65baa9be39cac96a91f2aeed7277f32c67a07e752a1343d5edd7bbcd78d4ba1a

Analysis

max time kernel
149s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_65baa9be39cac96a91f2aeed7277f32c67a07e752a1343d5edd7bbcd78d4ba1a.html
Size 6KB
Sample260913-ea5tea1dme
SHA256 65baa9be39cac96a91f2aeed7277f32c67a07e752a1343d5edd7bbcd78d4ba1a
MD5 e385c2f70fd9f14d25561846e88d0215
SHA1 1fe05636a078efe8ca9f461f66fd012167d94a5e
SHA512 2ff11c3db31e036f7227a75a5fe26ffa00715c6d36e1f7bb7bd3abbdbfa079603ffcc05bd2764f170544a68deb55e6894c259686609822c88fb7da57cbe27544
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69REcE8XECgUdDhQoKDejCPJu:zWLJlxe+f80WhtKDejCxu
TLSH
T1A2E1B51A9E4C853F4100059BF0A16A1CD8AB447BD316D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2160	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337447207234643"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{3C127B05-39C9-497C-9CFB-5DF553135475}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2704	msedge.exe
2704	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe
5132	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5132 wrote to memory of 2976	5132	msedge.exe	87
PID 5132 wrote to memory of 5480	5132	msedge.exe	89
PID 5132 wrote to memory of 2160	5132	msedge.exe	88
PID 5132 wrote to memory of 5480	5132	msedge.exe	89
PID 5132 wrote to memory of 5480	5132	msedge.exe	89
PID 5132 wrote to memory of 2828	5132	msedge.exe	90
PID 5132 wrote to memory of 2828	5132	msedge.exe	90
PID 5132 wrote to memory of 5960	5132	msedge.exe	91
PID 5132 wrote to memory of 5960	5132	msedge.exe	91
PID 5132 wrote to memory of 5960	5132	msedge.exe	91
PID 5132 wrote to memory of 4480	5132	msedge.exe	92
PID 5132 wrote to memory of 4480	5132	msedge.exe	92
PID 5132 wrote to memory of 4480	5132	msedge.exe	92
PID 5132 wrote to memory of 52	5132	msedge.exe	94
PID 5132 wrote to memory of 52	5132	msedge.exe	94
PID 5132 wrote to memory of 52	5132	msedge.exe	94
PID 5132 wrote to memory of 352	5132	msedge.exe	95
PID 5132 wrote to memory of 352	5132	msedge.exe	95
PID 5132 wrote to memory of 352	5132	msedge.exe	95
PID 5132 wrote to memory of 5420	5132	msedge.exe	98
PID 5132 wrote to memory of 5316	5132	msedge.exe	97
PID 5132 wrote to memory of 5420	5132	msedge.exe	98
PID 5132 wrote to memory of 5316	5132	msedge.exe	97
PID 5132 wrote to memory of 2036	5132	msedge.exe	100
PID 5132 wrote to memory of 6112	5132	msedge.exe	104
PID 5132 wrote to memory of 1224	5132	msedge.exe	105
PID 5132 wrote to memory of 1552	5132	msedge.exe	106
PID 5132 wrote to memory of 2712	5132	msedge.exe	107
PID 5132 wrote to memory of 2712	5132	msedge.exe	107
PID 5132 wrote to memory of 2704	5132	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_65baa9be39cac96a91f2aeed7277f32c67a07e752a1343d5edd7bbcd78d4ba1a.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffee5adc188,0x7ffee5adc194,0x7ffee5adc1a0
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,11629073696729367971,10387730342216980810,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,961614005751003291,756529309206395720,262144 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,4118330084283779447,7755267398324366050,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,998638911970461370,1034926715222454464,2097152 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,10192242757914455157,7689326483415122015,2097152 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,3366171358673071145,975574411810283780,2097152 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,9153051526260270188,6629734134418285631,2097152 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:9
