0bbce6889bdb0ae7f150c76bb6f3ef12a9a047b7558ecee2b451a3c3de59258c

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 06:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0bbce6889bdb0ae7f150c76bb6f3ef12a9a047b7558ecee2b451a3c3de59258c.html
Size 40KB
Sample260913-hhtb5avycv
SHA256 0bbce6889bdb0ae7f150c76bb6f3ef12a9a047b7558ecee2b451a3c3de59258c
MD5 4cfbfe2489ab0652521dd792f96f07cd
SHA1 e957b59eeadd8686748794cf06d8b9cb7066d3fe
SHA512 1c6e552604b39f151362cb2ae9859c4c4c9eb20a396240e4e06a2544e496653df32a432d5835e3341caf2426def594bb5e325de4d0da8148866bd4ddea29dc3d
SSDEEP 384:SJ5Mkw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ85ihcY2:kvw8hW8VgJG8yJM+ix2
TLSH
T148039374B8C222230133637D9BA79608FB74515B820653407EBC27EA1FF1964D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4684	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337554869548866"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{166D95F5-B88F-4777-8492-AF45A94C3FD0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 3200	4876	msedge.exe	87
PID 4876 wrote to memory of 4684	4876	msedge.exe	89
PID 4876 wrote to memory of 5116	4876	msedge.exe	90
PID 4876 wrote to memory of 5116	4876	msedge.exe	90
PID 4876 wrote to memory of 4648	4876	msedge.exe	91
PID 4876 wrote to memory of 4648	4876	msedge.exe	91
PID 4876 wrote to memory of 4648	4876	msedge.exe	91
PID 4876 wrote to memory of 4128	4876	msedge.exe	92
PID 4876 wrote to memory of 4128	4876	msedge.exe	92
PID 4876 wrote to memory of 4128	4876	msedge.exe	92
PID 4876 wrote to memory of 2868	4876	msedge.exe	93
PID 4876 wrote to memory of 2868	4876	msedge.exe	93
PID 4876 wrote to memory of 2868	4876	msedge.exe	93
PID 4876 wrote to memory of 6108	4876	msedge.exe	94
PID 4876 wrote to memory of 6108	4876	msedge.exe	94
PID 4876 wrote to memory of 6108	4876	msedge.exe	94
PID 4876 wrote to memory of 1624	4876	msedge.exe	95
PID 4876 wrote to memory of 1624	4876	msedge.exe	95
PID 4876 wrote to memory of 1624	4876	msedge.exe	95
PID 4876 wrote to memory of 1552	4876	msedge.exe	97
PID 4876 wrote to memory of 1552	4876	msedge.exe	97
PID 4876 wrote to memory of 1228	4876	msedge.exe	98
PID 4876 wrote to memory of 1228	4876	msedge.exe	98
PID 4876 wrote to memory of 1512	4876	msedge.exe	100
PID 4876 wrote to memory of 2280	4876	msedge.exe	104
PID 4876 wrote to memory of 2668	4876	msedge.exe	105
PID 4876 wrote to memory of 4988	4876	msedge.exe	106
PID 4876 wrote to memory of 1528	4876	msedge.exe	107
PID 4876 wrote to memory of 1528	4876	msedge.exe	107
PID 4876 wrote to memory of 5036	4876	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0bbce6889bdb0ae7f150c76bb6f3ef12a9a047b7558ecee2b451a3c3de59258c.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffbdc18c188,0x7ffbdc18c194,0x7ffbdc18c1a0
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,1464758127188191026,2688986874987564214,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,1253914851078714642,1942869346437280899,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:13
