6718a06a65b58d818776b293089ded0db489b4ce360d9d807f1d2f609d8507e0

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6718a06a65b58d818776b293089ded0db489b4ce360d9d807f1d2f609d8507e0.html
Size 6KB
Sample260913-cb23ssde95
SHA256 6718a06a65b58d818776b293089ded0db489b4ce360d9d807f1d2f609d8507e0
MD5 3b1014070bdcb315af4208fef0113186
SHA1 095f9af23a6c702d88a1239f02dee4d22b1c8df8
SHA512 bc426ea0ebd0b6f2894c63349b09a2b6a93f89fc6ba8a6994c8b948ef5518f92c1c1d64aab3b59218a96bc41a4abd69513eaa4b0c0c5c0d150eaf892e19e318d
SSDEEP 192:zWLv15G5WDNlUeqmngZ1nZ69jEcE8XECgUdDhQoKDejCPJu:zWLJlUecf80WhtKDejCxu
TLSH
T11DE1A55A9E4C853F410005DBF0A16A1CD89B447BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1304	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338320985182108"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{21E38BDE-D1C4-40D5-B697-B4D4037E28FC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
556	msedge.exe
556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe
2584	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2584 wrote to memory of 5368	2584	msedge.exe	84
PID 2584 wrote to memory of 4360	2584	msedge.exe	85
PID 2584 wrote to memory of 1304	2584	msedge.exe	86
PID 2584 wrote to memory of 4360	2584	msedge.exe	85
PID 2584 wrote to memory of 4360	2584	msedge.exe	85
PID 2584 wrote to memory of 5268	2584	msedge.exe	88
PID 2584 wrote to memory of 5268	2584	msedge.exe	88
PID 2584 wrote to memory of 5796	2584	msedge.exe	89
PID 2584 wrote to memory of 5796	2584	msedge.exe	89
PID 2584 wrote to memory of 4076	2584	msedge.exe	90
PID 2584 wrote to memory of 5796	2584	msedge.exe	89
PID 2584 wrote to memory of 4076	2584	msedge.exe	90
PID 2584 wrote to memory of 4076	2584	msedge.exe	90
PID 2584 wrote to memory of 3168	2584	msedge.exe	94
PID 2584 wrote to memory of 3168	2584	msedge.exe	94
PID 2584 wrote to memory of 1472	2584	msedge.exe	95
PID 2584 wrote to memory of 1472	2584	msedge.exe	95
PID 2584 wrote to memory of 4460	2584	msedge.exe	97
PID 2584 wrote to memory of 4300	2584	msedge.exe	103
PID 2584 wrote to memory of 3424	2584	msedge.exe	104
PID 2584 wrote to memory of 3328	2584	msedge.exe	105
PID 2584 wrote to memory of 5332	2584	msedge.exe	106
PID 2584 wrote to memory of 5332	2584	msedge.exe	106
PID 2584 wrote to memory of 2600	2584	msedge.exe	108
PID 2584 wrote to memory of 2600	2584	msedge.exe	108
PID 2584 wrote to memory of 556	2584	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6718a06a65b58d818776b293089ded0db489b4ce360d9d807f1d2f609d8507e0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc2b9bc188,0x7ffc2b9bc194,0x7ffc2b9bc1a0
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,8908141557570404150,1371938090741348765,262144 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,12706108074882277677,10616887901046301904,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,5741047986417124021,18316459723390384550,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,11632315741192083031,13469479032278735480,2097152 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,3261168108854243521,11545643890275046749,2097152 