18187f998a903306efe36e8307eb1bf9e98ad3b20acf1eada6ee4fff9176ec69

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_18187f998a903306efe36e8307eb1bf9e98ad3b20acf1eada6ee4fff9176ec69.html
Size 171KB
Sample260912-qa4f5ahn8x
SHA256 18187f998a903306efe36e8307eb1bf9e98ad3b20acf1eada6ee4fff9176ec69
MD5 89428b5666afb25479ce96dc00239863
SHA1 eb394172f934aa169f10821743dcf17d2a3aad02
SHA512 b91b24a9a24f6e75c0e49db8dcfeeec329702e0b7063479f4b2ce15d91afa90778d043b9f81024a49e1115be70406403ec9ea21ba4d2efb5e199aa7b6a187a13
SSDEEP 1536:XRRkv5mtjPH/HL5gBpcOw57EQJYnl6WGwZuezgGE9HCvXt4QyF0zmaj+Rr4sFfA3:XRLjHOI5IU8sKtC0zov4MiZ
TLSH
T16504E796A1602CB6DF2265B1415B150A792E107BF84B04BCF3FCCEE23BE595E0646B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2928	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338230962341902"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{C71D43FF-D5D2-45FA-A555-3F66CFEC47B3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1876	msedge.exe
1876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 2616	5112	msedge.exe	83
PID 5112 wrote to memory of 2928	5112	msedge.exe	84
PID 5112 wrote to memory of 2140	5112	msedge.exe	85
PID 5112 wrote to memory of 2140	5112	msedge.exe	85
PID 5112 wrote to memory of 2140	5112	msedge.exe	85
PID 5112 wrote to memory of 4100	5112	msedge.exe	87
PID 5112 wrote to memory of 4100	5112	msedge.exe	87
PID 5112 wrote to memory of 4324	5112	msedge.exe	88
PID 5112 wrote to memory of 4324	5112	msedge.exe	88
PID 5112 wrote to memory of 4324	5112	msedge.exe	88
PID 5112 wrote to memory of 1544	5112	msedge.exe	89
PID 5112 wrote to memory of 1544	5112	msedge.exe	89
PID 5112 wrote to memory of 1544	5112	msedge.exe	89
PID 5112 wrote to memory of 2172	5112	msedge.exe	90
PID 5112 wrote to memory of 2172	5112	msedge.exe	90
PID 5112 wrote to memory of 2172	5112	msedge.exe	90
PID 5112 wrote to memory of 2040	5112	msedge.exe	91
PID 5112 wrote to memory of 2040	5112	msedge.exe	91
PID 5112 wrote to memory of 2040	5112	msedge.exe	91
PID 5112 wrote to memory of 3476	5112	msedge.exe	95
PID 5112 wrote to memory of 3476	5112	msedge.exe	95
PID 5112 wrote to memory of 3384	5112	msedge.exe	96
PID 5112 wrote to memory of 3384	5112	msedge.exe	96
PID 5112 wrote to memory of 3180	5112	msedge.exe	98
PID 5112 wrote to memory of 1716	5112	msedge.exe	103
PID 5112 wrote to memory of 4820	5112	msedge.exe	104
PID 5112 wrote to memory of 4532	5112	msedge.exe	105
PID 5112 wrote to memory of 1864	5112	msedge.exe	106
PID 5112 wrote to memory of 1864	5112	msedge.exe	106
PID 5112 wrote to memory of 1120	5112	msedge.exe	107
PID 5112 wrote to memory of 1120	5112	msedge.exe	107
PID 5112 wrote to memory of 1876	5112	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_18187f998a903306efe36e8307eb1bf9e98ad3b20acf1eada6ee4fff9176ec69.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa5bb7c188,0x7ffa5bb7c194,0x7ffa5bb7c1a0