  2⤵
  PID:352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,3262124939827289091,694955096953679937,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,11484736995587225751,13048621603485308966,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,15100015994032618307,1840272992010663355,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,15100015994032618307,1840272992010663355,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,11372279973183456507,12566942724939948385,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,17478095059013234123,3638427221600483529,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,14420920347403958951,15468881229072036742,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,1767169453938489760,5134823952235483796,524288 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,17107545178509772925,14168119718202409690,262144 --field-trial-handle=2632,i,399322658956136162,3125395730611687257,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c5bb6d55ed465ae0c2e2df5227cd7b0528763b53963e28c1eb9359090d60f4c9
MD5 289fe61c62e762e82fd8c906c0cfb873
SHA1 47f7739430e4aff482db6b900f14d4346ddf9263
SHA512 5e7f9a81bf5f7d329ebfd841d327cc9b207eb0e09b41e3f6f2bfa1f6fb531a91ddf3759431148b4d8032609f979948026bac69f4ff6c69b78d3012014be77046
TLSH
T1E961934161BF8862FFA839B298D0DC873D3845A1C1470E623D8CDDB85B3A3E662B855C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591340.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591340.TMP
Size 3KB
SHA256 812ae2a8bd62f9494428e4086d9de70480bf7db643a7ffdec7540bcff52337d9
MD5 3c35aa003784c1a4d6f4fb0f9379f9ce
SHA1 8c368d7cc19d509340205a4c32d318bb251ecd01
SHA512 b539b0779eb69800379063bfbd9e6b40e4af04338fd6c763ad8599f1826054cf27491d17800c10e53b0577d39356d2101846f90e31edaad1968b23caed1d0b15
TLSH
T1C961A34561BF8822FFA839B288D0DC873D3845A1C1430E623D8CDDB85B3A3E662B815C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4cba12255497a63df73a6a236c37582a52ff3d7a6991cdc4304177a1486e9d27
MD5 98800a43c27dd64b1906fec8df09d6d4
SHA1 19e8e4038c1229c5cf9ffc33bbd96006226c8865
SHA512 7327b9f406292023bb310c4794320deabbbd827c1f29992aa1981c65cea151ca2913b8b206f4b8cd41d62be26bbee4158253a1d535f9fdfdb7b01e1481d130dd
TLSH
T10051BCF7C3E8867E890196F4AA146E1BCE1D0916832C3C56C9E4EE1F93F24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 71d3f8b325581a17e38551df2e20c25f091c25ddb3306933709c88084865a156
MD5 d8a90b972d26bad034420e05cf76ef48
SHA1 34a2ba08f976121a5154aeb353250a927c042777
SHA512 9ae6e4e4ab2dc39a508cd3ba78ce6e5dbe940d594afc5a0d3eebcd7c85f5854985583098260d2133d159e21f5cc44afc762570a3d6559267745fd3c63e33dd9b
SSDEEP 192:sxRARKbA/fYsCqzoA8p4S/g6+WNIYotFGA0IgD1J:sxRAuA/fYsCnb/5IJ4z
TLSH
T19332A715AD28A93B9CCBE21DBB55BF53E2F9103361A51F48E6FC861C04E76DD121780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e02cee75814ddb95d060b9fbc13bc084ae0eeb8a957edbf1600f8062eeb7398e
MD5 86ea019d327174575e8973bfdb05eb51
SHA1 5e8135338c73d826ca19b57c50a4ee8a3a776887
