20b89e28b109cd03b7363f99d91dc45dd84aadc1acb67dbe2eef9526eb726575

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_20b89e28b109cd03b7363f99d91dc45dd84aadc1acb67dbe2eef9526eb726575.html
Size 111KB
Sample260912-n8dbgsbc35
SHA256 20b89e28b109cd03b7363f99d91dc45dd84aadc1acb67dbe2eef9526eb726575
MD5 608052b9eedac1148f641b6e23c5febb
SHA1 423eeacc28172271f0e003811a383279879d3860
SHA512 08b10605124ae489e2595b1532f4bb34fc06d3480a220851e4cabb84d04d84fda258b70491e5d9893b9fea7339d5e2c31f69ffef58eea4c33240ae9013c6d943
SSDEEP 1536:UPxqYn+hGK3HRjaiaFzNENtTGl/QrTtVNo9xv1DdbEaojbEaomGx9XyZfuBSup:6k0QjNqdddojdomGx9CZfuBSup
TLSH
T1D1B3C58751204CF9EFA44DB3459B086B3C2C5437AC0391B9E3FD8F972B56DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
556	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338331998321625"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{54A3A95D-45F7-4585-8508-0FD539266A91}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 4768	2976	msedge.exe	85
PID 2976 wrote to memory of 4116	2976	msedge.exe	87
PID 2976 wrote to memory of 556	2976	msedge.exe	88
PID 2976 wrote to memory of 4116	2976	msedge.exe	87
PID 2976 wrote to memory of 4116	2976	msedge.exe	87
PID 2976 wrote to memory of 3660	2976	msedge.exe	89
PID 2976 wrote to memory of 3660	2976	msedge.exe	89
PID 2976 wrote to memory of 1236	2976	msedge.exe	90
PID 2976 wrote to memory of 2152	2976	msedge.exe	91
PID 2976 wrote to memory of 1236	2976	msedge.exe	90
PID 2976 wrote to memory of 1236	2976	msedge.exe	90
PID 2976 wrote to memory of 2152	2976	msedge.exe	91
PID 2976 wrote to memory of 2152	2976	msedge.exe	91
PID 2976 wrote to memory of 3508	2976	msedge.exe	92
PID 2976 wrote to memory of 3508	2976	msedge.exe	92
PID 2976 wrote to memory of 3508	2976	msedge.exe	92
PID 2976 wrote to memory of 4108	2976	msedge.exe	93
PID 2976 wrote to memory of 4108	2976	msedge.exe	93
PID 2976 wrote to memory of 4108	2976	msedge.exe	93
PID 2976 wrote to memory of 4700	2976	msedge.exe	97
PID 2976 wrote to memory of 2608	2976	msedge.exe	98
PID 2976 wrote to memory of 4700	2976	msedge.exe	97
PID 2976 wrote to memory of 2608	2976	msedge.exe	98
PID 2976 wrote to memory of 4384	2976	msedge.exe	100
PID 2976 wrote to memory of 2716	2976	msedge.exe	105
PID 2976 wrote to memory of 1656	2976	msedge.exe	106
PID 2976 wrote to memory of 3360	2976	msedge.exe	107
PID 2976 wrote to memory of 4184	2976	msedge.exe	108
PID 2976 wrote to memory of 4184	2976	msedge.exe	108
PID 2976 wrote to memory of 1892	2976	msedge.exe	109
PID 2976 wrote to memory of 1892	2976	msedge.exe	109
PID 2976 wrote to memory of 1488	2976	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_20b89e28b109cd03b7363f99d91dc45dd84aadc1acb67dbe2eef9526eb726575.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x25c,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,13843514772002568494,15175086979987134927,262144 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,5921837943318014420,16760448582091119981,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:3
