78864c0aba52627a8e242c793331c1ea8322781007188fc77a4f5fb329825141

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_78864c0aba52627a8e242c793331c1ea8322781007188fc77a4f5fb329825141.html
Size 6KB
Sample260913-e17exs1gmf
SHA256 78864c0aba52627a8e242c793331c1ea8322781007188fc77a4f5fb329825141
MD5 6daba27e38de8cf353d311798f392ffb
SHA1 6a08ce30b010fee81bd43235d195f9c49d6c87f5
SHA512 82a9fd9b78cc63cc608b0e3a85ca749ee9748e7631f4e2533e3bcf5bf22c6862906e1afd48dc4f7394da9b0808adec6af96c68e5f68556720cc6c269af2f5e5b
SSDEEP 192:zWLv15G5WDNl7eqmngZ1nZ69jsEcE8XECgUdDhQoKDejCPJu:zWLJl7e3vf80WhtKDejCxu
TLSH
T19BE1B55A9E4C853F410005DBF0A16A1DD89B487BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4316	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338189311371651"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{36BB36D4-71BC-4ED9-A774-941C795D684B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4700 wrote to memory of 3868	4700	msedge.exe	89
PID 4700 wrote to memory of 4316	4700	msedge.exe	91
PID 4700 wrote to memory of 4968	4700	msedge.exe	92
PID 4700 wrote to memory of 4428	4700	msedge.exe	93
PID 4700 wrote to memory of 4968	4700	msedge.exe	92
PID 4700 wrote to memory of 4968	4700	msedge.exe	92
PID 4700 wrote to memory of 4428	4700	msedge.exe	93
PID 4700 wrote to memory of 3272	4700	msedge.exe	94
PID 4700 wrote to memory of 3272	4700	msedge.exe	94
PID 4700 wrote to memory of 3272	4700	msedge.exe	94
PID 4700 wrote to memory of 1016	4700	msedge.exe	95
PID 4700 wrote to memory of 1016	4700	msedge.exe	95
PID 4700 wrote to memory of 1016	4700	msedge.exe	95
PID 4700 wrote to memory of 4372	4700	msedge.exe	97
PID 4700 wrote to memory of 1676	4700	msedge.exe	98
PID 4700 wrote to memory of 4372	4700	msedge.exe	97
PID 4700 wrote to memory of 4372	4700	msedge.exe	97
PID 4700 wrote to memory of 1676	4700	msedge.exe	98
PID 4700 wrote to memory of 1676	4700	msedge.exe	98
PID 4700 wrote to memory of 816	4700	msedge.exe	100
PID 4700 wrote to memory of 816	4700	msedge.exe	100
PID 4700 wrote to memory of 3720	4700	msedge.exe	101
PID 4700 wrote to memory of 3720	4700	msedge.exe	101
PID 4700 wrote to memory of 992	4700	msedge.exe	103
PID 4700 wrote to memory of 4432	4700	msedge.exe	108
PID 4700 wrote to memory of 4200	4700	msedge.exe	109
PID 4700 wrote to memory of 3736	4700	msedge.exe	110
PID 4700 wrote to memory of 4216	4700	msedge.exe	111
PID 4700 wrote to memory of 4216	4700	msedge.exe	111
PID 4700 wrote to memory of 2300	4700	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_78864c0aba52627a8e242c793331c1ea8322781007188fc77a4f5fb329825141.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffeec68c188,0x7ffeec68c194,0x7ffeec68c1a0
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,1115119576605833469,15712065476765521231,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,3417408860532057549,7369512573688846702,262144 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:2
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,14106958584567804727,13558286152543241634,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,2686185130281350117,5122971504852869868,2097152 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10734386808192230045,6448854217611877142,2097152 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,9077219073691191480,4312151184875091962,2097152 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,5222222781579606532,515445949133254090,2097152 