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,6023695696926794643,17124913638003459077,2097152 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,7028165332877117702,6662272815113371646,2097152 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,5866495676856572696,12693156060790786004,262144 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,16596743828352442437,18255369318772347420,2097152 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,17327002994402161976,1177422938318307955,2097152 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12900329061143217501,10226598576376614333,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,10508882359073004279,15400551849665676804,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5144068973078716919,2567043288748964570,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5144068973078716919,2567043288748964570,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,2598079331541275100,15180304450595388564,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:14
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,11121329064537565029,18046099568180038763,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,7637259551369363963,12086782464829432947,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,12657167818085769166,7590035720266586317,524288 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,8560777128489033068,5432837618697550088,262144 --field-trial-handle=2884,i,11243876166086626456,8859345065221066420,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 18113e1afb4b1e404e63bd2373682fe019823e015aab57e647dd5a6ff4d9df9b
MD5 6a7da49f2f4e9e4be412ef79acebffff
SHA1 52b3152b80d5b2f40cb6d9b4d3717fa264233927
SHA512 90834e40d564df13b17de0ec11b1a5aef342404651c850511856ee04f56ef5b57abaa24143e1904f09bfd68b1148c205d5cfabd4093295543978fa51790bd660
TLSH
T1036161C06F13B0E9FB9B2174F4D11CC33AF453CE7693BE221298D6B86A66365AC640C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595cbc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595cbc.TMP
Size 3KB
SHA256 71bb10ebde3a07d9da4504b2378cb5fede7d08e076183e3aac0a5b9f817a1010
MD5 1fbbc6df8a3b20599170c62cea723185
SHA1 a9a1f2b839f78f263a9799d93925752bf8495545
SHA512 8561d58a586625c0d27aa158f03c5462e310eefc3219416f7540b453fcca08fa14ecd0a23ef6153bbcf10d4e36ad786780380987c621e089b1f7e43622d71a84
TLSH
T1076162C06F13B0E9FB9B2174F5D11CC33AF453CE7293BE221198D6B96A663656D640C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f8a4bd8a4b52dac81a3af56967d6e9c5d746a8298c742190adad551fa2ff372b
MD5 15e853f0ae7727f33c9c01021441fcd3
SHA1 0ec7d8be15dcebf27cac54227588ab597c3f59a2
SHA512 dc47c52f8978380181584f15bef38319c1c26177418dbe8670df5e9bc0b5c9d41987ff25dcae97a444c50bf2e1fb0ab92f31a47391c42b8e4b4ef37e02bc385c
TLSH
T15A41AAF3C3E4866D890196F0AB186E1FDE1D0915832C3C1AC9E4EF6B93E24B1E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5e951cc17cff401862100aa0d9df932c931a8252b97cd49fa2e4c8d94f086ffe
MD5 5b61024a20287efc8d3216a2a402b1fb
SHA1 e8a5bd04537d8d6a7f0a18070b30d43f81eefea0
SHA512 acd981c43f9ed91e0a285ed63c262d70ae3f10272fab0a688d936bae0d31c29b2291f746f1b968d7221458914bc5abfd7b0ee610479583578a2c8e306a97e29a
SSDEEP 192:sxRlrbh/fBsZ8qQzoA8p43/g6+WNIYRLf3j3DGFIgIJ:sxRlPh/fBsOIW/5IEos
TLSH
T1CC32D705AD68A97B9CCBD21DBB667F53D6F95032B1D11E08B6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f27b6356269f27d699729f007c03c8ffe74f9b409e370c936506c808e00c51d6
MD5 5adb63a463dc6903ec7a94bc93b76a5f
SHA1 b1675265c1259113ddae391210e92cbddec9ba9d
