fca7a14d5fea763f1c22946959530b1ec1e27f4d3921ee5bbb24139eb6a9d7ea

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fca7a14d5fea763f1c22946959530b1ec1e27f4d3921ee5bbb24139eb6a9d7ea.html
Size 108KB
Sample260912-tpvdjsbq6x
SHA256 fca7a14d5fea763f1c22946959530b1ec1e27f4d3921ee5bbb24139eb6a9d7ea
MD5 c283670784566d5e258d45c7279341c4
SHA1 199127e0310f9bf242172c2f0536e3e4d6f2e37f
SHA512 9326382807bc4228bc481f98ee6cc5b807da9df680f1ae17fe43090e7d5426382c995e05ea4a5058f969c74b533245c4da524c81f2e38b32637dc958cd8d5934
SSDEEP 1536:4PxTYn+hGiLyRuEL63XSOl5QpTthNoqxaOBPbEao9bEao0+7l:mPHQNNucPdo9do5l
TLSH
T124B3A58701205CFAEFA44DB3469B086B3D2C5437AC4791B9E3FD8F972B51D6E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5008	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338244612340899"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{9EADF937-2AD7-4352-8E60-D1AC54AF97BC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2280	msedge.exe
2280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 4324	2220	msedge.exe	84
PID 2220 wrote to memory of 5008	2220	msedge.exe	86
PID 2220 wrote to memory of 2820	2220	msedge.exe	87
PID 2220 wrote to memory of 2820	2220	msedge.exe	87
PID 2220 wrote to memory of 4200	2220	msedge.exe	88
PID 2220 wrote to memory of 2820	2220	msedge.exe	87
PID 2220 wrote to memory of 4200	2220	msedge.exe	88
PID 2220 wrote to memory of 2880	2220	msedge.exe	89
PID 2220 wrote to memory of 2880	2220	msedge.exe	89
PID 2220 wrote to memory of 2880	2220	msedge.exe	89
PID 2220 wrote to memory of 1500	2220	msedge.exe	90
PID 2220 wrote to memory of 1500	2220	msedge.exe	90
PID 2220 wrote to memory of 1500	2220	msedge.exe	90
PID 2220 wrote to memory of 2756	2220	msedge.exe	91
PID 2220 wrote to memory of 2780	2220	msedge.exe	92
PID 2220 wrote to memory of 2756	2220	msedge.exe	91
PID 2220 wrote to memory of 2756	2220	msedge.exe	91
PID 2220 wrote to memory of 2780	2220	msedge.exe	92
PID 2220 wrote to memory of 2780	2220	msedge.exe	92
PID 2220 wrote to memory of 4512	2220	msedge.exe	96
PID 2220 wrote to memory of 2076	2220	msedge.exe	97
PID 2220 wrote to memory of 4512	2220	msedge.exe	96
PID 2220 wrote to memory of 2076	2220	msedge.exe	97
PID 2220 wrote to memory of 1388	2220	msedge.exe	100
PID 2220 wrote to memory of 4808	2220	msedge.exe	108
PID 2220 wrote to memory of 4940	2220	msedge.exe	109
PID 2220 wrote to memory of 1948	2220	msedge.exe	110
PID 2220 wrote to memory of 3244	2220	msedge.exe	112
PID 2220 wrote to memory of 3244	2220	msedge.exe	112
PID 2220 wrote to memory of 2280	2220	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fca7a14d5fea763f1c22946959530b1ec1e27f4d3921ee5bbb24139eb6a9d7ea.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a4,0x7ff8cb8cc188,0x7ff8cb8cc194,0x7ff8cb8cc1a0
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,15077431874747874467,14298294693918498170,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1816,i,8687459223688275936,10702586254817133598,262144 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:2
