e097a13e294c367083fe207332f46918dd41114c3608876d6c0638f71f138930

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e097a13e294c367083fe207332f46918dd41114c3608876d6c0638f71f138930.html
Size 105KB
Sample260913-bdsfpsdb24
SHA256 e097a13e294c367083fe207332f46918dd41114c3608876d6c0638f71f138930
MD5 0ba4d887287fae55b3cd0d06f1e4829a
SHA1 d0bbe6ea8d18a8091f182eba619f741d46c2f928
SHA512 901153846f9861de974604dce78abc88501667d4f9403f089877ee5223b574eaabc0f62f6b271de21ce553964eae25d2b1c387313d3ec2d6fe17eece22055825
SSDEEP 1536:XYmxIYn+hx7+dRgZK3zZXFSW5lqTQYTt2No9xuXIvy8OZ8bEaonbEaoHF:XZunTQzNpXcy8OZ8dondoHF
TLSH
T1E7B3928701205CFAEFA049B3425B58673D2C5437BC5791B9E3FD8FA72B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4276	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338386027914819"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{AE4B1D8E-ABE4-4B1F-864E-A8268FB5D14D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 4536	2204	msedge.exe	88
PID 2204 wrote to memory of 2508	2204	msedge.exe	89
PID 2204 wrote to memory of 4276	2204	msedge.exe	90
PID 2204 wrote to memory of 2508	2204	msedge.exe	89
PID 2204 wrote to memory of 2508	2204	msedge.exe	89
PID 2204 wrote to memory of 3484	2204	msedge.exe	91
PID 2204 wrote to memory of 3484	2204	msedge.exe	91
PID 2204 wrote to memory of 4560	2204	msedge.exe	93
PID 2204 wrote to memory of 4560	2204	msedge.exe	93
PID 2204 wrote to memory of 4560	2204	msedge.exe	93
PID 2204 wrote to memory of 4032	2204	msedge.exe	94
PID 2204 wrote to memory of 4032	2204	msedge.exe	94
PID 2204 wrote to memory of 4032	2204	msedge.exe	94
PID 2204 wrote to memory of 1080	2204	msedge.exe	95
PID 2204 wrote to memory of 1080	2204	msedge.exe	95
PID 2204 wrote to memory of 1080	2204	msedge.exe	95
PID 2204 wrote to memory of 1280	2204	msedge.exe	96
PID 2204 wrote to memory of 1280	2204	msedge.exe	96
PID 2204 wrote to memory of 1280	2204	msedge.exe	96
PID 2204 wrote to memory of 1596	2204	msedge.exe	98
PID 2204 wrote to memory of 2392	2204	msedge.exe	99
PID 2204 wrote to memory of 1596	2204	msedge.exe	98
PID 2204 wrote to memory of 2392	2204	msedge.exe	99
PID 2204 wrote to memory of 3040	2204	msedge.exe	101
PID 2204 wrote to memory of 1604	2204	msedge.exe	107
PID 2204 wrote to memory of 4236	2204	msedge.exe	108
PID 2204 wrote to memory of 2476	2204	msedge.exe	109
PID 2204 wrote to memory of 3836	2204	msedge.exe	110
PID 2204 wrote to memory of 3836	2204	msedge.exe	110
PID 2204 wrote to memory of 3284	2204	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e097a13e294c367083fe207332f46918dd41114c3608876d6c0638f71f138930.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c4,0x7ffbe1d0c188,0x7ffbe1d0c194,0x7ffbe1d0c1a0
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,3294976169959304951,18406732283540466852,262144 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,5569788792470859476,7222188379802669865,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,14039666010544994004,4265443887072798365,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18356312089217444130,7775980328089067477,2097152 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,18041003146618924890,13593461146675537707,2097152 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,17210524433997203611,16910962817087169147,2097152 