f922611012c0d97c986b998508133d91b65439f9087b9d13772e7eeb7c83adea

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 18:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_f922611012c0d97c986b998508133d91b65439f9087b9d13772e7eeb7c83adea.html
Size 116KB
Sample260912-xcjytsseqg
SHA256 f922611012c0d97c986b998508133d91b65439f9087b9d13772e7eeb7c83adea
MD5 4efa8e67d41d6e5940ed2df0e4f56740
SHA1 7fa349635a345a5b62164c020117e9c36f9cbd85
SHA512 7c156656367ec66c98030b7a6e45622bc5ae67eeaf98f0cd939e406712d3aa58dc1e6872ca1c1e6337d57a477a0e9ac10f1c997520ae8c159bb89401ece683fe
SSDEEP 1536:N7bQ6Ynl6h7+J0NkFB9EOv6ti+/Howavaj+Rd4sofm/MRB049o:NHbY43tYwat34+
TLSH
T138C3D59342201CF6EF6605A2525B1A9A391D413BF84700BDE3FCCF963B86D6E0A4767D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5460	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337121554278639"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{6ED724F8-908F-479A-8205-3D2DC256D9DE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 5464	4724	msedge.exe	87
PID 4724 wrote to memory of 2628	4724	msedge.exe	88
PID 4724 wrote to memory of 5460	4724	msedge.exe	89
PID 4724 wrote to memory of 2628	4724	msedge.exe	88
PID 4724 wrote to memory of 2628	4724	msedge.exe	88
PID 4724 wrote to memory of 4080	4724	msedge.exe	90
PID 4724 wrote to memory of 4080	4724	msedge.exe	90
PID 4724 wrote to memory of 2108	4724	msedge.exe	92
PID 4724 wrote to memory of 2108	4724	msedge.exe	92
PID 4724 wrote to memory of 2108	4724	msedge.exe	92
PID 4724 wrote to memory of 4376	4724	msedge.exe	93
PID 4724 wrote to memory of 4376	4724	msedge.exe	93
PID 4724 wrote to memory of 4376	4724	msedge.exe	93
PID 4724 wrote to memory of 5748	4724	msedge.exe	94
PID 4724 wrote to memory of 3760	4724	msedge.exe	95
PID 4724 wrote to memory of 5748	4724	msedge.exe	94
PID 4724 wrote to memory of 5748	4724	msedge.exe	94
PID 4724 wrote to memory of 3760	4724	msedge.exe	95
PID 4724 wrote to memory of 3760	4724	msedge.exe	95
PID 4724 wrote to memory of 5736	4724	msedge.exe	97
PID 4724 wrote to memory of 5736	4724	msedge.exe	97
PID 4724 wrote to memory of 5964	4724	msedge.exe	98
PID 4724 wrote to memory of 5964	4724	msedge.exe	98
PID 4724 wrote to memory of 5648	4724	msedge.exe	100
PID 4724 wrote to memory of 1648	4724	msedge.exe	104
PID 4724 wrote to memory of 2476	4724	msedge.exe	105
PID 4724 wrote to memory of 1948	4724	msedge.exe	106
PID 4724 wrote to memory of 2620	4724	msedge.exe	107
PID 4724 wrote to memory of 2620	4724	msedge.exe	107
PID 4724 wrote to memory of 3896	4724	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_f922611012c0d97c986b998508133d91b65439f9087b9d13772e7eeb7c83adea.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffa379bc188,0x7ffa379bc194,0x7ffa379bc1a0
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,8036498231259938303,6575518713620416967,262144 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:2
