8f238eb82084d44dbf0a716592ccbcc79b740d294ca46f50b5f9c000929ecee1

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 06:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8f238eb82084d44dbf0a716592ccbcc79b740d294ca46f50b5f9c000929ecee1.html
Size 62KB
Sample260913-hlc5batajh
SHA256 8f238eb82084d44dbf0a716592ccbcc79b740d294ca46f50b5f9c000929ecee1
MD5 f82cf1486ba0afe678bb2c6cf746dc79
SHA1 0721f230099b295d9195d4492df73ba2a6d35422
SHA512 c8e8767696356bbf784c9ac240981de01e2ccdc9f0d9f93c3df9e4267962b74da9286dc64099497161f98904859adc24005dcaebf7ef578ba02f7a4204bab6b4
SSDEEP 768:DYO+PMFP7URNv+f5AfpUxnHeob4f1u0eJwO0H+UJFCjlFCsZtD2YKH:DYO+PD6nXlFCsZtqH
TLSH
T12B530A7365A23E0D9233581CB8C5B6D83718C463C40759EDD9BAA62CC3CBDC69172B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4632	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337557535581747"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{8F5404E5-903F-4739-8085-A5CBC5E69A98}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
624	msedge.exe
624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4364 wrote to memory of 3268	4364	msedge.exe	87
PID 4364 wrote to memory of 4632	4364	msedge.exe	88
PID 4364 wrote to memory of 2488	4364	msedge.exe	89
PID 4364 wrote to memory of 5528	4364	msedge.exe	90
PID 4364 wrote to memory of 2488	4364	msedge.exe	89
PID 4364 wrote to memory of 2488	4364	msedge.exe	89
PID 4364 wrote to memory of 5528	4364	msedge.exe	90
PID 4364 wrote to memory of 2040	4364	msedge.exe	91
PID 4364 wrote to memory of 2040	4364	msedge.exe	91
PID 4364 wrote to memory of 2040	4364	msedge.exe	91
PID 4364 wrote to memory of 3104	4364	msedge.exe	92
PID 4364 wrote to memory of 3104	4364	msedge.exe	92
PID 4364 wrote to memory of 3104	4364	msedge.exe	92
PID 4364 wrote to memory of 5460	4364	msedge.exe	94
PID 4364 wrote to memory of 5460	4364	msedge.exe	94
PID 4364 wrote to memory of 5460	4364	msedge.exe	94
PID 4364 wrote to memory of 5640	4364	msedge.exe	95
PID 4364 wrote to memory of 5640	4364	msedge.exe	95
PID 4364 wrote to memory of 5640	4364	msedge.exe	95
PID 4364 wrote to memory of 2324	4364	msedge.exe	96
PID 4364 wrote to memory of 2324	4364	msedge.exe	96
PID 4364 wrote to memory of 2324	4364	msedge.exe	96
PID 4364 wrote to memory of 5900	4364	msedge.exe	98
PID 4364 wrote to memory of 1308	4364	msedge.exe	99
PID 4364 wrote to memory of 5900	4364	msedge.exe	98
PID 4364 wrote to memory of 1308	4364	msedge.exe	99
PID 4364 wrote to memory of 1664	4364	msedge.exe	101
PID 4364 wrote to memory of 5856	4364	msedge.exe	105
PID 4364 wrote to memory of 2276	4364	msedge.exe	106
PID 4364 wrote to memory of 6036	4364	msedge.exe	107
PID 4364 wrote to memory of 1780	4364	msedge.exe	108
PID 4364 wrote to memory of 1780	4364	msedge.exe	108
PID 4364 wrote to memory of 624	4364	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8f238eb82084d44dbf0a716592ccbcc79b740d294ca46f50b5f9c000929ecee1.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffeba4fc188,0x7ffeba4fc194,0x7ffeba4fc1a0
