089a93499323fc4a5a8577bf39421cb0cd374ac7860e6e7955a215bb2cd34195

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_089a93499323fc4a5a8577bf39421cb0cd374ac7860e6e7955a215bb2cd34195.html
Size 130KB
Sample260912-lf3pkatblf
SHA256 089a93499323fc4a5a8577bf39421cb0cd374ac7860e6e7955a215bb2cd34195
MD5 267f1b4fcd98364055bcf4528b34d961
SHA1 fd489e69f18c2c2092a88f88a1cf0c5f5d0c85a3
SHA512 58fec4ae4d013ff4572cb73f3e192ee5226cf83ca9364dfba8218f8965977778de06bbc0c6c18678dce25e2a63162e8ab70fb0713752e4f333d042004c1da306
SSDEEP 3072:mQqQ1NKPoLCtdo3doeVGBM0siy4BilxC66Bd0:mZQ1Nx8do3doX66Bu
TLSH
T1DDD3C59712204CF5EFF91DB309DA086F3C2D1437A80290B9E3ED8E965FB795D034A5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4484	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338182080287772"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{EE7D6FB6-0591-4751-8608-E5915A1371CF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2076	msedge.exe
2076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3904 wrote to memory of 5084	3904	msedge.exe	83
PID 3904 wrote to memory of 4484	3904	msedge.exe	84
PID 3904 wrote to memory of 1628	3904	msedge.exe	85
PID 3904 wrote to memory of 1628	3904	msedge.exe	85
PID 3904 wrote to memory of 1628	3904	msedge.exe	85
PID 3904 wrote to memory of 3992	3904	msedge.exe	87
PID 3904 wrote to memory of 3992	3904	msedge.exe	87
PID 3904 wrote to memory of 3928	3904	msedge.exe	89
PID 3904 wrote to memory of 3928	3904	msedge.exe	89
PID 3904 wrote to memory of 3928	3904	msedge.exe	89
PID 3904 wrote to memory of 4732	3904	msedge.exe	88
PID 3904 wrote to memory of 4732	3904	msedge.exe	88
PID 3904 wrote to memory of 4732	3904	msedge.exe	88
PID 3904 wrote to memory of 1496	3904	msedge.exe	90
PID 3904 wrote to memory of 1496	3904	msedge.exe	90
PID 3904 wrote to memory of 1496	3904	msedge.exe	90
PID 3904 wrote to memory of 5008	3904	msedge.exe	91
PID 3904 wrote to memory of 5008	3904	msedge.exe	91
PID 3904 wrote to memory of 5008	3904	msedge.exe	91
PID 3904 wrote to memory of 4460	3904	msedge.exe	95
PID 3904 wrote to memory of 4580	3904	msedge.exe	96
PID 3904 wrote to memory of 4460	3904	msedge.exe	95
PID 3904 wrote to memory of 4580	3904	msedge.exe	96
PID 3904 wrote to memory of 2220	3904	msedge.exe	98
PID 3904 wrote to memory of 2112	3904	msedge.exe	104
PID 3904 wrote to memory of 1612	3904	msedge.exe	105
PID 3904 wrote to memory of 2096	3904	msedge.exe	106
PID 3904 wrote to memory of 3036	3904	msedge.exe	107
PID 3904 wrote to memory of 3036	3904	msedge.exe	107
PID 3904 wrote to memory of 2076	3904	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_089a93499323fc4a5a8577bf39421cb0cd374ac7860e6e7955a215bb2cd34195.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffa8ef8c188,0x7ffa8ef8c194,0x7ffa8ef8c1a0
