243ffdf57058b6c782ebbe148d3dbb4177920a33fe1cdc87163e609ddd79ea34

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_243ffdf57058b6c782ebbe148d3dbb4177920a33fe1cdc87163e609ddd79ea34.html
Size 174KB
Sample260912-2zdsjsbd58
SHA256 243ffdf57058b6c782ebbe148d3dbb4177920a33fe1cdc87163e609ddd79ea34
MD5 56ccc32507f514396882b8357f48e677
SHA1 e290e3b42d62690105f2e27c20c1d038c3cacfd1
SHA512 8d604ca30d70f1aff667dc30a83a5fdaa8f3146fd4010a10d073fb7f42f3bf29e84b07d8e6a7c27d35f4861a921de5c65861790a98122e08abf8ffa511bebfbe
SSDEEP 1536:63dA1h06mIRkvW5PH/HL5gBpcOw5kdQqYnl63CrLn4mSMim9JCvGtbuDkecghaj+:63dA1h+IjtHOI5uPAfZtQcgh543c
TLSH
T15304E69661202CB6DF2255B2516B154B792E407BF84B04BCE3FCCEE23FE695E064272D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338383163171802"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{B64C1B54-49C0-4CCE-BFF9-BD54F20773AA}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1136	msedge.exe
1136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4892 wrote to memory of 4808	4892	msedge.exe	83
PID 4892 wrote to memory of 4404	4892	msedge.exe	84
PID 4892 wrote to memory of 1776	4892	msedge.exe	85
PID 4892 wrote to memory of 1776	4892	msedge.exe	85
PID 4892 wrote to memory of 1776	4892	msedge.exe	85
PID 4892 wrote to memory of 5600	4892	msedge.exe	86
PID 4892 wrote to memory of 5600	4892	msedge.exe	86
PID 4892 wrote to memory of 3044	4892	msedge.exe	88
PID 4892 wrote to memory of 3044	4892	msedge.exe	88
PID 4892 wrote to memory of 5432	4892	msedge.exe	89
PID 4892 wrote to memory of 3044	4892	msedge.exe	88
PID 4892 wrote to memory of 5432	4892	msedge.exe	89
PID 4892 wrote to memory of 5432	4892	msedge.exe	89
PID 4892 wrote to memory of 5348	4892	msedge.exe	94
PID 4892 wrote to memory of 5348	4892	msedge.exe	94
PID 4892 wrote to memory of 4428	4892	msedge.exe	95
PID 4892 wrote to memory of 4428	4892	msedge.exe	95
PID 4892 wrote to memory of 220	4892	msedge.exe	97
PID 4892 wrote to memory of 2216	4892	msedge.exe	103
PID 4892 wrote to memory of 1052	4892	msedge.exe	104
PID 4892 wrote to memory of 1852	4892	msedge.exe	105
PID 4892 wrote to memory of 4388	4892	msedge.exe	106
PID 4892 wrote to memory of 4388	4892	msedge.exe	106
PID 4892 wrote to memory of 1136	4892	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_243ffdf57058b6c782ebbe148d3dbb4177920a33fe1cdc87163e609ddd79ea34.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa4504c188,0x7ffa4504c194,0x7ffa4504c1a0
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,4236398620060955433,14409008400929497164,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,6335541229708114454,8579813427200803427,262144 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,17829051246148720799,17312414759001656030,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,4731045123871657948,11876605744210970603,2097152 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,8277085747531199804,16126381025123149686,2097152 