0eadbd7e17fc3c69dc517304f50cbc4ca7e522714c66499871da825169f10c27

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 01:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0eadbd7e17fc3c69dc517304f50cbc4ca7e522714c66499871da825169f10c27.html
Size 6KB
Sample260913-bpap2aap2w
SHA256 0eadbd7e17fc3c69dc517304f50cbc4ca7e522714c66499871da825169f10c27
MD5 c7a5e0f6ecdb89623fd76f9be80957cc
SHA1 28e1cbc925cdd5cd7508acef40bf2ded35e07111
SHA512 0aa703a7eeeb726c731f228b455efd0242e44461b3a2f3766f713d0491e91055648aabb9f5bc212ba4838bbd649925f2836524660b078f83978e0739e10babdd
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69REcE8XECgUdDhQoKDejCPJu:zWLJlxe+f80WhtKDejCxu
TLSH
T1D9E1B55A9E4C853F4100059BF0A16A1CD89F447BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4740	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338198340841660"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{68345567-A345-42B6-B760-9378F7F821B0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1520	msedge.exe
1520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1344 wrote to memory of 4916	1344	msedge.exe	85
PID 1344 wrote to memory of 4740	1344	msedge.exe	86
PID 1344 wrote to memory of 3984	1344	msedge.exe	87
PID 1344 wrote to memory of 3984	1344	msedge.exe	87
PID 1344 wrote to memory of 3984	1344	msedge.exe	87
PID 1344 wrote to memory of 4680	1344	msedge.exe	88
PID 1344 wrote to memory of 4680	1344	msedge.exe	88
PID 1344 wrote to memory of 4868	1344	msedge.exe	89
PID 1344 wrote to memory of 1388	1344	msedge.exe	90
PID 1344 wrote to memory of 4868	1344	msedge.exe	89
PID 1344 wrote to memory of 4868	1344	msedge.exe	89
PID 1344 wrote to memory of 1388	1344	msedge.exe	90
PID 1344 wrote to memory of 1388	1344	msedge.exe	90
PID 1344 wrote to memory of 4236	1344	msedge.exe	92
PID 1344 wrote to memory of 4236	1344	msedge.exe	92
PID 1344 wrote to memory of 4236	1344	msedge.exe	92
PID 1344 wrote to memory of 5080	1344	msedge.exe	93
PID 1344 wrote to memory of 5080	1344	msedge.exe	93
PID 1344 wrote to memory of 5080	1344	msedge.exe	93
PID 1344 wrote to memory of 1144	1344	msedge.exe	97
PID 1344 wrote to memory of 3820	1344	msedge.exe	98
PID 1344 wrote to memory of 1144	1344	msedge.exe	97
PID 1344 wrote to memory of 3820	1344	msedge.exe	98
PID 1344 wrote to memory of 4768	1344	msedge.exe	100
PID 1344 wrote to memory of 2640	1344	msedge.exe	105
PID 1344 wrote to memory of 2812	1344	msedge.exe	106
PID 1344 wrote to memory of 1084	1344	msedge.exe	107
PID 1344 wrote to memory of 4448	1344	msedge.exe	108
PID 1344 wrote to memory of 4448	1344	msedge.exe	108
PID 1344 wrote to memory of 4872	1344	msedge.exe	109
PID 1344 wrote to memory of 4872	1344	msedge.exe	109
PID 1344 wrote to memory of 1520	1344	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0eadbd7e17fc3c69dc517304f50cbc4ca7e522714c66499871da825169f10c27.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe32b9c188,0x7ffe32b9c194,0x7ffe32b9c1a0
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,2505066721982685474,1184530297447960676,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,1975574419867383469,13534576324090339560,262144 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,12018795699399418276,6267726871537082599,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,13048981152043732062,6494328385195121304,2097152 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,15540781445167630728,7107811398748673151,2097152 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,13188038407023701717,8867790227458333023,2097152 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,6667866707595870350,7243236590309137904,2097152 