  2⤵
  - System Time Discovery
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,15811371768589354190,516892054169607691,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,15374057640001661837,9094615777224678150,2097152 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,17570066720936118663,2876222294062965628,2097152 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,6251402344197782855,16381813941733534728,2097152 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4144,i,6640084492565238620,16628300268127661024,2097152 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,7824633625901172142,13287657822833437951,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11013310915958234539,5423064139324452274,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12131413249688392698,5304237832841193328,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12131413249688392698,5304237832841193328,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,2021795243983507981,13863725835962121529,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,16241705807398010810,12942531475282963685,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,8710888415818289516,15255747680816026827,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,5501342862442727158,6303062072818165592,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,1699299641943692926,14698033199928147481,524288 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,15337851948783953946,16971018713712630198,262144 --field-trial-handle=2928,i,1273770813715598042,508535223243937066,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 681a3484ec30b4bb016c9ecbf348fabc7881df6259896edf2f1cf81919f70b76
MD5 a9770782dd52b20d03c8b4462ca1fd2c
SHA1 32ee6f1ce3a4a5d163b5d4e885bb220ee8358790
SHA512 0b5603212776e56e7071a0e6d95fb70bf61fcf59cec18a3c13d3594ab4571915b5188cb15122d64ece60b87a99191a9ccf4ffbe67683b7510cde7e1fc90ec1cf
TLSH
T126514CB1F6ED74C4FB5C903997E001933F34B6C1A6B32E4A1EE4DBB408CA71D800028A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3f2686c046e5d317056103ea66aa6b04c4780cbdbeb731ec63c48574feec319d
MD5 77e6f90e491f2727bfcec45514547bd6
SHA1 e255b1aff38282cc50e64bf4efe07398ce77b828
SHA512 5712fe421491e6d3f1307e652c4e12d187b256265d3a46705ab814ff2a03be495082d5f83305becc3fab76223f2467058220019b68e813b7a280e8d814f9bbb2
TLSH
T122416CF7C3D8877E890156F4AB246E16CE2D0A56522C3C56C9E4EF2F67E28B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 64d02bbe51ae65c8c6b203a6f2326c387af0fef55d1abc674e17d8a548c31a9d
MD5 44be4f0fe60af0ff09c3a0b93dc3c452
SHA1 f516c2b4edce80c21b0fe27adbbe03f044105d33
SHA512 ff445fbae28bc51c075b025d49dc22b14592b677daa3f0dd3c5c11370f9e1a52a932ef774016e3922698ef87582bcd74ba5f25fc4a6c34e97b446ba0ca7933ef
SSDEEP 192:sxZHRdWX/fksO9IdpdXHW6+WNGY36aoTIgrJ:sxZH2X/fksO+hHbGXV9
TLSH
T1D812C8526E38A57B8CCBD20DBA25BF53D6F95032A1D01E48EAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d7c5f47745eeef9c76cb5340fa213e9f934b38dcdcd17e4c5f660c8ed6b77457
MD5 8684b5f6f1f05fe527c3b5afe57c33c4