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,10628418429886755740,13717864495729096264,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,12734708359969516059,16783565226715004376,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2402297207263005476,137191040637004537,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2402297207263005476,137191040637004537,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,13475993715530858458,6107697094944327663,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,10841614470304722306,18435599879532110506,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,4740868482645799946,16426426931073941470,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2768,i,15794322591300214390,6329020798961564988,524288 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,16247899253480293268,8996297618942731469,262144 --field-trial-handle=2312,i,7840808310115811513,1276061214194250234,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b27e1cddaabfc7960ad62182c9290fbf1102f29dea3089e6766135c93e8b100
MD5 30c5dfe91b563eeef443da7cae9e7496
SHA1 6b2877685e6199aea371dfbe5ea75fda25d25f1c
SHA512 2057dfe19d994b7491c75c4ac739b3c8c2c748762425c012d8792488c77604cd73d247b09d9d758daf7f772a36e3fd7175403932e24b3ed4589e56dde5bed88f
TLSH
T127E02B6AC911EC3F08FD0B7954940745FB10236B2A419C4B3B3E81188FF55364599C6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6409c5badd61014cf4668ed351d4cf880ec8a92ee6e30ba9e03d5076ba189d1c
MD5 58242ba3e9d65a2fd052f677f3d88418
SHA1 4d981da139e28febd6d27d71b2edce6fc8daeffa
SHA512 184ead6a0ac7abc8fd07d2c084d680619bebabb48ccbf1020284dbaddb3bdafc2839e6a426a3f62a143c84387d562ec1634ec121eddf9211c41a32b1d6faec40
TLSH
T1F3616CF7C2D8877E890156F4AB246E1ACE2D0A59532C3C57C8E4EE1F63E24B1D24169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0608be67b82657b7d9902b6e8458e601c227a7c8defa4ad3f22079e320b3da3e
MD5 05920fd23388162df781daa32976f3b0
SHA1 12e38786716fc9bce9cdd2ae190579da229e75cf
SHA512 7aa376b8a3a684530f6efffe28a7df58782ca211d1fe0b19e88ad828ba7c3e2e6bd0d6407ed6eadbc7f6af033fcee565fc6330fc3eb1444e58407853528c3fa3
SSDEEP 192:sxZ7RjTkP/f8saaQZLb85zodpH2HW6+WNGYoW2SBQIg5atNJ:sxZ7uP/f8sDOUyWHbGJSeEtX
TLSH
T11832B515AD28A93B8CCBD219EB55BF53D6FD103291910F88AAFC8A2C15EB6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 90a06ac25d74200b562ed7c5d3949e9120499ebb2408d1115c1378a0f72cf460
MD5 ca0c4453b46b23d0214f734e975449f8
SHA1 b7a3f752ca3eee7dcd1a6da9c598132b3935ece8
SHA512 f307b72c7243f3c4182d34675961dde8191068ca3f9c8d8dff3a3186cd678f3dbeebee2b1b0764795cf1c3d94e87b4eed1c55413d11e6e676c2d83d91d21cf38
SSDEEP 192:sxZ7RjTkP/f8swaQZLb85zodpH2HW6+WNGYoW2SBQIgjtNJ:sxZ7uP/f8spOUyWHbGJSejtX
TLSH
T1A632B615AD28A93B8CC7D219FA55BF53D6F9103291910F88AAFC8A2C15EBADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 53dc6bb41587d0ecd793011ae2a604d45c33dcb2fdbd097d8f2dff590ee797a6
MD5 da3ffc64e9d550510a9675ca49ee680b
SHA1 b77dc743b6cbe6bb2cd315e68735fa629eb39c9d
SHA512 953d24e939ba2550a01ffceec74100ee25ec01af31cd218ac7b99fcaf4952de717e4072841d4c1f2cc62f1af68a90f078bd6918500270fa14b2e7b1a87ae4c82
SSDEEP 192:sxZ7RjTkP/f8sQQZLb85zodpH2HW6+WNGYov2SB0Ig5atNJ:sxZ7uP/f8sQOUyWHbGoSiEtX
