c4b7d0d923fb90457271272454c873a04c627f4c51c90b764d2166066e0d5e1d

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 17:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c4b7d0d923fb90457271272454c873a04c627f4c51c90b764d2166066e0d5e1d.html
Size 40KB
Sample260912-vxgcbs1epf
SHA256 c4b7d0d923fb90457271272454c873a04c627f4c51c90b764d2166066e0d5e1d
MD5 08ace7837845a3b743973634f8504c36
SHA1 f4914c426fbbd5cb59a120fe2d2a31ada5b95cf6
SHA512 143b47f6a08b4928af01cb551c8e2d0aca1ad44d1b003a3def0bf388a6e4ed1a1749c8766994e30944db36297e2cf04d605234c24761715d490bf80b6944096e
SSDEEP 384:ZfPJ5Poi4Vkw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8+hwJY2:ZfBdoi4iw8hW8VgJG8yJMjB2
TLSH
T1C403A474B8C222230133A37D9BA79608FB74515B820653407EBC27EA1FF1954D5AFEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338249630580052"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{F62011CB-2AFB-4CD7-B72A-090502978FEC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
536	msedge.exe
536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4736 wrote to memory of 4360	4736	msedge.exe	85
PID 4736 wrote to memory of 2320	4736	msedge.exe	86
PID 4736 wrote to memory of 3204	4736	msedge.exe	87
PID 4736 wrote to memory of 3204	4736	msedge.exe	87
PID 4736 wrote to memory of 3204	4736	msedge.exe	87
PID 4736 wrote to memory of 3132	4736	msedge.exe	88
PID 4736 wrote to memory of 3132	4736	msedge.exe	88
PID 4736 wrote to memory of 1812	4736	msedge.exe	90
PID 4736 wrote to memory of 392	4736	msedge.exe	89
PID 4736 wrote to memory of 1812	4736	msedge.exe	90
PID 4736 wrote to memory of 1812	4736	msedge.exe	90
PID 4736 wrote to memory of 392	4736	msedge.exe	89
PID 4736 wrote to memory of 392	4736	msedge.exe	89
PID 4736 wrote to memory of 1760	4736	msedge.exe	92
PID 4736 wrote to memory of 5112	4736	msedge.exe	93
PID 4736 wrote to memory of 1760	4736	msedge.exe	92
PID 4736 wrote to memory of 1760	4736	msedge.exe	92
PID 4736 wrote to memory of 5112	4736	msedge.exe	93
PID 4736 wrote to memory of 5112	4736	msedge.exe	93
PID 4736 wrote to memory of 4080	4736	msedge.exe	97
PID 4736 wrote to memory of 4876	4736	msedge.exe	98
PID 4736 wrote to memory of 4080	4736	msedge.exe	97
PID 4736 wrote to memory of 4876	4736	msedge.exe	98
PID 4736 wrote to memory of 5072	4736	msedge.exe	100
PID 4736 wrote to memory of 4508	4736	msedge.exe	105
PID 4736 wrote to memory of 4164	4736	msedge.exe	106
PID 4736 wrote to memory of 1844	4736	msedge.exe	107
PID 4736 wrote to memory of 4992	4736	msedge.exe	108
PID 4736 wrote to memory of 4992	4736	msedge.exe	108
PID 4736 wrote to memory of 536	4736	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c4b7d0d923fb90457271272454c873a04c627f4c51c90b764d2166066e0d5e1d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd6610c188,0x7ffd6610c194,0x7ffd6610c1a0
