e769036c04c1a48b2476d27a633813e6322b0a479664ee60e48706afabee1443

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e769036c04c1a48b2476d27a633813e6322b0a479664ee60e48706afabee1443.html
Size 114KB
Sample260912-thbmvszflb
SHA256 e769036c04c1a48b2476d27a633813e6322b0a479664ee60e48706afabee1443
MD5 3967b4158d6e975bd67ea1bba7affb91
SHA1 26c3d9c0a6baec35f72e5e79498a6d9f32af442a
SHA512 2f63f35d96fb6426c6b7663ffa37c982aa8a071a07f869fe46b8ef8acf5debd7ffc7960eb9438497040e77013f7a5fdc39ab11c1f8d4bf57ca1bb0a05ecee7ae
SSDEEP 1536:AXxfYn+hBm5R6fwUkNIlbQtTt7NoLxStV1bEaoxbEaoDnoSX3ti:e/RQrNlb1doxdoDnoSX3ti
TLSH
T15AB3B69712204CF5EFB45DB3459B086B3C2C1437AC4390B9E3FD8F9B2B9696E034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338242529078882"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{2E35F33C-5CAC-44BC-AB65-C847B4012361}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
64	msedge.exe
64	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 3024	3000	msedge.exe	86
PID 3000 wrote to memory of 3716	3000	msedge.exe	87
PID 3000 wrote to memory of 1152	3000	msedge.exe	88
PID 3000 wrote to memory of 3716	3000	msedge.exe	87
PID 3000 wrote to memory of 3716	3000	msedge.exe	87
PID 3000 wrote to memory of 2008	3000	msedge.exe	89
PID 3000 wrote to memory of 2008	3000	msedge.exe	89
PID 3000 wrote to memory of 3688	3000	msedge.exe	90
PID 3000 wrote to memory of 3688	3000	msedge.exe	90
PID 3000 wrote to memory of 3688	3000	msedge.exe	90
PID 3000 wrote to memory of 5000	3000	msedge.exe	91
PID 3000 wrote to memory of 5000	3000	msedge.exe	91
PID 3000 wrote to memory of 5000	3000	msedge.exe	91
PID 3000 wrote to memory of 4184	3000	msedge.exe	93
PID 3000 wrote to memory of 4176	3000	msedge.exe	94
PID 3000 wrote to memory of 4184	3000	msedge.exe	93
PID 3000 wrote to memory of 4184	3000	msedge.exe	93
PID 3000 wrote to memory of 4176	3000	msedge.exe	94
PID 3000 wrote to memory of 4176	3000	msedge.exe	94
PID 3000 wrote to memory of 4536	3000	msedge.exe	98
PID 3000 wrote to memory of 4684	3000	msedge.exe	99
PID 3000 wrote to memory of 4536	3000	msedge.exe	98
PID 3000 wrote to memory of 4684	3000	msedge.exe	99
PID 3000 wrote to memory of 2392	3000	msedge.exe	101
PID 3000 wrote to memory of 3344	3000	msedge.exe	106
PID 3000 wrote to memory of 1084	3000	msedge.exe	107
PID 3000 wrote to memory of 1356	3000	msedge.exe	108
PID 3000 wrote to memory of 4200	3000	msedge.exe	109
PID 3000 wrote to memory of 4200	3000	msedge.exe	109
PID 3000 wrote to memory of 4576	3000	msedge.exe	110
PID 3000 wrote to memory of 4576	3000	msedge.exe	110
PID 3000 wrote to memory of 64	3000	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e769036c04c1a48b2476d27a633813e6322b0a479664ee60e48706afabee1443.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb92b0c188,0x7ffb92b0c194,0x7ffb92b0c1a0