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,4426295693655537304,1179384590543771213,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,4537274468389404346,6152821218166790381,262144 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,12221233469759620790,2294178560401328638,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,13151224118406342455,10344581064445974912,2097152 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,2880869755916840586,12240248926058696394,2097152 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,3026659307057781735,17308356748991764262,2097152 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,2704096028705645389,7113874478854215027,2097152 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3920,i,2757872358646279164,10092130947074194298,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,9808534901595514729,11979442013020076530,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,11314495825837039140,13539415720380487801,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,11314495825837039140,13539415720380487801,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,9382489984287038858,640129451927345411,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,12538039165028051785,12788080997406063,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,18208543028023999642,16465941629768796485,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,3928583317006892680,14151537381273374336,524288 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,1833247502571687361,16124875652750084671,262144 --field-trial-handle=2052,i,11616636829430892693,967529486088350128,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e9ffc6de81fbd64f39341ade00b48bce962b27c0432b72e2de0f119ceb103192
MD5 ba834b8a3709a240ed4587831ea00b25
SHA1 5f15b5b0e219fa0fb10741af833826fd236e2e86
SHA512 587597435c029324174dd8b9958af0413e4a7ceefa7cc0aa1c2c06d0525e1a498a3ea0878fd6e7618e50ad77b27ed013fc12a630cd8a9dfe16e4da2612ac79a1
TLSH
T1246142CA5ED0287BFF6865B0C1FD154B3B3034B045A31F5A28E6F8741E8D7892D96238
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e7bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e7bb.TMP
Size 3KB
SHA256 adc26c23b13881a54bf34f2025742dcd5b4c71bbe5057f99354e670694d935ca
MD5 dbe5216330a43c0cfc5693472824878e
SHA1 69dcda471ca6a603ecb2dc879ab58f97cec95651
SHA512 127ae69ea9b8a7fb6030962fd22800953d1a286b6558b23c1381edbb82a2ab00e657add0eb329ea6f3a6a65fc7012d360171739bee587b9ef524850845d6f028
TLSH
T1EE6143CA5ED0287BFF6865B0C1FD154B3B3074B045631F5A28E6F8741E8E7881D96278
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 99291c5bbf27ad4e71d3edc3b0ce1dfab2fb55e67547a708911fa3ad99b71576
MD5 a5e6bdebeb5daea8d0db3b88709c0996
SHA1 1eb5d29091cb69e7f0d326fcd94b3a628ce69d30
SHA512 ca4f0b43c3907fa01759e890995d91de7c1f683899745f96caceaef3d4226b5a7bd995ff52f3a3bae957a9d8e961f31c2fd6bddfe827d1e553c52d96dd5c484f
TLSH
T10B417BB7C3D4877E891156F19B256E2BCE2C0A4A422C3C56C9E4AF1F67E24B0D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 af515c9ae952821670ecbbdb5e2a30b6a6989f95c7ba6db7275b29807944462b
MD5 16e3912ec202fda366592a9671460af7
SHA1 0015d5d4a17ef030298d6f650efd0ad42d0d3938
SHA512 e0de380a66ab4da3444a2e581fc95b9f8a15f766a0f915cb40bef1f4a591fe8278fb03530cced364a79e50bd00d539c439ae8269cdb0d0601f8d3f5a6ef28eee
SSDEEP 192:sxZaR+WQ/fNs30tIdpdTHW6+WNGYaQUJhPIgrJ:sxZanQ/fNs30OhHbGBhv9
TLSH
T1A712B811AE28A57B8CCBE21DBB65BF53D6F9503251D41E88EAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 991fc3e548febd933b2001e44037e1c5b4ad52398a3df916b5613982367d39c3
