0b1a8b49617e1dce87b97b40abf3e9f4907c298ee9e0c1c7d33152128171ea46

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0b1a8b49617e1dce87b97b40abf3e9f4907c298ee9e0c1c7d33152128171ea46.html
Size 116KB
Sample260912-repdfa1tfv
SHA256 0b1a8b49617e1dce87b97b40abf3e9f4907c298ee9e0c1c7d33152128171ea46
MD5 cebffffab78ae4dbe21199ec6c0cd240
SHA1 5c03e8654566ca7d91d7920b83166c3f58d85a05
SHA512 9f5a2384e527ba7369917902a46dcb0e17d444c8705f16a8650d0a4bcc0c6053d91c7d623b8228d1c6cf25f3986639c6047e75fa61e829aad2e65ec70d694f2b
SSDEEP 1536:KNEQswYnl6E+y5Ilm9fCvTtCHyqx2nqaj+RR4sHfg/LRB04FW:Kq/aAbIte2nOb4U
TLSH
T145C3E69342201CF6EF6609A2529B169A391D013BF84740BDE3FCCF963B85D6E064B67D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4912	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338236889330705"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{158E919D-1D51-4E90-B96C-147A5AD742B0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4792 wrote to memory of 4980	4792	msedge.exe	85
PID 4792 wrote to memory of 4912	4792	msedge.exe	86
PID 4792 wrote to memory of 2608	4792	msedge.exe	87
PID 4792 wrote to memory of 2608	4792	msedge.exe	87
PID 4792 wrote to memory of 2608	4792	msedge.exe	87
PID 4792 wrote to memory of 1416	4792	msedge.exe	88
PID 4792 wrote to memory of 1416	4792	msedge.exe	88
PID 4792 wrote to memory of 4428	4792	msedge.exe	89
PID 4792 wrote to memory of 2696	4792	msedge.exe	90
PID 4792 wrote to memory of 4428	4792	msedge.exe	89
PID 4792 wrote to memory of 4428	4792	msedge.exe	89
PID 4792 wrote to memory of 2696	4792	msedge.exe	90
PID 4792 wrote to memory of 2696	4792	msedge.exe	90
PID 4792 wrote to memory of 2948	4792	msedge.exe	92
PID 4792 wrote to memory of 2948	4792	msedge.exe	92
PID 4792 wrote to memory of 2948	4792	msedge.exe	92
PID 4792 wrote to memory of 2620	4792	msedge.exe	93
PID 4792 wrote to memory of 2620	4792	msedge.exe	93
PID 4792 wrote to memory of 2620	4792	msedge.exe	93
PID 4792 wrote to memory of 2504	4792	msedge.exe	97
PID 4792 wrote to memory of 2380	4792	msedge.exe	98
PID 4792 wrote to memory of 2504	4792	msedge.exe	97
PID 4792 wrote to memory of 2380	4792	msedge.exe	98
PID 4792 wrote to memory of 4972	4792	msedge.exe	100
PID 4792 wrote to memory of 3208	4792	msedge.exe	105
PID 4792 wrote to memory of 4268	4792	msedge.exe	106
PID 4792 wrote to memory of 2364	4792	msedge.exe	107
PID 4792 wrote to memory of 4868	4792	msedge.exe	108
PID 4792 wrote to memory of 4868	4792	msedge.exe	108
PID 4792 wrote to memory of 4976	4792	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0b1a8b49617e1dce87b97b40abf3e9f4907c298ee9e0c1c7d33152128171ea46.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe814fc188,0x7ffe814fc194,0x7ffe814fc1a0
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,11495644184845006287,14187465394509661484,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,4277002019090937426,475193476088573924,262144 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,4981742768791199938,7138142670957353391,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,596860047388042347,16609615964295545695,2097152 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,15198937278358683983,2991824307968047539,2097152 