46d160c849bf3d2e12d746e1d08ca135aaafe7808201f59d70de7b5045290652

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 02:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_46d160c849bf3d2e12d746e1d08ca135aaafe7808201f59d70de7b5045290652.html
Size 129KB
Sample260913-degrpseb94
SHA256 46d160c849bf3d2e12d746e1d08ca135aaafe7808201f59d70de7b5045290652
MD5 a4560adddb00956e078a3b0d0ff394f2
SHA1 12c105607d1a9959b7d20d666cd27b54dabca314
SHA512 89aff0d81c17f655283e64451c44a20442c44d0e9e689c0401d62756e9ddb5c51936567d907f98773177d074006c619774f30e70a213d7685cfe6be6e08e3683
SSDEEP 1536:GPx4Yn+hwLsGRXeB1fkmtslcQGTtdNoLx+L0qbEaombEaoMNV1xoX6/mhc+i8m+8:EezQ0NtQqdomdoMNV1xa6/mhcV8m+8
TLSH
T143D3C69312204CF5EFF819B349DA096F3C2D1437AC0390B9E3ED8E966FA796D0349569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4540	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337417145260414"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{8CFC9E39-8971-494C-A94E-A40DC20119B4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5144	msedge.exe
5144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe
6036	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6036 wrote to memory of 4692	6036	msedge.exe	88
PID 6036 wrote to memory of 3236	6036	msedge.exe	90
PID 6036 wrote to memory of 4540	6036	msedge.exe	91
PID 6036 wrote to memory of 3236	6036	msedge.exe	90
PID 6036 wrote to memory of 3236	6036	msedge.exe	90
PID 6036 wrote to memory of 4316	6036	msedge.exe	92
PID 6036 wrote to memory of 4316	6036	msedge.exe	92
PID 6036 wrote to memory of 3324	6036	msedge.exe	93
PID 6036 wrote to memory of 3324	6036	msedge.exe	93
PID 6036 wrote to memory of 3324	6036	msedge.exe	93
PID 6036 wrote to memory of 5604	6036	msedge.exe	94
PID 6036 wrote to memory of 5604	6036	msedge.exe	94
PID 6036 wrote to memory of 5604	6036	msedge.exe	94
PID 6036 wrote to memory of 4344	6036	msedge.exe	95
PID 6036 wrote to memory of 4344	6036	msedge.exe	95
PID 6036 wrote to memory of 4344	6036	msedge.exe	95
PID 6036 wrote to memory of 5720	6036	msedge.exe	96
PID 6036 wrote to memory of 5720	6036	msedge.exe	96
PID 6036 wrote to memory of 5720	6036	msedge.exe	96
PID 6036 wrote to memory of 3320	6036	msedge.exe	98
PID 6036 wrote to memory of 3136	6036	msedge.exe	99
PID 6036 wrote to memory of 3320	6036	msedge.exe	98
PID 6036 wrote to memory of 3136	6036	msedge.exe	99
PID 6036 wrote to memory of 1692	6036	msedge.exe	101
PID 6036 wrote to memory of 8	6036	msedge.exe	105
PID 6036 wrote to memory of 3828	6036	msedge.exe	106
PID 6036 wrote to memory of 1356	6036	msedge.exe	107
PID 6036 wrote to memory of 4748	6036	msedge.exe	108
PID 6036 wrote to memory of 4748	6036	msedge.exe	108
PID 6036 wrote to memory of 5144	6036	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_46d160c849bf3d2e12d746e1d08ca135aaafe7808201f59d70de7b5045290652.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffd9e1ac188,0x7ffd9e1ac194,0x7ffd9e1ac1a0
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1856,i,11701384821339828221,14806060237138309551,262144 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,7568762344063433570,4827597938673303780,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,8953975518128833000,15136351925017197893,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:13
