49839f7bb42b54c632df81ddcce8b464df6610ba9002409ac59e45e0981fc49b

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 02:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_49839f7bb42b54c632df81ddcce8b464df6610ba9002409ac59e45e0981fc49b.html
Size 112KB
Sample260913-c1rncsbl8t
SHA256 49839f7bb42b54c632df81ddcce8b464df6610ba9002409ac59e45e0981fc49b
MD5 ebd90ba0eaba766b717e319728afd163
SHA1 56686ed001bb0151188fbd4874a74dcd2af5088a
SHA512 14f66c2885bb5956c80d00c4da4e550b23172ec02a98e3ecd281269bff1e0dbc3230a173af1596f9d3c0e080d4288c9f548a9799702ed4a523cfe026fdeef22c
SSDEEP 3072:YAFLKkMQtNQhzSek9ba9Av9Xdo0dooPYd9JuL6FS3:VWQtNLbdo0doVJo66
TLSH
T159B3C48701204CFAEFA45DB3459B486B3D2C1437AC4791B9E3FD8F972B52D6E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1264	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337403796561476"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{32E05E35-6238-46F0-A1EC-485B9A759D28}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4012 wrote to memory of 2616	4012	msedge.exe	87
PID 4012 wrote to memory of 1264	4012	msedge.exe	88
PID 4012 wrote to memory of 1108	4012	msedge.exe	90
PID 4012 wrote to memory of 1108	4012	msedge.exe	90
PID 4012 wrote to memory of 1108	4012	msedge.exe	90
PID 4012 wrote to memory of 1696	4012	msedge.exe	91
PID 4012 wrote to memory of 1696	4012	msedge.exe	91
PID 4012 wrote to memory of 4860	4012	msedge.exe	92
PID 4012 wrote to memory of 4860	4012	msedge.exe	92
PID 4012 wrote to memory of 4860	4012	msedge.exe	92
PID 4012 wrote to memory of 4148	4012	msedge.exe	93
PID 4012 wrote to memory of 4148	4012	msedge.exe	93
PID 4012 wrote to memory of 4148	4012	msedge.exe	93
PID 4012 wrote to memory of 2708	4012	msedge.exe	94
PID 4012 wrote to memory of 2708	4012	msedge.exe	94
PID 4012 wrote to memory of 2708	4012	msedge.exe	94
PID 4012 wrote to memory of 4292	4012	msedge.exe	95
PID 4012 wrote to memory of 4292	4012	msedge.exe	95
PID 4012 wrote to memory of 4292	4012	msedge.exe	95
PID 4012 wrote to memory of 3920	4012	msedge.exe	97
PID 4012 wrote to memory of 3920	4012	msedge.exe	97
PID 4012 wrote to memory of 4568	4012	msedge.exe	98
PID 4012 wrote to memory of 4568	4012	msedge.exe	98
PID 4012 wrote to memory of 3380	4012	msedge.exe	100
PID 4012 wrote to memory of 4844	4012	msedge.exe	104
PID 4012 wrote to memory of 4808	4012	msedge.exe	105
PID 4012 wrote to memory of 4516	4012	msedge.exe	106
PID 4012 wrote to memory of 4004	4012	msedge.exe	107
PID 4012 wrote to memory of 4004	4012	msedge.exe	107
PID 4012 wrote to memory of 5108	4012	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_49839f7bb42b54c632df81ddcce8b464df6610ba9002409ac59e45e0981fc49b.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff9738ac188,0x7ff9738ac194,0x7ff9738ac1a0
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,14731710267717080621,5606707098323648449,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,15360321061761790704,1979798386757916013,262144 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,15169522313002053811,15037717399621697115,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,8939770645656653669,14418372496536911609,2097152 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,10117707967666810921,17206433774489010728,2097152 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,106686188322477727,8447650279424133119,2097152 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,17778777187666987242,8351048625375876976,2097152 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:9
