5179c3753f620a2dab2c9afcb6a28319c84cee292489c394cb7d6f96efbcbad9

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 07:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_5179c3753f620a2dab2c9afcb6a28319c84cee292489c394cb7d6f96efbcbad9.html
Size 1.2MB
Sample260913-janmcagf48
SHA256 5179c3753f620a2dab2c9afcb6a28319c84cee292489c394cb7d6f96efbcbad9
MD5 0f27af83a15588e95ef16100e9232cec
SHA1 e3ebf5c2cbdd2f34c34e03b59e17342ee71cf144
SHA512 acb45a3c454fd8f012921029da837a5b2b5f5038b3c5808ed9a529951e1486abb78d53dd437263a67d2e66e2ad097e5e0fa7b1ebab3121fdaa1a1b39f9b60886
SSDEEP 12288:RCeSXyMTNrjTEY0+kC6bhxs7jGvaQWAWX:RCRyyjT3kC6bhxsKa0WX
TLSH
T1A345C7DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
908	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338012852400351"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{600B5452-EDF5-4D00-B213-576BE293C118}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1876 wrote to memory of 4016	1876	msedge.exe	85
PID 1876 wrote to memory of 908	1876	msedge.exe	86
PID 1876 wrote to memory of 4044	1876	msedge.exe	87
PID 1876 wrote to memory of 4044	1876	msedge.exe	87
PID 1876 wrote to memory of 4044	1876	msedge.exe	87
PID 1876 wrote to memory of 4876	1876	msedge.exe	89
PID 1876 wrote to memory of 4876	1876	msedge.exe	89
PID 1876 wrote to memory of 4524	1876	msedge.exe	90
PID 1876 wrote to memory of 4524	1876	msedge.exe	90
PID 1876 wrote to memory of 2044	1876	msedge.exe	91
PID 1876 wrote to memory of 4524	1876	msedge.exe	90
PID 1876 wrote to memory of 2044	1876	msedge.exe	91
PID 1876 wrote to memory of 2044	1876	msedge.exe	91
PID 1876 wrote to memory of 4644	1876	msedge.exe	92
PID 1876 wrote to memory of 1796	1876	msedge.exe	93
PID 1876 wrote to memory of 4644	1876	msedge.exe	92
PID 1876 wrote to memory of 4644	1876	msedge.exe	92
PID 1876 wrote to memory of 1796	1876	msedge.exe	93
PID 1876 wrote to memory of 1796	1876	msedge.exe	93
PID 1876 wrote to memory of 344	1876	msedge.exe	94
PID 1876 wrote to memory of 344	1876	msedge.exe	94
PID 1876 wrote to memory of 344	1876	msedge.exe	94
PID 1876 wrote to memory of 3492	1876	msedge.exe	98
PID 1876 wrote to memory of 1588	1876	msedge.exe	99
PID 1876 wrote to memory of 3492	1876	msedge.exe	98
PID 1876 wrote to memory of 1588	1876	msedge.exe	99
PID 1876 wrote to memory of 2752	1876	msedge.exe	101
PID 1876 wrote to memory of 3564	1876	msedge.exe	106
PID 1876 wrote to memory of 2428	1876	msedge.exe	107
PID 1876 wrote to memory of 2056	1876	msedge.exe	108
PID 1876 wrote to memory of 3056	1876	msedge.exe	109
PID 1876 wrote to memory of 3056	1876	msedge.exe	109
PID 1876 wrote to memory of 564	1876	msedge.exe	110
PID 1876 wrote to memory of 564	1876	msedge.exe	110
PID 1876 wrote to memory of 4244	1876	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5179c3753f620a2dab2c9afcb6a28319c84cee292489c394cb7d6f96efbcbad9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffe32b9c188,0x7ffe32b9c194,0x7ffe32b9c1a0