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,1313933153180198023,16605389815334935084,2097152 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11660163735087668578,17015442652716881505,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,6998733434633806023,325740758561069412,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17881708711252531219,16151533102450925334,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17881708711252531219,16151533102450925334,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,11184119761871235078,12656673901688037343,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,12369741789244989700,7787712935323448852,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,16737032285355718414,15683315011155825116,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,9422799303905928295,5571055830414626815,524288 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,18380370556671245007,18293475836039081756,262144 --field-trial-handle=2244,i,10148678370376748326,2746045221857748890,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e3984b794488335ef0a3d1665b7a0b40fd9e9b53310c12f66586479b26f43465
MD5 261ba9180c8ca03635749385e1ea1c82
SHA1 bc05ce51df64482bf3178707cae4c42e247ab3c3
SHA512 98a597607752f463d27dc893ba23092ea710382732b0e0c6b7b00288de1502b53c8c31784476c4fe6c87540aac51eba663f586682a23d84e979dcf5b92676185
TLSH
T10461A5B126930590FBABDA7790D415A73673A3BE44E36F460BE8D3BB874B7F4A054009
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5934b2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5934b2.TMP
Size 3KB
SHA256 b5ff894e45844cfc3e569f1555cad275d1242bdd3b4f7e2176388afd03efb0ee
MD5 e53c6cc8487320d25cdb2028b93831e7
SHA1 84294f015a03061276ffbda1a0d13341b1146c9e
SHA512 2b7d2e64b1b084fa439978e3bb0ca212c9c3e1f58a744510abe3c7cd306d21eebe70913862b6265425bbd8e206c53e466e2e3bb697043cda5d0b4e951b0f9a33
TLSH
T1BF61A5B126930490FBABDA7790D401A73677A3BD44E36F460BD8D3BB874B7F4A064008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 503ddd32b1c28cc219cd8bd2cae9419ad591b6b6eb3a68a3ecc9f6c88fa6c1fb
MD5 6b9885aa16a8d5e557e601a0b9a013e3
SHA1 895e6c2ec0325817d0786a703b6029ad91049fc3
SHA512 e0676170585b73c4fba76de877697d3730d32b685b696967c5c492059ca52c917fd9580142c83a7342063a4dd775aa7bdf942273e3ce19bc082836a9da309997
TLSH
T149418DB7C7D8867E890156F49B24AE16CE1C0A1A423C3C26C9E8EF1F67E28B1D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4b29fb0b506b60629c160533e0baceeed4f3308ccda7c7b31b5bcbdcdd287512
MD5 c702c8246acbb050484657b2cada0e41
SHA1 e1a08766ebf3d71d058770e918fe12459d75c272
SHA512 6919b927911c95d6a5bd9d15b0549c761c83cb000cbd80f90cc1898adb19184ac5e46ce22b9c4fe5a56844d5dac743bb1a9780b5ee9c031d2ecb5c85a92b5940
SSDEEP 192:sxZvRwWl/fHshhIdpdlHW6+WNGYYBa51IgrJ:sxZvVl/fHshKzHbGf49
TLSH
T1BE12A6556E28A97B8CCBD20DBB15BF53E5F9503266941E88EAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c502d68e819fc639cb8c4c15ee451a7e08a6085710d55a4741b1087ea6a7b24a
MD5 6900c077ba5b6f6f4ea6fdd80914cb36
SHA1 6c3923fb80e69014f07a8e4c7d332f072bdfe3d9
SHA512 3c30e6426693edcdc77a7731f8ad166404e1e108c3ca97fb91b9679c93db593de74b9ce3c451df8b97e2d60fbd1d9e941ac3af4bbaadc8525614760901145404
SSDEEP 192:sxZvRwWl/fHsUhIdpdlHW6+WNGYYBa51Ig5GJ:sxZvVl/fHsUKzHbGf40
TLSH