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,2378665699167684301,4563475805536575822,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,7595607785609149785,6672376322966736727,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,17020302465782110783,8197547170935693031,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,17020302465782110783,8197547170935693031,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,2414997666560464750,10133176635845131625,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:14
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4796,i,18295940065861649479,18346864419430488213,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,14223781757305177131,3595484218037154837,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,4336380883391288400,9119197408473333887,524288 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6632,i,2729779753727891860,13634415477210979376,262144 --field-trial-handle=2676,i,13354701089778234611,18194920025395096900,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c01b28a7bf31adb57de1a487cd81bc811e8f3cbc3fc979b49a1b65919f563dc5
MD5 58082e9770125f103c6417800351caaf
SHA1 b5ce2d70dbbf05df08045be9899c9d4f0c9e8002
SHA512 4ce85721374af3671392f0724df63da150df12f2bb46f3ddd9288b8fa15f376217fb8ec5cb89d716e368a62e008f62e4d683578ec63946dbd3e187617dd76b5c
TLSH
T17D619484DE945140FF6F84B0D5D93CBB3AB583C98D8B2D43A2D4D4FA78027268BB8008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5960c4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5960c4.TMP
Size 3KB
SHA256 a95177332e9a2342069b0b603abe5964940966ef8a8d2d3e48b693acb0cf47ad
MD5 59cba7921828476fe25e3ba0fbb0771d
SHA1 1d01f9f94a0b436fa8d4736a3a1c901549078a95
SHA512 7faa6cea5ed1daf42ba7455ee608b65dc57dff3c7e2a4fe1aa77fd66eda1637ac1c7b1946e3fbb44c948a18617ffd3e546b93d4e826b48fb3432f48895529fee
TLSH
T15F617484EE945150FF6F84B1D5D83CBB3AB587C98D8B2D43A6D4D4FA7D067264BB8008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 037a462625064d0b555115c30e0aa06780613d2e14682acecf794827e3362080
MD5 2a17f54e1c4620e63e954c53e85ef9b9
SHA1 b9c208c779c2847cd742582aa6099db8ab25d91f
SHA512 18284df705d8a56c79252423eba847b730d0369fc0574b0142e33f490fefe32fd4ecd47fa6681e6670526ca7cffad8357232fa49d6a681534483822179b72257
TLSH
T15B519EF7C3E8867E890156F4AB146E1ACE2C0916532C3C56C9E4AE1FA3E28B1D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ec70c588f171fcc371a7d87c044daba24025bb0bc7ff3de354e275e28fa324d6
MD5 f43e5d363275119c4c903845d3b319d6
SHA1 731117b9cdee30f5de632c5e6f394c1f0a50280d
SHA512 baea2845014aad4c8d363f0e5b1b0f5d0db3c271ed8d51caed82226bc422178b6674c3e584c641b41d8c9329a7ce8765536781930341fd8150acf65f6c4fae9a
SSDEEP 192:sxRmRnbz/ftsBZzoA8p45/g6+WNIYojBGJeIgIJ:sxRmVz/ftsBkU/5I+Ws
TLSH
T14E2296156E68A93B8CCBE21DFB65BF53D2F9503260D51E48E6FC862C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f16977a6ef14c7e78c737bb5ade72a90830c0c7e9eb72b995296605c4ec0b4e4
MD5 5b6c80b5bbeda5692d256e1517e0462d
SHA1 988cba543e582e2a189fc794e974aa99f95f3e45
SHA512 5201c2f4ab1b9a5665826518a2b595fadbeb0333940281527f2f3907cd0bdb965ca704df4f90c64975c13e63c09237d3e3a5a6f6f334a8839d75bdf0a0e69cea
SSDEEP 192:sxRFRnbz/ftswZzoA8p45/g6+WNIYopBGJeIgDZJ:sxRFVz/ftswkU/5IsWH
TLSH
