37b071188367a66f12c11c75f41af30cb32c088084e5e8cdfed3a9c90c24ba83

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 19:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_37b071188367a66f12c11c75f41af30cb32c088084e5e8cdfed3a9c90c24ba83.html
Size 196KB
Sample260912-xvk9lsshkf
SHA256 37b071188367a66f12c11c75f41af30cb32c088084e5e8cdfed3a9c90c24ba83
MD5 e51ad5e30847c08ded9589d8ca3ccfe0
SHA1 4c7c5e1ddb2652eb0e690723e3fddb5020ee7def
SHA512 12efa7f9a04a86fdf27dbee8243866a15afe82ae82ef4ae2985fb830fd540fabe5e4798014d1717471fdba450a74f773b1033820f2ba19e4e333c124315435f2
SSDEEP 1536:m4JJx5cZvqhHs2BzrM7FtyENm+S22DDrXWsKa3B7FF/Iv8CgwWchk2J3h2BNfhj4:5ZUhW+WRWJ
TLSH
T11D147225F668D563831B5BBDB385B9F9DA88F85A8FC529F8F199A1403682CD3431034E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5688	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337138367933665"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{36E66D76-B940-4FEF-9F35-D014F3EB0C60}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2560	msedge.exe
2560	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5952 wrote to memory of 2620	5952	msedge.exe	88
PID 5952 wrote to memory of 1164	5952	msedge.exe	91
PID 5952 wrote to memory of 5688	5952	msedge.exe	90
PID 5952 wrote to memory of 1164	5952	msedge.exe	91
PID 5952 wrote to memory of 1164	5952	msedge.exe	91
PID 5952 wrote to memory of 3512	5952	msedge.exe	93
PID 5952 wrote to memory of 3512	5952	msedge.exe	93
PID 5952 wrote to memory of 3512	5952	msedge.exe	93
PID 5952 wrote to memory of 4856	5952	msedge.exe	92
PID 5952 wrote to memory of 4856	5952	msedge.exe	92
PID 5952 wrote to memory of 4856	5952	msedge.exe	92
PID 5952 wrote to memory of 2424	5952	msedge.exe	94
PID 5952 wrote to memory of 2424	5952	msedge.exe	94
PID 5952 wrote to memory of 764	5952	msedge.exe	95
PID 5952 wrote to memory of 764	5952	msedge.exe	95
PID 5952 wrote to memory of 764	5952	msedge.exe	95
PID 5952 wrote to memory of 1568	5952	msedge.exe	96
PID 5952 wrote to memory of 1568	5952	msedge.exe	96
PID 5952 wrote to memory of 1568	5952	msedge.exe	96
PID 5952 wrote to memory of 3976	5952	msedge.exe	98
PID 5952 wrote to memory of 3976	5952	msedge.exe	98
PID 5952 wrote to memory of 3200	5952	msedge.exe	99
PID 5952 wrote to memory of 3200	5952	msedge.exe	99
PID 5952 wrote to memory of 3028	5952	msedge.exe	101
PID 5952 wrote to memory of 2892	5952	msedge.exe	105
PID 5952 wrote to memory of 3720	5952	msedge.exe	106
PID 5952 wrote to memory of 5316	5952	msedge.exe	107
PID 5952 wrote to memory of 5080	5952	msedge.exe	108
PID 5952 wrote to memory of 5080	5952	msedge.exe	108
PID 5952 wrote to memory of 2560	5952	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_37b071188367a66f12c11c75f41af30cb32c088084e5e8cdfed3a9c90c24ba83.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffc56bfc188,0x7ffc56bfc194,0x7ffc56bfc1a0
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,9324928333890280133,1194170782527874908,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17837447661424150552,16779835808517767912,262144 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,16979553639983793632,17075445231510136864,2097152 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,9548760185989668446,292344723410802347,2097152 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,10341204121558272512,16512502012156895525,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:13
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,10314353178921656397,3851571110083379554,2097152 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,1976313160786447693,7593839007063050870,2097152 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:9