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,7892176544856319022,18048662164794475429,2097152 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,1980785820440189238,9765516349113101771,2097152 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,8062411386342599584,13411499707465708391,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,11134483358667560458,17391626432633802139,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,15859016410720529316,8614267474684136532,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,15859016410720529316,8614267474684136532,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,1531405968730510906,5362755268240769354,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,9507646338194978450,17522830892667929619,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,12383161255451046825,877070107077566054,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,12282471536358844277,2267745978640991210,524288 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5764,i,7470057263722867152,9322440275962797962,262144 --field-trial-handle=2360,i,17621233722622480737,17445834726106626234,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 eb9cbeb9bf9ba90b81add8a35f1b990c1bf331588ad4006fb64e91678cd6b45a
MD5 2cbf226dc41ed7ca2bfa45056f63d080
SHA1 4755b9aee4c9564a09ab2075c6ebf4729147bf55
SHA512 4132e19d92246d78ba66ebf25aa1a4bf6a8c922a96dad01d72491cfd5717acf419fe7251a88b1c31043dd0eb69fc3b274d2a84c81fa8ca3054305abdaa1187ff
TLSH
T18E61D64CA5808856EFA84D3091FA238F3DF079FC858B5E0E82B2D879833A34727144E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c0e5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c0e5.TMP
Size 3KB
SHA256 f4bb917c7cd1c3e3cfe4806632a6a692d3e17f4456f22ea8e87f727565e70b4e
MD5 c56b89434dc1de93a8cc81fb5a3a34bc
SHA1 0fe6d539b08a46f8d945dc66ea98d5c9e85310ee
SHA512 92ec55d397aa0e38c8af9c0006a5c945095e271da9b4cdb20afe5438122088da9d40ce138e3ab6a0349817d760b9a0ac2db1fce18dae772eb47181d4da443fbb
TLSH
T18D61E74CA6808956EFA85D3091FA238F3DF0B9FC848B5E0E82F2D879873634727144E4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b5f3bd7eb750a75544d5df48e15bbcd834d0f055357d9ef0cff47a0b429932d4
MD5 65d08885901af1a132dfe35fa5fd64c6
SHA1 ed48c50b93109abb4ea680b4bcee3a4146a298d5
SHA512 ac0467c7847685367dbc57aceb8b274c097df1919dc1edfe1b3b7ff9990ff85a4fdb4169f4382adacfc3ccac5dbe24cd1a343d80e737abbc217b4dbe6ebe2672
TLSH
T1A1418CF7C2D4877E890556F09B25AE1ACD2C0A56422C3C1689E5EF5F63E24B1D101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 369051a362df30d4ef53ef6c8fb961e3c5cb5ce9097287d15186ca05046de19e
MD5 be36a6f99791e0fe48eaafcc76abb144
SHA1 7e940334a9ca4820a32e8082293c3443fea7368b
SHA512 42c3d1699f0b9e7438ff6f0d4e0f3d58dfb7a8772a12f6d1fe91d02cecf9e9f20715ef2619e4f0bf14495094fa60dbfa0f04ab4b64275d8cee06c5184f9e5ec7
SSDEEP 192:sxZnRCWh/fGsFLIdpdfHW6+WNGYrbPbIg5FqJ:sxZn7h/fGsFUtHbGci
TLSH
T1F822B7526E38A97B8CCBD20DBB25BF53D6F9507251941E48BAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6759801305ff50a9f6dc50cee7092c1eca7291856af4765cc9cf2631cb2ece5e
MD5 8773d591ff46cc63f6ab94a6e79417ed
SHA1 dcf7177d470a30ae538109789e485d751a593a1f