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,10622370976532543207,4550226257391790112,262144 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,13005475203118393386,7494234624323595022,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,7488921545592830810,2202888864360742720,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,876974933572735449,17051933687467295468,2097152 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,9956035454335537798,14771665607937907624,2097152 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,2968708266275085758,5712292668418613078,2097152 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,4483053710945105342,15018706269916997069,2097152 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16629467633864134174,7778999907143352300,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2570792288348319577,15305693229655375433,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,13453113724225196256,15645642231251956658,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,13453113724225196256,15645642231251956658,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,17779561894258302897,8757667475120452878,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,13554674542502267597,1044684235512481012,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,1922852826016503451,5742275807724346210,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:8
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,355398667395967956,10811412447650650373,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,736666414052316836,14884021303736675029,524288 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5760,i,5999490903271508157,7648988147221179106,262144 --field-trial-handle=2184,i,5002318763020585769,18105117905640847461,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:64

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c437984230065b19b270a082174a779f9e4089af03b6c44e2aba233bf97d729e
MD5 1be08f3f178ba18cbb3ce1c20e0d98c6
SHA1 dd6f059ac26c24144e4667054a60ecfea2dadc8e
SHA512 2e6114db6b2c0ddeb5be357e73033443833e749dbb181cc014b6ece572b2833a2e48df7a668dea658c272cff094441fad8f3e890546382f6ebeeef29f3263e05
TLSH
T16B617383594040A5FBFC603193F01E8F37F68E81A94B7D53319CF4A7DA06F169239894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fd66.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fd66.TMP
Size 3KB
SHA256 e1f2f98425af7128d5a83c27a4e0ce42fb8bea84e6aaca25cb84a6662e20505c
MD5 999812f25fc986a1f2e55aa86abf93c4
SHA1 904371fce1a22c080c2e725f279a0aabaefae007
SHA512 f64feff7ccc42ccf0234961cbe59bcd32edaf97e19f6859f5ac71416d75759bebaa2755ebc23d2b238ef5cb3af3438c8cb41a624e921c559c48d7e816f014073
TLSH
T107617387594040A5FBFC603193F01E8F37F68E81A94B7D53319CF4A7DA06F169239894
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 492f5af1156b91f2373a7c553403665aae867d7938e2cff3bdebd601b5b0996a
MD5 59b36be32c28315d9a7258dec7e125b3
SHA1 c9df73bc81e774852cb3fdc265e808743d170c21
SHA512 032cc9404dd005433159f299c59e6daed369a9f84c9941e73624bcb4dd8ada9d8c3640b46ac6b4577b75d03a82e47b4a1e984120e8df7d9efd2c66da463a275f
TLSH
