66550c30eff4ad58d8e621c7272ec273b40e4d168dec9301b827c17fca2106d4

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_66550c30eff4ad58d8e621c7272ec273b40e4d168dec9301b827c17fca2106d4.html
Size 181KB
Sample260912-ldhxdatara
SHA256 66550c30eff4ad58d8e621c7272ec273b40e4d168dec9301b827c17fca2106d4
MD5 1d16692b21acafd2b5b5b96d78ac4195
SHA1 bfb9ae3e53919e96ba5b3599ff6f88099f3ae97d
SHA512 e11ae02dce1c396a360e6d839ea67d0b1d1b9f2b880300e64d72d2ef3e1c129d3856b2aea53c04eb4fb11c3a7cb27e2f0dd196fa4b2e17ee1ff0e1214455cbf2
SSDEEP 3072:GUk11H9HHA+Xq94leeGBESlW6R5KpvztJqz:7mle/E1ztJqz
TLSH
T198043214818F5857BD92CCE923492C17E054F092DCE9BC54E94CA3A816AEE976FCE7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1292	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338182049902267"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{76D5E293-A822-4263-AB6E-540856454AC6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4912 wrote to memory of 2820	4912	msedge.exe	83
PID 4912 wrote to memory of 1292	4912	msedge.exe	84
PID 4912 wrote to memory of 796	4912	msedge.exe	85
PID 4912 wrote to memory of 796	4912	msedge.exe	85
PID 4912 wrote to memory of 796	4912	msedge.exe	85
PID 4912 wrote to memory of 5600	4912	msedge.exe	86
PID 4912 wrote to memory of 5600	4912	msedge.exe	86
PID 4912 wrote to memory of 2136	4912	msedge.exe	87
PID 4912 wrote to memory of 2136	4912	msedge.exe	87
PID 4912 wrote to memory of 2268	4912	msedge.exe	88
PID 4912 wrote to memory of 2136	4912	msedge.exe	87
PID 4912 wrote to memory of 2268	4912	msedge.exe	88
PID 4912 wrote to memory of 2268	4912	msedge.exe	88
PID 4912 wrote to memory of 3352	4912	msedge.exe	92
PID 4912 wrote to memory of 3352	4912	msedge.exe	92
PID 4912 wrote to memory of 5696	4912	msedge.exe	93
PID 4912 wrote to memory of 5696	4912	msedge.exe	93
PID 4912 wrote to memory of 1732	4912	msedge.exe	95
PID 4912 wrote to memory of 468	4912	msedge.exe	103
PID 4912 wrote to memory of 3432	4912	msedge.exe	104
PID 4912 wrote to memory of 5460	4912	msedge.exe	105
PID 4912 wrote to memory of 5184	4912	msedge.exe	106
PID 4912 wrote to memory of 5184	4912	msedge.exe	106
PID 4912 wrote to memory of 4224	4912	msedge.exe	107
PID 4912 wrote to memory of 4224	4912	msedge.exe	107
PID 4912 wrote to memory of 2184	4912	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_66550c30eff4ad58d8e621c7272ec273b40e4d168dec9301b827c17fca2106d4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa4504c188,0x7ffa4504c194,0x7ffa4504c1a0
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,17092056596141770464,11846733015309826351,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=1988 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,978864196577791670,13197542396478429003,262144 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=1892 /prefetch:2