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17665453276555632845,16339149753822315688,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,2590731955706512857,17161910268963687460,262144 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,14704629498766467314,14758093752914578371,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,7828482339100397007,10372153495899584938,2097152 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,6507310017933036340,6613682822455515358,2097152 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,10449708547199118986,7038167365274302299,2097152 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,17585769276934120297,13182969996569650915,2097152 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:2
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5004,i,2238891006888268491,11199736803064743491,2097152 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13236792813520575428,7353696140061663763,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,10035548845308219514,13204908493753105015,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,14241598463682103152,8024359708472714119,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,14241598463682103152,8024359708472714119,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,17146730212297286329,14010967311872303266,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,1863057264832463606,17414950790606972009,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,9240975344530694040,16046342159212462305,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,14520603716961785309,5300851656830585995,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,17930201487638543931,12187298456132918638,524288 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5476,i,8049699484761428093,17141935419161250506,262144 --field-trial-handle=2292,i,16855279013616293262,11637848772040976523,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 44b1c1f4cbccba278e8d29783d692a2957212ba03a01e3f118d5c5aaf4af791a
MD5 401e64185cd78114fd9a8454fb374ce9
SHA1 869b2944f6f2442447e999be62785219059cdb43
SHA512 c55f9714d300fe526b9a392fef9607b8c252835fd281f2dc990c955d128ebe98808d0a90526ff9250e4ff669070ea289cf782ffbd73ee4c0d443b339e4d6734c
TLSH
T106519294C64193DDFBE4037863C52F973638B484A5873E4200A3FDBB580A71CB143474
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e16ebd53dc95d096783ac2db41be6e100c09bcdfbd306e49a53bfc7515fc380c
MD5 6545693ab0b6a6dfe099280cd151442e
SHA1 4ee44ac3dbba5f018b6d5f2773710f70beecc55a
SHA512 aea04fa5169ac5bfb12bf9abf8810ebaa572bbb2110632196c3c53f0241a77a67d577a69e568f993c801b8cedccea0455ab6d04e34d4e33586125d17f9a2a17c
TLSH
T14F318BF7C3D5866E881116F0AB24AE1ACE2D094A422C3C1689E8EF5F93F2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 58c0ca0693601cad8f34ba640f15d6eed633a69786dfd28ef8b2f49cb90a868b
MD5 f479bf1c4a597b7ce25ebc4433ec590f
SHA1 8c23cc19fbcaf4c32f7b1cc243509a2f27d2bb9b
SHA512 b0aab33412b01f43b55eb5de5e2a6274ea1397fe0c447c2faf0b3a5bbbaf836d8f28a97d1dcfb77caabba5f8b165a5170436299e1487d1aa1a1a8758b88b438d
SSDEEP 192:sxZfRvWx/fcsjGIdpd/HW6+WNGYrbiXIgrJ:sxZfcx/fcsjnRHbGz9
TLSH
