2c8d2edc5b4f12b25b9fdf948d640020f3b11b1aec912eee3aeb1207239425e0

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2c8d2edc5b4f12b25b9fdf948d640020f3b11b1aec912eee3aeb1207239425e0.html
Size 7KB
Sample260912-xwh6msgd65
SHA256 2c8d2edc5b4f12b25b9fdf948d640020f3b11b1aec912eee3aeb1207239425e0
MD5 3b7ff40daea7a2874e9a86483f3792de
SHA1 346d1f406c678a280577e98bc13ea613d126a702
SHA512 10eec070e9f23b08b4752bcaebea8afedeb6f07bdc7bbcaaa8b3fcda24be61e3c5f374290ab4baa068271db757011bffac50f15967bdb3a378a358fdf3920331
SSDEEP 192:zyHGqNEY1f++BPdhQ8dyEBD/6O2EIjEsqgyeOKz:wRNpf+anQmBD/6O2EIjpP
TLSH
T1E9E108A76D35CC1D02B242B6D973B41DB0BC115BEA009C11E6D1CA9C39F16EE8863AAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4428	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338367809082325"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{B944925D-801D-4B00-95B6-4DC265C9EB63}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2552 wrote to memory of 2540	2552	msedge.exe	90
PID 2552 wrote to memory of 4428	2552	msedge.exe	91
PID 2552 wrote to memory of 4444	2552	msedge.exe	92
PID 2552 wrote to memory of 4444	2552	msedge.exe	92
PID 2552 wrote to memory of 4444	2552	msedge.exe	92
PID 2552 wrote to memory of 1804	2552	msedge.exe	93
PID 2552 wrote to memory of 1804	2552	msedge.exe	93
PID 2552 wrote to memory of 2412	2552	msedge.exe	94
PID 2552 wrote to memory of 2412	2552	msedge.exe	94
PID 2552 wrote to memory of 2412	2552	msedge.exe	94
PID 2552 wrote to memory of 2912	2552	msedge.exe	95
PID 2552 wrote to memory of 2912	2552	msedge.exe	95
PID 2552 wrote to memory of 2912	2552	msedge.exe	95
PID 2552 wrote to memory of 3840	2552	msedge.exe	97
PID 2552 wrote to memory of 3840	2552	msedge.exe	97
PID 2552 wrote to memory of 3840	2552	msedge.exe	97
PID 2552 wrote to memory of 2696	2552	msedge.exe	98
PID 2552 wrote to memory of 2696	2552	msedge.exe	98
PID 2552 wrote to memory of 2696	2552	msedge.exe	98
PID 2552 wrote to memory of 820	2552	msedge.exe	100
PID 2552 wrote to memory of 4656	2552	msedge.exe	101
PID 2552 wrote to memory of 820	2552	msedge.exe	100
PID 2552 wrote to memory of 4656	2552	msedge.exe	101
PID 2552 wrote to memory of 1788	2552	msedge.exe	103
PID 2552 wrote to memory of 2332	2552	msedge.exe	108
PID 2552 wrote to memory of 2100	2552	msedge.exe	109
PID 2552 wrote to memory of 624	2552	msedge.exe	110
PID 2552 wrote to memory of 4092	2552	msedge.exe	111
PID 2552 wrote to memory of 4092	2552	msedge.exe	111
PID 2552 wrote to memory of 2252	2552	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2c8d2edc5b4f12b25b9fdf948d640020f3b11b1aec912eee3aeb1207239425e0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffeec26c188,0x7ffeec26c194,0x7ffeec26c1a0
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,9684745949327657275,3451283306710441222,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,11871361601076394464,11031736200312635623,262144 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,9389309246466971125,8583928464343486112,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,146100265064111429,17194097015846052645,2097152 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,9402658859492674734,3431979367931949731,2097152 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,9044380306824257081,5723250523795977231,2097152 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,15785992307926536647,4763235768867576738,2097152 