MD5 923b71e351e0a43df117888a3ed118a5
SHA1 dfa0057d768d61fe576719b66f61f9db783e42e8
SHA512 611ddcc18ca0c472dfdc114c82c3cb3dacc5ba6abedf61d8a617f79f387dbe86b0c120768dd51cf7c4b707f4b5e6efdc3644cd1571a3b9acd3ad3e5a02fdbf62
SSDEEP 192:sxZaR+WQ/fNs60tIdpHTHW6+WNGYajUJhPIg5PJ:sxZanQ/fNs60OzHbG6hvj
TLSH
T18E22C911AE28697B8CCBE21DFB56BF53E6F9503251D41E88A6FC861C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3d9b212fd289adaea78a46be11c0420664aee831657827c4325bd3835fe06982
MD5 3c298876fea72ce8e14012c7541df099
SHA1 e4363b6bedddb3676ff60ce93d20e5142f9dd08c
SHA512 a736c0a833d31baca5ecabc75603798f0486830421de602d716f5919bb84894afd5d79d7a0b50bb014ee1cadc0644cf4ce68b8028ffcedbc36f536c124e50bcc
SSDEEP 192:sxZaR+WQ/fNse0tIdpdTHW6+WNGYaQUJhPIg5lJ:sxZanQ/fNse0OhHbGBhvt
TLSH
T19822D811AE28A57B8CCBD21DFB55BF53D6F9503251D41E88A6FC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5c7ee5a8f2a9c0b840f0bba95ba55cb6c664e92458aa6366b383eccd3bf70af1
MD5 afe2875b91f1e1710c908880520494d5
SHA1 7ddf9c2b080e217c8eda7968adc796dfc77de069
SHA512 1defab6fbe7ec42698ee7c75b1a9fe64e8b8d6baaec00991c0f33fc001b952838cf9bb56f432917a6a31a42d24d99d9b8c36b43b9fa66027a4dda46a9c637351
SSDEEP 192:sxZaR+WQ/fNs60tIdpdTHW6+WNGYaCUJhPIg5PJ:sxZanQ/fNs60OhHbGbhvj
TLSH
T18322C811AE28A57B8CCBE21DBB567F43E6F9503251D51E88A6FC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6b9426ed35ad49632fa9b3521abcd358885526e08509822891c6fa1ae6afcd4d
MD5 4bb3736de9c8486bf045b72663345d29
SHA1 2dc8a764b5a6ba639ccd3c78ac81d1e341dee465
SHA512 d30e1e63e414e29b257c4beea59f074c9e89679094200217ed883a062c76da2a5fe4b2b055ba24741b3d8022283ed520159d10564489c8884925e18e53340df0
SSDEEP 768:8FyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3ProlZ9Z:8FyQRbrWvvlpZu1jaXKLf33clZ9Z
TLSH
T1FDC2FA2B640CCB7E4FC01E9DDC666F976E9802C766988D4047FA994C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e5c5d2789f2a07d28a829b9d4f9c4aea4c73c25413c6998032bd16746069840a
MD5 c2ea4f58e85e41124d08dbb9e5091e40
SHA1 9955dbfb0b85ed1bf2db2b65b50b45231b158b94
SHA512 e9dbaf018466d28c0284f2007b0ecec181b46de8fb0dedb85dc24e204375027d31cf5ec4f159f541d92ca67b6add6bad316230dcf808caa136c122757d8adc9f
SSDEEP 96:KgHmKQou6ucK3q8t0BdnDfkvDePh1kKJBht/OK88h:AV3lt0BdnDfyDeJ1pBhco
TLSH
T15FA1085130BB064038BE659981768B5E564131B33418FA2BBFBC01E1AD6FE085EFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5983dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5983dc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8bd8790ce923f759e65cc0694ae638349b21cfe60e3d539d8a880430f6654f61
MD5 71ed9e5c3c688d30ba1e3ef97adeb185
SHA1 7576c5ad1a1ec9f5d05fc3c7d8e83ec3e59d9477
SHA512 c3de8dbc12eaf1de0c514f781a8620c2fef6800067d7bda440d580d876dd74d5abea2e16d0f79a936b9ac6240db381cce654ed44aa90a04bf8414d7b226c383a
SSDEEP 192:ub+/sNgMQQrJqaDPXrnQmiU1bTf4p5u88PjO7FElAw/qU8:B/sNgTct9VQp5u8ijOBLrU8
TLSH
T1E7420872A8786C3B6DE3E954F94B36139EA4412BA7C83FC4D5ED561C01DB2EC130B616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c9b3b901656b78e6ee42ccb3db88bda18046d49ceb1a050f2c9e647713f57ada
MD5 00dcb4864fba4a48dcee5def24778657
SHA1 5d1bcf2c08cf45a07e4e5c92da476fe4b775b0f5
SHA512 142332f2d33959fa389e2d675cc1a31750b82b474e9a4a87a6eb78f2e0cd562c1a7135be401fec7bcc78a7a54a5799dab93e166dca6337d6ceafea54885365f9