SHA1 db70d61927ff1ecce6e21f792637f23f13a22ca5
SHA512 009a46d007373ddd87cfcb4bc1c90526910180a9d5e76becb8995ce8c8f814c3860fd81f3293682166d7ea73b7d7c92e03ea57d5b4e92e7e6007c4019d5c98f0
SSDEEP 192:sxZHRdWX/fks89IdpdXHW6+WNGY36aoTIg57J:sxZH2X/fks8+hHbGXVj
TLSH
T1F722D9566E38A57B8CCBD20DBB25BF53D6F95032A1D01E48AAFC861C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 90be0a7b5328c1584f5951d48ef256547e0c631d6d292a77321e8205742037ca
MD5 3e43dcf2b1872076d0487f14fc6d958d
SHA1 dfa0b011bd7d17ca995cb9365352bb6520952f81
SHA512 a096a375dfb5c29e069af4af797b79208ae3f271ec8fae8bd063cbcaa73feb8be78162785c35e9cb72b996beb59b553ee9e9774332afebe9dc0865de22802cc2
SSDEEP 192:sxZHRdWX/fksW9IdpHXHW6+WNGY36RSoTIg5ZJ:sxZH2X/fksW+3HbGXvV
TLSH
T1B522D9566E28697B8CCBE21DBB25BF53D6F95032A1D01E48A7FC861C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9140c800340175f5c8b69d1369706e69ea42df453c1774813b9a04a82b6961d6
MD5 51ae8919571f54c29051f9fd5c68847a
SHA1 d7b495846266cdc13fca96175c9ac48c3ae8df5c
SHA512 52df329895f87338d2b48bc0e6123b68762d3d2df7c3360073a6bb88fe548b779188f08e43ba8a4316b567ca090ed59874a1f9c5c81b1bf034b1d7dfc9bcb0f4
SSDEEP 192:sxZHRdWX/fksW9IdpdXHW6+WNGY36CoTIg5ZJ:sxZH2X/fksW+hHbGXdV
TLSH
T1BF22C9566E28697B8CCBD20DBB25BF53D6F9503261D11E48A7FC861C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e6940d306d43ca4c60be890ea08ccf38f63b3f27cbcda207dd27e4f283ca479a
MD5 abcbbfbca044e879057eb3ae634349e3
SHA1 c98008e4e03cac959002937df082e4daf074fb39
SHA512 eacc89e6d630eb87e30b0b71cf23eabd75920e888885a68ba3579fabd56d030cc4e4c294cb0545608866a3abbcf8eb0b6ad875144ac05bdf51cd16e86c32c4f8
SSDEEP 768:hFKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/yroY5:hFKlm7QWvUYe0u1ja8/L/E/pY5
TLSH
T14BC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D404BFA984C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fe487edf08af742b0b74ebeca0270a48d2134710f48639722a9cfc01a00926cb
MD5 3df74ad9ddfbe94ad2a59a110380f95d
SHA1 21730cf67c0bc72f23a6ef6af2d9099d34786b88
SHA512 97de7f590e965de6375e539c9f54b16a3d8e28ef9b33a81298416db0f8ee5d9b00e15036be0a85b64fc216a7af3c0606d9bae320791fb12a0be88da5a0f5e262
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGuuyLb5bIbVbpbzb3bLbkbb3bSbPISbBbkE:K4fSKcYwKOoKXqIp6Kao6G
TLSH
T1F191F30032BA0601387D25599573971F868172E33068EA3F7F7D54E29D6BE090EFD6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64270a6e-685f-4efd-a668-eaf452b422a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\64270a6e-685f-4efd-a668-eaf452b422a8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 70488ee6e20cb78cfe6fc3a22c26388fe3e04b890a4a6410e8ae9016fb034618
MD5 9e38e82a66b10672aafa1a90c95d622b
SHA1 995595698f363df25bb50c8c070af5c67d242f71
SHA512 82b3a448cad063a26fb2f472fc410aeacad7719df6eb238d04c82ee312368e6349e89d1715ce16eb3a0a479344314fe2580f45777a94586ebe65f89117838c6a
SSDEEP 384:csNN94Y/bQ0lh//2wZBU7O6R2Feo/h7UI:cqb/3BU7TR6Z
TLSH
T16C625B757878AC379EA79585F00B36139EB440A7ABC96F84D6EC5F1D05CB69C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 ec5a7951193fc438378bacf81287da171b4e569bd9ca46d7ba2a0d624a09f433