SHA512 bc67e10d00a88361c5ab30acd1853cca76786609aedb10d6580bf82eb3bccd88029f57f5306f6f422493a107c4158b1781135850c1d05a159d4fcd63b165c860
SSDEEP 192:sxZnRCWh/fGscLIdpdfHW6+WNGYr4PbIg5FAJ:sxZn7h/fGscUtHbGvg
TLSH
T1BA22B8556E38A97B8CCBE20DBB25BF53E6F9507251941E44BAFC8A1C05F7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 34c687aef40792a8764c6729cbdadb2b361fe58b674f60bdac0d31bc59eb02e0
MD5 592a361e42b4904f6bb8437a2c31f948
SHA1 e0a2e25303e55308e557611b6ba5374e222debad
SHA512 a591136c4d70f29be882248d0405578e8e92c9679e3d25181bec6eff565023764660c1d26a8bc4335c7f8f6bbab551ecc49f0f8ba4d2d179f3621b5c291321fc
SSDEEP 192:sxZnRCWh/fGscLIdpHfHW6+WNGYrAPbIg5FAJ:sxZn7h/fGscU/HbGrg
TLSH
T10B22B9566E38A97B8CCBE20DBB25BF53D6F9507251941E44BAFC8A1C05F7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 de46a101b4584adf86c31f3191c4bb75216b6ef16e9ff2102f2c5bcf5156bcac
MD5 063f611e9eb1749a9dc0d19173bd5217
SHA1 b5649c0f79389ad4e3a54bfc08086b7ac5674151
SHA512 98a57719a782a5bba596d33130374cdcde4f5bbbf7008189f882cacb7ae1a15ffa19a02a31d16ac85e33dcd0eac4735272a010a7e2164166411e2017fb4cd325
SSDEEP 768:2u2y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbEroRPc1I:2u2y4J/DWvbtBhu1jajiLm0bPVcy
TLSH
T128C20A3F644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e54fa7a47ff1576994149f159d204bdeffbcac0efda0b896883a09d6039b07d6
MD5 fdcec7ecf16d10f3261a88a3c05adc2a
SHA1 acc2c52410fb82e33558452b20f5d86f1ecc984b
SHA512 f7b9c8b219164394a58dfb7bc981342d2473fc628ed5699b4f0251a9f84f2f6ae9dbdab9c9edb9f8220c573ce807016ea66532696c4f73dfd106488839eaa86e
SSDEEP 48:KIDI1Ks04jyLwNwswhw9wPw7w/wgbwTwmwzISw1wgK9w11wXwgxwlwwYw2w3wtwQ:KIDCKs0+mZqKakS29yKGMdz
TLSH
T19B91135535BF020538BE345882B1C71E0E4232B77259E62BBFBC44629E6BE042DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc5e9202-86b5-4078-bf30-c8853a314e4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc5e9202-86b5-4078-bf30-c8853a314e4a.tmp
Size 9KB
SHA256 9dc1141eb545c0b3a2fcf8fa127fa631f04221daea8787378a384af9cf7a4342
MD5 e8f2d80eba9bb221662788a1ff24a5b3
SHA1 0073e1ab01a984a7aa64aee2d49f11c1481eabd9
SHA512 7041324e74ac35e91a9b8279387fe38e9220dfd7b26eb6ce8a4f1e5a0bda7455a98966f4b7bc6b4f1961f6a16b7ba5e70c1ad595a7688f833e7b2f981b7ce471
SSDEEP 192:sxZnRCWh/fGsULIdpdfHW6+WNGYrbPbIgrJ:sxZn7h/fGsUUtHbGc9
TLSH
T1261297526E38A97B8CC7D20DBB25BF53D6F9507251941E54FAFC861C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7443a48-a6bd-4d1c-b42e-226c0ef831da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a7443a48-a6bd-4d1c-b42e-226c0ef831da.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3bd530177b99e1aab1d5ee1d149804688e7257350e5011d1d33ccd524fe81c2d
MD5 55cdb0aa2e10ecb774de88f66d2da923
SHA1 6d208520d4fc67762b1371ac83a4525c782f223b
SHA512 0b06ffccbe3b6ae74ead62cc127a113135c8a8a2b53644b501cdb3950a38048b35013f21120e6a7517e00f5845308e21cd9f000bcdcfe49063f2818c95bb77b6
SSDEEP 192:ucXsN+0ZQZo2lDZddQmiU1/4p4HX58gZqjzorqXaUP1/toU8:5sN+0Zco2Zte2HX58E28qXRXoU8
TLSH
T16C420631A978BC7A4DE3A044B08732139FF99067DB896F90C6EC5B1D00DA6AC535B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d532164f2c36b5fdad40d2793a833d30cdbc2375aa9b1ef04cc1419eaf090322
MD5 46529e3edee6d12b417cb3ad8eedec15
SHA1 d5389d632d08124a51a8fec3185284f596ef01fc
