04ddab9ffac63f4a237b42181bfa9f7addd6a2fed0587592e61feee93f9469c4

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_04ddab9ffac63f4a237b42181bfa9f7addd6a2fed0587592e61feee93f9469c4.html
Size 40KB
Sample260912-py8v3sca82
SHA256 04ddab9ffac63f4a237b42181bfa9f7addd6a2fed0587592e61feee93f9469c4
MD5 968dbfa7f3411ee4fc813557b4f68b4d
SHA1 935e33dae110d38fa889e039c4105b1f28bda105
SHA512 64be6493a157c49f45fc238001f4a2224a960f902e24ec24a3b1c36952e82b533ce7386ae47ce7414edaca1f4dce8e2202a2633385842f044f89a4048e2daf53
SSDEEP 384:2J58kw8hW8Vg99QueqwUtU/UyJnhMhSsRfvZ8iWeNJY2:I3w8hW8VgJG8yJMTI2
TLSH
T1B3139474B9C221230133637D9BA79608FB74111B820653407EBC67EA1FF1954D5AFEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2616	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338336409987490"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{44358070-A1E2-4ADE-AD07-1FC6DE8BE377}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 1656	4808	msedge.exe	86
PID 4808 wrote to memory of 2616	4808	msedge.exe	87
PID 4808 wrote to memory of 5084	4808	msedge.exe	88
PID 4808 wrote to memory of 5084	4808	msedge.exe	88
PID 4808 wrote to memory of 5084	4808	msedge.exe	88
PID 4808 wrote to memory of 3500	4808	msedge.exe	89
PID 4808 wrote to memory of 3500	4808	msedge.exe	89
PID 4808 wrote to memory of 4912	4808	msedge.exe	90
PID 4808 wrote to memory of 1548	4808	msedge.exe	91
PID 4808 wrote to memory of 4912	4808	msedge.exe	90
PID 4808 wrote to memory of 4912	4808	msedge.exe	90
PID 4808 wrote to memory of 1548	4808	msedge.exe	91
PID 4808 wrote to memory of 1548	4808	msedge.exe	91
PID 4808 wrote to memory of 4800	4808	msedge.exe	92
PID 4808 wrote to memory of 4800	4808	msedge.exe	92
PID 4808 wrote to memory of 4800	4808	msedge.exe	92
PID 4808 wrote to memory of 5044	4808	msedge.exe	93
PID 4808 wrote to memory of 5044	4808	msedge.exe	93
PID 4808 wrote to memory of 5044	4808	msedge.exe	93
PID 4808 wrote to memory of 4388	4808	msedge.exe	100
PID 4808 wrote to memory of 4484	4808	msedge.exe	101
PID 4808 wrote to memory of 4388	4808	msedge.exe	100
PID 4808 wrote to memory of 4484	4808	msedge.exe	101
PID 4808 wrote to memory of 1244	4808	msedge.exe	103
PID 4808 wrote to memory of 2964	4808	msedge.exe	110
PID 4808 wrote to memory of 3352	4808	msedge.exe	111
PID 4808 wrote to memory of 1568	4808	msedge.exe	112
PID 4808 wrote to memory of 3480	4808	msedge.exe	115
PID 4808 wrote to memory of 3480	4808	msedge.exe	115
PID 4808 wrote to memory of 4828	4808	msedge.exe	116
PID 4808 wrote to memory of 4828	4808	msedge.exe	116
PID 4808 wrote to memory of 3472	4808	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_04ddab9ffac63f4a237b42181bfa9f7addd6a2fed0587592e61feee93f9469c4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb8db6c188,0x7ffb8db6c194,0x7ffb8db6c1a0
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,14046768036927556749,17351602231970240147,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1670162446507808084,13985810611297588127,262144 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,1031471902367509380,17328866541720145349,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5184803166814647058,9388447189940164357,2097152 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10807486277793146433,15074742013803366946,2097152 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,14686234726999747627,12552239941996579010,2097152 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,12341692729834217001,11378140432849326874,2097152 