TLSH
T14C32C6156D28A93B8CCBD219EB55BF53D6FD103291D11F88AAFC8A2C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 5fe71bde0b384f5129af0c55c86a3805b315be8ad1b85ef242a17def6afcd0a6
MD5 cbc2d9966a97133fd8e9dfcd3343eeaf
SHA1 91e9db41aa1e4e38ac2d84b99ec8007269342d7f
SHA512 4d32105580370b230c1349eadfb754a0b5104cc125888ace5ed4fbd217763cbc0dd3cf3cee647c70ee3710e6ef6d21c7f45f8b042746acdf3e5e81404e1c5500
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdg+:ST/2dXOJhJlpfnpp3tNXVrN3WRF3
TLSH
T1C0B2221571BB421039FE391881B59B2E064271B33119EA6B7FBD04B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 c2eaf03be1cf1e9df598ffa5aa6794293d9205029f318fd2626cfe791fe1db08
MD5 d54b6abd76525f9f3d38bade89898112
SHA1 03f6b97c209a3d7da29cff21d6028712248c753c
SHA512 6b025ec3fd06ac4c595e56bfac93e448331dc0b31823688a5b79994e32be96e2cf3b5f6b64545c7a6694fd634d39a19304bd2632f6629673fca9343ff5d5a529
SSDEEP 384:niiFiZcI63sNL8TUNTUlI4uaKMCIx/w2fvBC50mvy1s2uv6i6XrgL/7Izqoe:pFQ63SwgO1xNBCm68s2Bi6XGt
TLSH
T19FB22972EC99D9BBFCEA8BD5A74A3A03DEE4411389CC9AC4D9D81D1D00975AD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 dd585dd95816133eda472404edca3e806d7d9aa6b0febe6525cec16c9315053f
MD5 e397dd298a00f8097960c7b4c47fbe8c
SHA1 1f110face4b9cce11efc96e03991943281943a9f
SHA512 b5c18bca9980aa3165ed9a133c8744f07d7610c110f072abd8c1f41a7c44dcaff8e55dfb35d71de9e8b254b98f928044b11f33b3e49f8967a3408bcf82ff7ffb
SSDEEP 384:nQiFiZcI63sNr8TUNTUlIm7aKMi74w2fvBC50mvy1sqF0sa+VYBRgL/7IzWo4:rFQ63ywgT0QBCm68sqF0hgHP
TLSH
T1B4C23932EC98D9ABECEB8FD6AB4A7A03EEF4015385DC96C4D9D85D1D108759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 c6f7bfe91cdedd717d921306fbb6ba62b4207feefc37a1208fef54d0843e4adf
MD5 c7c250439a04c8cd6089f937d3ca2dce
SHA1 7d5ce8c3bd7406503dac3fed20152ff3f372c9c1
SHA512 10c25368769b5cfd118da933a889330e93e3e45ea63f594f7f4b9536b02e8369381011ea9db08fc4475858aa9d7dc98640697f9c622648bf4d16736be659b940
SSDEEP 384:nBiFiZcI23sNL8TUNTUlI4taKM4Ix/w2fvBC50mvy1s2uv6i67O6R2Feorh7USg7:oFQ23SwgRrxNBCm68s2Bi67TR+ve
TLSH
T140C24A32DCA8D9BBECEA8B99A70A3A07EEF4415389CC5AC4D9DC5D1D00975ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 83564643fdc78bdcf55c2c0202f2e16cb4c4e0ddb4b44b46d2e6af99a45e8ea4
MD5 ce6809e1bc37c5f4676e2f2f70f83063
SHA1 ee1a44162a314fb8f3e752934c9e052529435a91
SHA512 db0fb223cb02852a845591d7e236dc78ad75f92d0e95e41f21b75fa853da407380bd5527788379fc8beae96d1d8e564ec4886cf8804dcc05839da6e67a69b122
SSDEEP 384:naiFiZcImg3sNL8TUNTUlI4taKM4Ix/w2fvBC50mvy1s2uvzm67O6R2Feorh7US8:RFQ/3SwgRrxNBCm68s2Wm67TR+ve
TLSH
T1B2C24A72DCA8D9BBECEA8B95A70A3A03EEF4415389CC9AC4D9DC5D1D00975DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e037029e3ab6bd60eeed7d4957aabb316f5ee7eceeb31a1d071922eee0c37a67
MD5 b599b4a148cab9f1da3daa252312b0e5
SHA1 cc2ee2d44075c3c46dd12891f2f7553875573e8f
SHA512 50fc86c9a953f966457382ed860773877d3f49a4b2d11922f378785390dce3bca1c36ecc4b50e3e34bc5abfa3c601dcdc64eec4b27bd432adf8bbff3e2629b28
TLSH
T11A411798B6E91148B3B77E5AABF6A86D087BBC372E07D45D10110E4F4A62E41CC71733
MD5 SHA1 SHA512 TLSH

Submit Download