T1C8418DB7C3E4867E890156F05B28AE16CE2C0A46532C3C1689E4EF1F67E24B4E20199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0d080bf594cd34a7a45eb9bcc0ca01ab133b96957be2f517df59dc6f9e7516b8
MD5 b89896b0c876d30e01f24d2ce9c74f74
SHA1 53563fde3823454d8a166a5c9e14448956e57332
SHA512 3b991ae9b551de77ab3ff746505415d58beb0738a8ba7abf53abf8812cfa2b5492204757d08685cbe143ac699b927bf8d41433801797ba9737dcb33b3993cbfa
SSDEEP 192:sxZuR0W9/fisdblIdpdxHW6+WNGY3Rs2IgrJ:sxZuZ9/fisdbW7HbG69
TLSH
T1F912B8126E28A57B8CCBD21DBB257F53E6FD503251D41E58A6FC9A2C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c185567df43be3f447b4c69d9437467dd1894b95ef0d7f6e82981342a77e1787
MD5 4c71769c9b8f4fba5d15be9bad3ecad2
SHA1 d72c1ca7deda5ce36098c4c0de2d57779ee9d9d0
SHA512 2ad37136e09cca4e7aa659ee35f7f465c4c3e8e29413e69cdd540fb80359628f0d1035f5b4f045f55d9df78e8a8d3fb4e7d66e9fb8a18c52e311a78db8421903
SSDEEP 192:sxZuR0W9/fisvblIdpdxHW6+WNGY3Rs2Ig5HJ:sxZuZ9/fisvbW7HbG6n
TLSH
T1A422C8126E28657B8CCBD21DBB157F53E6FD503251D01E98A6FC8A2C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3f40475b814324b8756e101a0efc513e8541ada4564c73de2e30aebd1bded6d6
MD5 2fc803ea3b422f0fbdb70f26d458c6e1
SHA1 310b34eaffaf60d3ed52c0b80cb9ba12ca54d855
SHA512 170d1395e7269c6164f30774662ce20b38f8b9d243ad49e2450132e37ec238e6443bd56845af715dcd069f0b327c6013922d457a2746d7ec3693b9d0407b072c
SSDEEP 192:sxZuR0W9/fisvzlIdpHxHW6+WNGY3kNs2Ig5VJ:sxZuZ9/fisvzWRHbGFZ
TLSH
T11F22C8526E28697B8CCBE21DBB157F53E6FD503251901E48A6FCCA2C05E7ADE120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9b19c375007193497cf6f1a99d99b77977fadccaa9dce65c5ab695aa97fc9757
MD5 2002b88cd9424eca0ac6486842965bab
SHA1 4b7a2c63f2abae2b075ed21a48e87f2bea52f834
SHA512 e6fb5cdbac30a77456956a5b5904f4fc0c734787d11426ef6dd45d975a0260a3e74c6f0ed949cdd330d95d0e69e454cd17a77420c166dcd5f4271ce6227384aa
SSDEEP 192:sxZuR0W9/fisvzlIdpdxHW6+WNGY3ms2Ig5VJ:sxZuZ9/fisvzW7HbG1Z
TLSH
T1E022C8526E28697B8CCBE21DBB157F53E6FD503251901E48A6FCCA2C05E7ADE120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 96375785f21b54b22bbcac65ac944368b6334e3a815cb4f7e1e73e380f503c54
MD5 be6203d1479abe5c3927aced6366ab10
SHA1 d2c70f60dcc57830a34458042faa54f2ef204d2c
SHA512 edf42f56c4e77fbe04c4074b8b0672ffe4fe238d48e1b5e3c07b1de4809a9c9f546d810b9c61d97dfe18c6bfbff7b5cf3588ab32f00d325f46a1ab8527d3c48f
SSDEEP 768:/d30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72MrolZM7:/d30AbSWvS2l9u1jaLmLZ12X4
TLSH
T184C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9f11ed4e6cdcc68696fc6ed774167ac6c661a9119bbb21c9c8527b84fe8b7c35
MD5 6705cfc185672c960d2fc98d8787d6a7
SHA1 abd9dd5b62e4ad2e556d35e00dfdf608063bdcb3
SHA512 ad77079e5c7f3bd8ddfd9a8ec785f8c9c0623c604e4352e264321cddd7be7aac22417ce2276ef14258c15040ae464824ffca8c1ce038413d6199ea396539f74d
SSDEEP 48:K0CNCsChC9CPC7C/CgbCTCmCzISC1CgK9C11CXCgxClCwYC2C3CtCtyL4neioS2f:KgfeKgYG+fSKAsTtOK+gKGz
TLSH
T1D191220470BB06103DBE655995A48B2F524171737214EA2FBFBD60A18E2FE181DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