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,16821650193391283236,15395534838751708721,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,8875768950076501476,16684391314728558586,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,17387951067814802298,14275814641374071484,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,17387951067814802298,14275814641374071484,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,8728790349579952292,1594082752083267160,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,14836061516449779015,11830861916316286135,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,7730535624332637959,9033901419025512253,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,4987456393162612200,6095094760747717582,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,73323739757014131,16497172790312723191,524288 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,10894120784170181942,16283345151851565688,262144 --field-trial-handle=2252,i,11217389478750047071,734270536391214222,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 23731fbbb91397ca8d7c103fae78753d724569b0a51240a125c656ab2fb8f0d0
MD5 ad58eaf400fa7bfa9444babf6aa09be7
SHA1 ba123c7ec5a450a6ef740c87ab38931be75f718e
SHA512 1b963ae5649f6a89c6510ee7aa24a2bafa290dbc31ca08aa689ef864dee6a3687afc9eb84da6c9db2b516473dc1f7414e295f32e6ff830da9cfe92d5aa76c333
TLSH
T1E7519294C64193DDFBE4037863C52F973638B494A6873E8200A3FDBB580A71CB1434B4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 360f7356a5ac0744ff8c9d1008d93f6b285b67a7c5063cc2a3b466746a923248
MD5 ff85f0839583bd642a4521c229a23b66
SHA1 4db168de1ceb408c9351c58fbef7865cd9f3cdeb
SHA512 a837e2215d5ded4208cf3c5de081cdd0fb4ac5d8de990730ba4cdb2e036a40ae41e88ebfc17b058902bb6ddba408ecb5fd2788d87858ae87e9f4feea28c21793
TLSH
T10E217BF7C3D4966EC91156F06B24AE1BCE1D0A0642283D16C9E4AF2B93E24B5E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 dff5456879b9c389dbfef2cd786908e39f289491fcae42793b36a8d95de0e733
MD5 1460574daa5f654a82f389b9c893450a
SHA1 0359bc02d226cb1827311291b64b133b417fa541
SHA512 2058a2628583cc9399bbbe99fe5d98dca03d5efba6229084ebcbcff9bfdbdefc8ba6844da9810fbf48e3d687babfcedfe0308c5ec4bd0c3074510da58aafcd63
SSDEEP 192:sxZURyWWe/fxLsfeAIdpdFHW6+WNGYrbx+qIgrJ:sxZU7p/f9sfeB/HbG0p9
TLSH
T1B412A612AE28A97B8CC7D30DBB25BF43D6F9503251941E48AAFCD61C05E7ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8aacf9c0a631ff37aec77d6f1ba3cf95f71be6cbf12cc3d8ca672785409b41fd
MD5 f2bd94c9315c7c706573a52495712ff7
SHA1 1dd47ccb1142cc9441706ec03ebff3b290e6b02a
SHA512 5d2bf464f3d10dd3ccf3e9ed94f1425d38a62f0303713abda58c71afca309b2918e09335076662bc056ed10431ca5861e636ad468b91623fbb83f01cd73e843d
SSDEEP 192:sxZURyWWe/fxLs4X+IdpHFHW6+WNGYr1x+qIg5UJ:sxZU7p/f9s4XvlHbGwpa
TLSH
T11C22B752AE28A97B8CCBD30DBB15BF53E6F9503251941E48ABFCD61C05E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f832a2757f44966b4ae31d3a5e7ed8b6d1bc3a77aa5b758cb7326ed0c138ae5
MD5 fd992fa33bf658f05d49a6fce753e852
SHA1 942e9402fd9c0d825426e1980816007f3397ff69
SHA512 d7955bf9d40f342e11453ddafa5e91ffc943b8876842f631bf59e1ec82cbc8c22e6aae5ea979bf3841f3bffc10ec3de3f1b965dae29f69cbccd3bd19fb5b95ac
SSDEEP 192:sxZURyWWe/fxLs4X+IdpdFHW6+WNGYrIx+qIg5UJ:sxZU7p/f9s4Xv/HbG5pa
TLSH
T1FD22B811AE28A97B8CCBD30DBB15BF03E6F9503251941E44AAFCD61C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d56adf0c5b4d013947cdfcea7bd244f95cffe7487a470adf9049d10e277b065c
MD5 0650edcd45f48cf68264ac66dadb84d4
SHA1 7e0bb0cf462e084fba01055da93ee7a9e19804d5
SHA512 4f60d442bf50bad44d765e2170b3188d7628e02b12d94e7090d236f41be5db82f5d6b2fe5a40a9f23feff3178fcc169a9aac318a62c8dc4450cbd2bbe8814ce2
SSDEEP 192:sxZURyWWe/fxLs4eAIdpdFHW6+WNGYrbx+qIg5+J:sxZU7p/f9s4eB/HbG0pA
TLSH
T11322B752AE28A97B8CCBD30DBB15BF53D6F9503251941E48AAFCD61C05E7ACD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d18c3e0f6de9f0ee5b3286bcd38dca71ffe7486db7ae4a33dff6738ad0b13538
MD5 8c54c3ef5536a73a85628b9dadad253c
SHA1 0814d39c66e5f76d3b0af34e5be60bd6e4256e81