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,2173477431415663935,17120938707693442931,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,5194300003106813539,3385682096972265537,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,18360577623864259492,17835348366251792730,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,18360577623864259492,17835348366251792730,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,10216183738224843291,11729822905722270206,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,204107650550447824,5143370938166783549,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,13440181119952444792,12470245319764634408,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,14866579165932422174,8821290061809160463,524288 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,1230419945038304366,13895023653063724221,262144 --field-trial-handle=2904,i,5882089000917228410,151384172173842434,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6b0d6cd49ab646aec1ee022e527c1f42323fa8286345b68ae3cee1018d612659
MD5 cb667d3170d00cab1d82ea50e9816538
SHA1 db59471ca60c5d7de2e63d0d7f870077b5e67d3d
SHA512 250056dbab997008d822475646c00a196993add6d9e5c2c2e8611de7fefff3376e2709cb60c52c03b654850182f1760ee830839eb36ab4b47eed1e8cf365f12d
TLSH
T1A8613C8599B000A0FBFB49F395E5F48737F49A93AFB72DB1DB54D5788A0E350A316084
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fa58f53abddc972fad6076ed9fe388132807ef0a3eab6dbb4491c809260f06b3
MD5 c996f50d96cb189896bf4ea81ad8b4bc
SHA1 933bc9e8b2015ff167506aaacd5daf2adffed8b2
SHA512 b071c3d36a298563a7a7d84002832d96a85fe809d50b7be67ddd6b0509b5685594245c195fe068184ffdb7f9bed261fbb4459e0a93bd234fd9eab6ce2f700e97
TLSH
T1D0217DB3C3D486AE891156F05F24AE27CD1D064A42283C1589E4AF1F97E24B5D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 08b29f11195e54a4851f44c366ba01ccc1a0889393c219def5e86f3bb9c8011c
MD5 fd4dff930420ffe308585dc68bad6ae0
SHA1 fe2c92bbfae4b0a99de1c5e2321dcdc092abede7
SHA512 27d5ca66ba143830c480c1002009cf075452a57ae9f5649d2d4c6b66e4afd2702f7d715b8e12bb00e9cd3d3f586c3648015c2725b040c977f61971b6929efcb3
SSDEEP 192:sxZMRoWf/fMsk+WIdpdwHW6+WNGY3RtaIgrJ:sxZM5f/fMsk+XSHbGZ9
TLSH
T13D12B712AE28657B8CCBD21DBB257F53E6F9503251D01E98A6FCD61C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5dceeb7119e28cbc6ae5fc6d96da52f36f69fab7707889ed6330ac900bf820d9
MD5 1d40b242229a79187ee80208ac83d376
SHA1 7cdff0e698fb23d4d1256ab93443bf53bbc1eb5c
SHA512 ecd05b8ece2bdb9b487f6de4d3e09563bcff5e1afc99d34a4bbf33f840a6274ddb8be1f55e11559e29267088d517b54d9fbb76ad4afab85b65090380e856af95
SSDEEP 192:sxZMRoWf/fMsY+6IdpHwHW6+WNGY3GtaIg5FJ:sxZM5f/fMsY+TQHbG+l
TLSH
T13B22D852AE38697B8CCBE21DBB15BF53E6F9503251901E88AAFCD61C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 65175b4849bdf8bdb58c8d463f6e7636b66f85eaf2b0122d186e94e2b428ffc4
MD5 c25b462d3e80be38f7ff41149824bc6b
SHA1 d8c635b5338dc7dba323ae496b287bee6465d7d7
SHA512 c7a4d7645e2e63cc3776caa9cd46398c9c583a1f17b350880cb6733741de6c10938ece395393187f989c4de6ac08bb1beba929ec47cfce0c2745f28720e6a277
SSDEEP 192:sxZMRoWf/fMst+WIdpdwHW6+WNGY3RtaIg53J:sxZM5f/fMst+XSHbGZz
TLSH
T15D22B612AE28657B8CCBD21DBB157F53EAF9503251D01E98AAFCD61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c3d6470449c2a0b721c7f0908f323833120d44b7f67058fe5293834e4bff6374
MD5 cfe77596777d77d9bce6a1d3b7488d89
SHA1 f53c20ef2de50c3b0314bb063359a0d42ec518c1
SHA512 648aa0a2291b1795a679c83a11558af5d8734532ab5f78d72ccd6311727293a51dd5c62c80f13e7566e266fca840ed7f6ab2c3d3f2a19c377fcb3ff109cdda63
SSDEEP 768:BT30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72OrolZMB:BT30AbSWvS2l9u1jaLmLZ12F+
TLSH
T1A2C2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 29f8f2031521cd6a98463d5af361614c5139aef6f4aa15500829d6d40a1f9eb4
MD5 77d29cd599f80fbd5f88cccf50e25752
SHA1 94966e71cc68c99a6d040ddffd83812567335d37
SHA512 32b3ab026418b1b38f20db0da2e576727534593ecdb4c7f1fa79c694346ed192e67685ea7c5fcc4cdf98bce67c9fa532e43eab1a23774bdefd263623baf26064
SSDEEP 48:K0YH+CIyWXbOVOISaXK921sXxgHYd+G8yLHqTnpJZybRcBIS3yK931dyx3iYUFdO:Kg/mKskqS0IKZeaoAKFyi6y
TLSH