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11160507971246596432,9346587030706854961,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,4043188451088623918,443134054319298467,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,16496790028481525557,3215431636743615776,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,16496790028481525557,3215431636743615776,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,2212844402213785432,14965463029787302186,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,3352131978410084933,5858485375201741265,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,1928811735693062950,5759623636608277333,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,8858325481427500566,8148359645087130290,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,151849581828890185,3649257586071433195,524288 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6024,i,12107322339428265669,1756972363720224737,262144 --field-trial-handle=2284,i,2988246131590010977,8474608571749907638,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9c9de74a2a295354225a1d7c8372b2d2a051210bd3485bcbe8ac84e538ecfab3
MD5 3e2e259a1d1ef3af58c0ff9c76ab0b8f
SHA1 dbb071773be8d29d97bf6ca9db86bb916756eb87
SHA512 f14f287452e2e4f314d05035fd31819dd87edb739ea59d12d11a079c230b34d4ba954a3ed4990f903e35ec273840dd9598759960ce6069acaf8d4e6bc5d83535
TLSH
T13BE02BE9CC16AC3B08FD571D50554641EB4113472B80884B3B3DD11E8FF1A36958A86C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2c40d5720af84ad9a20b7b7b56b627755641be894f0389cef1ab5fbf09189238
MD5 14465677fa2f0e09fb1020c0ae12b63b
SHA1 4f16d227cf5affcf130c2e178861068a82a4ade8
SHA512 ba0004b2f118ba6113758d738d6763ff68484006ca321d9ec5f4c35041a8574beb30e1a295e8c71326913c2f3358b70526b82d40d4da0d29bde04ca30ea1e3c9
TLSH
T15041E0F7C3E8866EC90196F0AB246E1BCE1D0955532C3C9AC8E4AF1F93E24B1D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5f693c608b0d8599f1d47cf2ed9b2f703e97b4fd0dcc5cbe0ace9acf884d8c47
MD5 c60e3843051259d553fcda98dcc1ac8a
SHA1 cbcaddd82ac660c328de83ac4f931010f078fc36
SHA512 8626ed3fbc7493a1325836c559481aee9b3ce8bd3f024e9eeffc0fe1a26e72f4c4b60421255d571d2021bf54e18de31b112a74b574204a0ff787e213876be049
SSDEEP 192:sxZXRIkB/fmsSQZZ/1GzodpH0HW6+WNGYbIZFYf+VIg5YFJ:sxZXNB/fmsSOZ/19UHbGF/YfG6v
TLSH
T1CC42C7156E28A93B9CC7E21DFA65BF53D7F95033A0941E44AAFC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eb7f833811007a432ae0f2c7a16d13ab17f4c2b0bd3b0314ab6958b7073d9b81
MD5 cda83d041966d4f2fddef7a9045991cd
SHA1 2cd64879afdec3ed9c1ef73d872ae756de5e6dd0
SHA512 aa9f2d02ab0ffdddb22a0544bf7b1e430ac578443ea314b69f508f358c70d5145bef7b388479ca31a40f57a360f4ce4eac51cd71c340685b9cbb55f668cad656
SSDEEP 192:sxZXRIkB/fmsDQZZ/vGzodpH0HW6+WNGYbIaFYf+7IgjFJ:sxZXNB/fmsDOZ/v9UHbGFwYfKjv
TLSH
T19132B715AE28A93B8CC7E21DFA55BF53D7F95033A0941E44AAFC8A1C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d82d4eddc26c01bc2749f71cd0bc8117f4d4cefa431ed29cacf43d50d833c6d6
MD5 c6360d83256851672cef70258b5dfae5
SHA1 5c1534f69492baa895dc50fab927ad9280daf53d
SHA512 87c3ce6b462b30e6cae8f31a8baf6c70df3173053ba665c782b202a593e008b57785ab8c0ac74c9e336856921355ecc31c8e37fd3df25cc7a7ebd5ae8c247c7f