T1FC329615AD68A93B8CCBE21DBB65BF53D2F9503260951F48E6FC861C14E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7d6aee0d2ec121a13ecb9c1cc2fea25cba0b4860376c0a878a6da022f784a1f7
MD5 f91c9aa4949624863227d3c12bad45cd
SHA1 bee8d919800328024b5713b604b089c921305932
SHA512 fd8802c7a59043fa39e72b445575553ad5ce018aff8bb0d638d7ff3faf86f3b8df8fdddaefd40b175741be7a7c6040566892e8972ee62f4028a2ba69835794e6
SSDEEP 192:sxRFRnbz/fts8ZzoA8p45/g6+WNIYojBGJeIgDHJ:sxRFVz/fts8kU/5I+W9
TLSH
T1EB329515AE68A93B8CCBE21DFB65BF53D2F9503261951F48E6FC862C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0fb46dcdcaee9e8dac58cf83f4e17aaf158d85be0947c58b4568e7a32fd67c0d
MD5 46986f1903c2705e423ec84bda2124e1
SHA1 10c436ff1a2089c78db9cb02074523259d0e295d
SHA512 f9ebfbe2f40088234e1d7b4f82721da36ec68e17a4e8cc415906721e071bc1207d85876298d470a93c65bd348f8b5dda72e3f6a7c7712c2f7d5d4a4e90faaf55
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RU5rondW:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VT
TLSH
T109B2DA2B744CCB7F4FC04A9D9C196FDB6D9802C796588D8047FAD94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5cd5ced0-5de5-4b13-b486-21c91f11576f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5cd5ced0-5de5-4b13-b486-21c91f11576f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 e9ee9769bad154eb39c87aaf89382f5a1a834dfefcde41d593d7eea7456b0dfc
MD5 945d0daf8af959dbcc966cbd66ae7068
SHA1 d9c099dbd81a70d70677624e8f33e6f822b58dd2
SHA512 a2fa7ca04bfb0813c9b19080e4e4dad1373071677b9315c8a7b3b795d9a441006acb7cf6fcefe7e5f93acee634c363499502ad2a7dd66d9b6ad0514f8a1a4264
SSDEEP 768:g/UxvxjgC+O3C8NiDOAUtbLI/9OA9at01j0iq00+IaimMgB6/:NZj3+O3DJCHq00NaRMgc/
TLSH
T18713BF32ACA49D779CE2B794730A1397DFF44663C2C96A944AED2E0D05476ED1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 37cf1da9ef69f364053aca5c718470b38559d40b57dd824dbc26c70b6bc37943
MD5 0d2b355ac0ab3006e7740cd07c93eda9
SHA1 c1a223f194215e671a750e01a56dab0732b1d9a9
SHA512 ce5ca4588163a97efe23b8df3b5e9530a6cac634cfdd0aff6021d0ed9687f481dcea623b802f70497935a942617ed21bb119533d582fcedb858a87145e3a0da8
SSDEEP 768:QX3T8NwDOAUtbLI/9OA9at01j0iq00+IaimMgBo0:QX3kXCHq00NaRMgu0
TLSH
T147F2AF71ACA19D779CE6B785B30623429FF45263C6CD9A80CAED2A0E04575EE1707C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 84de717d4f14c3acbe0d39bb622d4d443d97e209b2e3ee9d116a4dec8a483f45
MD5 7d8f83fd93f54324f111f133ce4605f9
SHA1 37a223ead6818c24178d11740e3545dbf5ec7fbd
SHA512 a75f0fb7c674c8cbf05afa41a4e7d848f04e9e5e518cdbd521fb2daca2e13cca82290d6e24ee4f67bab010ed2fdb7591868bf1177f71e963f8dc4204056aa857
SSDEEP 768:+FQS3twgW8NwDOAUtbL9/9OA9at01j0iq00+IaimMgBo0:VS3jECHq00NaRMgu0
TLSH
T184039F729C90DD7BACA6AB85B70A2352DFF442A3C6C9DA80C7DD6D0D00575EE130BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f09bf7fb7130c9a2ff6649e5953e425241ce42d0cbdb8c26e2cd52f30c207780
MD5 d0713d9ff1fb50271693dae25ad867e0
SHA1 bce59427987d353442c39a5b3192323cbaf902ee
SHA512 e130d5adbe29a9ca6ce3f3e2eb14888e07a8c43a9d65f5490193861bb30729303eedb1fae46c70faa744e4cd0e601115bfacddadc774776b03cb6941947d1993
SSDEEP 768:X/UxvxjgC+H30H3OAUtR/9OA9at01j0iq00+Ia2tSHxRz:KZj3+H30JCHq00NaqSTz
TLSH
T12203BF32ECA09D739CF6B384730A6397DFF45663D6C96A904AED2A0E01476AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fac5d1d0-6fd2-463b-9a7b-d10e61ff0ad1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fac5d1d0-6fd2-463b-9a7b-d10e61ff0ad1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/3380-165-0x00000160DEC60000-0x00000160DEEA1000-memory.dmp

Download