T1F512B8556E38A57B8CCBD31DBB25BF13D6F9503261941E44EAFC961C04E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ac6ec2bc5b8049a24aae5093db3a0a975394c3c458ec84ffc6d04b7901e9069b
MD5 1c8493cf26ea27691ba75c4a8d0b6d38
SHA1 487d91501d03207e28666ca8c2b91d9c48d5873f
SHA512 1abd423320152926d694bc0cffc70f0cd384883a821136b4d33b3b8891b0cbe78c696a40e933928c0efe2e857d8049e4621464849e0d5ef5c1257cd7e2950a59
SSDEEP 192:sxZfRvWx/fcsqGIdpH/HW6+WNGYrxiXIg5+J:sxZfcx/fcsqnfHbGr0
TLSH
T1D422C9566E38A97B8CCBE31DBB65BF13D6F9503261901E44E6FC961C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ba155fb789ae259119cb267a2b1131a45e9d9ec12b4662a7ddf3f0ffd87e72d7
MD5 571252de42265862f85d13fb892bdc25
SHA1 3ffdb82ee5b5a75ccbf7341277d5e7888ac3bc4e
SHA512 5f64faf7b90e571664caaa78f43fe848a9bfee65a0028516315ac00e9537f4fbfba695ab1e83d2b9a38699704390ff6755a16dc9e731e121ebd9781cfb7b0b73
SSDEEP 192:sxZfRvWx/fcsqGIdpd/HW6+WNGYr5iXIg5+J:sxZfcx/fcsqnRHbGb0
TLSH
T15F22B8556E38A97B8CCBE31DBB65BF13E6F9503261941E44E6FC861C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e3070db3088248bfe3c0dcea055123855e830906e8d546378844dec5e8d02ddc
MD5 3f7108a5f786200ee0e1550d5893090b
SHA1 51bbd8da0e38f2536c2075f160cddc68370cb609
SHA512 b34968f21d5d880a591e3210e2f12e5ba55798db6de7ef4b2ec3bc46068cd9d32ddffd2197f5f89a04e32cfb41bde5b7747f910d2adf7e255e950a248f4fd46c
SSDEEP 192:sxZfRvWx/fcsOGIdpd/HW6+WNGYrbiXIg5MJ:sxZfcx/fcsOnRHbGz2
TLSH
T16622B7556E38A97B8CCBD31DBB25BF13D6F9503261941E44AAFC961C04E6ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 884f9660b9606a3428058c0860251a68cfdb9d0ab4f4e6c7a3668a478127da8b
MD5 6cf15c6a1f38e318ff3473d5ce459cc6
SHA1 8e0668e253c7c39544b65016075c7029d75d46cd
SHA512 31819229e3e0a601b3a327b092d8da1802f1c02a69ad604c9cce4a45372908783fd966a3a6d49ed0be9c52510bc159e2cd1698e5eebb0cab34f068332550ad40
SSDEEP 768:QJy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbDroRST:QJy4J/DWvbtBhu1jajiLm0bwsT
TLSH
T1F3C20A3B644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d7d33d2a1d1e399e122dd0e681ec487e0b356c42163b9dd8c07c31f8bf5e57cf
MD5 80f013a7a1233388c3fe3122cc0f719e
SHA1 91d816a4bc87a9bcd0f0b4f14fd064b737ee4e32
SHA512 c33ac44fd93bcd8d67e9f259c9d44ff8ca1de62d504f09ee191a3b8702786b63548631ff8b97c57027d8d7bcf5cc9282af98b6994dab226a7eab43026572bdb7
SSDEEP 48:KIDI1Ks04jyLbef70DCOcey7bCxKISm7K9C1Q8xhsYarhhyLEzy+suCLbyB6ISWy:KIDCKs0+r7GKIXq+T2Kg0zz
TLSH
T107A1464135BB065138BD258C82B5C71FA28132737118EA2B7FBC50A69E6BE040DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 cef5f5b23d6dd532c4aa4f5b4eef6fd48d3000419fbd38824b3e309451e0be58
MD5 b6a293e623715f6f51adc2ca58d7ea55
SHA1 c95aa7f845f8a98828d0a93a1e4069f7559aa89f
SHA512 54b23abd58a738a653679852a421b6b580bc6210c041eae02f9cd046b42baa0b2a588a4f9c9245f83bc7e6c50f07df79e6ab31511ded68d039bfd93ebda07ade
SSDEEP 384:wsNTex1ZK/YuHX58EV8GAqXHJrTv7O6R2Feoqly:wVUVa2HhTv7TR+
TLSH
T1B1624B35B878AC3B5DE7E199F40A3613AFF5905796892F90C6EC6F2D00CA69C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a764f87513f6157c233a2ee3e6e2116cc64dba0feb670017eac7c6b851a7d2a0
MD5 ac9aee5c9200beeed75aa902508cf4a7
SHA1 a161a8c9ecc758d6ff99deeb7983c98064936323
