c179920f85fd932dde44b94b5f615065a9772ee5a35c5e3d74075dafd6002882

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c179920f85fd932dde44b94b5f615065a9772ee5a35c5e3d74075dafd6002882.html
Size 6KB
Sample260913-b2ppqaaq7x
SHA256 c179920f85fd932dde44b94b5f615065a9772ee5a35c5e3d74075dafd6002882
MD5 6d0f9215d76f3f0a40e02a5d05c33d2c
SHA1 49a62086723cc40a136c4a740ef38fc3968bcdaf
SHA512 935c2c3afaac3eb212f57ff2b9eee0b9758667709f3732c160039a3accfb7e421a4b1c1ed9752e5a74d8846b442739f44d6703cfe4d0b3a988d00b1355d588b5
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69EyEcE8XECgUdDhQoKDejCPJu:zWLJlxeQf80WhtKDejCxu
TLSH
T1BAE1B45A9E4C853F4100059BF0A16A1CD8AB447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
884	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338207012399211"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{59123DAB-D9B2-43F3-8B7A-FB51915C51C9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2964	msedge.exe
2964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe
2848	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 532	2848	msedge.exe	85
PID 2848 wrote to memory of 884	2848	msedge.exe	86
PID 2848 wrote to memory of 1816	2848	msedge.exe	87
PID 2848 wrote to memory of 1816	2848	msedge.exe	87
PID 2848 wrote to memory of 1816	2848	msedge.exe	87
PID 2848 wrote to memory of 3984	2848	msedge.exe	88
PID 2848 wrote to memory of 3984	2848	msedge.exe	88
PID 2848 wrote to memory of 4120	2848	msedge.exe	90
PID 2848 wrote to memory of 4120	2848	msedge.exe	90
PID 2848 wrote to memory of 4120	2848	msedge.exe	90
PID 2848 wrote to memory of 864	2848	msedge.exe	91
PID 2848 wrote to memory of 864	2848	msedge.exe	91
PID 2848 wrote to memory of 864	2848	msedge.exe	91
PID 2848 wrote to memory of 4960	2848	msedge.exe	92
PID 2848 wrote to memory of 4960	2848	msedge.exe	92
PID 2848 wrote to memory of 4960	2848	msedge.exe	92
PID 2848 wrote to memory of 4684	2848	msedge.exe	93
PID 2848 wrote to memory of 4684	2848	msedge.exe	93
PID 2848 wrote to memory of 4684	2848	msedge.exe	93
PID 2848 wrote to memory of 1704	2848	msedge.exe	98
PID 2848 wrote to memory of 4512	2848	msedge.exe	99
PID 2848 wrote to memory of 1704	2848	msedge.exe	98
PID 2848 wrote to memory of 4512	2848	msedge.exe	99
PID 2848 wrote to memory of 3168	2848	msedge.exe	101
PID 2848 wrote to memory of 2348	2848	msedge.exe	108
PID 2848 wrote to memory of 1212	2848	msedge.exe	109
PID 2848 wrote to memory of 548	2848	msedge.exe	110
PID 2848 wrote to memory of 2196	2848	msedge.exe	113
PID 2848 wrote to memory of 2196	2848	msedge.exe	113
PID 2848 wrote to memory of 4296	2848	msedge.exe	114
PID 2848 wrote to memory of 4296	2848	msedge.exe	114
PID 2848 wrote to memory of 2964	2848	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c179920f85fd932dde44b94b5f615065a9772ee5a35c5e3d74075dafd6002882.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff805ffc188,0x7ff805ffc194,0x7ff805ffc1a0