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,4267925605594718544,6380672343183774816,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,3351922105595635596,3967201378296224021,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,16251237009533953539,6992648549345789245,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,16251237009533953539,6992648549345789245,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,15797675314157180506,1285762286530410005,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,9085693439463547751,7265416599413460485,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,4580978100361743213,1505048433402587885,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,4127653417039700599,7288975656126807917,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,2182916767543960477,5501603104503348139,524288 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5400,i,12055638531740315357,1207686873731110204,262144 --field-trial-handle=2232,i,2202491811516309592,14457600985289187430,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 31430be75d123cc2993f62a65e2f131b504dc922d867467857fc5c91b84b4824
MD5 5a3ba3c759bb982162688e9f48abd2fe
SHA1 7cbd467cbfbc561386e064879967fdee06577ef2
SHA512 d11e340a8d3db8bd0738a6b80843cdc4f13814bc02c06f27a912266dc14083d0986a518b1891d0f657ce18883d52902b8ceacf298e2dff752b465ffe04f1c166
TLSH
T17251A5DB8A904CF8F7A89C7181ECA2673A7C4CB259836D72CC9DD17D9B1A3DE904D014
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bcfa5a662c3ec6577367aaed205cc82a1e2b9406a5f514eab7377694c3b7fa3a
MD5 cea4697bceaf483ffc332cd081163656
SHA1 9ee2a4d1f8c70fa817930421f4102a1e9a996a5f
SHA512 8279993d49e3c24ba1e2f5261df39a03cd0754d154a031fe76671125a7af9d17b54a54370e8a3c502a81b63d36f57d1a61398bebf67a5d60d16f48b037463605
TLSH
T187216EF7C3D9866EC90156F05A24AE1BCE1D0506421C3D19C9E4EF6B97F3475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 116f1e5884ef93198cbc002fe2ac70ad514a15413b6e6930cd3b8a4760482989
MD5 08a0c61064eb7b65f23067940eac4bbf
SHA1 2475778b5609994ba9db75ebca3dd4e0aca9234a
SHA512 16f4cde5614a7e9891963719b652b0f550b4305d7aa1c0b0138d27a589820d9eb8154c649f3d17f4f10a2b4ae19c60d6713d77f4b0a401a73b0747a2d5ac9718
SSDEEP 192:sxZVRJWY/fisbSYIdpdhHW6+WNGYRPRkaIgrJ:sxZVeY/fisupbHbGm19
TLSH
T19B12C8556E28A47B8CCBE20DBA257F53D6F95032A1D01E48EAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ebd6e7d5aa256e9cfd8bfac1e628931c1854d3a8621000d07d6e386dec318f29
MD5 e23912a16e95f2a90973c40906270455
SHA1 701ac43f600884ee161579a39f1a07f6a283ed59
SHA512 129d3a39e8faccaa8a20e4aec0b095957ed3d6e8d1deff09d70b1421b82bb818cf80fae55735862f055b915fdc02dbbd4434849ff10c973ee13e2bc52a8d6ff2
SSDEEP 192:sxZVRJWY/fiseSYIdpHhHW6+WNGYRPOkaIg5IJ:sxZVeY/fis3pBHbGmMO
TLSH
T1F922B8566E28A97B8CCBE20DBA557F53D6F95032A1901F48AAFC861C05F7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 430cbe4a277031ca0abf7486d72b9a35c54c7dacbf5fdb472b1ba9c906ae8334
MD5 f9f8eccd932c4f4492db72f88e4afddb
SHA1 5f18f754788afd9da6520a37b2f9e635a1b76d8c
SHA512 26e12e232c53e588d3720028c8dacf26901ff2b7bd40371a089c817353654c42384abdb576c45242d24e3b34bc5d21ce1edacb4c217f47a65ef4fc48b67efeca
SSDEEP 192:sxZVRJWY/fiseSYIdpdhHW6+WNGYRPAkaIg5IJ:sxZVeY/fis3pbHbGmyO
TLSH
T1B122B8556E28A97B8CCBE20DBB157F53D6F95032A1941E48AAFC861C05F7ACD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7daec108c2138ce38c78b151fa3ba5c44a590aefc0ff857a81965fd05474494d
MD5 47600dd3ab3f29f2a5626fe5598d7978
SHA1 d7aaff3bb5238e3c54edf7acc74e629c97f9d8c7
SHA512 e3d964e033e20e82352a0bd6a4cc2ff2664ffbcc5832971826460dffc3a98b30d2c927408e20a9aa876a1ea390748ee6838a594571ebb72a5c25d28025c8b9bd
SSDEEP 192:sxZVRJWY/fisnSYIdpdhHW6+WNGYRPRkaIg5iJ:sxZVeY/fisSpbHbGm1k
TLSH
T14922B7556E28A57B8CCBE20DBA15BF53D6F95032A1D01E58AAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dc0dddcd019b57754c5bbf518d08d8a1bb11f64fecadf5ce340db54396dbdec1
MD5 789d68f91a7443bd9673cb3a6963f7eb
SHA1 5023ce34365b9ad14e3c0b16ac2ac7eca6f0b5e8
SHA512 b928196af2d10ef5fb803c1101b3f7ef0cd7bfa1d639bf8db53f7ceb6f27c3af1a75b468c6b0af974f33973dc22f40178dff76ef95ca0e4e5bd9927724407814