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,15643011408255007170,9559663585506483361,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,12641962428896358117,4899629511846609370,262144 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,5028730341107688697,14994381978848773944,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5339625768089779224,3987277560554456798,2097152 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12196064704451028633,2804356729389709594,2097152 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,13975135730501020060,15813608295018124044,2097152 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17654762075409926954,2635690801375691944,2097152 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,4104104435941556615,11533302496607649449,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,17022071983671226312,18356042034481971945,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5411876860276557958,5637676117303412706,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5411876860276557958,5637676117303412706,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,10461606003889255934,15428426037141747255,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,16266818302951873295,10612144837569062650,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,4945845228206673500,7752451617381411413,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,6298315262838675659,1616667316451436225,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,15812275074288262269,2456131287739081024,524288 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6524,i,1126406718080865421,12261556317073808602,262144 --field-trial-handle=2364,i,4843965379190527379,14140760402131759149,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1876

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 de0ff1f957bbd5b314ef983d9e1e74c033e32115321a7921ed61d5c525f95339
MD5 6428b23f3e6d28d95ae048e011964f61
SHA1 f6627a47f42ec883881c3760114bc54b5c67b823
SHA512 ceee7eca1967bc1032a5ad8e1f64cc448de33a2f46f1b097a946fcd52804abfca16224e06fa495c2c827c243b2691632f7e56430d952ed702eb8c27f3189c31e
TLSH
T1FD5180817AE4C084FFA45FB1D0C818AFBA32D58CA483BF130FA4E4B96B163349149394
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0672baf918874c8c45bd5c1120908851b7c565b9888d189fb3351c3b39535194
MD5 0c9b0dae5d32419a130b610867a7fa21
SHA1 0a0f8748a9c5553a626c2ca2adf6ccfc19f9e4b2
SHA512 30e4690620da8d8edb853475100dacb2bb5cc3a973c9cc265c3eabf3ad8f285e48e094b0a964310af538d518cf6f76512a4be1e026e126a2a83cc269fc94de74
TLSH
T1CC518AF7C2D8877E890556F49B256E1ACD2C0A56422C3C1688E5EF2FA7F24B0D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f74f42ad0a3dcd4910d1918624d59e1312068c98da5e52fcd78b7c367771877b
MD5 7da62935a6b44605787ac36877e047dd
SHA1 2d43dda731e6452ffece76bde04a15274fdbd8be
SHA512 11b6242cfef26e8695cc79d7390960115fb39d6cc8728c0f4ada38444cfc4283dd51677e4990c89a6be89428429f4814498d1261fe97a2c9e734e811008b22d3
SSDEEP 192:sxZIRsWK/f+sGKIdpdKHW6+WNGYgUuEIgrJ:sxZI5K/f+sGDUHbGg9
TLSH
T16612A7126E28A97B8CCBD20DBB25BF53D6F9503261D51E48EAFCC61C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 63561d42e5a110986a9f230973a3b24beb8cfc597e73a36b476593eef3afffe8
MD5 e5bfba3889cf2c9145379a756afa5962