SHA512 c22c3cddcd9a0c129e5e15e20abf0ed3cc1c4fa9bc7555c369b255a637c19f21a058f32d54a1ca93e4245a5f241c07cf62aa3c52b7c7c3f8438c326f4553d466
SSDEEP 192:1ONu6wlDwQmiUyWmz4X58gZ5jzorGAqXgSJrRve1/5U6:1ONu6kwOz4X58EV8GAqXHJrgvU6
TLSH
T15F120935B578AC3B5DE2A588B48B35039FE55117EB896F90C6EC2E2C00DF66C530AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 216892eb4a2a0bb51253ff62eb7d072972e61f14a62aa7ac99647ee08bbad192
MD5 94137b57e89fc598f4adedb1cea571c3
SHA1 c3925202f1f6e1b4a3fdf697b247bc0638a175a8
SHA512 a717105c02030e8586bc55dbca7e20fad750ffa56ecfd78114bcf7b433ee2b0a0339ea325e5a4f45d250216f692c6ffbb79f7948fa3906038b17007d66103528
SSDEEP 384:ysNT7x1ZK/YuHX58EV8GAqXHJrTv7O6R2Feoqly:y6UVa2HhTv7TR+
TLSH
T10A624B35B878AC3B5DE7E199F40A3513AFF5905796892F90C6EC6F2D00CA69C131BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 eb29d92489e306ca29eee2f5d7253a612bd29f04cd13243ea7f0b31fd11f4fa4
MD5 a6f8bdac12f002cce60637ac8783ec25
SHA1 59356c1020f3ee21edb38ceb41610f7ba8ad40d2
SHA512 a4bc562e66bf65554dae11771dbe6cf8afa1f04db38d43fa325dfd3e1589335ff45186281e2512e3958f4151800bebb461f409e4acdde6b892bbc0bdc2e948ea
SSDEEP 384:m2sNT7x1ZK/YuHX58EV8GAqXHJrKv7O6R2Feoqly:r6UVa2HhKv7TR+
TLSH
T130624B35B878AC3B5DE7E199F40A36139FF9905796892F90C6EC6F2D00CA69C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 4f16482eef80ff0964f0afea64f344222f76ed754b470671eb57cd1c6e435ae6
MD5 dd659f99733ae557f0f9106dbe718a11
SHA1 63f241596c012a2b52999d7a44b140246a1ec28c
SHA512 4fdc330453c3ab224eb45bd2b18d068504fd07f6e4837d12c96a6908af5fdb5fef926aa4c79ebc30524c9071a63ddb29685e22f09334f723224e08da627af905
SSDEEP 384:wsNTex1ZD/YuHX58EV8GAqXHJrTv7O6R2Feoqly:wVpVa2HhTv7TR+
TLSH
T18F624B35B878AC3B5DE7E199F40A35139FF5905796892F90C6EC6F2D00CA69C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 e4cc2f0b2fa99b5b25dbdc492e801e58c5c0f110416433da20d9bd0a944d1389
MD5 b5a8ea49243ce2b7cd18b1fe6a6d0d86
SHA1 5888b0286a6937daf4b936302a3567423644a335
SHA512 73065fc44a7821e19c4d9713132d1b139f420b92e4dee6e38c5bb0f6179495a3ab2beda97a5fd76bd34c09b4cef4016a3962a9ef70b50d00351ffcb2e2b84b26
SSDEEP 384:m2sNa7x1ZK/YuHX58EV8GAqXHJrEv7O6R2Feoqly:rTUVa2HhEv7TR+
TLSH
T1B2624B35B878AC3B5DE7E199B44A36139FF8905796C92F90C6EC6F2D00CA69C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ec57eff2eb75093bb528424ca2441dabbe8b0fb482c744e4c3dd4e29e64bd148
MD5 303eadfe460715eeb6dc71dda916ddd9
SHA1 50320c3461a26a79bc1fd74a8245d8df4231bb7a
SHA512 f2cd9fab95299bcc587547602441feb9ae2f23f6632ebd1b1375e12aa06cb6f2b47900c73b2a5377823a19a39a2e55f7a8c878207ace9c132f74b0ec95df50bb
SSDEEP 192:1ONCq6wlDgQmiUy2mW4X58gZ5jzorGArDlV0U6:1ONp6kgoW4X58EV8GANWU6
TLSH
T11F02FA35F8787C7B8EF3AE49B58A26139FE5112BE6952F80CAEC1A1D00D765C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a99fc58ef4b0c5e28ecb76efdfa88cc0688b7cd9fce573c3cb6f3e0417087c64
MD5 06ec2b96e1286199075f09fd4b7d95ed
SHA1 95dac25331e836598e02fd7974b72668a5ceb83d
SHA512 142e0d346fe86f538b37038558e5cbf84a52a07d51fc2e7df21b3fdd7ee220291c871d0fa494046084a3e785e22717f42ed2a87e4c4fa13000d244a7013dbb94
TLSH
T1C4411858B6EA0108B377AF56AFB7A86D487FBD772E0AD15D10010D4E4A67A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download