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,7171884789085953414,15032772418448286861,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,8785474281945366392,1404307449564610573,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,13763158868158314403,15872225684780125930,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,13763158868158314403,15872225684780125930,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,12947913732728013830,7524800033424867135,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,962920175823569406,5279065389838841278,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,5430776995993448098,714920718222901290,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3980,i,858923264164022359,14215692232420846958,524288 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,17954041203194129327,5787387876192142247,262144 --field-trial-handle=3044,i,11102294450934209934,15029054378091905204,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f2bebd90a4b6a437368e9b9465773ee18be5fe39f7c7e1cb957c89ec2ea1a13f
MD5 232cd28dfeffcebe1ef7567fea4ea6ca
SHA1 a3d3bd2225b94790375ae104f000ac8f33078b4a
SHA512 4962154daedca05fa31b601a7033cde5612b8ab2f1ab02d8d4ea7ac50173a2fe6cd38400c09cbace39993b95c7c74a2aa308179a82f9f8891c0dcde66847d4f2
TLSH
T1D5615B8599B000A0FBFB49F395E1F48337F08A93AFB72DB5DB58D4788A0E350A316084
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f7b2d1b4d586c7bdcff06d8b00e6a932d24b906d17811d8f0c441ae8749dc71e
MD5 a6b7829e850169c31db66c62f331d920
SHA1 b9295bc77ed7719356dbff69316c8c849e3808ec
SHA512 cb6a951e1b553aa656fb67dc03ae90c1444e0feecbc34d1e0d95e1325d987e13b610ad997573063e48369305877872ffbb9311a2298878833a930fc822e81de7
TLSH
T155318DF783E1866E891152F09A14AE2BCD1C1517432C7C6689E4BF2B53F3571E00279F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 30070875b97e56ed53114de9bcaaeaa17adedf59fbfae899a228fa98d11e0122
MD5 18294894372bbe0ea0671fdd256fe12d
SHA1 bb2539ab800755d9ad18407089e75647d0074343
SHA512 ba274959d49184195a716e027075bac283896fa09ad8d0cb25b92750dddef050e852490a2822c20551b492e8ae8c2b1df334a889bacf50983717b00693800d49
SSDEEP 192:sxZYRAW45/fRsamKIdpdeHW6+WNGY3R1zYYIgrJ:sxZY9E/fRsaSIHbG0x9
TLSH
T1DF12C8166E38A53B8CCBE21DBB65BF53E6F95032A1941E58AAFC861C04E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f442aae36921fe1961cb8a4fd076a09275ab776451263c7330da9398cc5cd504
MD5 975db9855dc3833ee948e46981bd6465
SHA1 c6cacf934d8b903cc6ec5eb86237ebed857e05a0
SHA512 3c70a82037c639dead143e2f49463d5b6b8990c229b939f5b5c14c6008fd1531966203bbf2373950f1f66f739a17fa22e39e3ed7a08d501a8d82871cdf626638
SSDEEP 192:sxZYRAW45/fRsXmKIdpHeHW6+WNGY3V1zYYIg50J:sxZY9E/fRsXS+HbGKxi
TLSH
T10922D7166E38697B8CCBE20DBB55BF53E6F95032A1941E98AAFCC61C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9621cf82905f6175bb8b28928cfb77dda1bbe6298f0a5330fb56737ab4c5af17
MD5 ea2487421a93cf769f6e98c848f002e1
SHA1 6661ad7dbb53abc44e4eee92dbfb241353e0fe09
SHA512 dd0acd85b0a8c7223afe5cca160567e0785c48c281110b73972efba033240e0315655f77c034b4ca0c068778e4b8efca8858e81bf8cfb778fef894effd0ee483
SSDEEP 192:sxZYRAW45/fRsXmKIdpdeHW6+WNGY3m1zYYIg50J:sxZY9E/fRsXSIHbGTxi
TLSH
T13222D8166E38697B8CCBE20DBB55BF53E6F95032A1941E98AAFCC61C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ea32bbc6fa7d7f0aaa458b6bd1feaca81cc7cea251db3baec813b6bc9a10cce0
MD5 b21f41029349eb3e44692abbaf054703
SHA1 9dfae4dd4bbbd215eb295b1783df91004ac3e95f
SHA512 ad9aa01e6873c1e2acaf3bb808cb3067bbdb11d138406e62b22309afa4d4315795d833769b31a0d5872b9bf6e4dfd8f44a7e4a5efbcfbcb4426cf7c609daebb6
SSDEEP 192:sxZYRAW45/fRscmKIdpdeHW6+WNGY3R1zYYIg5eJ:sxZY9E/fRscSIHbG0x4
TLSH
T1A222D9166E38A57B8CCBE21DBB55BF53E6F95032A1D41E98A6FC861C04E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 19893adf3bf64be7311790c40e633cece36097b47ad37e2e0cbede87cbc56317
MD5 64ffccff43ce82c83fad7092902b2f91
SHA1 b2d21fed20bc781026e9df67e7c04ae69cc9eba3
SHA512 90ae0f3075df4c19bc446d1102ccd8b22ce8f8d5804df5e5de1483610e99b45fd1186448621e074f605608b9e46118ab9e00e5c5782615f9ce8f0a7e21473ab8
SSDEEP 768:8U30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72vrolZMKZh:8U30AbSWvS2l9u1jaLmLZ128PX
TLSH