SHA512 115e772ea659aa62c5dcbf929d47248b05ccdae5a4cfd714101af6d853c903dbb234a926577364464b16062d441f3c0ca674ea9bd8e756a4a7a712cda9b96985
SSDEEP 192:sxR+rbh/fBsgTqvBzoA8p43/g6+WNIYRLq3j3DGFIgDmJ:sxR+Ph/fBsePW/5IXoO
TLSH
T17F32D905AD28A97B9CCBE21DBB567F53D6F95032A1911E08B6FC861C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 164bcab08ef0be6006e3d16bb930538a9340cb92b70ad67689d5ac982367495c
MD5 b274bd4a3e7b368e3446e6e2fefec321
SHA1 e487e96e0e60f9439df44dc2ea597b11375a40e2
SHA512 1319806f7a8450736312ad3691f6fce78b701c7e22ce12ed7bf90c82a0976d8c0f1c6bbe24bae383e2e2552a86effa2bdedf43016f369420c8e1c1bff66a669a
SSDEEP 192:sxR+rbh/fBsg8qQzoA8p43/g6+WNIYRLf3j3DGFIgD0J:sxR+Ph/fBsVIW/5IEo0
TLSH
T1AC32D805AD28A97B9CCBD21DBB667F53D6F95032B1D11E08B6FC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 61c703700b3e8266d2f8d6a6f74be6e71a3eb283925823bbd48c1b2d11bd3983
MD5 3742aac1411e94e7949c0337fa65feb9
SHA1 af68e57130a4f9006fc8719aeff86a7710f28698
SHA512 1e55d3efd6f76aef3f53e20c80ccadc892d8e837964a501f74273d44c20d3533f7a4def78dcdf37bee6e70f8e01b8d90e6e440198b6f308fc290cebbed30d9d9
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkYroqY3:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0V3
TLSH
T19BB2DA2F644CCB7E5FC10AAD9C1AAFD76D9802C797548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 7ca8f0b8351ecb3afe4f3c42645a81c8331b883fe7391aa23e2623b9296d47cc
MD5 4cd4899eb6d8be5e3a30d551c23b8ec7
SHA1 2bbd8fee58dd5f4e679332b9ed73bd62277606a5
SHA512 86b83cff0afe4862fcf9939d14e2709f36372ea3c3ef8e3414a159142300dde6803caa59d1e37a730b6aa97aa105806de830a8a7d579c9ffdcf7172bcfb9ac1b
SSDEEP 768:O/UxvxjgC+z3CoXwOhSnT5fgGM1TnXMqOaCAaeX:DZj3+z3Ktfgt1TnxOlA3X
TLSH
T14503B036BC596C279CF2D281721AA253AEF14463D6C51DA899EC7E1E06CB35E430FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 55ef0fb60c9fa90db9ad1104fc763e5fd763a3bd2431a113c930d61082964cac
MD5 0275fa163aadfe611d3cfd2ef50e1033
SHA1 4bc8ff7e91e73a7250bcaf01dbe5aad8592157a2
SHA512 3b5365de27349c3b823d9bd89ed754c622539f563f7e89e03ecb419f26aa9d767cb103a828fbd072ca3f620aab896bd586e2d365b38784bb75fe1b39075c4dfb
SSDEEP 384:YZcIq38NaovV79FWVDfKAXOVrXKXnT5h19hgGRSp14gB+EgH18nbpOfErluZUO61:mq3qpXwOhSnT5fgGM1TnXMqOaCcTRBZ
TLSH
T179F2AE32B8559C736CF3D285B21676126DF28153D6C91E98D9EC7F1E058B65E031BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 71139f1372be74e7df9731aeebc297bd7e8505f971ad42ecae18ed9e8ed19f7a
MD5 f3d248e51db6a2bf3c9b6d285458d0dd
SHA1 ea0f5600c8e41ce0da123d09e6cba561a1288b93
SHA512 1d2be6aebaf4e40c9a4cdd552159a876f9465c5b8ae3d236d024e2428fc59d36b0d153cb204d329cd81fb502d2b8f9bfc14a86a6b130100103c7a7d74923f793
SSDEEP 384:rqZcIp38NaovV79FWVDfKAXOVrXKXQ5h19hgGRSp14gB+EgH18nbpOfErluZUO61:Up3qpXwOhSQ5fgGM1TnXMqOaCcTRBZ
TLSH
T136F2BE72B8599C736CF3D285B20A76126DF24163D6C91E98D9EC7F0E059B65E030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a7473fb3b93db0ede92e03ba4f81637cf866b5c72c8b57b31d032ee916f81783
MD5 71c474d23252608599e07bebbb01c116
SHA1 0ff01a5f4db83961c47bcb6ab861086aa6a4b78f
SHA512 27c46b0c872fbeeb81d8cb9f37a18a885ee61eb100d6521aff588758a130b84635358ee4f8cb182e764312ae94cc95929c1e0fb748d63033678ec86458344b1d
SSDEEP 768:5/UxvxjgC+938BwOh0u5fgGM1TnXMqOe6AaP8:sZj3+93Vcfgt1TnxONAG8
TLSH
T14903BF36AC556C779CF2D384720AA396AEF244A3D6C51EA899EC3D0E05C735D530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download