SSDEEP 768:1JK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Wroi+FM:1JK9uzYWvcQWsu1ja0HL7Q3ti+FM
TLSH
T1F3C20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cff8e4c45a3b5b1debf4667314c4b5d8bfeb1432373ee7a1a86e54aa4b11d843
MD5 5f59f220c1c464e950f6e1b5e1c672e7
SHA1 15d3fb05df86076101465a92c642cc15dd54e810
SHA512 b454753ded6d5a576c96ff6ccb4bb6d3a12d2b49e64b502dc3e3f0f7cdf124b495ca553d9d4b0405bdbdaa56f4250c8f571198d80d2b6f050bd3ad91de5e8c3d
SSDEEP 48:K0mImIXOS4iGHbeFeISqHK9G18HxQXYtOWMyLq1YEqo4pb0TkIS8pK9g1apxS5Yp:K0md/uK0sqOt2KGQdm8KnqZ
TLSH
T12091E20132BB124139BE358882A5871E924135B33159F66B7FBC50A58EEBE4C4CFF9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0216763fdcc35468b831d965c0c37f3496016321a7b36a80e5c9d904268f7048
MD5 dd0e3dca5eec79fea11bc76be87276c2
SHA1 d89ae10d685c008487c533f8d7b54c1814a830a2
SHA512 b43e4d8512db3db810c3ee32ad68baa46e1c978cc29874706d1a4cc66aff82bfe95773cc61a5f2d66c8187781e1a2816f892d1d6c086fc12346cc704f872c16a
SSDEEP 384:8ZcI0KsN8bwRcvYlOjTVv0OYSh6jCwJrZBoRs7O6R2FeoERo5:qlmV4niOYBjphZeRs7TRvO
TLSH
T144927E716C685C775DEBD146F48A3503DEBC80A7E7C96B80E0EDAF1E01DAA981307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6578916a891099705d7107a98d4edd6634ed3439dbfaee93f9e319462de0a609
MD5 9ee4fe0f01af4cd0eebb2e35ac4fd697
SHA1 6ac19af1a2ea7e5f3c2306c52faee739ee2098f6
SHA512 44ff02129613e975acaee115cc9e89ba48bfff30ecdf186df38e9dd41cf41d4cefdfc04b93e81ce9171d689cc1b1656bb746113fa4c323ca28bc4e2bf68be4ea
SSDEEP 384:zZcIosN8SwRcpYlOjTVv0OYSh6jCwJrZBhRs7O6R2FeoERo5:roRf4niOYBjphZ3Rs7TRvO
TLSH
T132826D716C785C775DFBD156F48A35078EB880A7E7C96B80E0EDAF1E01DAA981307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dbe6ce82c9e17239f3e5451d55d79ab50eee751adc69b23ff996dddd5e0b86e8
MD5 0833ebca4581880dbda409fd2aa820d0
SHA1 597cd3bdb748b77b78cbf37ef14f444f4e19763a
SHA512 d3d5bc3f0884bd439656500d6982dcea5d7dc568c27b11efd09f7d84600048f0143ce091debc6fb3eced5471bd04b09a73d24caea5a0c5333ed849a9425324f0
SSDEEP 384:kZcIosN8bwRcvYlOjTVv0OYSh6jCwJrZBhRs7O6R2FeoERo5:ComV4niOYBjphZ3Rs7TRvO
TLSH
T19F827E716C785C775DFBD146F48A35079EB880A7E7C96B80E0EDAF1E01DAA981307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8908d4f694815024a37d8d2ff1ab5cb3f5d6cc3ba8721a6875a4101760c19842
MD5 cbef9f6d142fe9eb55e167bc81056ba2
SHA1 bfbfc5007cfad9cfc5b3f4146b767d5d1f62c897
SHA512 ab61c4d428c1337631dbb1e9c18b7980b3170a19135309aadcfd5a225c6322c5af6e134a59b3c7dd2988b7605b35d7b04fff1a649c2f392a7a3cd0d88b440bf3
SSDEEP 192:SONx6ygpQmiUyZQtOCTVgI0OXoSPzPR9FU6:SONx6lHDtOCTVv0OYSbR/U6
TLSH
T13202D834BC686CBB9DE76E45F48726139F98107BEA412B80D6E81A1C01D769C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3c9a8793e55f0e52143f999cb6535cf5e0c2d765b5da7a59a2544a3d0858a79
MD5 993d9d64c9569cd21c359741e18e9769
SHA1 0c9afdeb3a16b7e8eef681c46d5966ce39b9f6f2
SHA512 ddd05d96763cd27252606ff3545d33dfe6bf14ced22081de0789547342126b8a061ba97f44187cca516763710ea8cfdace58343f8ca1b52ae5f4ceb9f177c0ae
SSDEEP 192:SONN6yMQmiUyWQXOCTVgI0OXoSh6j+FJSJrZBnv3URr/4U6:SONN6vKXOCTVv0OYSh6jCwJrZB8RsU6
TLSH
T1FA120935BC686C775DE3A545F48B31539EA84167EA467F80D1EC2E1C01EB6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd6b6b27-09a8-48e6-ae69-bc02a7d4efe7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cd6b6b27-09a8-48e6-ae69-bc02a7d4efe7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 69fd7533429c20cc88a7dc8c37c9df45c2da4c4f56c4708959f2e552656b48e3
MD5 ee7d3f948048f2723c72eb31f794da35
SHA1 654b2b2a4b2dcd76cbedcf1d46b616cf925b7011
SHA512 31550b9f3ab7094620eb4f1bb82bacf3b077ee0e4cc1b405940ee023f0948fdc49306cf04447c8c118f7e71231c88815ddc6def3ce63e231f3469936b419f0b3
TLSH
T154412A58A7FA1048B3B76E569FF6A86E447EB8772E06D49D10110E4E0A22F40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download