T1D9C2EA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4047FA984C02D77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9648d0c91c396416f272d107f51c9870a752a511ebdcd12445e5422e512009a0
MD5 b4e27fa56c755536faa7725538a123f9
SHA1 ac5f0a5d9aff304541e5fd72888ab8ecccd22e9c
SHA512 b9ee0286a097788a100de2456bb434a05c47be0552731a997567a13e897dd60bf6fee0ac4d0f796eabcc55e8c4aa04edd66b57e89ac1ce6aece9f0e5a0064329
SSDEEP 48:K0YH+CIyWXbOVOISaXK921sXxgHYd+G8yLHqTnpJZybRcBIS3yK931dyx3iYUFpI:Kg/mKskqS0IKZe+hyKaoiR
TLSH
T1BD91401434BB175538BD685991F1871F464231E33028E62BBFAC01B2AE6BE045EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30d09d11-8b26-45e8-b3ed-5e50a83b5298.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\30d09d11-8b26-45e8-b3ed-5e50a83b5298.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7deff1178361755c11aa03d147db4c0839132c0f8bbbd0aec967285ea78d57af
MD5 f34f2d122c1daad3bbdf75edd4652e32
SHA1 7e3feee7b02ae23055c3ffd1eb54c3406c9b6d37
SHA512 282f5d8cad5740009167cb387b7d724e6bb9c484c9a3aa750bbbe4a75cdc4a70699c4bdbc4640a8911595d27318d3ae443343ae03211b86c0fd89d97c1657a49
SSDEEP 384:0iFiZcI75sNm8TUNTUlIlnTAZpu5RA+9iX5FgiypUsa+VYad7Umoh:PFQtjwgAjqadypUhg1LC
TLSH
T1ECA26D7359A4987F9DE79B55F94B32039EB841A3D6CCAFA0D6D89B1D00D61C8030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 74214f25a984aaf4b1c92d3d911fca7bb23154a5b6906dc128c45cf2ad62d4ad
MD5 093dc5b53099f0df7b26998e41440810
SHA1 d1600387d19af926dd0982ad402960e7c3756d1e
SHA512 b307ad21d8af10b6212d11183c1a10c597ebeca65d45b74a01fded7d6fde8bce99a4d6240ae2b912489e289846eed2e94258b85ea1c668b54ed452f5d90b5e8d
SSDEEP 384:MZcIXsNmnTAZpu5RA+9iX5FgimpUsa+VYad7Umoh:aX8jqadmpUhg1LC
TLSH
T124829E7259B46C7A48E7E750F98736035EB89167E7CC2F94C5ECAB1D05DA2C8030B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 44ad37637b6757e73bb1701941d38cc1c6bf9153d4995c59826e9e8d4202a1f8
MD5 3b688e5d208578a736aa5ca13e4ba5c6
SHA1 1b2fbb13ac30aaf41caa54cb6da9e2ab18602227
SHA512 d44982ad51b9cf24a042fe23a0e6e79637b504b162fdaba8bb938881dbf0cd7d7057f2459eb87aab53ec46b2bae75071eefdba871f5bf43e6524ae293a6f9982
SSDEEP 192:LONP6AmwprQmiUyr16siX5F1RgJipFCU6:LONP6ipdu6siX5FNpEU6
TLSH
T1FF02FA35AC686C7B8DE3AE15B48B37136FA5116BEA952F44CAE81B2C01D724C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2169228d22ba495e6bc20b8dc5598988b3885ad79558726c316658d5e54e10ab
MD5 b05e60ad2216f441adafb589ce157e8d
SHA1 b1415d3e87914535ffc7057fa59b7af19c6ddc08
SHA512 e0ee81181c6536986d6eda151400c473188925dcf2909fa4ecff33027ff3a46296c6d113d5840b493ce8dcf2dc4ab074c1f4bb95b028cc5bf2e661606b6d39eb
SSDEEP 192:LONn6AmwpFQmiUyd16siX5F1RY36J8lRpA/lU6:LONn6ipjC6siX5FgiWpUU6
TLSH
T138121B36A4B86C7F4DD2B950F04735135EA95227EB897F95C9EC2B2C06EF19C470A423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 83f7c6c1ff0f4ef488ae977d6ffb4645b53e069891a082a9a61663780fef84d8
MD5 6f722eac04d6ee21e1fe91b721d672a7
SHA1 5c61e85dfec8c4a43e63c8bb8e5b6a114869a917
SHA512 0b8d7e0dd9d318eadb83ca285eda44358fba329bb6c59cf466d2307bc54f4b7281b32faaf4cd883c2d76a6e7bce154820233283afe0483b85ca2645926c6cff3
SSDEEP 384:yZcIXsNmeTAZputA+9iX5FgimpUsa+VYad7Umoh:AXVVqadmpUhg1LC
TLSH
T150829E729DB46C7A48E7A750F94736035EB89167E7CC6F94C5ECAB1D05DA2C8030B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05045c4c-6c78-4d62-837d-8204c067008a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05045c4c-6c78-4d62-837d-8204c067008a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 53e777100f6fda102c5935a1a06fce78c3ffe8e755d4012c090cb431e6071a0a
MD5 7e0623323cec42e822655001d852ea01
SHA1 918d564281bfecbf6baf5d1d7d4cf1e9def7c847
SHA512 34fbe0a2ff6764f8416879bbed5a901d551002ae5d6b7b820746009c8689eb0115df3e3930922eb8a00230067779ae8448bf43e47b4ddd68680874b304f3469e
TLSH
T1E941275CBAFA1108B3B77E569BF6A8AD487BBD372E07C55D00110E4F4662B40D861B33
MD5 SHA1 SHA512 TLSH

Submit Download