SHA1 ae1b50819a7a8768d6749a658b0e9a59bfcd5eaa
SHA512 84a4ce44a4b02ab558937175373bf0e9737eba615d347b70c675788949b077b1a372b13b3bd36c9cd5593ec491be937e6aa65635df3dc7571d2b4ef5a280cda5
SSDEEP 192:sxZIRsWK/f+snxKIdpHKHW6+WNGYgUuEIg5gJ:sxZI5K/f+snxDqHbGwC
TLSH
T10322B9526E28697B8CCBD20DBB65BF53E6F9503251911E48AAFCCA1C05E7BCD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1bdf47bb9764f9405e1e494dd36330dc5a5f8347d727c4b85b1b8d0a086c55e7
MD5 4acf8cda540733c097d5d2725a6c6420
SHA1 35f688ffdd62f6ccfdc4dac9c456988af05691c2
SHA512 078fc69af2d521251b0866e2df0c598b9f3deca5b6c41f5f2ba9a93d90c13262ab56d41ead8787e143c40352b25c42ba4b57a1a76da6e21509960bc14cc97f7a
SSDEEP 192:sxZIRsWK/f+snxKIdpdKHW6+WNGYgyuEIg5gJ:sxZI5K/f+snxDUHbGeC
TLSH
T18322BA526E28697B8CCBD20DBB65BF53E6F9503251911E48AAFCCA1C05E7BCD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 477b8dc20819a94af0468f3055f5233a7134a45b4b3f15e1e0b43c10cf1b7f40
MD5 3a03240e9b6bdb75ee566965f4f13192
SHA1 3e5c5f527595a30ebc35dee78e6e2b028352c362
SHA512 f06a1a4310a9320f346d698c371d9511e9f243c25ef8b64c36b9058fda93fde1809eb0007612729f7eeb6deb1f5a39b69740749b7924018eac3a86524dae45ea
SSDEEP 192:sxZIRsWK/f+shKIdpdKHW6+WNGYgUuEIg5KJ:sxZI5K/f+shDUHbGgY
TLSH
T1C622B8126E38A97B8CCBD20DBB65BF53D6F9503251D51E48AAFCCA1C05E6ACD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9c404d0b15a087dc81a1ff242455195abfe0de4725a7d59b79dfdcf53c63d4d3
MD5 df197d202d9b16890889209acc14a1ab
SHA1 852ab6a1685a65f27a7c1842b8f9f120f2c5143f
SHA512 faed7c1d1820c86e768f5713040492a394d937a8868a07a56e02ce5bdde32f795aa849d8858878cff28c41c3b5ae2f70527b5c372d823bae34ec688f8c4fc0b1
SSDEEP 768:BCichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzKroZYn:BCichfPWvPZplu1jan+LKgzhan
TLSH
T1CCC2E93B640CCB7E4FC01A5DDD1A6F9B7EA802C7A6588D4047FA994C02C77EE91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 979abddc9afb2316f4a745ac8a911f10d6777f6c40bd17c80221d0b8a75edd8c
MD5 4ac0d2c83f9d61c6786b68564dfa5e59
SHA1 1278031936ddfad08a549dbb010dd7ab89b6dd6d
SHA512 4f8ea1c6ef6b3e33a5741ca8642c7c4563d6a05f2d668882991e0442f35c8f73ef6e7b4596410ac7df4868cef3fc67f53768a881895a8fe9e63149b7770ddc0c
SSDEEP 48:K00DCOcey7bCxKISm7K9C1Q7x0rYZ6SIyLZo1JTXrEbXyvIShEK9h1LExpUYSTz4:KoLWKQsSKeoKDiE3GKssq2c
TLSH
T15D91245031BB12143C7E25499161A71F0241B2B77058EA7BFFBC24B29E2BE181CFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d85ec2be-d793-4db6-8169-a980c3272e5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d85ec2be-d793-4db6-8169-a980c3272e5a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f03abcf58a0426edd3fde1b80b4f0b6578362047dc95a14bb9df0faaeb369d12
MD5 f27f63a3f83c01896f5a68dbbb6fdb7c
SHA1 ba3359d3a19eea5a1946b97fcd21fe741ad1673a
SHA512 d787cfe86dddc42124a828a8d9a3c703aa88cae6230efddca6f376a3f1b1c175fd398275d84ea2b6f5bb7492946dea908e23258e6906c7ea9011308f80409029
SSDEEP 192:unzusNg9QH3Z2xJTyphvVuiQmiU1cHH4BGYX59eznCS3oIt18UAkH1N/5dBU8:tsNg9w53CYBGYX5EWS4It18UFDU8
TLSH
T1C9321A31A8B8AC3B5DE79591F44739138EB8512BDB887F94D1ED1E0C01DF69C131A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 40f0774baa1df29b7d45cfe3f7d90629eb08763e9cd58ef27e9b274002dd7f65