SSDEEP 192:ub+/sNgMQQrJqaDPXrmQmiU1bTf4p5u88PjO7FElAw/qU8:B/sNgTct2VQp5u8ijOBLrU8
TLSH
T1E5420872A8386C3B6DE3E954F94B36139EA4412BA7C83FC4D5ED561C01DB2EC130B616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5e7667188b9492e0d68c4a0348094b1a06fe4738e29a7c22acb627821d954e7a
MD5 b1f6b092115dc0f57e9c52635100a3b5
SHA1 515dd3a9c8e8a89f97ffc6dc242fb59755cafed6
SHA512 25f8453735ea2110aa5118bb29dcc13a6351718d5a89e8b72a54e6e0da90ed26e33bea93e741df20138c8c7800b2634222da774258420abbe5bd0a0be3b7904c
SSDEEP 384:ZHZcII/sNgsct9VQp5u8ijOBLrBkwc0aFUoP:ZvI/TKkUrBkuaFUY
TLSH
T10D927D725C786C76A9E7E551F9473A038EB88167D7CC2F80E4EDA71E01DB6E81307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ace9c7cb0808e2ff03af983fa1ca32fd68777a7397facc03047aa1c0d3474883
MD5 94a4b89fc476db2e26c8ed6c907846ba
SHA1 2bf70a0bd7b4314db41124529e4c887c461dff62
SHA512 1478836f998dafaff9e49c05824dada5b633810cff1069474bfbb3e7d59e521b1a895774b5a6b9e4ee0d2246c1eb05b2288aa701989f7a2e35184647f88e1639
SSDEEP 96:PqONkNQsjpfwDISp5ih/cIPURHl8h4otop5DmD+BfPGxvw45RxmJm78lFUxFqsef:SONV6iDCQmiUy8+Hq5u88PjaSqfcpLU6
TLSH
T17602E739AC782C6B9EE3AE05B5877B175FA8013FE7942F84D9E81A2D01D729C1307522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 861094d5972d5abc42b0856b9204e32e65dcb31e679bd1bcd183c97392937a60
MD5 152895ea2df54c3ed1278f7773ddb2c8
SHA1 07fd0b074325a15d28b5e67e1008227f33503b6a
SHA512 3e22715fd26a412c088b166df5d83b795ff080e0c0acbb5f5dd3c45e124089cd4251ab5c2bf2e681b595103d96e572940317cc6d2c1abcc99439dfa9370dddae
SSDEEP 192:SONx6iDsQmiUy2+Qq5u88PjO7FxuZw/qU6:SONx6NYQq5u8ijOBorU6
TLSH
T120120936A8786C6B6DE3A950F58736135EA5422BEBC83FC4D5EC162D01EF29C130B512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c18f3ec62a5e96b672835658d59d7b0c891b49832330f0f9c3ce1aa60d4005a1
MD5 2c854c40d6553afbca29290ad43a251d
SHA1 20b066dcc79e463873a45c1ef59dd1d0f70e23b9
SHA512 206c1261859ebfc6a293b64585472e017710ea559b9649bdd003c09f44965cd88d3c811feac39192d7d5df457ccc580a4a011122738be9ae06d4ed485dfbd745
SSDEEP 192:uqE+/sNgdQQrJqaDPXrnQmiU1bTf4p5u88PjO7FElAw/qU8:ZB/sNgKct9VQp5u8ijOBLrU8
TLSH
T187420772A8386C3B6DE3E954F94B36139EA4412BA7C83FC4D5ED561D01DB2EC530B612
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 14e171f987e1f5def4ad0ef1230ebc6bc68370df49d2370e701282c0b7f062e4
MD5 2a586f326ce0e62e56219846220ba8ba
SHA1 62430f872345ee23ee1c41f2a3e60066caeecf9b
SHA512 ab074a12bd6d8f1663be369b650e1f8e1e3f60143517ccf0bb9989682630d6b6078e53cef5363282880b1a630af5d72161e3477e76311c78343c548537171682
SSDEEP 384:BziFiZcI+m/sNg8TUNTUlIlsct9VQp5u8ijOBBrBkwc0aFUoP:BeFQt/NwgNKkOrBkuaFUY
TLSH
T197A26C734CA8A87BADF79A41F94B36038EB88167C7D86B80E6DD961D01D71E81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ae8feb4ef5f47e17b09fe1764ef8d655fde2335575ed6d922cebabb7450c799f
MD5 509a69c5a5c1e185ddc0f81fd96755d0
SHA1 9caee47932c4934d0bb9a44da739c1bd282ba871
SHA512 11cae9cca9d5f7e4823fa7b0896e851a8b3569dd150abd1e53dd0eb9e1befd43d3645959e370130d2f37802585d955ef4b7fd12d0263fb1116fc929f249d5199
TLSH
T13F41285DB6ED1048B3B36E56ABF7B86E487BB9732E0A945D00050D4E4622A44D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download