SHA512 2404f53f58d3f5137af5fe6dff3a95cc812478597ed622eb40c69c96e36cbbe428b32067d55f0aa08090711c3564c0337eb7e1e9979fa7517793f25b665c28c7
SSDEEP 192:ucXsN+0ZQZo2lDZd2QmiU1/4p4HX58gZqjzorqXaUP1/toU8:5sN+0Zco2Z0e2HX58E28qXRXoU8
TLSH
T167421731A978BC7A4DE3A044B08732139FF99067DB896F90C6EC5B1D00DA6AC535B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f0442b6c35947aa5333eb1542c6b97966c938a1fb0d4710f5ff8ddbf2a4b2aec
MD5 ee0600a4a234999cb7231cc74e499daf
SHA1 e10e1d6702581778b405d68f6c2187f05c1aaae9
SHA512 0a172f7bd5f642e261efc0ecf2a49a9b02e4f7008f6ab88eb027635a0d67a33046332aaaf2f7f8957003437251b309c4f2895ffbc5bcf97c2a8073d9ac2b10b1
SSDEEP 192:1ON06wlDgQmiUyFvW4X58gZqjzorCDlo3U6:1ON06kgqW4X58E28C2U6
TLSH
T1A602E935B9687C6B8EF3AD09F48726139FE4102BEA952F40CAEC1A1D00DB69C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 57963628e3fd3d4ea2bde4279b778090cc324ba75e51e38a1ce6090b9dd873e0
MD5 d0362cd7348e1c26efd7529a81f7b0b8
SHA1 130f9f327f172ab06523cd0c0d31b9b9b5ceca48
SHA512 325bbd732451cd7f3ca2059f1b522c8f4a106b612a7c6343149d3c3b11aa1004fb2d6fa8b87f54e95e993846518f14227942b60ada0b179408e0bcb842d794ee
SSDEEP 192:upXsN+BZQZo2lDZddQmiU1/4p4HX58gZqjzorqXaUP1/toU8:usN+BZco2Zte2HX58E28qXRXoU8
TLSH
T1AE420731A978BC6A4DE3A044B0873213AFF95067DB896F90C6EC5F1D00DE6AC535BA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b7fb8b291611d01871b2debf434418e56b9bc82b9efb7068d0f9121397985391
MD5 2c4d4a1eb78a9949a3bb6274c1f6a840
SHA1 10ad98ce6aedfaf754d53436b2af4f2d3e32647f
SHA512 967a2fdca354ecfb443bc47dcf55e857c101d7571918d1c61c8564b0cb4f40966ad411b958aa64ce32016f61e507ebcd5adbc6b123dca00a22104072fcf3919e
SSDEEP 384:FiFiZcIjfsNO8TUNTUlIl9co2Zte2HX58E28qXvXosa+VYud7UkoG:MFQ7nwgMo2KQaFvYhgVJB
TLSH
T1FBA25C325DA8ED7B9DF79A81F55A32038EF840A7C689AA50D7DC9E1D009A6EC0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 79296cb20c88082848f61e4d12e9c4779e8f1467d9c7b4956bb104debc3b9120
MD5 2d23ffb6a275319c7470192fbbd9bf39
SHA1 11f5d62852a58cb08807126601d2750e7e072a7c
SHA512 541f5d9948d1349d25eacf224dd8cae047cdd164369d16bfb7e816410c7a20d8b1144de090a92eccb14113dc3c945a3e2ee3faa7fe595dcb772107edde1c8e48
SSDEEP 384:PZcI1sN+9co2Zte2HX58E28qXRXosa+VYud7UkoG:H1Eo2KQaFRYhgVJB
TLSH
T194825B31AE78AD7A58E7E151F58722039FF890A7D7C86F50C6EC9F1D009A6A8030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c721c171c326f0695d551661b0dc3d2a65eca999af9757174698a3fbfc6885a4
MD5 ca32c5fa0ad0cc2a698caecf9aa75206
SHA1 ee24807a56800f59bc49ee36fcb8c3d57f2e7c36
SHA512 13a1f0a1657a05e5d3043c8a8c20b8b7640cccfd222de99bf1a344acf580016a316a99dc6d66b725fd73e1180254d23718ee844347e9225cde0d17a43c94bcb8
SSDEEP 192:1ONf6wlDpQmiUyqvi4X58gZqjzorqXvve1/toU6:1ONf6kHfi4X58E28qXOXoU6
TLSH
T1A312F835B968BC6B4DE3A444B08731139FE9512BEB896F90C6EC2E2D00DF66C534B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 93fa1d3b1e6650b5c254534211223dbc85480c0452b87d9f323cb5613074485f
MD5 4e6771a8660bb5834b90b8f63fbab114
SHA1 292eacf51a311cd8fad112450270e585498663c8
SHA512 9410a9f48ba65f231fa6ad22cbee553878d7154842bd54b1713e07155dacfea907203bebc6f98c6f03adce2b7a0aa4f7d3e8f72acb581626a28f85a3d7cad6f1
TLSH
T171415D58A6ED1148B3B76F5AABF2786D847A7D7B2E06C15E00110D4F0623A00C871737
MD5 SHA1 SHA512 TLSH

Submit Download