T1B422A7556E38A97B8CCBD20DBB15BF53E5F9503262941E88EAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c28b1fbe73fb5a9e391315fe452ebc202bf5bed08a3b12faf875a1b5c072d741
MD5 288a02c2562b89e8dfdc05b33222329a
SHA1 6d9e12f1ace32f65956c9b20fc1d4648832e2e9e
SHA512 9b370ccec14b3875378981976a8846904286e2d24c3414ceaf37a7fd2eef10bae476327692ad21a404be1c931f349775bd9270007b29369dba6637e2a4ba1071
SSDEEP 192:sxZvRwWl/fHsAhIdpdlHW6+WNGYYB051Ig5sJ:sxZvVl/fHsAKzHbGfie
TLSH
T17722B8556E28A97B8CCBE20DBB15BF53E5F9503261901E88EAFCC61C05E76CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e6e2fd2df763f7c35b4f16096f9805e174ee4e6b70aa345191c92473fadc54ca
MD5 9491c4e4c3e3864eafbfb923c1cf6335
SHA1 a781378bb44745c003e4b500efe4843c020cc191
SHA512 51231ea8f16ba34ee1b3ab07c8618b6122a4491e73fbf0874aed799154ccd293617112de1aff70eac62fe7e4ddeab7b687b08fd503b0b114a153559949da639c
SSDEEP 192:sxZvRwWl/fHsAhIdpHlHW6+WNGYYBm51Ig5sJ:sxZvVl/fHsAKFHbGf0e
TLSH
T14B22A8556E28A97B8CCBE20DBB15BF53E5F9503261901E88AAFCC61C05E76CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 034489af7fa9fe2bd5e09df25eeadc29f5ad408f3a5b9e01e42562ab5f1d0395
MD5 efa1429ea8e3e939f9519210924e6e6c
SHA1 85ab09e88038322a884242818608243541009a42
SHA512 014c72572d5ae74c017f6987493eb1f3a90d4cd2151980eb4fb5e668af823557e6c7b001f9df07769b5b7bc413acb5d0dae07be754b6150668cee0cfcdb32322
SSDEEP 768:deyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXqropgOL:deyYR7jWv3NpBu1ja/CL8OXBH
TLSH
T103C2E82B640DCB7E4FC01A9DDC5A6F9B3E9802C7A6588D4047FA954C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6e7ba372cbf6a4416d5eace7dea09f9ac0bd660869995c2bc09b0cada955f94f
MD5 488e9912ab55fac3724d78ff9804ecab
SHA1 7886bc8d19f87b6bd551a6839efdbd31171606c8
SHA512 101eadff6e7a4776a18547055f9a9f0e977f7265b474af74e7b6bc30dee38b37c90b7326e8f87f1069deed34bef78ad57d94826b0ccfdf9b2be7b4c94aef48ce
SSDEEP 48:KgMb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLvSbvRxRqbpkZIS/qK9f1VqxP6Ycdhw:KEbKKcMuqMAK9Ke3WKksip
TLSH
T1D591230135BB0250387E7A4D84B58B6A4142B2733559EB7BBFED50678D2EE081DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 856fb5f52280050db54fe315e2d51bfe3e97f7ea39790b67ea54b10fcc8b973a
MD5 d204196e81a412baf365dd01e6537a8b
SHA1 2b2261d985442ef7e3896e0a5b6a334e9ff6802b
SHA512 04c9208252fa0fa90314696b5588f1cd95cbfec3da6c73ac023de200f4baea52900d22b776ffc0bd809edb62dd264a986e5198e566f7af77b6a2c62bc17906f9
TLSH
T12D214680B2DF50987E89FA82C11D5B03A0B17F57264DDD71339E54F59F48C180E6EE26
MD5 SHA1 SHA512 TLSH

Submit Download

7318ece2-19ce-4bbf-93f0-774767a31af1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7318ece2-19ce-4bbf-93f0-774767a31af1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 92b477573af45635a22729c928b877579e538ef80bcbc02f548a1cd4348aaa2b
MD5 3efc26e99550cf54af065f403c07c8b8
SHA1 29d5e4f786cfedc04cfb1902c90ca501e30e2a10
SHA512 3253c2d6f2b40effbd4a27868f36efbdd37d28547d9e0d46035b39130cfbe1a5c8fcc2b57320bc2c1bcb3c2b5c8d77d82e1326724034c040a8d42c042bb1ea31
SSDEEP 384:fsN9r3sMiT4uQX5+Dtm8/wX88Prb7O6R2Feooh7Un:fy7DFkDu7Prb7TRDe
TLSH
T14C623C32A8B4AD275EE7A555B00A32139FF9506797882FC0D6EC6F1D01DEAAC530BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 cc36ca2bfe7c768fd7448568e46a61b611466555dea9c78718fa40371fc67812
MD5 4d95d8245b088ec4d7dda64ce45282d5
SHA1 96274a3e9e32c6025202b34730a35e9eaafdcb38
SHA512 0db206dc5f85c8fc19b8b6b9b38e7dfad4f9735b3fc8663a6558c4db65167c029141491108b230b2d5f45cbc78f8088bb15f83664e012deb497a158427c45191