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,9940272501739973792,13370284114730653679,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,10874594805439474002,14689356857314887965,2097152 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,365112537978910541,15728983631201249461,2097152 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,9170900777560577444,9457211992389472897,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,497866531742802553,3086536435042380726,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,2278021360710202688,4681291797049022116,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,2278021360710202688,4681291797049022116,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,10450080763442385428,2166502932232555717,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,4000997336583226046,10443259390955212960,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,4270988039115805364,16615159574238163759,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,1748530849950209056,8195116478544872855,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,9349817022786615020,18425549078689759112,524288 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6028,i,3727463036242833848,12311352131219950408,262144 --field-trial-handle=1888,i,11370159407092425866,16236134775389597164,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b27e1cddaabfc7960ad62182c9290fbf1102f29dea3089e6766135c93e8b100
MD5 30c5dfe91b563eeef443da7cae9e7496
SHA1 6b2877685e6199aea371dfbe5ea75fda25d25f1c
SHA512 2057dfe19d994b7491c75c4ac739b3c8c2c748762425c012d8792488c77604cd73d247b09d9d758daf7f772a36e3fd7175403932e24b3ed4589e56dde5bed88f
TLSH
T127E02B6AC911EC3F08FD0B7954940745FB10236B2A419C4B3B3E81188FF55364599C6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e60ef4a8e3c3bb5089a103057d8a4b8fb29257a2b847eccf88a669687bcf2b38
MD5 26ce13b2471f720e4adad3cde599826e
SHA1 6c835833c57e379010e3d5314d00ce056a58e123
SHA512 a56bc388a3582c0c5483a414c25f2c2ee7e391a77e9215fd46d7ce8f492073d9896ac1b9adfc4240743fb6d04c507c491813a84e24a8ab9df6ceb1a6842beee9
TLSH
T13C41AEF3C2E4866E890156F0AB287E2BDE2D0955432C3D5AC8E4EF1F97E2471D24165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b4500ef6869132c1d44aa4455ae52907a611feb337fb77249fc55c17b5d2f893
MD5 687d51bfbad875aae60b76f5992819ee
SHA1 146bee646ec2997e0011ad43d455374d777fef98
SHA512 bb7b27a7bec51a7dc14c9c08a672b3ee8b93d76a0b7929a70185d2564e83efb7fc5fd567a05e868d7cb6230ce3444a7f5b0b2b5228552d58b6a8cbf0b32000d7
SSDEEP 192:sxZGRxkD/fQseQZLT8FzodpHHHW6+WNGYoP2SBIIg5qtNJ:sxZGoD/fQseOEOnHbGkSaQtX
TLSH
T13F32D815AD28A93B8CCBD219FB567F53E6FD103291D11E84AAFC8A2C14E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1d6d02b873d14e0742c25fb82253667396ea94c8baf4b9b4235e513b33c82be8
MD5 97ef28a5c9f065864c679d6fcedfb262
SHA1 0aad1f1d4b9b8eca4a3818d964f3461604316e12
SHA512 19f7c6147e25c2bb9ccaf854d24b794c39d26eba6a4b014b38910488fa43f1734b55de0647f051f2b91e9f732a762d2a79f890d084be6c81283a38a1defec87c
SSDEEP 192:sxZGRxkD/fQsgaQZLT8FzodpHHHW6+WNGYoW2SBIIg5qtNJ:sxZGoD/fQsZOEOnHbGJSaQtX
TLSH
T1E432D715AD28693B8CCBD219FB567F53E6FD103291D11E84AAFC8A2C14E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0ca15b2c3ed07424eca1b4f184e4518180328bd6ee5362861eb18204c0a5d173
MD5 9db7d0e70a799b876e2cbd0ea30f12c7
SHA1 2ae37f0588f76daa874bc29a68f7b2c40b573f3e
SHA512 d4b644f7414bf5177b726f75dd2950ca129ea37fc17513158ce1de0c7c79923c71233732c360de7c0306741053de287cb12e0b68d40b84581b67545f6a713139