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,17005736545870905965,4035338685979393226,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,13490565018779622246,9286880217424719431,262144 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,16631115224481122162,17914207142547738493,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,15613498515658135694,6431873737052909613,2097152 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,12923289106993627654,2928092844832806018,2097152 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,13358658852549036164,14092764771171719161,2097152 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,12874173753584210735,7445098922168291344,2097152 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14273037593067816284,7246272660635306771,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,8089920294441227154,13039660588449079188,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,12188650446628777296,10163655559235271802,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,12188650446628777296,10163655559235271802,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,14478557743350617666,14677885614836537191,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,9501413866911999187,12720862305972972903,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,14726229787748163033,14391079679540952819,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,2099579746275752526,9036270080136870897,524288 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,11533709175562381018,3863881594811148666,262144 --field-trial-handle=2332,i,14042253682437275106,13957026241057147622,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

30b784a5-3fdf-428f-9c19-30d35d62f09b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30b784a5-3fdf-428f-9c19-30d35d62f09b.tmp
Size 9KB
SHA256 8aeb1e4b6755d85119e5fa08137cedee9dcc05fd9281c471aa41a1fc917e965d
MD5 6484fc365170dcd60d308ba35a89fb83
SHA1 f8ec5bd355c578172c835c76eb264360e8894bcc
SHA512 d2520584c785ee517195742c35851812da125709da2edcd932f0202b018ff1d67d6207164f04181f9f7455d7de47843f1e651c73e7e0cfed7b12c13b81f07ed9
SSDEEP 192:sxZNRHWQ/fNs2dIdpd6HW6+WNGYgU4LIgrJ:sxZNYQ/fNs2ekHbGx9
TLSH
T1BA12A7116E28A97B8CCBD20DBB55BF53E6F9503261D51E48AAFCC62C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f0de443-ef60-4176-ba25-c848d0edc322.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f0de443-ef60-4176-ba25-c848d0edc322.tmp
Size 27KB
SHA256 4ac102ee17e1fc136283560bbd6b46fc31d315d5728dc1648cf05614b8397bb8
MD5 dddab75a5f6edd8fc6f8db41a9b08ea8
SHA1 f293e1d08f74297c55b4bfc7d7b64f35e9367fb2
SHA512 981c156d563c39e84a93dd701cf22c9236a8e0e783b6b6b38614364aa1ed1edd45a687a9b8ef717ab2aa4930189219d8ac131bcfdcbd34cde20f09528fd399ef
SSDEEP 768:E5ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzbro1tb:E5ichfPWvPZplu1jan+LKgzovb
TLSH
T108C2EA3B644CCB7E4FC01A9DDD1A6F977EA802C7A6588D4047FA984C02C77EE91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4d4fb7e5f6bcf7777a3b48fc192b7f1663799c44820d4bb280a2f2189d53c86e
MD5 57271e8c6ba1273a0ac1a75ae9b224a1
SHA1 5d9275b5cee3ceebc349a4158a96c23e4042c7a0
SHA512 7f2ebb2147741f3cacac29e6cc81475a764cf8b4c17bb703c0fc6f49dd43248d41e1355ba85a64f5d82b8861d23d69e880cf47bb69674122f8cb6c75284a4efa
TLSH
T1A1612C81169150D5EBA44E30D5FA119F3F3988B255C3BD3211FBD1396B4B364DEF4050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d230.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d230.TMP
Size 3KB
SHA256 b8307b1c36cc97f53a83e247b387ae7551925b3cb893743d47c48764ce9d32d7
MD5 230d9406c8b031be9e652d3f1f6fb2c5
SHA1 c658a57331b4776cd3b038d428818dcdff7b7eff