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,7617365485585063312,11218473401247309689,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,9908288701207382443,1707045890248560492,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,4029363144092025246,1962941634677436429,2097152 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,1453494465735290621,9728416779147969785,2097152 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4388,i,12990372051793648477,8440677753141495858,2097152 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,3572485848762900743,16249355184757496689,2097152 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,4658866840519185622,11350643857761718940,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,9852521772905737675,8982938089814429300,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,2218452285896082213,6276545136290371314,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,2218452285896082213,6276545136290371314,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,7284437022435025402,1803109686939920283,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,16766281718430535393,8320904118925458980,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,8324648576787350762,13860507150757667099,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,3550789809869875071,2099943526953159955,524288 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6476,i,4369736821560446962,8099756163628308516,262144 --field-trial-handle=2664,i,703317391036476396,6896439305853253018,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 65998f824ac8f28c49c2d9fd622b89c5f0f35d3565dbf27b02e1f68c6e74d327
MD5 27b526baf3155a6789d520b261331772
SHA1 4e8bbb929d372eded0de2ca2cbdaf197cc1902b2
SHA512 afb30c7da05b7358f542afc949f1f23b76b4fa015cb8f74e64ce05a7ed166f06846b52ca3e5a61e8c41951ffe0687a46de8b73262884c47e180a3eee7a7d2072
TLSH
T1EB517580A5A0644DF7B94BB250DA128FF7308F9AD0439EAE3A98CC75E946B10B53C55B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b9b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b9b1.TMP
Size 2KB
SHA256 64a0928832667a2cab4a8c08b88e30d3f60871be599d7b9a7d67281530a750f6
MD5 ad9ce6e621c6547999e9501fdbf962ce
SHA1 54c9cc599a4b136ae66e1e6f604b023481c15f09
SHA512 3ae5d74d6fa604876b0570f065e8fe985033d7e67e71fec6feb98d2a51a6af41955cd8dc26d6c82852e173f568c29ed677166cd97660b2c17b69651d3b070d5f
TLSH
T15F518880A5A0644DF7F94BB250DA128FF7308F8AD0439EAE3A58CC75E946B10B53C55B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 8bc932d6f4e60999327919a18c843efbf423a16d3ea0348f1a8550542ee0adbd
MD5 002f150d939d5d1c9044a638c5764485
SHA1 16c32e47ae28a18adf4f3ae95fc95624feb7d3af
SHA512 d5de27f8748168edb1bd8600d023bcfbb3f30e0b1cec1b9447f6cb4da7bcb402b73fa47e59885429dae60a6918a1abe24f74a935610efbfe38313f7000a9ead1
TLSH
T18081ADF7C3E8877D890156F4AB256E2ACE2D0955432C3C16C8E4AF1F63E29B1E24159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 07bc418e645267351044b91f8e05bb48502ad3f16015313295b744c11bcd7f7f
MD5 4268530d2f354574340f82137d31dff3
SHA1 f0b5b5d8074e8a0c1da83e72bd2b19365853d853
SHA512 fd13dfd9df8dbcb071ebc26162c77e4755856851aebe1b3d3f867c13fb2ec28b4fac6f945dce82ba5b20de512685800ddceb48fec9eb29b1d768e83a7df685a4
SSDEEP 192:sxRJRybS/fGshJHRh+zoA8p4E/g6+WNIYENbG7IgDbJ:sxRJWS/fGsPPt/5Ig5
TLSH
T1FC32A816AD24A97B8CCBE21DBB557F53D7F9503260901E48FAFC8A1C14E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b65868ce3de159c59d6a87391791623117a2d4ccd35c24540a8f515be137c737
MD5 b7a571895fa89a29cff9c249b41c9b07
SHA1 93251b6d19ee0b4ee9c08bd8bbddd45efbd7c8a7
SHA512 cfa5a3b95972a3dabeeb020b6ed903b5851e43dd779593e8eb9585d3b19db98cb298bb92832291e3b9ba227cafc986510b633661897af6bb4a4f047e93dd8121