T1F2A1991470BB221538BD284DA0A4972E464272F33158E62BBFBC05B39D6BE085DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb9e7266-e900-4aa4-9e65-5e78a749fec3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb9e7266-e900-4aa4-9e65-5e78a749fec3.tmp
Size 10KB
SHA256 9b3f003b6aded0cbaacca340499ec08864c246908c013fafcf86998e741c121a
MD5 e50b6e54ee281500aa368af318f75ad7
SHA1 7e933ef78b3cba60cde83d36c7457a6fc02aec6f
SHA512 834b4db7484b6bf7716b4e05729c8b7c573ca30d92ef1dbe31e6a640194338e1ac8846c6e3fe47eab39192c5fa2e31510bcebc120c3f8fb4c02ed0a1c5127407
SSDEEP 192:sxZMRoWf/fMsY+6IdpdwHW6+WNGY3+taIg5FJ:sxZM5f/fMsY+TSHbGKl
TLSH
T1CB22C712AE38697B8CCBE21DBB157F53EAF9503251911E98AAFCD61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c78c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c78c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 83cb1cd8b3c39fbe9268a1b860152a93f4036c542fa511b31df417c9dfdbc73f
MD5 81bb800b815d613a8fec234f4baf353e
SHA1 040055741ad22b614d98d4b83b73520e13c2a819
SHA512 f1ec880e3abec510f5774ebd5ca5cd4124e03133b5469a8b5c7d0c1454e0c3464503ae4e49675b4ffd81425b6e3fedef2a5726ab6463c274ad3feb067bcad157
SSDEEP 384:GiFiZcIROsNS8TUNTUlIlospuibC9iX5FgMpsa+VYN/oH:tFQIDwgL9GaJphg+8
TLSH
T128A27D7399A49C7F9DA79B51F94732039EB841A7C6C8AE94D7DCAB1D01DA1C80307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 91de8522f4731994d92fc5049c9ea56048f3eaa6f918b35db1784dbbf17eb511
MD5 843df9b35b58217e20b6bb0d370f572b
SHA1 ed0ecf056b56aa23623c02232b6ad97ddd3384db
SHA512 aabeaca7ca1d379e695f96c131a4cce8b48d65b3d94026b689133cf2a706d2d2fb4d28c3e29559b14978c1a945dc70117a3a2a8a4471e2a87a7709b60f5f26b9
SSDEEP 192:uMm+xasuheOwQxMXsNKoQAnog+mwpu1gQmiU18rEN49iX5F1RY36ciIV/vqva+40:oZcIIsNKospuibC9iX5Fg7psa+VYN/oH
TLSH
T16E828E72A9786C7F48E3E261F94736139EB8916793CC6F54CAECAB1D05DA1980307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f1a55c91f50b7d6b5111e6fdd0d322803ee56d9608e342fe21ec6b1d81eca4b6
MD5 cbc9c1785e244ff2aef4846266ad1348
SHA1 e679812794258e281915525d089fa8f3831cd7e1
SHA512 ab39b901798b1c954edd975246c21c4fb44f2b9859cf680a83fec627087eebed2dc78bf2e1a60479d5514192ac1053bcfcefd1e67946df534dd3c27fb586678f
SSDEEP 192:LONL6AmwphQmiUymqzesiX5F1RY36jlRV/vU6:LONL6ip/cesiX5FgEpU6
TLSH
T1F2121B36A4B86C7F4DD2A550F04735139EA8522BDB897F95CAEC2B2C02DF19C430A527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 49d5561cd6889510e8bee855e790806157458808a13230344e35906df474077f
MD5 c4760f5413d2a03372e1ee40561e2bbd
SHA1 3e06cdcd7bf506a1267166e9f5cd562682deb66a
SHA512 4c8e34f1b96647b6db2bb9e6f3814861f65275ba5946c13eafcc4875f77b29858be7beca8b33a0b7cbb1a1b9ec4ea5c76c8ae87322418399c399e715c395cb19
SSDEEP 192:uXm+xasuheOwQxMXsNK9QAnog+mwpu1aQmiU18rEN49iX5F1RY36ciIV/vqva+40:PZcIIsNK9spuobC9iX5Fg7psa+VYN/oH
TLSH
T159828E72A9786C7F48E3D261F94736135EB8916793CC6F54CAECBB1D05EA198030782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d3c034d7a31b64a127ce68dc17452b331c597ecfa6572574e142474835e92334
MD5 022f7cb8a10ed33fd77fc36eb99f42dc
SHA1 df4686b8c0b1069951dec20bddce7db8e4bebe0b
SHA512 1e8f8eb84d41751e6e317ef091e941b60eacb3b327599ffc73dab0074571052298502b993329ae9840bade99f1447dea2aea37602611f0f7072c791c00ebde13
SSDEEP 96:gqONkfQsjpfuMVwptaL5ih/cIPURHl8h4otop53iCDtBIPuva6zx8X5FxSxhoYvW:LONP6AmwprQmiUyZz6siX5F1RgJisCU6
TLSH
T12702F935EC686C7B8DE3AE15B54B3A13AFA5116BDA952F44CAE81B2C01D728C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5f63416049fed6e1c32ba1c24d172924c7e7085c94cfbc32668d13c1c3b47908
MD5 4bd6ec2640c8dab4c2d69687f90e7164
SHA1 1620d71803ee65c7ff0453177927231489fc6422
SHA512 03444015d7394908c1cdf31f05e809de262c19b0da03426102eadfb7ab3395d94b7cce1ac42cf646a017fd759c5dbaab9af4d39ac78bf6af27ca078675577747
TLSH
T127410658BAEA1148B3736E56AFF2A82D847F79372E0AD46E50010E8F0732A01D871733
MD5 SHA1 SHA512 TLSH

Submit Download