SSDEEP 384:fsN9r3sMix4uQX5+Dtm8/wX88Prb7O6R2Feooh7Un:fy7lFkDu7Prb7TRDe
TLSH
T138623C32A8B4AD275EE7A555B00A32139FF9506797882FC0D6EC6F1D01DEAAC130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 490839334418a8f2414782308f7f9006c552e9a1b3ffbd20c2b40c63b62a1b4a
MD5 00c654e728ee3b47107a0832829842f6
SHA1 d6e768fba05941572d50f953d40d7676d4cb31e0
SHA512 d899c1fc8c6e79b04713cbb677a90ef62919f9a7ef2427fae0b49e3d9ade47cf4e3ab811e5c81645b845732068924948669d4c88acdd5e7f435fbbda3c771021
SSDEEP 384:NiFn0sNH8TUNTUlIlq3sMiT4uQX5+Dtm8/wX88urb7O6R2Feooh7Un:EF0Wwgg7DFkDu7urb7TRDe
TLSH
T14E823A3398A4ED2B9EEB9A95F50E3213DEF550A786846BD0E7DC5E1D009B6DC130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 7c232c9d8214ef091c53c7ca1adf427b45de5db07419751ba1f75d132169d760
MD5 fd91248201471a44b5a173d21453b0b9
SHA1 e850f055d3a5d312dc1d9d80c0814764e9698e01
SHA512 ef82e8dcbe266a288e75d8f4f1f8d65664babac2f3dcca5c33443e1864b2433f6cf9cfe8ae364ae2d5749b3abf62e36c5a3650992e6ddc94e2ec73151a90d964
SSDEEP 384:YsN9q3sMiT4uQX5+Dtm8/wX88Prb7O6R2Feooh7Un:YV7DFkDu7Prb7TRDe
TLSH
T196623C31A8B4AD275EE7A555B00A32139FF9506797882FC0E6EC6F1D01DEAAC530BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3e5626fb8b8d2061238093fa299e6df6b3cf8e1917fb29c1634950bbb63ab464
MD5 015a2242e8c73c366713550a7e6cf95a
SHA1 3edc02905e4b634f4242fbe98970cb455225c92c
SHA512 118413c8c145aac6537d08ee43cb5cd0df7aa63ce9dede3b2ce1b04c0681ba0e260c223d1e4d65ce9f60478d4cdf4faa5594f19ca8f4298ae3d77e70ceac7465
SSDEEP 192:EONQ6nnH/QmiUy8ZKYcX5hQDP16jzor/wX4FfEtg3B/5bU6:EONQ6nhXKNX5+Dtm8/wX88yrbU6
TLSH
T14C12FB35E8A8BC6B5EE26595B08731139FA56127E7487BC0D6EC2E1C01DF6AC534AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cd1bcf7a2ad96833c4a48da79ba23d111106ed485d595798f43d42886a5a62e8
MD5 cccf25c519e3c9b97f852377286a0112
SHA1 feb35ee101eb3469558143a0a9500ca2a5187e5a
SHA512 942f3f1dbf4ab555c07e0d248038624717b3411e05dc9095b8b2cbff2f98e5c651e6af0c9c3ced6b648e5ff03b8aaf0d839c1fb5acd46edfcabe5a9bf2132d92
SSDEEP 192:EON56nnHGQmiUy/ZQYcX5hQDP16jzor/eMc+YU6:EON56nCGQNX5+Dtm8/OjU6
TLSH
T1F302EB35BCB87C7B8AF76D55B0863213AFA5213BE6946B80DAE85E1D00D765C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 c2d813125dece4eb909f77989de380c80f1fa0079065d3838f081107d32d8b91
MD5 0a4de5a345a8560d3cecbe149123645c
SHA1 511c443080c8c441e17642b523765a8587110fce
SHA512 061621b0f54780aeabb0d1027d4dc399a22de4a9aff963f9afa943d1b52bf76f8a47b5636aa35ea6ffe7126f235ca1cbb1e394889f876ebf30aff1d755912c61
SSDEEP 384:NiFn0sNo8TUNTUlIlq3sMiT4uQX5+Dtm8/wX88yrb7O6R2Feooh7Un:EF0/wgg7DFkDu7yrb7TRDe
TLSH
T1D2823A3398A4DD2B9EEB9A95F50E3213DEF550A786846BD0E7DC5E1D009B6DC130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3da90194-17eb-44aa-bd55-95b461adbe7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3da90194-17eb-44aa-bd55-95b461adbe7a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bedffef7822ae234d828e97d092389b2ae37324a81e588472222a9df0ef60951
MD5 e22620f692e131e8ed66b888936426b9
SHA1 aea432e7e9b4765cf7dc638addce715f9fb74a35
SHA512 6fd8c3d51543766fd9cbfbc6ce86362164b56786783ace2c7943e845e34c2923738ecf77ed9f6230ff0c47e53259d4d3009b94c2c922db56c2232d428cbfb51c
TLSH
T1FB411A58BAF60148B3B77E5AABF7686E487FB9772E46D46D00110E4F0663740C861B37
MD5 SHA1 SHA512 TLSH

Submit Download