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,7085627945498954849,12124916110238157309,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,14082254239988065925,16442983101016396957,262144 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,1453940107785785136,11970826263382659277,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,10207299683216786918,16711520716979077313,2097152 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,6958485219733763437,12803507747204645736,2097152 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,2251448120683722812,208978013931585592,2097152 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4412,i,5621886837452642478,4077794353871924868,2097152 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4916,i,2211332662966181684,1671878334757644198,2097152 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,16233259338336752442,16132387019218297127,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,14150881686635623938,15900043505852761603,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,4491162218868094877,17624524842396260916,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,4491162218868094877,17624524842396260916,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,5348376541744680083,11312656111016633335,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,3263362011076861080,17931109092081874196,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,13563216971395805575,5188486406781955394,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,15010128915804376753,12687199563641060318,524288 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3840 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6476,i,4291159367824361827,15700390424416412089,262144 --field-trial-handle=2428,i,18291620089525510592,6276975027233395980,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:624

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 44a3f90b759d3534b1fe0da6a9c958a0312b3842557094a6dd7b2673b9a00f0f
MD5 99117281cb207ffb3178beccfa900d8a
SHA1 ceb9e8f5e2faedff4a7fb1332a0d0525843b816d
SHA512 2372ea7530b99a261b9f44fc80b2d15e111947b17edf8f46490a1a25a3705a5a9d67ed606a9acad5c05f927f359e4517c0c84b1ad10b0987412b901cfe3db43c
TLSH
T1B351CA924694618EFF5A183185C00ECF36305A82E14BEE519F98DDF8AD7131787F30C6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593f70.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593f70.TMP
Size 2KB
SHA256 46526f78d2d48406ea2cf2a9544dd8829d85a6f7d2818d1f76f0379359ddd059
MD5 98c85eeb644c8a762bfdbb8770ece8c1
SHA1 a60a944ed026154dea68492dff1796714e5a07a1
SHA512 2763b7f5890d2e9cbe17cf934c77d8322ddc8ddb44c55bd55c26b28a6cb1abb026941c836ad6ab8923b11f631f06279eb59ab16a50c1cd375ad5d1e8a94662de
TLSH
T1B051CA524694618EFF5A183185C00ECF36705A82E04BEE529F98DDF9AD7131787F20C6
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 949bd97c58b1f23d4503fb7d8b40a452a41c4ad25b44bc593610342ba7e5f26c
MD5 f8430c9609e0f570f9af4bfce4d0f06b
SHA1 c99c1383755f4275b117fd01e12af3e45e24ff28
SHA512 bb205f63bc96dfe9f225e55d78528d95e679596776ed6b6b5c802ba5c7f15c9d6eb854b1abaeb2ad788c2ef5a02c77924eb67365564456d189a879dc5c004bbb
TLSH
T11351ADF3C3E8867E990156F4AA146F1ACE1D0956832C3C56C9E4AE1FA3F24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4f547428a2f2ef6cf18e819110ef61119f747eda481bb82dd23359cb52da6af3
MD5 1d7bb53836b926fbd5ebd223fa4e5cde
SHA1 862372418480d56b8d823a19ffbb4bf341e18643
SHA512 cf5910e4110daf00f24ccfe72ae0354f54df9dc0f9510b10058e923130590d3dad6a6a0f484d688c45dd25f0273b3a0a80ee1d30b8dd9727b10dedcd413eac69
SSDEEP 192:sxRERJbl/fOs5+wTCzoA8p4vz/g6+WNIYoj1GJp5kIgIJ:sxRE3l/fOs5XTPi/5ISp5Is
TLSH
T16B329515AE28A93B8CCBD21DBB65BF53E2F91033A0D51E48E6FC961C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4a25577d08373638795fb0d477d8f8ec0ce058da52fceb36458e2e2ae89d5bac
MD5 e2f27a9c67a2dca8be4bb9fc4d1550f2
SHA1 ea58e6e1868cdf26e99ab50ce634a4bcbca63f9e