MD5 8fe6d08c82faf6ac3f68dad8bbfe4193
SHA1 9edd804f532b1076b6cade180eb87c21c4216021
SHA512 3714bd82475c8afaefb6e4cb249a5ce698fafcb6e98999dba21361722cb226793f19910e095549d52ff422f92604494f29db44c6c31ec447991d3d583350143d
SSDEEP 384:SiFiZcIwmsNg8TUNTUlIlIZw53CYBGYX5EWS4It18UoD7O6R2FeoyNo7:ZFQttwgXMCGYuWXIt6UoD7TRdU
TLSH
T1A3A26D7388B8DC3B5DFBD695F94A36138EF88167C6C4AB90E2DD5E1D009A5D8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 985115f499d7962f45e8a171eceb99f063883316c96f7b0a1698fc2b7fa9c820
MD5 9cb849f5036f147a55282ac1c326fb4e
SHA1 5943c9a6e43ce6d90df83a1ffa19e51f4f2a6622
SHA512 f5cb9d8a076d32b056556d9de90247344d0461dc8f8c1166d541ebb625fda0ebafd7fad605f8a1c7df0fa7f60c491be49966ab8a68d966fe4e5cc9da53deda54
SSDEEP 192:unzusNg9QH3Z2xJTyphvVutFQmiU1cHH4BGYX59eznCS3oIt18UAkH1N/5dBU8:tsNg9w5YjCYBGYX5EWS4It18UFDU8
TLSH
T13D321A31A8B8AC3B5DE79591F44739138EB8512BDB887F94D1ED1E0C01DF69C131A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8d89ced7186772ee7760a8f8e5981b929ba4f0c0bad08c5e8bca9fac9c887160
MD5 f9841e1c14bfb2d43dce7a819d485cd5
SHA1 4b37f85dfa0988025396e53629af4aa4812940ab
SHA512 9a107c650735dcd312d1c225fe4caa51d6e0724eed583fb4d296038b8959385af9d840d88315eb438ca74178703ff15b08b74201ae2693251c4583f110afb2a2
SSDEEP 384:pZcIMsNgIZw53CYBGYX5EWS4It18UFD7O6R2FeoyNo7:hMZMCGYuWXIt6UFD7TRdU
TLSH
T1BC828E7258B89C3B5DEBD096F48639138EFC911B97C86B80D1ED6F1D00CAA98131B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9052d0270b8845891bea815c75f9a119f9d47d8270be7d6c988b0935b37df28b
MD5 0a63cd841d9d5ec1ccfa38a80778c0f4
SHA1 8d6441c46369624d259dfa03b521fe320ef76588
SHA512 13e2850c85d19d26c70003e3ac447588a8a059495578f5a7b406b724674d3f7715b48bb6d459134f131a44e785d12f90912afe9c1cec4cb2a3f0f439254e0f52
SSDEEP 192:LJONg6DphmqQmiUyTuq8wGYX59eznCS3oInkk7cLqbU6:lONg619dRwGYX5EWS4IP2qbU6
TLSH
T1FD02EA39EC7C7C7B4EE36E45F58B2A135F98112FAA942F84D6E81A1D00D768C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3b337bd3eb8231c0027567e3e4b5fd39efd762d1ec21a7e7ab013a35fbf650c9
MD5 1655f7981d197f85ca150991fe55f1ff
SHA1 d7917d0b0033be746ff2fff5d5187533389ae417
SHA512 22d4e4d017cbafb495ea03edf4c6ffdb968504c89f55cf937f2017168b27c57d7d98bf2a552e383a247f98cba67969b8c301af474ab664a6e57f3e418e91c4b8
SSDEEP 192:LJONB6DphwqQmiUyDuowGYX59eznCS3oIt18UYkIIN/5dBU6:lONB61TdowGYX5EWS4It18UhDU6
TLSH
T11C120B35E8B8AC2B5DD3A591F48735134EA4522BEB887F94D5EC1A1C01DF69C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48622eff-6601-4d32-8d06-e0801ab06956.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\48622eff-6601-4d32-8d06-e0801ab06956.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 43ff9bb30399356cda68c5eb2a37586e076374e45c065f6807d1d7e4170a8bae
MD5 ad4abaec97148694e721f61efa8efb86
SHA1 bdc9811959e4d2cf1e6f8db43d5fd9ead53dbb51
SHA512 ec5a6537e4339a0d61e446bb9591cc04e26dfd6855f8808e062aa70c4ee196beb2f64bd035c37afc9422aa17d71dd81c4c6018d75b7099f502135a51194706f9
TLSH
T12C41299CAAFE1148B3B76F56ABF6686D487BB9772E06D49D10010D4E0B23A44C971733
MD5 SHA1 SHA512 TLSH

Submit Download