d0f7c451f7f3cb6698996516f68d836f6296fdcb45490feea660bc4522479ef6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d0f7c451f7f3cb6698996516f68d836f6296fdcb45490feea660bc4522479ef6.html
Size 6KB
Sample260913-dcs2yseb79
SHA256 d0f7c451f7f3cb6698996516f68d836f6296fdcb45490feea660bc4522479ef6
MD5 e58456859ad8a174daac707a8a865ff8
SHA1 32b0dd63ebcca960e266b61f81dc32e05df872e6
SHA512 299c75edac0f9bf62fb64624e67311aed613a9bacfc4638144ed090784dd36330cabf4fd08db4d30c890a2e9d724f345f1afe875aee2e59698d5ee7f8e7b19de
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69xEcE8XECgUdDhQoKDejCPJu:zWLJlxeWf80WhtKDejCxu
TLSH
T10AE1B55A9E4C853F4100059BF0A16A1CD8DB447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3332	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338315765163542"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{F587E480-9366-4B5E-95A8-5FE812C9A60C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
204	msedge.exe
204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe
5024	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 5024 wrote to memory of 692	5024	msedge.exe	86
PID 5024 wrote to memory of 3332	5024	msedge.exe	88
PID 5024 wrote to memory of 1696	5024	msedge.exe	89
PID 5024 wrote to memory of 416	5024	msedge.exe	90
PID 5024 wrote to memory of 1696	5024	msedge.exe	89
PID 5024 wrote to memory of 1696	5024	msedge.exe	89
PID 5024 wrote to memory of 416	5024	msedge.exe	90
PID 5024 wrote to memory of 1712	5024	msedge.exe	91
PID 5024 wrote to memory of 1712	5024	msedge.exe	91
PID 5024 wrote to memory of 1712	5024	msedge.exe	91
PID 5024 wrote to memory of 5164	5024	msedge.exe	92
PID 5024 wrote to memory of 5164	5024	msedge.exe	92
PID 5024 wrote to memory of 5164	5024	msedge.exe	92
PID 5024 wrote to memory of 4032	5024	msedge.exe	95
PID 5024 wrote to memory of 4032	5024	msedge.exe	95
PID 5024 wrote to memory of 5156	5024	msedge.exe	96
PID 5024 wrote to memory of 5156	5024	msedge.exe	96
PID 5024 wrote to memory of 6056	5024	msedge.exe	98
PID 5024 wrote to memory of 5996	5024	msedge.exe	104
PID 5024 wrote to memory of 532	5024	msedge.exe	105
PID 5024 wrote to memory of 1944	5024	msedge.exe	106
PID 5024 wrote to memory of 4872	5024	msedge.exe	107
PID 5024 wrote to memory of 4872	5024	msedge.exe	107
PID 5024 wrote to memory of 4276	5024	msedge.exe	108
PID 5024 wrote to memory of 4276	5024	msedge.exe	108
PID 5024 wrote to memory of 204	5024	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d0f7c451f7f3cb6698996516f68d836f6296fdcb45490feea660bc4522479ef6.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffec040c188,0x7ffec040c194,0x7ffec040c1a0
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,130301623543292756,7874757833857812493,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,13917454257959397699,15005135647361546460,262144 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:2
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,16251893509994317787,17352850985640672738,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=3168 /prefetch:8