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,4679414015522980571,15354658632809947013,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,12190425232032520732,11121599127846684246,2097152 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,4479545560319679770,18253899776951597016,2097152 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,4026312220897585147,15675806344725008696,2097152 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,8837928269561281236,14225487140361804372,2097152 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5082049779870452050,5794012832677420083,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7957978843193920186,9172080245765191035,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,9471597859502506194,2853566717990875582,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,9471597859502506194,2853566717990875582,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,18415179348709904616,1177675361931442903,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,10116152183330260840,9391900194488880559,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,7789191521859766925,13989957519917311776,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,16067174070866780938,233851194828597257,524288 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5876,i,4768545770742614096,5289870896218457536,262144 --field-trial-handle=3020,i,7587251794475515547,2700851086738891824,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e8b08c10c8bdde30de5c219d82136c89e4ba18d20956d71fb74df3169fbf5ef3
MD5 7073654ee6d8ddb522f3498992730b3e
SHA1 2d3e1ddeb1c6908de053ef5432769888c29b40b9
SHA512 5c6e7f2462eb5e09f4c217c0ed21757e8a9b73bf9d75dc585237079a217d6e4213ef2d9ea8b0d0ad0f137ea4bf72aa4b0eb806b8c24169e583fc1153ba266f48
TLSH
T136513F82CFCF50A9F7B59175C7D813BB76382983568F3E530190F979940A7C161B7094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eba3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58eba3.TMP
Size 3KB
SHA256 ee4058232bf7be2d7f3a11686e7cbf71b0316334c364478f2660c9f3eaff874d
MD5 62a9a4f8e18d7701e1342f3d4813e39f
SHA1 430f23d0c0d039ee5da7cf82b6c965afb1438d06
SHA512 186ad58899b998daaedbedd8167dd20380c9127c1e79dedf1619fa4ed8d0af0b2514e34de90f0adf47c9c88b30b7bf57ac40ea271830f2333e98e94b291a7f05
TLSH
T16A512D82CFCF50A9F7B59171C7D813BB763829835A8F3E530194F97994067C152B7054
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6e5a96cc3a6d83483e2277033666531f01d35d5196114f1f027dcf60edbbc29c
MD5 9acbcd669fd57deff615044d189d5dfe
SHA1 a12b6f745be5b6c92881fdc4c7922f28dbadcafa
SHA512 a0d780706df86ba0238ced31800049ce1018f05b961d0503ae8fe16fd53541ead7d9dd73d676ae417f58d2119570fdd6f5d24512f2009e1ef0c3c263591f07b3
TLSH
T1D5317DB7C3E4877E890156F09A246E2BCE2D0656422C3C16C9E5EF1F53F24B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a1c12a9adeaf0507103f26355b9af960e6c515970d27b7773a5e0bd28a5ed7db
MD5 caf2f7397028bb975c0c3c9d7aba4eb3
SHA1 68384d958b7f7a61cb1f3ac2c4adabf4d21b215d
SHA512 0dffccb6fe79c0860ff04213a3b273d30a8a9d839307f706398a0b803d220d0ca350a42df7778e66a623a483e79875f7439e6f54e8e9529041ae133bd0163522
SSDEEP 192:sxZvRuWH/fUs/feIdpd5HW6+WNGYRPRlJIgrJ:sxZvHH/fUs3PPHbGmJ9