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,13516796600131156877,2779942908158017041,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,15700691006321326921,10833863817705524134,262144 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,10052338391436803519,2705423876738066370,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,6681239522801436882,5392634678847748128,2097152 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6823340697813109116,4487513891483234777,2097152 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,6096700224869879046,11593993872807574845,2097152 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,13085485605113710893,10073042163090244024,2097152 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:2
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,2447498310244821946,10460687859191030596,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,7338644925659438837,11611060432480058532,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,9090450609382310812,9509449344499124723,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,9090450609382310812,9509449344499124723,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,17566634055406186789,16082778037976844979,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,752109509685701892,7082943600502175811,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,11545548394061890705,10517304739092739443,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11770248554696475343,13845892047370326891,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,1602292896496018634,9818498522356509815,524288 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5156,i,16269917027151662021,15621827819265093576,262144 --field-trial-handle=2444,i,1647855720438121424,2373077033503751039,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4580

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 66224c34c373abb58687d6c9c62000e6801c638ed7ef37c167131feeffb91f8b
MD5 98621c4b46072e77c20956fb9281bd14
SHA1 48657ef42a3188d4e4611bd1cb246cebccfbd38b
SHA512 1c08f58a7788d4131161ecc53d1aae2103a25dee680a69f27e6143109ce88c5572964ebed1652858a026a528235f666796fa78a3e7c1cfec79d77449b34a311f
TLSH
T180516285E6D184B0FF59D970B1DD2F8736B887B998C71FB32CA4D4BDAB0A7065830044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591860.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591860.TMP
Size 2KB
SHA256 6f0018912fc538af681dfe2a1c523d289913c0bc4c4b98bd57892f7767cf6306
MD5 d920a1cb1095b3c6fc02fc80ea64b56e
SHA1 c29d0823983d5fbc4cd6fa9a8fbea5c22838b7c6
SHA512 52ae130c50d430ed66996fc362ef25e52fe0fc51caefe30cfd5d604fbffe1ec2b415fa563f32b69c71fa70a6f931ea0e61be072cdcee89aeeaf1510bda472af2
TLSH
T1DE517285EAD184B0FF59D970B5DD2F873AB887B958C71FB32CA4D4BEAB0A7065830044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 30837694ea4a9572e2499935fc8c029e17daa7626d6d844da1981b6674a32f98
MD5 90ddd46cbb04db2d78f66f701cc6b391
SHA1 990c126d3c14d5ca7a09b7ae15e22afd0b67e67f
SHA512 cd0f8174ec7f33d2fb94a37621cb1f718016168d98485e852f4dee353050f765b7ecf60bb073e0c3d8d88eb92ab6cf46504a86ae52cff0d4c7c38dfc5c459ba6
TLSH
T103218FF3C3D48AAE890556F06B24AE27CE1D0A46422C3D2589E4EF2B93E25B5D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6d0492d94621f13cf99367e9524a884b48827d6e682c5f7d32a11e027049f2e9