578a2587-cc32-44bf-92a5-53da6789cfa8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\578a2587-cc32-44bf-92a5-53da6789cfa8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a1b65a415b71dd91b3ca2244166a2a61fe9124034836288becafc725151259a6
MD5 1643bdbbd6cd6f9152114e87189c25ca
SHA1 300af9fb0d4e6d21197304d8a4d8c04df1206f47
SHA512 dee2e789808834bd9b43f7616bae8b243a12d27ef485e8c772790bcc5e03744ee5464b1d761af25b7e820045feb8e30d5dd73fc2e08fc06dcf3bd9fbc2bdabfa
SSDEEP 384:mZcIQsNHvXKpuuMrV9iX5FEz/7O6R2Feoqh7Uhor:0QnQ7as/7TRR80
TLSH
T176828D3268B89C7B5DE6D151F44636039EFD80679BC85F80D5ECAF2D05DA6E4130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2562513d7ceaf33fd8fd626a7680fd31fed1ccd6fcfd79e247ac36b3180df4cc
MD5 38058727e4ff3adcff59d6a6633c51f1
SHA1 45d3848d5fe6652497e91c5014044cf752160d52
SHA512 d3c5cb44e7f64a28a29e44442fce79f9003149df94c31c09d265c6f1fe674cf348d7e78c707a26bcfac8ca81cd5cb14c9d1dcd3586629a4c2964337e73f3b44c
SSDEEP 384:EiFiZcI8WsNZ8TUNTUlIlWXKpuunrV9iX5FEE/7O6R2Feoqh7Uhor:fFQRMwg7D7av/7TRR80
TLSH
T129A27D7358A89D7F9DF6DA51F50A35039EF940A7CAC8AE90E6DC9F2D00971D80307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 493d3283c21a5ec87831a4b6b81bc52241ff3442374a2ea4a0c78c6a39879316
MD5 098ab80245766c4ffb0d2852cd93d26f
SHA1 75f215ce55a8abde8a800cd72cc904869e566349
SHA512 aa2b8b203b58e152f3344324b7740d9e26310e954914a83810a63c5374b32170c313c5d4e17aab7dce540d11ad713dfb89f5024bf3f8b61cdbbaab0fe96308aa
SSDEEP 96:gqONkXQsjpfuMVwptaL5ih/cIPURHl8h4otop5giCDgBIPuva6zx8X5Fx+xfYvNZ:LONr6AmwprQmiUywE6siX5FYRkJiChU6
TLSH
T18802FB35AC786C7F8EE3AE15B5877B135FA9106BDA952F84CAE81B2C01D764C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 78c531df66caaa377f90d953ab9845a158c816ed9bc8d1ec415d3124538b96df
MD5 145bb9667d8df59d6e1240a8dd95e551
SHA1 670fcc1d4575610b3056ae067ca3240ea62db717
SHA512 27c2f8a56fd999c218c4086e17e41df17d2666738ce10f577362386582a6392145d75b1e9129348e40e2d3910e9e91d4f3e2b3cf229d47a9d5b24feae6036193
SSDEEP 384:IZcIQsNHWXKpuunrV9iX5FEz/7O6R2Feoqh7Uhor:2QSD7as/7TRR80
TLSH
T104828D7268B89C7B5DE6E151F44636039DFC80679BC85F40D5ECAF2D05DA6E4130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6e3b1ae460812cef1a51958b7471cd970af94445990684ff821628064c2dff62
MD5 51dcd70b18e4d0aea0ced108562c6451
SHA1 299318f0d8aab71e4e83c07ca8dbdbaa5502f738
SHA512 fd78769c6a3633bddc83020a13d22370891fcdf0f7d26461ecc1ad5c0c1b7e0a3dcd2d1245c82d28eb7349303b9cd2afe9e994a83c81fe57fba1ce5483de14d0
SSDEEP 192:LONi6AmwpjbQmiUypEnsiX5FYRB6lRN/9U6:LONi6ipjNTnsiX5FEI/U6
TLSH
T1E2121B36A878AC7F4DD3E561F08735135EA9512BDF886F94C9EC2B2C01DB59C530A836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5773b5399030b9d5195de6659c071f928940cd4fdd0d9197a9c7dda0be88bf59
MD5 0a6ffd7762f2041f29bcd48bf9537acd
SHA1 89116f353e47eea716bdef54780308c45ae57cda
SHA512 6d13ea38e2c2c7cfb0efa66b893ac66b9232446b85f5b7ba51465118bb03c36a47999f98575325c57fb49c74eb9cacc6737d5a723bca7802e9bbf52845433aba
TLSH
T1AB412B5CB6FA1158B3B7AE569BF7A56D487BB8372F0BD05D10110D4E0A37A00C861737
MD5 SHA1 SHA512 TLSH

Submit Download