MD5 68747f1cd47f957414d43df95ddf348b
SHA1 a81b420076e56454c7bcf63f4c62b54493b2d415
SHA512 15ffb25581f582dc8cce0b223ab72dca24a857e8b07b258a66322d0c07c278cf963255de90f0da20a11e763f14eed81bc8d3e65734aaf415ca9aa4d3c5b51956
SSDEEP 384:cpiFiZcIL2sNX8TUNTUlIlbY/bQ0lh//2w/BU7O6R2Feo/h7UGo7:cAFQKawgkb/NBU7TR6Ls
TLSH
T1E0A25C725CA8DC7BADBB9A85F54A36138EF440A3D6C5AB90E7DD5F1E00DB5980307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4b145ec85a1cfed870bd4963c43af723d3fe6e120a46d4cad73c94a7bf9d8eed
MD5 393148d5f20408da1ae2e6b116e31d69
SHA1 8e7a1cbe64065dfc803739cdaf30f273a955bf08
SHA512 579978b2362c83b0fb87733d710433317cfddf7ecdc8c3e8bcab5faf1499296c34076608e8d6991fdba83d563abd6d48bf6b4ff8be5c1a62cc8283e163cb2e5c
SSDEEP 384:E2ZcIcsNNbY/bQ0lh//2wZBU7O6R2Feo/h7UGo7:Ekczb/3BU7TR6Ls
TLSH
T13C827D716CB8AC366DBBD185F44736139EF88063A7C95F80D6ED9F1E04DAA980307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 5c5d0845fa64ef33ae360418350f2797bbd67a7227d8679c425f24ee0ac2ad1e
MD5 798f577a84ca1a4619f2b34cbb4993b6
SHA1 7f60d0e524059cc8cae0176cb352a35d3a60f8c7
SHA512 7842590eadae45ef19a9c611874f0355cb75202dd1b14fde7c7922762b5ca92949c539cd8393c58d143f6b248e039ad06e6ca9e85227ff80ddfef0e91f3ea49c
SSDEEP 384:csNN94Y/b50lh//2wZBU7O6R2Feo/h7UI:c9b/3BU7TR6Z
TLSH
T168625B757878AC37AEA79585F00B36139EB440A7ABC96F84D6EC5F1D05CB69C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 24c2f21602b577caf20c1377c49be1018d43b571ed07b1a3186fddd0dcc2e484
MD5 927baf1d228d46b2db3ba3afd4d49455
SHA1 0df65267fd0189ac2deebe28e304bc9306c4ab18
SHA512 1a17d846347f18b14647790b92d8f2fbc3884221ad776d406cff9aac67fbe0db07ba2c5d533166169db12c8d06e5a9fc7cd7199d11b618948e019cc8a0c07e1c
SSDEEP 96:KqONkGQsjpfbUmjH5ih/cIPURHl8h4otop5WaDUBKP4v+Y1xf//ojdnx/yw8eBCT:BON+6JUm0QmiUyrYso//aywNBCB86U6
TLSH
T17902C738BC687C7B9EF3AE45B44777139FA4106BAA916F84DAE81E1D01D725C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 384cd6e9b6f50033b3fcbabc744e5c17a41ba28c5d77a9674a173458d82ce44a
MD5 74a6b8642c4cf286138fa6af2e9c4be3
SHA1 a32440e7b9af7d53bc9444ae089aaf89c5126c21
SHA512 f4f74659fddfd416c468b764000daf1271e9c70dedb21d9a35e1f33e41485794bc8d2c41633c696781c2a5d3653c3037ae03e128912311b477c2f6f253f68933
SSDEEP 192:BONmV6JUNQmiUy4YXo//aywwANxBP/z4U6:BON46+LkXo//2wqBUU6
TLSH
T192120835B868BC7B5EA3A981B08736139EA44127EB896F84D6DC1E1D01DB26C530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d95403c-bc85-46e4-9597-4a667ec220f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d95403c-bc85-46e4-9597-4a667ec220f1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 41b61c6fb90af1eae65d549cf2dca067dbf8e3b297ad5579fee6663d6f13c38a
MD5 e2b7fce011823021da771beb9d3800d5
SHA1 ab7913c1494b1356964be0344b71ba3aec8293f1
SHA512 952312385b83b9b251c28f4eadb08ea5e8c2ccfebfa1ccd55f8ff17fdb25bcd05a211973f6d5d4241fa44574bc15b2d93ea2e5042947268b7c375244e018c47f
TLSH
T110413959A6F91108B7776E5A9BF6A42E483FB8371F06D05E00110D4E0A23F00C9B173B
MD5 SHA1 SHA512 TLSH

Submit Download