SHA512 93743ec29fba2254d8eeb56c87efc4d991f1d21804ec4ea6f0db19cf0915a45d1871eb207f59b6c3acf9f2206a41e49de4129d16dfcb2f94ed62c64fd7a688a1
SSDEEP 192:sxRTRJbl/fOsP+wTCzoA8p4vz/g6+WNIYoj1GJp5kIgDdJ:sxRT3l/fOsPXTPi/5ISp5Ib
TLSH
T13F329515AE28A93B8CCBD21DFB65BF53E2F91032A1D51E48E6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1b677b6357604540ec383c2464ce75fa0e19f47f8629402e1db0ee41e91e81a3
MD5 cf94149e0f0141ba666e7b6cf6bc1bce
SHA1 5be69bc200bd9d3b6a06a1a8241c063a6821484f
SHA512 2d63b91a1f00647df71314cb9e066b64cba625b52cdcc4da15e729458a21fd1359bceea9b6af61b2e9c9384828f1fe845421b3e2483c976207cc035900cd2764
SSDEEP 192:sxRTRJbl/fOsP+nTCzoA8p4vz/g6+WNIYoQ1GJp5kIgDzJ:sxRT3l/fOsP8TPi/5IHp5IJ
TLSH
T1D832A515AD28A93B9CCBE21DBB65BF13E2F95033A0D51E48E6FC961C14E76CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e6155a0323407a1059e36b2e5b3111169ffe0ae1bc898e5dd653f3b580efc11e
MD5 01f85cb085f78f04d4b8ac91fe74eaa9
SHA1 3346bd9d5ea769e052b0ce50a6ba7364678a394f
SHA512 ae51bfb8c5ca73c01cd038ee8039061211c62505cd5777fc699b19fa888c7589983d0d4749ea3c83e7a91d18d141f461c7835d37ca6063d5d6251fb0234b513d
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUUrondL:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0Vx
TLSH
T10FB2D92B704DCB7F4FC04A9D9C196F9B6D9802C796588D8047FED94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

1aa03d88-e964-4dd4-8f5f-308e06c7115e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1aa03d88-e964-4dd4-8f5f-308e06c7115e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6a48772e91f98f230438dfe3637cf15f8824062c357d3eba73101cfc3f3f8494
MD5 078b2fdfe05aaac167b7854aea025845
SHA1 23ebc25f33c9d85c83504e18d9b2b2c7f492fd33
SHA512 9f14d420ae54bdf75f2c22d6bd47e82affa4e017d36a8d94fa5530424b18906f8ceee717c69c86260337cfd064abaa19992bf939a620e6e55a43e6425b62aa50
SSDEEP 768:CFQ+3MwgfTe0xO+MgbR//9OA9at01j0iq00+IaivMgPB:Z+3+KgNACHq00NaoMgPB
TLSH
T1D8039E729CA4DDBBBCA6A7C5B70633429FF44267C6CD9A908ADD2E0D00476ED1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 a4e7a9b85984333f2b17c3d2dcbf07158d8ae3b8dd253ff3c185a89f333b113e
MD5 1eec6abb159e7b55049f0ee9f421d231
SHA1 3ec18f7a5ce8890ced1f1e78499cf259605c4e77
SHA512 528b70a59db39977ab285bd669242814c5fe7480dd02a0c767f2a69589502cd0581fa6774699da88719932e84122c22201e631a1ba3f6b7e38ddd4ff8fb5e7ea
SSDEEP 768:E/UxvxjgC+R3FTexxO+MgbRe/9OA9at01j0iq00+IaivMgDV:xZj3+R393gNTCHq00NaoMgDV
TLSH
T1A013BF31ACA49D63ACE3B395730A23979FF44A63C1CE5E944AED2E0D05876ED1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 206baba8b72d2f1f5d9fb0641bf9c64c5dbd8eb27055d3a95a2d6aaff5dbe319
MD5 93d93c97556cdfeb28a4cea813204eb5
SHA1 5291ade639a3a6547950cf2259018466077da4b6
SHA512 8c17227d9f487ee5093f1168f16cd89a394a105f6c5b078fe3980cf280e50c5c40ba8a0f40e594b57b9595792e216f3ccf9534d5a8e4fa7d2b20a0848fc929b9
SSDEEP 768:sc3wTe0xO+MgbRr/9OA9at01j0iq00+IaivMgPB:sc3YKgNkCHq00NaoMgPB
TLSH
T112F29E71ACB4DDB7ACE6A3D5B70633429FF45657C2CD5B8089ED2A0E004B6AA1707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c83c76d18aa92cac20e072e5e4ae0bc691d0f320354a71ac8daa46d46dd6b2b9
MD5 13abee811a012a18d41d043bc0072b25
SHA1 ab3df8da1d63f86e189f79131130d7e22fec0a22
SHA512 339aa5f4a13db1ee7c149ed2a3a3e77b411a68ddbb42353befd547507e039c52481193319d3bb785795bc28de738255dff1fbee5e95de42f11920507cf362069
SSDEEP 768:X/UxvxjgC+H3o6fO+MgH/9OA9at01j0iq00+Ia2iSHxRz:KZj3+H3obgICHq00Na1STz
TLSH
T13803BF31ECA59D779CF3B384730A63979FF44663C6C96AA04AED2A0D01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download