SSDEEP 192:sxZXRIkB/fms0QZZ/vGzodpH0HW6+WNGYbIaFYf+7Ig5YFJ:sxZXNB/fms0OZ/v9UHbGFwYfK6v
TLSH
T19A32C715AE28A97B8CC7E21DFA55BF53D7F95033A0941E44AAFC8A1C05EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 62285ed35bac6e33085155c394a523302fe1a2be67edfc3eb1c9ed3a4fe70397
MD5 86809e72e9f750d41afeaf7a4b58594c
SHA1 ef023c7dc04d1fbe651c5c602afd11fe110a1176
SHA512 5b1451d1de407619185ff9c303882ef35b7191cee1e98727e5a734250e39f4189551c286f13bf9e104aa2728c6ec4acf43a8650a0ffbe9944e4bf9ec0aee70fd
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXYPja:OtfFvpopPxrB4RhfYLa
TLSH
T177B2131471BA021138FE690C81B6872F464232B37159E62B7FBD14B69E67F085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f5f672d33d8f29adfb5ebb241b2b7d38dc1775448b21b0ff37b18d5ac0c46ce9
MD5 eb2ac9fde941dab9792b1f779cde8eba
SHA1 fea0d6ae7436e66d977b23d6b3d3ea862894ab1d
SHA512 b87928af78598d0dbc0eb6cde629ec59c353c461c6773f7619d279d20f406a6f7fa45749e7e6ddabcb25822d1197ae44b450a67260ec9f3d02f753db79b95d9c
SSDEEP 384:nNiFiZcIFF3sNv+8TUNTUlI4S5mg9+aVK2fLBP7+ttARQaPHzol9Hxu7O6R2FeoU:EFQ33XwgodaNBP7+tt05cHA7TRk8
TLSH
T124C24C32E8A8D9BBECEB8BE9B74A3A47DDF4415385CC9AC0D9D95D1D008759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 e75aeca572d0bbda55e56fcd09dbd6a021ad405b6e9ac71fb0ce940b2d979460
MD5 bfeaf61409dfced9a41ef1a59a1b4830
SHA1 19ad729cf23d2374bb77b3c55ef04a44b7cf2457
SHA512 aee7e5ba0016a94598b5f827b539f4ddd8c9f66eebec55f5d1ea02163d665701e46d0925a237953246564ca0e98055f2526e596ed22ba5a1f3649e5a07ee1a0c
SSDEEP 384:nb5iFiZcI63sNv+8TUNTUlI4x5mgI+aVK2fLBP7+ttARQaPHzol/HxuXigL/7Izj:bQFQ63XwgfiaNBP7+tt05IHAXh8
TLSH
T10CC24B72E894C9BBECEA8BE9F74A7A03DDF44153858C9AC0D9D95D1D009B5DE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 a8f5f526c456ffcdd1d495a590595399ab2308721be103195a986064e1a73727
MD5 f869aa596146d783504837f86c659385
SHA1 e2bcd443d0a4e431f5c2c344df403a0cd77bb502
SHA512 5f524ce7405cc97173c53df847e8c1142d09c6c0af9917fec7f8dcf879fad9d91cf354872fe0a88e37b7fe81e89a4e1be0a71e874b52cf4cad80eb572aab0c67
SSDEEP 384:n05iFiZcI63sNO8TUNTUlImo5mg5lnK2fLBP7+ttARQaPHzoFH4c7O6R2FeofgLd:0QFQ63rwg0y3BP7+tt05aHv7TR3f
TLSH
T1E6C24B36E898D9BBECFB8F9AA74E7A07DEF41163819C99C0D9D85D1D008759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9af614b0d9d9168c7a84df4baa668ea56e416ea9247edf338b3da65e6fe78e68
MD5 9403fc4560f826a5cef4ef4d8d18ae4b
SHA1 0f0342f83cca56537e07a30913b5448fba1fb80e
SHA512 800668a085170598c0f6fc181e4a3bc39390e81fb39611763ef92961ad2e2161255211dddb0ac8c9c2cfe5c74046c344a495e4eb61cb95070c090e8f15bb4ffc
SSDEEP 384:nz5iFiZcIj3sNv+8TUNTUlI4S5mg9+aVK2fLBP7+ttARQaPHzol/Hxu7O6R2FeoU:zQFQj3XwgodaNBP7+tt05IHA7TRk8
TLSH
T1E5C24C32E8A8D9BBECEB8BE9B74A3A47DDF4415385CC9AC0D9D95D1D008759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 16f538efecf963a0f6c05e51d27d6fca2753f889008850cc2761170a440f3af5
MD5 3013638b0270e4a1807b67eb8ced2124
SHA1 cef2dee05bc38f7821e2812ec306837b677a5dd7
SHA512 68e3611a78c0515e2c0b3fdeed99228be55b0ddb1113cdb40fbc01f958f19500ae1167e24165e04302211191ef28d7f790b809818da40ec4a90f17918b292bc0
TLSH
T14941365DBAE91248B3B36F5AABF7A86E447A7C372E06D59E00110E4F0636A40C871733
MD5 SHA1 SHA512 TLSH

Submit Download