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,17933000148417021325,8095318371134807465,2097152 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,8060320422223364679,847020293088349007,2097152 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,11418443509120314553,2684428679222172973,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,7169096169431646289,5900776502842364389,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,9024144235431489448,657801631648253401,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,9024144235431489448,657801631648253401,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,11393543468064410185,7585728565071207415,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,10030392817442821665,10506223767276760765,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,937403829340499846,998390828530163171,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,17071425012122862454,9732012920753695874,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,6473583854565018544,16806571981458708164,524288 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,12761158514995583706,9285911440132880100,262144 --field-trial-handle=3128,i,3336394870393893035,6831662589647973339,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b27e1cddaabfc7960ad62182c9290fbf1102f29dea3089e6766135c93e8b100
MD5 30c5dfe91b563eeef443da7cae9e7496
SHA1 6b2877685e6199aea371dfbe5ea75fda25d25f1c
SHA512 2057dfe19d994b7491c75c4ac739b3c8c2c748762425c012d8792488c77604cd73d247b09d9d758daf7f772a36e3fd7175403932e24b3ed4589e56dde5bed88f
TLSH
T127E02B6AC911EC3F08FD0B7954940745FB10236B2A419C4B3B3E81188FF55364599C6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 713f3b8d544a37d596821c9b6134229c80d45d643df8b7384839e08edca1d334
MD5 26037bfb53c9398351e3e8cf3353d037
SHA1 8bea3a0a049ad1537cfb8d4036e43269cc4578fe
SHA512 9fd68bf2af0642bf28dabd36ff6c2e6e4830610873a0e0889f4e50e5c7aa7688cb14ef3ea0d880396696e4d1660746be467049530b7c54e9031cbf57bb2b824d
TLSH
T164419CF3C3E8866EC90156F0AA286E2BDE2D0955432C3D9AC9E4AF1B93F2471D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eec5382d838a8069e65ccb375152451ced10ed3e58612e976261c2b6c4f0b81b
MD5 70661329dd4d130af2fea3b1038fe337
SHA1 681622661701012ef6945a4096fa02401dc4c354
SHA512 fc545b06f1dbfb872e804d969eedca8650a902ac46ec2b5c5e90e6811d862fd0f2c422b72e29a099c1d1ea550454e0398780cb418124441266f9399662fa491b
SSDEEP 192:sxZiR8k4/fVs2QZLT8mzodpHuHW6+WNGYo12S4uIg5TtMJ:sxZid4/fVs2OEdOHbGaSPBtw
TLSH
T18D42D6196D28A97B8CCBE219FB55BF53E6F9503390911F48AAFC8A1C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 572af1f6966e5bb1234e1e008aa623358391331c4ab54f68181263d212bba682
MD5 9810843c7becb33129843fd3d4b12e32
SHA1 e3372606d71480c92357712367c3f4e1bf379566
SHA512 26851130f476d94539df6923635be72edfa1e5fb177e57e9502bef1a6101928aa9f172f46f8b613534d413eebfbaf2166aaaeee98ab57ed32dcdc6ae6f4273a5
SSDEEP 192:sxZiR8k4/fVsxaQZLv8mzodpHuHW6+WNGYoW2S4MIg5TtMJ:sxZid4/fVskOwdOHbGJSPBtw
TLSH
T1F032C515AD28697B8CC7E219EB557F53D6F95033A0911E48AAFC8A2C15EB6DD120340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d1ed6f21eac1b02adcb05cddbf37b824f448405854326ce6fa221952ee650347
MD5 07634281a62671cf0e1a1bddc7e210d8
SHA1 420b6621987c7b0cd6a1652126e50890424d916a
SHA512 2e4ad48919dc21caa5fb21177572f15fcbbe06aef16c0f5629a76368bfd5c7f5e95e4c690901a2fd1e320bfecd40fe7d05d903ac684559c8fd7c56c1d9ec41d7