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,17456018758590102186,6532202153174189146,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,86120094513391601,7608939011786757471,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,10878870879024439840,14804804814575831775,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,10878870879024439840,14804804814575831775,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,4974854862353807316,4244603120938144640,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,4110464449574019052,5247295156305182266,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:14
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,17619939420837032385,396372793236550812,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,6238338063316924351,17830973355475487229,524288 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5172,i,2961711027691868999,17689247329968336934,262144 --field-trial-handle=2592,i,12941356195897826338,12351073775338736982,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2bd1945968fef0f03fe01ea544f7d89352946439e9a69522e04d012fa422d112
MD5 4cd53c9f81a4a75456cc52e27c577422
SHA1 f712a89effecabe5e6de793e7e6ed4a0fefc505e
SHA512 771d271e4b66096ee2d8eae13751d3ef12925bbe9b019c0fa916b1d0f3234ff61c01fad9639bd1e5e7897fef96ea958ccd4e1ad581d9befe8e194c2aa11f9ac7
TLSH
T14451B6A044D168B3EBB42731C1CE36E77E749EB556832E4712AADFFD6F467948001174
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a203.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a203.TMP
Size 2KB
SHA256 ae5c754dcf4d5a2247efc24d8ce94b454dbd107a021c9cc4630aa87a7565f836
MD5 7065e1253c425e1e04cf31ab10294220
SHA1 d68154aaf35ca603e0a369de4f057b3a6da21293
SHA512 e9b80d560ef8f7b62808da4ff72a40a75327781dc21607cdde8a296173ff5ecd77772f90c80323209638eb8e2c8e31e0ce599030a79a1150e3f3922b5df0e94e
TLSH
T1DD51B4A048D168B3EBB46731C1CE36E77E749EB556832E8312AADFFD6F467A48001174
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 effce9dc9baeabb20c0796e94e204a7bc0b9513368c4373d796a6d9818033050
MD5 eea208b800b15cc08208f23b3f29e998
SHA1 9b588bb25c8f781a95274bb49696cd7f3c95a7e8
SHA512 7b3266530e7d38509bc5eaa33b1bc35257b3a25f18cd03c7c981217516a328a63f9faecf4b27f3c4568a00bc23f737909cc7005e2d6a370ecc54bb8d47090300
SSDEEP 96:DwO2y0+nu0kVf0iejhnezBJeIb/ZZGZ6h5owJ:DL2y0+uv0iejhne1JeIb/ZZGZ6foW
TLSH
T11491CFF7C3E8477E8A1156F4AB157E2BCD1D0516432C3C5688E4AE1BA3F24B1E14169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fb037cc6a4657f905838db930fe58b5bb3309ef7505253b8031d869b9e337213
MD5 bf88b610baa7600a7d202c21ad69e931
SHA1 bac13c14c04f9b7fbc1b0f029e60f7e4a411052f
SHA512 84470298abc7978c17a59ea4d40e99d736bd3d98aa1bace08e239a78ddb77dd7c37483871fb52448c28e4f6e46a1a1246db5f15b7a38a4e7e9fbdfc22c5dbe22
TLSH
T18F31ADF3C3E8467D8A0156F87A282E1BCE2D0854432C3D56C4D49F5F93E18B1E28099E
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

bb4daa8f-7856-4c25-be43-863cc487b239.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb4daa8f-7856-4c25-be43-863cc487b239.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b1057d637adba092ccf8c7395990d6aa26dd86daf0f46c7578d9f55bd4f25476
MD5 69d7070e8e3902e3bf4f971dd4882c6a
SHA1 72866eda3e20b790d1a03c4a072ae648de37620c
SHA512 a3e2c5ac826edb2425c1673bd2844f92859822dc7f289402f82267b80780fceb02cb7104d393c1dc8d817ba76b2662b06a7993cdd8684ec4921cc5cce3288757
SSDEEP 192:sxRnRNbR/f/sfHR1hzoA8p41/g6+WNIYEvjG4wIgD4J:sxRnDR/f/sfUo/5IjMg
TLSH
T12A32B916AD24A93B9CCBE31DBB55BF53D2F9503260D01E48B6FC8A1C04E7ADD520781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 150f36dcaf6fe1a42d0f0b4ebeb5c10f2e3284a32ad03f86ab25c619d4cda6bd
