae103ead17bc4134710b5
SHA512 3fdd597f790d7b1be7055659823ea44140520a93b41d93035c0bfcdaeb35d1564dc86125effa4b9b2c1c4da38e05958ae51ffb3f5ffacc00ee2d9b20616551fd
SSDEEP 192:sxRe1RubG/fjs8ALzoA8p49/g6+WNIYtfDGDIgIJ:sxRe1yG/fjsbqY/5I7s
TLSH
T1EE229515AD68A93B8CCBD21DBB59BF53E2F91032A0951E58F6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8c2759bafcb1b2fbd3e3c309c379be50070c7caf20cb99e3a8572b6bbffcba08
MD5 c34f4db008419504529723f06c731757
SHA1 2e7bab7f0bc2194ae9f3aa7afba4a176f2518b21
SHA512 2caf9b5db9a9350d79b9ace5d82dcb9f8bb30cf8f089d83fcbe93cb68683c2b2cbddd2768fc294551932aa50ac7a0cb1e7652378a4658b5f34ef380451e6c379
SSDEEP 192:sxRP1RubG/fjsrALzoA8p49/g6+WNIYtfDGDIgDpJ:sxRP1yG/fjssqY/5I7f
TLSH
T18F329515AD68A93B8CCBD21DFB59BF53E2F91032A0951E58F6FC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 79b44865b41c7dff924d77804db2ff7acf3a66bf1a1ffa748621018bd616012a
MD5 d13d7a42a82740a5200db9dacfbd6663
SHA1 03e73f6ed23f25c6d74b388a8d1bed6925f80be9
SHA512 fa0ce8f78e09bddb0eca0e8d8f7cb5668d403327ea2b7ec55975411753aa19f6a8744d3defaa73dfb6919776d650fc97c5effb44fe15b22bd9e1fdaf85671247
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhpromLb:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0Vs
TLSH
T1E5B2DA3B644CCB7E9FC00A9DAD196FDB6D9802C796548D4047FA984C03C77EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 0b9019cb7a26258b07875522873a72a577172be2fb9fe42ef95c2ca09a21df95
MD5 06bcfe7853865d904285eccb841efe61
SHA1 dcdbd590c3d6e6e9427594685ae57597d8315129
SHA512 80dd034291376cd2e5abca31b6578e9347ca307d9a4b8633824b21f1f1630b867d03d9db9f3a41691630121cffc26d01586971bc09eaccf36f82fb108f6ea6af
SSDEEP 96:KUmIK7SGyQAKt6O/OKEka2JiKi0Mry1ZrC:2zvEtRBry1ZrC
TLSH
T1C5C1F624723B4202387D791895D5BBAE074535A33078EB3BBBEA40969D27E084DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a91fcfb7-2366-4088-941f-e44e960ba29f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a91fcfb7-2366-4088-941f-e44e960ba29f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 16045faf4487b9c5675ecd223bf7e06de1b81d807e7cdf7801b74d2bd54e239b
MD5 67c8721612a97da1bd4dc940b51f80e3
SHA1 3de350b50234776c2dbf94f9ed85b3b9a832b163
SHA512 28030a907301555e70e235c2deebf786b6566e9d44f8e842e865766f87c62aaccbc8dd734e46de77f79f7f3233057e8969c47bae3b7dcbae9a050544c2dd7011
SSDEEP 768:5/UxvxjgC+X3aNfKnJBnaExDc9bsMSJz/Fn/Ocg:sZj3+X3Bjn1VQbs7JTccg
TLSH
T1A803D039EC905C978DE2A780764B7657AFF44853C5C92E9889DD6E0D06CB3EC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0d8a75a90d989e372d3be78211f752cec45712a308b57e2bdb9d9ba783f22569
MD5 386dd0b3335e28b7891f1d8dafcd6c75
SHA1 e5b24d6005ec138520780aec27ec7284d3e23e82
SHA512 bbb708075df032a9725cb8e6874dd91528fa676dbcf6cc2401b0cc343a8cbc43236db44ec062925e3a53874754040bf38ec65300189718282bb835cb371b58fb
SSDEEP 768:lC3a0fKnJBnaExDc9bsMSJz/Fn/OcTRoQ:lC36jn1VQbs7JTccTRoQ
TLSH
T157F2BFB19C9088A79DE697816A8B7913BEF88543D6CD1A84D5DD7F0D06CB2AC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 65eae1a61b22f9ccc0270e7cbde9b63a03e95962d4716b3ad58522b7c1dc1bc1
MD5 1def5c6bb26bf498365f4d9ce03d3997
SHA1 39f086049213e9a09f8d38d84b2bbf17d762183b
SHA512 b7175356f1de33b5016e37997c510c8914ff07a77ba900b6534e2a5d17dace428f462494d1cf2a487410dda815c2e3e0f8312847cd0afa6dc2410570b6817e7e
SSDEEP 768:pFQC3Bwgz0fKnJBnaAxDc9bsMSJz/Fn/OcTRoQ:oC3djnLVQbs7JTccTRoQ
TLSH
T10DF2B0B29C9085BBDDE79BC0BA8A7513AFF54593C5C96A84E6DD6E0D01C72EC1307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4d487c5b4507c803fe1cad69b2327fc0663d4d777fc34ec934ef8f2174217ef8
MD5 a1083376c51e1410ab436497fc6bd170
SHA1 367bf0aed594ab9ef2903039a74eb91c8bca5031
SHA512 a4a8a8e52ccdaca31802d0a1129f477ad265c5ae9fce136d4d2a305a1c49c2600f2299f6a26d0fc41381be0e17683594d797b7b5ae9a9b1dae0c413860fa3f10
SSDEEP 768:z/UxvxjgC+U3h9KnJBQxDc9bsMSJz/FnnmESHXPyK/:GZj3+U3ijQVQbs7JTgESb/
TLSH
T15903D03AEC5058A7CDE767803A8AB757AFF84953C5C52A9849DD6E0D07C73AC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

377d087a-e04b-43d2-8a96-8c4232697aaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\377d087a-e04b-43d2-8a96-8c4232697aaf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download