SHA512 c506c521488dee25d12295a1cab51b75edde34e19ef46e4b3fd5d224861384be66dcca27152a49ae89e60abe66ec9173caa0d9b9cf6661de3ecbdfe5e75cf40f
TLSH
T1F8611B812A9150D4EBA44D30D5FA229F3F3998B255C3BD3211FBD2396B4B364DEF4050
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0eea265a811301a9a8eb2c6bd121fd694ed06b7aa42a648af33b9004e6ac750b
MD5 b82a4f275e459cd4126ca1014ad66c63
SHA1 6f005d9e71192aed1132b8221659b65fdb4ebece
SHA512 7d9448c95b1e55df9da3333c2eaab47558195663685a6f4266147ab33860065f8e030e0c180d3175519dc72621edf77b24eb81446c604b56e6adfc276ab54acb
TLSH
T172216EF7C3D586AE890156F05A24AE2BDE2D0506832C7C1989E4EF2B97E3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a3065876b7e5f408ac8d060d5ccb0b0df66f8e67c04eb9160db5dc1078f09843
MD5 e672d7c09d68c7046a3a1f6c1219f452
SHA1 60d7063aa1d84affd651250be3a98f2708f6197f
SHA512 b9bfde88e011819bf27a5962c447368afdf8ed12911097c113bce56c149edc426820ac6c121b8bcf78a0997ef4508c11bb2192ecd11d4dd8b5f5906f7def9d88
SSDEEP 192:sxZNRHWQ/fNsQdIdpd6HW6+WNGYg24LIg51J:sxZNYQ/fNsQekHbGXB
TLSH
T14F22C9516E28697B8CCBD20DBB55BF53E6F9503251D11E48AAFCCA2C04E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 92ed4f335a26bdecf82332fa6c2b7d6e7d970409da04db228fd54ea9da6cf232
MD5 eb6fb710b2b05e0181af7fd8f05de75e
SHA1 d27550697f9ac4d01ec5800bc193c7e995b951f5
SHA512 059acd1b7c5ab6f74f712e381bcf6fe927a0a39c5bfbb486bd996a1b79e18321d92204d2a752db3369a9721892cc48420df779f284044bff90f8652bc48287e1
SSDEEP 192:sxZNRHWQ/fNsQdIdpH6HW6+WNGYgj4LIg51J:sxZNYQ/fNsQeaHbGEB
TLSH
T17E22C8526E28697B8CCBD20DBB55BF53E6F9503251D11E48AAFCCA2C04E7ADD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7903824e8c75b262d405c372cf1af95e741ee4d0c64315b858fb4a97268e33c8
MD5 4ebe78967fec949e43f727b3bc5fe59b
SHA1 6b4ece6b68e1d081692df85ab44f0b9beecec668
SHA512 70ea55cbf83642b8e1ef23230ca7b3a77550207d413629c240b33ace769810704af5b13a580e505097b9c62f727815d0a1d759661f4adb12be4180568cf4a271
SSDEEP 192:sxZNRHWQ/fNsQdIdpd6HW6+WNGYgU4LIg5nJ:sxZNYQ/fNsQekHbGx/
TLSH
T16122B8526E28A97B8CCBD20DBB55BF53D6F9503261D51E48AAFCC62C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f0aa6515e9407649d90755c318a79f6fb6d13663699787d9d69781d477bd6164
MD5 a066089f904f8c56c1bf2493f008d033
SHA1 945084f4fd15fec846509f88ef53905cb4b72a2c
SHA512 5eabb0263db8a62ee0f8b3c0de608da299f4e78cd8065a02c2b605cac4f4e5b95f9ecb43d9e7134624be03c496633a3554299be0de2c94253c8be27de72acebb
SSDEEP 48:K0hwdR7/DcbvaS9AsSwQhbM78ISEhK9I1ShxqxYzEwiyLjGnDtFVWbFIdISDWK9h:KUSFeKeYyicIKh66zKKwYH
TLSH
T1C591175131B7120438BD75A985E4CB1E965236B33015E72BBFBC41628DABE084EFDDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ba48b7a-59d3-4440-adb9-db101f8726b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7ba48b7a-59d3-4440-adb9-db101f8726b5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 828f6e1f73fd62e6a62da07dbbeb1a29beab9468fafc9c51275253dd2690da67
MD5 fd63a4cf357328a9e4ddf7f83739f40b
SHA1 b9fecd8efd2cd0cbeeed7c7e59252412f3f69eab
SHA512 e54b4a7b097b5aa247bc69af6021bb63fef79d3db8f91e5183d1b44d5f0c17a915901c134ff5fc352f2fa014ef3837f2574d9459e08f673022230b00cd10034f
SSDEEP 384:qsNP9ZrVQ5aVWBGYX5EE6qvs8sa+VYklM:q6reuQGYuE6Es8hgi
TLSH
T11C624B7168B4AC7B4CE79692F44736139FB8916797C93F6886ED5F1C00DE29C130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 41626eff8da5748fdd6991291b963e34d6430d99db4053a1d50ab438fcd171cd