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,1574840719219157076,4594505076181932132,2097152 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,5789672208442781847,16809426682955194274,2097152 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,14255085277026050946,13176182281751134809,2097152 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,1825590071135596772,7441078719116315451,2097152 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=1848 /prefetch:9
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,12854782664359698328,9588957607214293400,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,13010276852589506900,14292320015342093652,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,2888376398372595313,7612466353747087220,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,2888376398372595313,7612466353747087220,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,800758765667631047,9808003920350472504,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=1396 /prefetch:14
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,6664627455687512039,10764970156902798237,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=1260 /prefetch:14
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1268,i,15195644588569446124,15968948085150132192,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,877784443738666443,2316886528159165542,524288 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6624,i,9445345457350522466,8417127061224411216,262144 --field-trial-handle=2488,i,10618494306662329235,961485706497397916,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 75abd5b3aaaf570448d38687ad5d1d7887e886ab30e0b4f76ab1b9b5155bbc1f
MD5 3ca8980c5d704fd0a9fedb276e4bfacd
SHA1 c481e6adecfff92ad6c9eeba004dd6999271a958
SHA512 ad4b9f21dee50d480d11f0c44e776042e8ebad712031cbc816a614c5d9420bec06db60f9dacfb7f41ad3c5a1287b7b51b79086a6cc83e8f8c108d06e2671591c
TLSH
T1B261C8851256004BFBAC60F090E1DCA73E37A78296839FF226ADD2F7995F3AD51DD048
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590526.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590526.TMP
Size 3KB
SHA256 46c38cae2738e556d56301b2b8b8f9d017e56c4871a8afdf9fcf49d1da82a502
MD5 3f93f5b43f8abfaf651029e1b6840e0e
SHA1 4d61fbbfd3895d9e2c84989d0eabdbc36e3d5aa2
SHA512 66497dd6133a4748970312cbcfa0d5a18eb8e6800ede528e8b5e870926e9bf85b5fcf3bae94c8e9627b904d802cf21079f97f5688ae062183ee1d54c89cb09c1
TLSH
T17561C8851256004BFBAC60F090E0DCA73E37A78296839FF226ADD2F7995F3AD51DD048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c21e475f2d5898bed58003a6d60cd19c61380d928b64b9bbad53439ce5dff49f
MD5 7708abd3382c85ffce6f6fb80255d1a9
SHA1 7ba521e107b0cafad38312ccb16bc166d49b0d8c
SHA512 010a4f4a942ea8601a035056930f6453826e4549268c6f69afc4e13aa92c01c24991a2a1d7ece3af543afeac0bf39f02f987056f881cfbb6129a8f5e486ac539
TLSH
T19C519DF7C3E8867D891156F4AB186E1BCE1C0915532C3C5AC9E4AE1BA3F28B1E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d425d620d06acd2ea6e1115d607dc7954dae481416e814985c1aac1b7c8af383
MD5 ee96cceb476c66c4767e303ec9d3ba0e
SHA1 19db9c0e39d407bc7dc9f8f35f89fac48cf27890
SHA512 b0055b621fb942320d15464d1f94ffa3b336999713e06b63013c805ef7a4d2c35953c9684515e1314dceba965abc0a3f150a6bae0c001188b876ecadac4df67d
SSDEEP 192:sxRyRKbF/fHsnqKzoA8p4B4/g6+WNIYRLf3jgGkIgIJ:sxRyqF/fHsnOf/5IEss
TLSH
T14F32B715AD28A97B8CCBE21DBB667F53D6F95032A1D11E08E6FC861C04E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c41ed3b2505eabd6da4feba7450aea9c1a79f8d9186b04cf28b3862fff45dbc
MD5 1dd130c9027350a2f9dd356ee3c2ffa5
SHA1 cf0ef1a4b839ffeb3314b82686e7e3166bba6dc2
SHA512 8506fde76554059cb44a3b0cf1f25002e2e626f0710947c353c5adabe3f17beea25e4f608baa35d4389c83da6e5f46af21067f3d0feab3173101bcc957b16b1c