MD5 d87bb7740492cf53386c1bfcd44c9793
SHA1 665c55def97ecaf8ee1dd4ee21cce7701f005242
SHA512 cd72c3efea204daaa22429f9d986d3cae95de2960b637ab84c170a240f09abfe580a32a5f12a29a82a96ecdd52f457a8e38e0330c281396ac801ae36eb088cb0
SSDEEP 192:sxZbRGWt/fSsMYgIdpdSHW6+WNGYYBasmIgrJ:sxZbTt/fSsMYhAHbGfc9
TLSH
T1D812A7516E28A57B8CCBD20DBB25BF53D6F9503261D11E98AAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1f51e299706c26b2ebc9296e4ad3d28cb15ba56c737081e83cd36669e70d200d
MD5 91e6b87a517534489d6e9d2989ee8f8b
SHA1 d5dca3afb2c68c0ada13504898067f71f15f9322
SHA512 00d201f8c1d1c6b92e01f1fb50d8d5ef5b0938e6f2ecba9ff3fe4ad30750c517c1c455fe5c39495e5039648ea2cdb98afd2116e093fb64695e6eac07bf8d60cc
SSDEEP 192:sxZbRGWt/fSsVYIIdpHSHW6+WNGYYBrsmIg5PJ:sxZbTt/fSsVY5yHbGfnH
TLSH
T19B22C8516E38A97B8CCBE20DBB55BF13E6F9503251911E48AAFC8A1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2cf147ad3b8410af3a4db93fee7afbc64ca67edc6dc2644be0fbc8512f3b7f8c
MD5 729c33143334b98b5aae6c1e136cb872
SHA1 38d8c8613174c6319fba963ebfd32ddaea1d946d
SHA512 fc4c329eca9d8cf3dad99641f1c133002e42efd0750d355e9bf049eb19c7777e981ec84f15b2c260e72f093c39f07db3f5f9eb1bdce5f458beedf0137c13a70d
SSDEEP 192:sxZbRGWt/fSskYgIdpdSHW6+WNGYYBasmIg5lJ:sxZbTt/fSskYhAHbGfch
TLSH
T1D022C7516E38A97B8CCBD20DBB65BF43D6F9503251D11E98AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4181395607faf7700f1590c6544f984f557d92e7860c56b8c1e721c42f486323
MD5 03d25eef404e88b5b2cf05d181af9df3
SHA1 48a9d64a891037984a47c637478cb2012f06c648
SHA512 da55be469b4ea168f476b7c35130e33b403330c3e1f9297a3012755170761c9ca9ffa1325aee3d4a0ab5fd05ad66221ba8105873f3dd23b911b35117e7c387cf
SSDEEP 192:sxZbRGWt/fSsVYIIdpdSHW6+WNGYYBMsmIg5PJ:sxZbTt/fSsVY5AHbGf2H
TLSH
T1D122D8516E38A97B8CCBE20DBB55BF03EAF9503251911E48AAFCCA1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8dbd7080d1cf369132d45511ad523ccacd9ef64454f49f16d58ebc0abbb7f241
MD5 cbd4c4b3da46708dab9213243b42ea63
SHA1 f523f9415c30f555e496b15ab73a3f384c4a40e9
SHA512 f6f6247f7ad6c816793e982ee80e4867fd43e2236cf61fda367beca875561e0f22c8ec1bd289a7f690de4fc863f74fc51fa5f3e7f454e527e89ef35ec0d2dbd7
SSDEEP 768:0NyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXHropi3i:0NyYR7jWv3NpBu1ja/CL8OXUX
TLSH
T14CC2E92B640DCB7E4FC01E9DDC5A6F9B2E9802C796548D4047FA994C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 3c39ad769d78d2554fa83c9b4862b9367d89f0d13d8a0de67db46d7608f1314b
MD5 f749ce9d4b37548aff55f2dbdde76e99
SHA1 9d7b05b7042f858a13e79dd90a837ba3850f916d
SHA512 756730e740934ff39663b3e6cd869c2cbf2210af1e552724762632504357251b5274b528cf7c6ebdecf63a0bf833edf7c237e46bb1ec828ce8a491e85b3d598a
SSDEEP 48:Kgfir/BhBab5UpISPaK9v1lax/KYstvTyLnKzHJp5Sbx8hISXSK9X19SxXCY0lHr:KQsAKVC+ikAKR+uRmKKoS+ROK6EZz
TLSH
T17AC19F1571B7020038BD755880B69B1A6281B2B3311AE63BBFBC50A58E6FE545DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ca70ab1be0b7f8b6c0e04b8b599a52bddc6536c84260f833ea1fa176ded7fc05
MD5 4f7102c4a877dd0438a322bdf1e73fe5
SHA1 c176881c74f2ffff304ab11a416ff9f6f6013508
SHA512 bc9ea8678a5c28da962a05281953fa3ba4b6391bc4c13c3681d4eef0cbcced36c637f6741f8493786803e611484797641c56f377cbb9d0b4ed4005f25d73545e