SHA512 c65908a579525b1c7ab0e6597c5b4faf91d7ffe14379ca60d0c0fe346c72d15cf7c14f55178c9e7b719857fc020fee061befd82c175856907280628c28af6211
SSDEEP 768:Tky4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbrroRhP:Tky4J/DWvbtBhu1jajiLm0bYjP
TLSH
T1E0C2FA3B644CCA7E4FC00B9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 597812cf608fcc9200c58c72a5e0d9f0bdb4d6635a0b228470a87bad53a19737
MD5 191cdb60500267f9702f041b9a1a21e9
SHA1 7d1341f07acb47a3dd49080fe4f6e85648df6f77
SHA512 815ba01fa2548b15c6f0b6ae236d2c1db75e381ec1aaa41053a70108ad78c345fcc58952fbc6f841e66771bde46daa11ae0b916835538781fc2bfc5e4e996096
SSDEEP 48:KIDI1Ks04jyLbef70DCOcey7bCxKISm7K9C1Q8xhsYarhhyLEzy+suCLbyB6ISWS:KIDCKs0+r7GKIXq+T2Kg0Dz
TLSH
T138A1454535BB065138BD258C82B4C71FA28236737118EA2B7FBC50A69E6BE040DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64b6682e-4f66-4a53-8d55-e866df7daca1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\64b6682e-4f66-4a53-8d55-e866df7daca1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a65ac2d9fd3c810995d2111a0c27cc49488392c9e72b8be7739c8ba5a77cb4f1
MD5 35897864df0a3241c961b23ad160a852
SHA1 8dc6582b5dc81b9e06945d293ea6f47ae985853b
SHA512 1d288e266166e4873b986efdc17f7c395b7bfad6813d2d5c2f04a26be8cef9e93105e42eb0583d65c329829ac7e53bcaf4267bbdf854bc6257ec00e3f0841ee3
SSDEEP 384:IiFiZcIbPsNj8TUNTUlIlQxP1ZS1PUxHX58EV8GAqXHJrHisa+VYZVom:TFQzKwgKqPUFa2HhHihggN
TLSH
T146A26D339998DC3BADF79B85F94A21138EF841A7C5C9AB90D7DDAF1D009A29C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 36e3f461f855f17a5ceb4f1a0832f08fafbef8864a676288e8de11b7e195ff58
MD5 2b0a524ccb8ceea792d5fdcd698b4b0b
SHA1 0fedc9ffd197ef51e4667fd49c977c465b147df4
SHA512 15bd73e9841b86ebc07eaee7ca83a05223bf01f8f3ef8b29da3fea7f7278e082f3af69b0e8fda1618bbd90faeadc491737eccfa52f956e0cba2999120a34919f
SSDEEP 384:8ZcItsNeUlxP1Z+1PUxHX58EV8GAqXHJrSisa+VYZVom:qtciPUFa2HhSihggN
TLSH
T1E9828D32A9789C3B5CE3A295F94B21139EF8916796CC6F90C6ECAF1D00DA66C1307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ea4a0de71f95eafef77e74a460f9301abf994e48ebe28d2fb87b373f3679cc65
MD5 bcec632274202489e5a94f17505df092
SHA1 43d939941bebfcfcc6fa2c83baecfd83f5470045
SHA512 b1471205774dbab2ddd40760bdfde42610bf7ba4d9eb477bacc7e500abb9a23747f0728c38efbcbdb86bea7eda977a17b8d6935e59ad016fa7431e8267e1d36d
SSDEEP 384:lZcItsNeUQxP1ZS1PUxHX58EV8GAqXHJrSisa+VYZVom:dtfqPUFa2HhSihggN
TLSH
T1B1828D31A9789C3B58E3E295F94721139EF8916796CC6F90C6ECAF1E00DA66C1307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 005ecfa363b86b2b3e018784cdf19a0841e224cc3743ec33e0a1d62ac5f88f83
MD5 9caf09def4c7abb1560071733acb0eba
SHA1 cae80067f39f516fbd3e1b699ce967b44c5f752d
SHA512 772b15f11757f253b514f7dba40e5ad8984c9a0bd7a4e7185690ef08499ba56f35bac4a8272f98f7a2df9b919e043e3c732d7bc6779c1dd00c0cbc0c176625e0
SSDEEP 192:1ONc6wlDaQmiUyQvGD4X58gZ5jzorGAqXgSJr6veh/8U6:1ONc6kWmD4X58EV8GAqXHJrNiU6
TLSH
T12B121831E568AC3B5DE2A584B48B31139FE85117EB897F90C6EC2E2C00EF66C530AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 efff0117add06f9a91334cf386cf595848a496ddea270f19bd66bc05bcae0138
MD5 de619271580e44d4024e693676dcee24
SHA1 3c9ac3204d8a6756bec6c66f86ba85ca94112c63
SHA512 fde71ce038ebe7beaf071c04ea1d802bbe3add6879768e23719efc65ba476fe818c456dbaf045984a9731256e58699c6731d92957dcd87a9d0f20f6eada092c5
SSDEEP 192:1ONCq6wlDgQmiUyQJGW4X58gZ5jzorGArDlZ0U6:1ONp6kgUW4X58EV8GANCU6
TLSH
T15202FA35F8787C7B8EF3AE49B58A26139FE5112BE6952F40CAEC1A1D00D765C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0018a2e0ad4ac36b4aae54c8676a927d462904ce306b1d53747f814689e0d1df
MD5 cc0056191de98aef9a51b1dfc4980448
SHA1 287b67cce23838e6efd8f315c848d8dcafd0cee1
SHA512 5a6b9aadb7f3a50da7d90915de4fd79bc5ea0dcbae3a8363166cdf6d29c84fa15c3b4fb3fe47efd8095dd77cdab5586dd81ba5616d8ab8e9c1e42f180d782999
TLSH
T115410B5CA6EA1048B3B76F5A9FF6A86D487B7D372E06D05D10110E4E0A26B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download