SSDEEP 192:sxZGRxkD/fQspaQZLT8FzodpHHHW6+WNGYoW2SBIIgjtNJ:sxZGoD/fQscOEOnHbGJSajtX
TLSH
T19632C715AD28A93B8CCBD219FB167F53E6FD103291D11E84AAFC8A2C15E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 88203808c23b836eeed959687de2c10579417cf517ea3f62c8ac94d3c2c8e341
MD5 fa2674e622e81568ca9d21fa2d1e7249
SHA1 33aa84f2580199a21475f126a5c4d731fa6d4eab
SHA512 ea0f331db74ee6e817dd2e38458cc942d3521cbed00b52bc759b94c9408858771219756805093c68446c076afedbac3b54f74891f9dc302b5a4994c4e84aea3d
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgf:ST/2dXOJhJlpfnpp3tNXVrN3WRFu
TLSH
T133B2111571BB421039FE391891B5872E068271B33119EA2B7FBD04B68E6BF085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9b19528b5def9b2293ad20c6810264448611627bd0faade806885d0b1ea78bc3
MD5 4f9f28f6baae98c0c9c150003c56a94b
SHA1 60c2572202cb067816441b010c2501d05692e736
SHA512 01a99804877dc2e01868d136ac9761d6c652607067cfd9cc1b19898ef6a219bbc8e4d24d05e4cb09a86a586e547da67b347d8393ad5e7e40f8d6aaed53e0faf7
SSDEEP 384:nwiFiZcI93sNb8TUNTUlI47aKMK+1Daw2fvBC50mvy1s2uvEia7O6R2FeorgL/7Y:LFQ93qwgBr1DmBCm68s2Tia7TRCR
TLSH
T1EEC23A32D8A8D9BBFDEB8B95A74A3A07DEF4415385CC9AC4D9D81E1D00975ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 fa94cd636d6bda25a6cbb960bd9cc6aabe434a7771678cd54d072a0b8f405994
MD5 3a78187e0af187796f45b76647ad03a0
SHA1 b570a61637a6f1f995655ef648832594b32b83ce
SHA512 843018157fadbba003ca419b2e432c35ad441562ff506f67419953a60d0e19536ac1f8fd89b4969e3551e20baf5cf0634bff7621daba0be385f1f4f61012020b
SSDEEP 384:nIiFiZcI93sNb8TUNTUlI47aKMg+1Daw2fvBC50mvy1s2uvEia7O6R2FeorgL/7Y:TFQ93qwgBd1DmBCm68s2Tia7TRCR
TLSH
T1F7C23A32D8A8D9BBFDEB8A99A74A3A07DEF4415385CC9AC4D9D81E1D00975ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 440fcd69b9252befba2472c0610c4b8c844f02f57ef26cd9daacdb5b5718a10e
MD5 58e3a796de64632d90d626017de57d98
SHA1 206dad8df1a166aef4c53737abd2f7b5caca9632
SHA512 ff28e2185f6b5e2ce1d31c467e5eb0f708305bfaab9fcdb8a8fbbb30e1b8f3b06bbf1d06d40bbba782d3a1f8768df99a289f461ccad62cb4051e92211c8d9f89
SSDEEP 384:nQiFiZcI63sNr8TUNTUlIm7aKMi+OL4w2fvBC50mvy1sqFBsa+VYBRgL/7IzWo4:rFQ63ywgT/OLQBCm68sqFBhgHP
TLSH
T17EC23932EC98D9ABECEB8FD6AB4A7A03EEF4016385DC96C4D9D85D1D108759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bb6736e0af77fda622789b05e31456c1ef1119e09dd03dbe09ac85dd81260ed7
MD5 1e5e3e6eb95db0017c8110182c459f27
SHA1 241c448bcd89865e0079f7b5fb0f8c73d58c69d1
SHA512 e803de1c13809614d0146272accc24e12fda54e6d6de59675cab93f9c09fb1e7fb7e7266dd605b793dee463cdad3a54235fcc6a7750e8ce3d510adfd8b6b7312
SSDEEP 384:ngiFiZcI7z3sNb8TUNTUlI47aKMK+1Daw2fvBC50mvy1s2uvxma7O6R2FeorgL/0:7FQv3qwgBr1DmBCm68s2gma7TRCR
TLSH
T1EEC24B72E8A8D9BBFDEB8B95A74A3A07EEF4415385CC9AC4D9D81E1D00875DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 66827f8b9b6df45e666b09f18193e0bb2517aca7405b406cb1f59bf6476472b0
MD5 ca726b6861d7f0ae21951c01d246c5dd
SHA1 7b02752fc923f6ab10775ad61b9d10500bcf4b19
SHA512 f2320b75ee383ba177386b7cc0f845b607b2548b62a5155c71cd4c450e4002647af9ac0712eb1f338d8f552fbe06a33d3f9ff846cf5657faa581db39a762dd93
TLSH
T1AF41D85CB6F90149B3B7AE56AFF6A86D483B7C772E07D4AD00110D5F0A62A04D8B2773
MD5 SHA1 SHA512 TLSH

Submit Download