SHA512 e72b4e6f4398f2ef2d9cd01d776ff73e680994d217eb73aa4fb1cf9a0ca8dcc0371a77f6a1766fce8501bd4b47152dc7b12076941d1cc97c38ab75711a8bd953
SSDEEP 192:sxRrRKbA/fYskmzoA8p4S/g6+WNIYojFGA0IgIJ:sxRruA/fYskbb/5Iz4s
TLSH
T1EE228615AE68A93B8CCBD21DFB65BF53D2F91032A1A51F48E6FC861C04E76DD121780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7f286a7c8aff07fa47092b6884274144f9c2dbae882b09cfd02f0268c6256a68
MD5 7c3339b20e1f04a23754512f1f5ffd37
SHA1 f4ba3ee7793ce80151f5e21b17f0df9492f50cf1
SHA512 11180c635721174a47c0ff17a9481fa5929374724a99836f12e14cff2a7a1ced7e0ae5d4e605fdcc135f6ef4bc109593e40fc6e57b7e8bbe37e5b916527141d3
SSDEEP 192:sxRARKbA/fYswmzoA8p4S/g6+WNIYojFGA0IgDzJ:sxRAuA/fYswbb/5Iz4Z
TLSH
T1E1328615AE68A93B8CCBD21DFB55BF53D2FD1032A1A51E48E6FC861C04E76DD121780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a8ed9d1a532d7c70b1aa51a2427b6e62c0f640b74b3247e99da7eab378ad58a6
MD5 a0a000196d273a745f9cacd667ad9057
SHA1 451ce66a624ed6bb9720d0cb31da43c1c9f1b750
SHA512 2a771cac277d2ccb6e733503c449e8e1f3c7fcaf0ed6ed89e6ffae1bed5d02fc05ab4a9e55fed0247e2589c67c94c1566ca5d3643e950c5f266519bd2e08d11c
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RU1rondF:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VE
TLSH
T1A2B2D92B744CCB7E4FC04A9D9C196FDB6D9802C796588D8047FA994C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 4f188c339deffb42885687461dea4fadb05add3f0b7ba2a109fc6896cb542009
MD5 74535c7c5a272179c7534a3c3aa47006
SHA1 2b7fbf5f8c4a36d9045d51d041539cb6ca00a853
SHA512 b79048b56e68f6c5637b6a04d0ec5da9e7075fb1a98ef18323a9fa922e95e8ae757fdf18068f4985b29166a03606c090292b826caaede771499b19dd62dd5cb4
SSDEEP 768:R/UxvxjgC+R33hBtOskc/9OA9at01j0iq00+IaiYGcTRM+a:kZj3+R33hoCHq00NanGcTRM+a
TLSH
T14713BF31ACB49D239DB7F654731A2397DFF40523C2CA69908AED2E0E054B6AD170BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ae09cf08f821b8d3bc0d90315e034ad5bb81f08824146b26453b53d662759073
MD5 1905c5010711ba1ba863a39c46bb879e
SHA1 c4c15fef93f32cd964ff0c3a6d336ce4440185f2
SHA512 7b0f3a892a1567f0c03c470272dfc3dd7d1c4a5e06a05a3d360e6d82365cf9709bd7e65b091e4406d1906a7c2359a65a2ccc0efcd34da4ebc06cd99a03011869
SSDEEP 768:9U33h+tOskh/9OA9at01j0iq00+IaiYGcTRMI4:9U33h4CHq00NanGcTRMI4
TLSH
T114F29E71ECF49D779DE6E28573163352AFF44213C6C95A80C9ED2B0E044BAAA170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e9b36bfe459f4ab7fc4ec35398155b2bf08b1543cef4b328edde161703c24897
MD5 adc95a5fd1086b9e7128bfe7b2e1321f
SHA1 7f4d929e178e7df45b23e5dd61366286670a4edf
SHA512 b3eddc2f7520294f8aab710e8818308fef67aa4a3fd754d14ba4f736549fed4747b6108789c4788c9ee9b19b8ed0f57ce24464b906853f162ebffb6b3a286154
SSDEEP 768:Sd30h+tOskZ/9OA9at01j0iq00+IaiYGcTRMI4:Sd30hECHq00NanGcTRMI4
TLSH
T10CF29E71ECF49D779DA6E685731633529FF54213C2CA9A80C9ED2B0E0447AAE170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2b03045c5eca1cff2531e2669c76af0d7e21a1cf21ec71c53613a37df5da9c43
MD5 6e8ad29229521f89e18928072e4fd5ed
SHA1 7f20963b27eb54b3583cad196913022def1d5f56
SHA512 52f590cb67f0f0e3a096b6e293769b6e39190ac6e7bd55a4bd39db049ee5e2a970812ef991b3845066a2862889fd9a0ae1d4d60e3949866a2bce8af3a20518df
SSDEEP 768:X/UxvxjgC+H3Br3Osh/9OA9at01j0iq00+Ia21SHxRz:KZj3+H3BiCHq00NaKSTz
TLSH
T19103C031ECA19D779CF7B284730A63979FF44623C6C96A904AED2E0E01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download