SSDEEP 384:fZcIMsNcSiTyBimRLQX5+DtJOnIqNJr/Ze7O6R2Feo9od:3Munz8kDzOIqNh/Ze7TRWK
TLSH
T1D6827D316C749C3B9EE7E185B94632139EF85057D6C96AC0E5EC6F2D01CABA8131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f5e8b9ed44c5246725f49512e7c2d6c9e82fd52020e2dcc31c01bac1bd963e8c
MD5 7bc4fb6cf6533a3bde42a5f67adef6ba
SHA1 6399101e1ee18f69e2728851f4fe4bc8921c26b3
SHA512 fbbb716d26a5e2011e04f4c2eecddc53e6f7b911fb3390616442ee0ce3f4ab2f94ac6f0cc35d5ceb81da0bf483d982951ad788a52ba53aa4ec1e20b081bae35a
SSDEEP 192:u9KsNcSKQy0P9nHCu8QmiU1a604bcX5hQDP1JOnHoqSSJr/6PyP/5eU8:zsNcSKTyBiVRLQX5+DtJOnIqNJr/ZeU8
TLSH
T1D84229316D74AC3B8EE3A5C4B44632539EB41567D6887FC4E2EC2E1C01DE7AC231AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 030bcb0392039029f69fefa452a6d940e907849b32ee7f932e2050645f149e47
MD5 c076202a0a7328bf57d20cf3e8113ddf
SHA1 d9d180507adda524d014629a3574dd6428ec9a06
SHA512 e24a9572962df2b5262edd682ddf5627bd96c9e9df24968a118118b0a9b3346806fe6b27fc4402a25a578b3ce09f36312ecd414738be28de8fc1137dc0d421c3
SSDEEP 384:TZcIMsNcniTyBimRLQX5+DtJOnIqNJr/Ze7O6R2Feo9od:LM7nz8kDzOIqNh/Ze7TRWK
TLSH
T131827D316C789C3B9DE7E185B94632139EF85057D6C96FC0E5EC6F2D01CABA8131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9504cea055f8d065ec665a71f03326967c70dcf7665939519dc0f5e1ad773704
MD5 b9b466bed35597c6b56cd2a6360677ab
SHA1 0e266af4ab4c9e112d1c315a5e49be8a165155cb
SHA512 a13dda717c83e60df14a3e2731a1bce3a76595191f43e0e0b3d49189ecc13c703606896ec816a97d25fe295b62531db7fee5d8e284bd6e073a5d23596ef4bf79
SSDEEP 384:1qZcI+SsNcniTyBimRLQX5+DtJOnIqNJrmZe7O6R2Feo9od:OH7nz8kDzOIqNhmZe7TRWK
TLSH
T140927E716C78EC3B9DE7E185B94632139EF85057D6C56EC0E5EC6F2D01CABA8130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 228228c6e9488fc2809d616d5d4c44a65ce376a447376979757e6693622d3ca0
MD5 813f215aba713bb5fda9a50ea3581fd1
SHA1 9a879cd1fa59265d7a53af7f4ea3b95bbdef0a2e
SHA512 2a6e7bf93e00bb46a6556456ed2008a8dfafead2b285ddfa6d17b9068e5eb8036c072405db0c7c8980b8c312853d4cb3d7f8c283116c6ddf3ddcc17b443c27cb
SSDEEP 192:EONq6nnHGQmiUyhwQYcX5hQDP1JOnHodMco2U6:EONq6nCRQNX5+DtJOnINPU6
TLSH
T16C02E934BCB96C7B8EF36E45B48623139FA4216BE5956FC0D6F81E1C00DB79C2306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 58842b910662c6bd17b952e77b5a6e5a727937a002675b29749430705238f3ba
MD5 4372a391084210608fce8ae2a32bdad9
SHA1 47518ce5044b177eeaad67c8ccba16edb9bc89f5
SHA512 db0e940524b2c8672975ed11cd71df25a192b6971a347d1ec147df303163fa10fc9ade5a83252c5d1284edb0997fb355eb6208f8d74fb124ee7f5b2bb8234978
SSDEEP 192:EON96nnHXQmiUyVwJYcX5hQDP1JOnHoqSSJrJg3P/5eU6:EON96nZNJNX5+DtJOnIqNJrOZeU6
TLSH
T162121A31B9A4EC775EE2A5D5B48732539EA41127DA857FC0D6EC2E1C01DE7AC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d7039f24aad0e8fb45536918be59fc4dbab44a67db24daa817828436e0319c9f
MD5 cf7372d110c3a38494b6b7f8309c8737
SHA1 07cc5f15cd0287da9cb042a0efad40dbd417eb19
SHA512 5c6bccbd02d558841f8231f278bb513e69d0188fee8bd6252d52624459599f091ff2e6eed1949576ea4643d8cabbe42c3d0a0232c59b6a5fab7f39bad90db8bd
TLSH
T165410959A7ED0148F3B76E5AABF6A46D487BB9772E47C09D10110E8F0B62B00C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download