SSDEEP 192:sxZiR8k4/fVspaQZLv8mzodpHuHW6+WNGYoW2S4MIgjtMJ:sxZid4/fVscOwdOHbGJSPjtw
TLSH
T18F32D715AD28A97B8CC7E209FB557F53D7F9503390911E48AAFC8A1C15EB6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 e54c70eae381b3ba8b7f018a5506aed074f26caa34ef71031f48caa8de69b7e3
MD5 be901da16b892e236eb1b3d1f0f6f524
SHA1 4de75b2b58b733e84fe5c6fc7cb92b33af9a5c2e
SHA512 226cf23c0b6584c9fa6ebe72c709f0f6bb9a98cfb01b87d0d3573b82bbcde0a057a9c3131878ff2175d061e7cbff85564b596c2013d871093a59415147fe9339
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgs:ST/2dXOJhJlpfnpp3tNXVrN3aJh9r
TLSH
T1D1B2125571BB021039FE291C91B59B2E168272733119E66B7FBD00B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 39929a0eb6d0cb5ec07a2215004d8a75e1d33f3054c29b39e50f24b55755d3d2
MD5 0c9e1ba933133f15d78d713b563e7c9e
SHA1 5b40d2f86ed333ec6371e909209fdfcc1ecfbebc
SHA512 5afe61451f0a77e77c831522a4a039343bb2b038e79052c0725ff501e8addb588b340a03e7207ea192bbcd0791064a31be4b32ca6518f03f2903124ff5f21169
SSDEEP 384:nwiFiZcI63sNj8TUNTUlI41aKMMbhwzWfLBCh7SUZ4mY5uhiYsa+VY5agL/7Izlq:LFQ63SwgBqUEBChf+mY5OiYhgnq
TLSH
T14EC24A32EC98C9ABECEB4BD5AB4A3603DEF44163958C9AD4D5D92D1D00DB59D030BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 38e19d064b52cb1bc52f9fe85984d6d4222b6ea00554de0cd49fedb8cd04efb1
MD5 cde5571b1cf123fe406cd5b06f007a50
SHA1 3858c187ed640da30244e07cbdd233599d4d1abe
SHA512 9ba36c50275245bd01effc4f41fbee1e76d2a44b75b70a601b3b16139e3a8a2446e15edc6ae7fc378cc6b57a35038d06babb007615e27d9b884b63fc80b37d6d
SSDEEP 384:nmiFiZcIC3sNj8TUNTUlI4RaKMAbhwzWfLBCh7SUZ4mY5uhiY7O6R2Feojh7Utg8:NFQC3SwgX6UEBChf+mY5OiY7TRW8Ia
TLSH
T19AC25B32DCA8CEABECEB8BD9A74A3603DEF44163958C9AD4D5DD1D1D00975AD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 09cb36e78b24ab38ad58e6d56ef9f4e9c69f13649548842fbe9c3ba367c9b381
MD5 c973a0e1680ab20cb2e6757a1a99b031
SHA1 3c2b9825ab8e90983b317ca2bf7e8e02d1ecfe2b
SHA512 485d96a3480b8c4f839598b9ff220500020d4ac0eb1c232685273cfd60c02a206427fdb989405a667161970a9d63f3d35b5f4125d56e268cdb773e4dc7dcee2a
SSDEEP 384:ngiFiZcIDU3sNj8TUNTUlI4RaKMAbhwzWfLBCh7SUZ4mY5uemY7O6R2Feojh7Ut3:7FQQ3SwgX6UEBChf+mY53mY7TRW8Ia
TLSH
T133C25A32ECA8DDABECEB8BD5B74A3A03DEF44163958C9AC4D5D91D1D009759D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 708fbf59c5d792c9f83ab226989566a48d48fa97481d60e7fe54432c86cf3d0d
MD5 d4d78cec8e7a1af90f24e24fb698c9b1
SHA1 8cad4822ba09a5e0c636f0a2ddc883fe722d3128
SHA512 f2c6d167cf099a73bca4d3139d5ed8798301b939fc915479f4899fc25d4c7886cc818fbe18416252b7a5b6719fc177bd6e8926e213ae9d406e8ddb8148d11ff6
SSDEEP 384:nUiFiZcI63sNU8TUNTUlImFaKMiZ4wzWfLBCh7SUZ4mYpFHsa+VY5agL/7Iz6o5:vFQ63BwgDMHEBChf+mYpFHhggq
TLSH
T189C24B36EC98C9ABE8FB4FD5AB4A7603DEF401A3959C9AD4DAD91D1C008759D0307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c9adc753539fa44b0d6d0b5d13cd414ba4fad886f992e32f0bb0b8ecbbbc923
MD5 edfc98de295ec53f095aa275e4b7ca08
SHA1 8cf549aab67c3b2edf1eb759544b19ced30784b9
SHA512 e0b0f9296d15280b7b26f89527a00ec6b337b66b427e2d82bb469132b0d553408608fecb39ff8df305f2278ba9d5f3b5125f0f57ffdf187cc98b501f7e4dc828
TLSH
T174412A5CA6ED1158B3B77E5AAFF6A86E44BEB8732E07C45D00110D8F0656A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download