MD5 60a13324ace5b288cb408d81ba9fef65
SHA1 a27052405156ddf18210ab9ebee77d190363267c
SHA512 6e6133cf3ca446e77e6ae65a58822ed6607bd2aa31688b051bc047a03cb5d22c6dd17c38fb4664c070de76e1ce9a1906c5105a37d15bf7c4be4664a76c209585
SSDEEP 192:sxRQRNbR/f/s4HR1hzoA8p41/g6+WNIYEIjG4wIgIJ:sxRQDR/f/s4Uo/5IYMs
TLSH
T148329715AA28A93B8CCBD21DBB65BF53D6F95032A1D05E48F6FC861C04E7ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a41ea4392e5d88fd170ce3a6ba13298545b5bfb6274be591ab93b2b6a951c1bf
MD5 8424e9de6c45eb32e6cfa4fb7fffa3da
SHA1 4f682bd82ffadc9411d44fee7178d193cbf80917
SHA512 a4b35be22d9f3ca4bb2c172182945479768a8c8cecd5fd6960fba515a3d5945616ea73daee438218d8c29d16058bcb9a50b24efdb906919bf26ae835ef11e542
SSDEEP 192:sxRnRNbR/f/sdHR1hzoA8p41/g6+WNIYEIjG4wIgDCJ:sxRnDR/f/sdUo/5IYMy
TLSH
T1F132B716AD28A93B8CCBD21DFB65BF53D6F91032A1D01E48B6FC861C04E7ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cdedc3563c96d6a101251a7e86c2b2dd89f4549ac8111c63a98bc5c28083df21
MD5 a8679366a7f73e737457d7bab3a5ecce
SHA1 1d641454874a2e287ec00a41dc39efbbc56d1c69
SHA512 cdfbd8b7346494fc4e3ba1a8ad25879eca984cff5f77049758b5d70c6a2cfc8bc7beafb44babe1eef7d339a410364894ef18e8465ee4aa7950e577778492afc2
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXIroJec:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0V8
TLSH
T145B2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3bc2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3bc2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 eae223021a35edc8c4b206a6d13ce2b5cfbd9bc5743a3a5f2a6f8727979f3593
MD5 dea8171edb196095b4f4c5a5318c24f4
SHA1 f510c8ae3975f9ebd553dab41b4f59cc625308a6
SHA512 d6aec7725e6da0a2e404564ced45d825da56f069fb161a45dcdb4abdf2cd4e0a2282d30ae03918dba86cf8ca662119d8289aa0f1d33b06a468a7c886da63f4a2
SSDEEP 768:KO3BU0nc7fZrKrHBp5XSwQs88uBkiT2RMgkRI:KO3BUztrGPILNBsMgkRI
TLSH
T15AF2AF35FC9098B3ACB693C27B5737066EF05143D4C80A9485DE661E02CBBAE574B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ce6b93e3973b8db5f9332609f425c7c20a1dc7ad590c0be293f4caef6b074b79
MD5 fddc30bbcbe0aeeb0cd74bbe8ff01e67
SHA1 654768f6e127e0ef78aa93afc46685b06ef5e1b2
SHA512 406cd75b5279259f9b39e263a7ca9118fe61471a8188922e863c3f57bbefc30e264faa7a38756bd70f25458304c6670c5ee78dd3c147a2408838b899408974d8
SSDEEP 768:K/UxvxjgC+H3kUmnc7fZrKrHRp5XSwQs88uBkiT2RMgkgy:PZj3+H3kUJtrGfILNBsMgkgy
TLSH
T1F803D039FC946C63ACB3A3817B5B2317AFF0515394C40DA84ADE6A0E02CB79D574B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6211455ad3245f8ecd425dbb54fb1990116481c5269f7802351bf81fc03000d6
MD5 69c04c37b22775c4d4de48474a6eee14
SHA1 2e53a09fc69e398331a65f981f1b5cb08c863122
SHA512 798e3a5a759d1cdc965b02bbda7568a9e3eae61069336cb36e9bb387fe764cbe85766ad6494fb1d089f302947dc4b1c1707b93e63178457198425df2f843f283
SSDEEP 768:wFQJ3VwgKU0nc7fZrKrHJnp5XSwQs88uBkiT2RMgkRI:jJ3WUztrGppILNBsMgkRI
TLSH
T1E8F2AE32EC80C8B7BDB697C2BB5A33069EF05193C4C81A94D6DE691E018B79D534BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 39341c7a782e55c094491909070ee52b77dd9f4b86d960c5fc40a180534e0277
MD5 7da28da0ae85ec363feda5c558caed01
SHA1 091f4877af44653ea058c5c4663aac62ef883a70
SHA512 f118ccaf0e6fd568f4df565447480670d99534c7754e50357e3b0462c5ba756962b54f7d6ba43dc3e83f0bf57d44ed6978dcfb6057a8ae87455ad46946a8fd3e
SSDEEP 768:R/UxvxjgC+W31Dhc7fZrKHp5XSwQs88uBkiTCc/P84g:kZj3+W31GtrYILNBFHg
TLSH
T18903D039EC946863ACB3A385375A275BAFF05053C0C40BA849EE7A1F029775DA307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce97f3fb-c32d-4155-bb7f-c1c75c2dd2e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ce97f3fb-c32d-4155-bb7f-c1c75c2dd2e8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download