SSDEEP 192:sxRyRybS/fGsODHRh+zoA8p4E/g6+WNIYEIbG7IgIJ:sxRyWS/fGs6Pt/5I/s
TLSH
T14332A715AE28A93B8CCBD21DBB657F53D7F95032A0901E48F6FD8A1C14E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b440f58561e996078a1d47fb58e7423e8bf6bfba0fe9a491b08cd5ce431eb304
MD5 92418430229d33aef13609538dd434fd
SHA1 76f84a1e03e5f402f789f92c10313e29f4e99105
SHA512 057289ee59e5846d9e8eff7356cd432978fe13de267a2c841dc12125a3377e47b237f444bddae0bfa6acace1dead224ab687812dd319de8a79d224f922844c29
SSDEEP 192:sxRJRybS/fGshDHRh+zoA8p4E/g6+WNIYEIbG7IgDVJ:sxRJWS/fGs1Pt/5I/L
TLSH
T13132A716AE24A93B8CCBD21DBB557F53D7F95032A1901E48EAFC8A1C14E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cb2a69a7526bdfbda8e59cf87826a02740bd806f14ac1581f4bcfb5ed14fd222
MD5 bbc14765ec32475303f8450281949a74
SHA1 3c2a0c2da722d29014710033848462ebfc556def
SHA512 0cf4b6dec4fdb90fad133463a3d7d457a73e144a4d9870b006852f0b0545eb230d480137b724017f62024296fb115315dfba94122b04b9d20dd818aabb45cadc
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXyroJeH:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0V5
TLSH
T17AB2DA2B640CCB7F4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9015a83a-a942-4de6-8ffe-41636a64bcdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9015a83a-a942-4de6-8ffe-41636a64bcdf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 72fb2b517b9c1d3605b73fab56c10f381c6a77bb1edd60a90c691a8733c70fa0
MD5 c579763631083899ea234d7c3e58dc13
SHA1 7d9d6892a8a1526afb668c1a67f015ee6282c18d
SHA512 e61b10d89608e9755cc7e46333d4b9e3554d8b96194c224dbf48298792889b2a4a2e0171ad1842fb207bc690f63f515c1c85a720b27ea352411e932b690b3482
SSDEEP 768:E/3lQhc7fZrKlH2p5XSwQs88uBkiT2XMgW+1j:E/3lBtrkIILNBKMgW+1j
TLSH
T1B8F2BF36FC9098B39CB2D3C27A4737166FF45143D4C80A9889DEA60E018B76E6747C6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 4e574cd746c8a6c04c8dc732fee0cd5e29192a2b74484f0033bce5a247581543
MD5 adfde6a8d59ea22075676079dca8d7d9
SHA1 c074585098ba08c44c96c379e7d05dc365692405
SHA512 e6b0203311ac6e358668c8c1ea56e83f2aa513ec83d8a439fea09a12747a369695b5c4623abb995e10ff4eccb04dc7f633cb39261f3b09b8408638cd2cad62d0
SSDEEP 768:w/3lHhc7fZrKlHPp5XSwQs88uBkiT2XMgW+1j:w/3lKtrkxILNBKMgW+1j
TLSH
T165F2BF36FC9098B39CB2D3C27A4737166FF45153D4C80A9889DEA60E018B76E6747C6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 4865a9541d51fd17ecd02bb3c312b80d42d8ac2fccfa2f19b6fa995c84f490a8
MD5 a2f82207618f9c1ea6d29f3f10428286
SHA1 ee88e8347a35fa9303c105d02ab99417b84b8971
SHA512 838734e851f4285069fc94c3596cd3934eba8a21b8bd56f34b1b5203f2992f2fa746199bf9093c33e2bb0e9677e9e5b0119da8279f29976f691bd8e4cf98f56a
SSDEEP 768:hFQS3xwggHhc7fZrKlHEYp5XSwQs88uBkiT2XMgW+1j:wS3wKtrkk2ILNBKMgW+1j
TLSH
T12EF2AF37EC84C9B7ACB6C7C1BA4A33165FF05193C4C8169886DEA90E018B7AD534BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7481eab9c60922f3ec32616358066feb0bfceba4c3a90863817dbdcbdd1b8276
MD5 325198544eb93fb5dfe08c4eb54a7d23
SHA1 0dd46525b5951af6527743630f5946d3ca3ab237
SHA512 60ce97886ba92635c7ff735e7c23952a0b97e1166f4ee2bb17d6ea8536166f19577f4ede341556c93c92797ad2cff32338095a2629a8bca0dd8d2bf18fca7a7e
SSDEEP 768:R/UxvxjgC+W3lBec7fZrKtp5XSwQs88uBkiTCdG/P84g:kZj3+W3lHtr6ILNBxHg
TLSH
T19003D039F8946873ACF39385365A275BAFF05153C4C40BA849EE7A0E028B75DA707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download