MD5 5512739c78ddfa3a7eb559a2ae1ffbf3
SHA1 fc5953872934dc6fcee7acdc4d411495b05af1fb
SHA512 52f7e4e7b8e991ece61c2fc3e4743168585f3a9016182304dffb127ed8872ec5267de9fe3ef6fa7ab40a488ebee233c3f026a5ceec33c450355545e2d106b720
SSDEEP 384:SsNP0ZrVQ5aVWBGYX5EE6qvs8sa+VYklM:STreuQGYuE6Es8hgi
TLSH
T167624B7168B4AC3B4CE79192F44736139FB8916797C93F6886ED5F1C00DA29C130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 351190180e147e77cd86f6d09b935d10873b806fb213994c652ff359cb45ac4b
MD5 b56175e81c62a74b096966dbc1f2de8c
SHA1 3db2ec5a67168ef2a3f4ceb5a5c6fdb452a0b4c3
SHA512 cb3bb40df431b479a7d6a22c62c010987374c59fb58d7f20273671451f52171f1f44bd574d8b82323a0394104e0a6da59ff9eb096e5297db70d811d015d60286
SSDEEP 384:eZcISsNPIZrVQ5aVWBGYX5EE6qvs8sa+VYklxoG:cS9reuQGYuE6Es8hgfN
TLSH
T1C0828D716CB4AC7B5CE7D292F88736038FB8D16797C86F5485ED9F1D00DA698130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 fa0bb528c2de187d8ee34594a4ee82433b1083dd6abd982d5415595245fcbf2e
MD5 92fe8d09f31630bb1e53469e3a3b65e0
SHA1 5e02ad49f42cbf7751367777d52af337641249c2
SHA512 2e2a85f069dd234fd192e1716c6b541bcc20fffff9f85e5d52240076e16c581287dac4ecc0f8e400588a15cd897a09d29692745b49470f3d424d260f45c27abd
SSDEEP 384:LiFiZcI4MsNx8TUNTUlIlIZrVQ5aVWBGYX5EE6qvq8sa+VYklxoG:mFQnowgireuQGYuE6Eq8hgfN
TLSH
T1A5A26D725CA4DC7B9CFB9A92F94A36038FB88167C6C9BA5492DD9E1D00DB1DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b255e9a1e5b661a72641b2528043ad367130ed41409f1fe5c319b3ab8f18e5b7
MD5 700e286e35c957c08be554fdf2bc078e
SHA1 10d366196bf322bae34ddc98bf0ec04061082daf
SHA512 c9e293555cbff49582a70797719be952aa72bc54b5749cdb954e23bbb37751455aacb82a185f064b0017061daddc86d3cec2e23bea83734a5216b64a4cd6f54a
SSDEEP 192:LJONi6DphmqQmiUyRoq8wGYX59ezlCwm0kk7rgU6:lONi619BRwGYX5EEwMU6
TLSH
T16002E935EC797C7B4DE3AE45F5472B139F98112BAA916F84D6E81A2C01D768C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6d75d54085ad95332aeb76f9c0507e195a192c202c4066d6e712ab5e66b0a668
MD5 98a0a307206fa1172dc82c62e39a4665
SHA1 76925536b13351a72233c127e9256a3ac3ce7079
SHA512 0be9c06de7cfca625d0c9a2901e0bd7a28588737071c76d49a6ab0acebd217a04534b5a21e448e17a8c03f585b31fa03fce51bba8e720e4a571aea1e3b44ba30
SSDEEP 192:LJONy6Dph0qQmiUydoCwGYX59ezlCwmIqvqkIIu/5xU6:lONy61D/CwGYX5EE6qv78U6
TLSH
T13E121931A8B8BC7B5DD3A591F48735139FA8522BEB897F90D5DC1A2C01DF29C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 6663ce65ed89d21922b3da0db6abf14c0e7d961735e737a1bab6ca8bf772ca47
MD5 b083c4b897cc5e3b9dead7490021c5a6
SHA1 3d25a0666605856708eee074239f69e4f4da5a33
SHA512 184426c44677bc0f84faa4b9b14cdfd4c32c8e0fdfb762b0ac8bcbb058da340e18e8936041d3f9d257ef6f937de213184e4aba2e2d2c2abc52c82d39a64672d3
SSDEEP 384:qsNP9ZrVQ5+VWBGYX5EE6qvs8sa+VYklM:q6reeQGYuE6Es8hgi
TLSH
T148624B7168B4AC7B4CE79692F44736139FB8916797C93F6886ED5F1C00DE29C230B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 03a646420ef8582d119cbc38fba71c1fe4f0bbe34c12ae690e7bcf69d35c84ff
MD5 bb24b877e2597020eff6507549c61021
SHA1 95fef76e292e2593947ac5957a608253a80f3877
SHA512 40c79e07002f7c7e1985933eb949610cb05221fb36e79815f5c41f9fcb33ab54abb66ebc66d5216dd9f85de83c0ba31d90daeec4c21d321c4318b713ad60ce77
TLSH
T112411898B6E91108B3B76F6AAFF7B56D447FB9772E05C49D10110D4F0A32A4089B1737
MD5 SHA1 SHA512 TLSH

Submit Download