SSDEEP 192:sxRNRKbF/fHsVqKzoA8p4B4/g6+WNIYRL43jgGkIgDNJ:sxRNqF/fHsVOf/5IdsT
TLSH
T14632B915AD28A97B8CCBE21DBB567F53D6F95032A0D11E08E6FC861C05E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7d9d2336b9bfa34a14dfc4808f334bd0259b3fbd6f6b8ba51713186febb08786
MD5 1bfc9a88d5fd2026bd64e695be2ea444
SHA1 89b01eb3b7cd7ee59ab3c099ef59b26d132c6af5
SHA512 8cc6485629a71a89be56cc78e9496390632dc6c9eb48e6c9e17a5c6d761022ff98026d661326670265aaa6b752e9b400ee9604e0d8bb785f079a54303d70c2ca
SSDEEP 192:sxRNRKbF/fHsIqKzoA8p4B4/g6+WNIYRLf3jgGkIgD7J:sxRNqF/fHsIOf/5IEs5
TLSH
T17D32B815AD28A97B8CCBE31DBB567F53D6F95032A1D11E08E6FC861C05E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f798eb1fa1e32fd3086363fa52b8d15bb810a464b9cfc9838af5ecf73d0345b6
MD5 2be60324a9179599269b90f5c98d30f9
SHA1 97476ded153f829fe5ee57c08c5905337541bae0
SHA512 76af93000fdc68f72e0c708903f02e7a8ba761f5277d7fd2f30408fcbde3139af2d259ea6dba995911a43b10208ec6ede701dd3a6f33e72ce476e7d658de6009
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkQroqYF:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vd
TLSH
T15FB2DA2F644CCB7E4FC10AAD9C1A6F976D9802C79B548E4047FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2758880b-fff3-4f07-b3f3-77868abeb1e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2758880b-fff3-4f07-b3f3-77868abeb1e3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 c0f4e1faf076f940b3440a4b79ae48d13f3714b60937ed313e6a034fe39d462f
MD5 6f90045dd4adebd201efc4136eddbacb
SHA1 1bee0661a9b1bea4eb478aa0513c3d1a2144fae3
SHA512 54a989e318b236c9b28d40ca10aafeca5d4f0e75f03bbb42cb45f436216b73fa1d0ece34a73c2240d8f87fa27bb2fd3a44760f4e0db512bc8ba9695c649231d0
SSDEEP 768:r/UxvxjgC+s3iuohAZwOdR1Ro5fgGM1TnXMqOaNcTRTxv:eZj3+s3AIRmfgt1TnxOucTRTxv
TLSH
T12013B036AC546C235CF3E285B31A6297AEF14463D5C52EA899ED7E0E09CB75E430BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0795677e18a6f6462328eb93a66de8b9f740dac0d6974c115e3e2585b394f398
MD5 ec852b7b42cac9551d57f58cf06e84c1
SHA1 16ddd4947c31268a6fad82aa3ddca4415597a769
SHA512 c95e4e819e7ce4fb5d24ed01bad181bfb30dd9481651b9aad2ab279c4c5fd8dc3f21fe08fe5a7499a0a324b17786cbab2b03d7a0cdcedbb20f0e023ce7aca06c
SSDEEP 768:n53PuodAZwOdR1RI5fgGM1TnXMqOaNcTRTpZ:n53ZURGfgt1TnxOucTRTpZ
TLSH
T101F2BF72AC549C735CF3E285B21AB6526EF14063D6C91E98D9ED7E0E059B65F030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e1085b343e4585e17b30ddb663ae44f7644a239ad2e7da726bc93caeaabdfdb7
MD5 a2a6c3f8f821d5c9b83c251daf6dc99b
SHA1 f9f809352c8b9db475227f74989fe90e096fbc5c
SHA512 feed4e8fe92ce66967f279f30c2eaffff53397a2031dae6f906fc3205f2920a97d6625cd1b2a4e9c70fd481d045d66172ccd0303322fb789926301885b610bd6
SSDEEP 768:GFQ/3HwgWuodAZwOdR115fgGM1TnXMqOaNcTRTpZ:N/3CUPfgt1TnxOucTRTpZ
TLSH
T118F2AE739C94D877ACF7D785F61A72526EF240A3C5C92E94E6DC6D0E019B69E030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c32e1ad69e6963915271a8f6974fb8be918f096358daefe1a3b49911b03f381e
MD5 1a4335c20f4f4299c8dccad59f390c5f
SHA1 20fc309aff18012d31f9143fb64db4905939cf28
SHA512 0c534b55768e7a2c084f5b1f4b9ca4cf26ebc55588f05457c462f01adb09c0d0c7adce037b887ea969d3cbf02f5228292e991b508e604209aabe82ce05ca42b3
SSDEEP 768:5/UxvxjgC+93WBwOd0u5fgGM1TnXMqOe2AaP8:sZj3+93rcfgt1TnxOpAG8
TLSH
T13D03CF36AC556C779CF3D384B30AA2A6AEF540A3C5C51EA889EC6D0E05CB35E530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e35a7eb-543a-4f5c-bb7c-02fc04055995.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1e35a7eb-543a-4f5c-bb7c-02fc04055995.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download