TLSH
T11312A6126E38A57B8CCBE21DBA25BF53D6F9503291941E48EAFC861C05E76DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 731b389d1500cb15509bacea2047f5044b90f1477afc6371873f10e1614863e8
MD5 00dd7c037cd1526cda28fccb3cf9479c
SHA1 c84c7149e76441a866e19ff36814b1c40aecb950
SHA512 1ad2f2c30d9d5262e81999e72df6a7aa3428e9ab4d858abdedbce911262a1e335b8625049f614317df24cf3af9882697e513bd2963295521073e6066473cdec5
SSDEEP 192:sxZvRuWH/fUs6feIdpH5HW6+WNGYRPglJIg5BJ:sxZvHH/fUswPZHbGmqV
TLSH
T16022C9526E38697B8CCBE20DBB25BF53D6F9503291901E48EAFC8A1C05E76DD230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c5517b8dfd963af85da53ecd817e5df4a6de0c5a3d45e23faea618469adf3d1f
MD5 d383af698cd1671584bc38bcdd05df0e
SHA1 4ceb1a1b3e706641e66e805f0b0357c2dbb9b96b
SHA512 0adc57da0a3e71c6e742baa61866d707eaa45df580733f2aa271d889876369060d6e98e6f414daeb40565679f319d850d74c87aae00f95b87f4584290c1cea89
SSDEEP 192:sxZvRuWH/fUs6feIdpd5HW6+WNGYRPtlJIg5BJ:sxZvHH/fUswPPHbGmNV
TLSH
T14C22B9516E38697B8CCBE20DBB25BF53D6F9503251941E48E6FC861C05E76DD230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2eea55ac8051819c4178d84c853975b1a8ffa2f17909f9077c62dc96903a64dc
MD5 eb45d529d7f72115ff0eb04c5c8c6821
SHA1 05753775ba9d63477963f56be9465e7dfb9bf302
SHA512 13c604b554fe3fc7e7f20b5946baafdf9538a32cad7a5123712fda77ce9e339f98e6185fa965a751c0422f67e089937fbfff7c19f08ab2f5f525f5a10feeef8e
SSDEEP 192:sxZvRuWH/fUs1feIdpd5HW6+WNGYRPRlJIg5zJ:sxZvHH/fUs9PPHbGmJj
TLSH
T1FF22A6126E38A57B8CCBE21DBB25BF53D6F9503291941E48EAFC861C05E76DD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bc7a4923dc2af71544744b95c003932878f93559f875f7d5496052fd36f78dc5
MD5 436b28a501a4c290fb584c609140cdb4
SHA1 39b1eac39c46fa078ba5730af68e086aec6f117c
SHA512 829e845f0310aafe7ca785f1b5fb68b15175c2e05509fd8de63a0e30853205b00313d2a0370c5a958463b6f0450bed16e77d4afa148799f40caba0fe2eee018e
SSDEEP 768:agK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3droB+2X:agK9uzYWvcQWsu1ja0HL7Q3WB+2X
TLSH
T1ACC20A3F640CCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b155da40e5099d2b4adf73e0bcc988e6bb3cc96757bf8a848907de3cadc5f3bd
MD5 b3ed1b49b0783d98906bc89ec9498819
SHA1 136d69e8d216fc9bdf07e0320e45b7c1f2eadaf2
SHA512 c79d4f7da707e798c46bcda3888001b3f6767660014e3c95daf5a74ec58b2737e7f749300fedad3029b1119c01af808e51fceffabded6ea4b54ff6eedbe3de0d
SSDEEP 48:K0mImLuvL1ttOb9wVISrOK9715OxjeY4JbPyLcLq2EGqTba5iISuTK9K1oTxMDY4:K0mZ84KRiy+byKIwau1yKOAe
TLSH
T187A1EE1571BB062478BD394C80B49B5E968231B33518F62BBFBC14A58E6BE480DFE4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7ca6ee5-d73c-4a31-82b4-8cf41b9980fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e7ca6ee5-d73c-4a31-82b4-8cf41b9980fc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4c57439a6208052cf62c6e9c57a49ed0d8d2a3954cbf64d1685f54423f9e85c6
MD5 e30d025013faae9a4dca218b73fe90b6
SHA1 a3e09b25948b97129513da06eca47fc95819429f
SHA512 903cc72f95ee342b9f5731f30cac4a52becff0e6603a0432bb8a65a7f7429dc47c78d7acdd1ec64d2e4504673084e70bb73b0beb6677ed1a13e6dd3b474578f1
SSDEEP 384:cSZcInsN5+wuEwKDOjTVSSdTHVLj7O6R2FeoTioR:fnESnHN9j7TRpC
TLSH
T144826D315C786C775DA7E145E48A36038EFC81B3D7CA6B80E5ECAF1D00DA6A82317C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 973aaffe633c761bc01105adb74554c6054f43d4df3303604d90c7cdafcf0e80
MD5 affbea44cd232bd9204c28c8d4740543
SHA1 c8a8a48408e162ee26474dda02c4a169c3f3e2b9
SHA512 8f9d2aaed98a1409560aa0f9e88f55e7c50793d45cb83294f2dd62139bdf7945bfe7641ca5612253690ce4ab88ba4212ba64d2182320ec5f3287a2537ab45f8e
SSDEEP 384:xDCiFiZcI3FsNb8TUNTUlIl/wuEwKDOjTVSSdTHVNj7O6R2FeoTioR:nFQV2wgmSnHNrj7TRpC
TLSH
T146A24D725C689D7B9DB7D645E94A3203CEF841B3CAC6AB91E2DC9F1D009B6E81307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b7f7992471c6100af4a68fd942082c214dd8079cd03586f80b2d03bb2bf15dc8
MD5 d94679801451c1ed20e0c4a1d780633c
SHA1 647379e145cb32d1c5f21cebe641398d84821782
SHA512 27d66a419dd66aa5ee966fc0be8974c7358151fbf3ae1bf783a0f33dbd7243b82f11b40348a0a195cb98de2d8dba03fb444285230f65b28259cc503a95bcd6ba
SSDEEP 192:SON86yyQmiUy7EROCTVght+FdVaoHhpNE3UG/gU6:SON86lLROCTVSSdTHVJjU6
TLSH
T197120935A8786C7B5EA3A541F48731039F988277DA863B90E5EC5F1C01EB7AC2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 edf4622423b1fe8ed2a8ca9530e28a6ff2f8c02e7cc8a87ad48646b20efd2934
MD5 5552410d6c1696485df328d3f65d2d5a
SHA1 fa3217c0d706055d73f0039f34b3c7a796f6b5ae
SHA512 591a41fbe5dd3a7804193020984c5b5412f36d0882db6b30a06c71680faf77b3953d8e2c17499f4c176c16828d3e1eada44d9a8a251ce51e7208d7942d97c5e2
SSDEEP 384:crsN5+wuEdKDOjTVSSdTHVBj7O6R2FeoTN:I/SnHNDj7TRC
TLSH
T15E624B3568786C774EA7A541E44A32039FF881A7CBC62F95E5EC9F1D01DA6AC2307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 670944e438dcbf40d31ea8de56f3da0de199fff274ccdae9ee32584ea5ed5a62
MD5 e8fc52a823e5308b282ae5abf513624b
SHA1 e92772f72811eef9a2d457d56cafc3d66cfb28fd
SHA512 e3400ced828f85ed4e3ffe35cdd4f5c2ab2ac7f76dc4f314234cf8f55c3f5e5fe312036303fea9e0005d7e82617fa8bfbe881627b1d0145242d84bb790a53152
SSDEEP 384:5SZcInsN5/wuEwKDOjTVSSdTHVLj7O6R2FeoTioR:WnvSnHN9j7TRpC
TLSH
T13F826D715C786C775DA7E145E48A36038EFC81B3D7CA6B80E5ECAF1D01DA6A82317C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aeae7a510c7540e78e14fa9dc9e0d87fb1df0b61be3621fe7e6beedd00a61973
MD5 f8b481fc928c85c67c954f720f14f844
SHA1 18a697b746342a4fe566b99bd7da81a218d6bea3
SHA512 96eeb714d16483ba4fe0cbdfe165170feab46be5b097fc723e4ffef3042b1b98860e7864149357b5678b567ab813ce73d91379e8a7050115546c6e2d944c6afc
SSDEEP 192:SONK6ygpQmiUyIEtOCTVght+FdVaotzPtvGU6:SONK6lHStOCTVSSdTh9GU6
TLSH
T1BA02C734AC787CBB8EB3AE45F48726139F98117BDA962B94D5E84A1C01D775C2303836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfa2a532-fe30-492c-93a5-1bafed943e82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cfa2a532-fe30-492c-93a5-1bafed943e82.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6066fe88e4d8d23ed559d487bf296cc4c2047968ffd098632d7e1dce3c48d393
MD5 71019c131fc39c7f2e2b914f9ef97d30
SHA1 259e4baab189f23ba3eda14f10466b2ea62a14b7
SHA512 399182301befa9b704581ec4f489eb7b6f485cdeda898b478140e5a30799d52804746f0d1cc7c7919c7b938a67787eefe366d933e193b52811ba2e67deea59e1
TLSH
T15441F949AAFA1048B3B76F5A9BF6686D487EBD372F06C45E10110E8F0763A41D861B33
MD5 SHA1 SHA512 TLSH

Submit Download