a07841b3f9503cfc7178641d2e3884e73a216411b5ce0cfa448c049f809d52e7

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_a07841b3f9503cfc7178641d2e3884e73a216411b5ce0cfa448c049f809d52e7.html
Size 112KB
Sample260913-ct8y3adh39
SHA256 a07841b3f9503cfc7178641d2e3884e73a216411b5ce0cfa448c049f809d52e7
MD5 5621afa0592bbb968a066ac58464a4e9
SHA1 c61aa48a307bfdfab4aca096bf6013bbc9f51a81
SHA512 273b5fec32d6065f857ab27181cdeaec4b35736dbd1ed6d725daeb0870a9fa4b2272bec293e18daf1777af281836ef0a69f76c5ecc5aca3ec6ecc6695bae9256
SSDEEP 1536:9+xeYn+hyp7dRn+YpSGgFDYFloQKTtIR76No9x3ZuhbEaosbEaofx:0gtQFR76NCAhdosdop
TLSH
T1C9B3B58712204CFAEFA45DB3459B086B3D2C1437AC4791B9E3FD8F972B52D6E0346269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4552	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338301222382581"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{D01D0B60-9C75-498C-A1DE-558CD958D652}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3672	msedge.exe
3672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4528 wrote to memory of 1484	4528	msedge.exe	84
PID 4528 wrote to memory of 4552	4528	msedge.exe	85
PID 4528 wrote to memory of 900	4528	msedge.exe	86
PID 4528 wrote to memory of 900	4528	msedge.exe	86
PID 4528 wrote to memory of 3884	4528	msedge.exe	87
PID 4528 wrote to memory of 900	4528	msedge.exe	86
PID 4528 wrote to memory of 3884	4528	msedge.exe	87
PID 4528 wrote to memory of 372	4528	msedge.exe	89
PID 4528 wrote to memory of 2264	4528	msedge.exe	90
PID 4528 wrote to memory of 372	4528	msedge.exe	89
PID 4528 wrote to memory of 372	4528	msedge.exe	89
PID 4528 wrote to memory of 2264	4528	msedge.exe	90
PID 4528 wrote to memory of 2264	4528	msedge.exe	90
PID 4528 wrote to memory of 2260	4528	msedge.exe	91
PID 4528 wrote to memory of 2260	4528	msedge.exe	91
PID 4528 wrote to memory of 2716	4528	msedge.exe	92
PID 4528 wrote to memory of 2260	4528	msedge.exe	91
PID 4528 wrote to memory of 2716	4528	msedge.exe	92
PID 4528 wrote to memory of 2716	4528	msedge.exe	92
PID 4528 wrote to memory of 2996	4528	msedge.exe	96
PID 4528 wrote to memory of 4280	4528	msedge.exe	97
PID 4528 wrote to memory of 2996	4528	msedge.exe	96
PID 4528 wrote to memory of 4280	4528	msedge.exe	97
PID 4528 wrote to memory of 1508	4528	msedge.exe	99
PID 4528 wrote to memory of 4452	4528	msedge.exe	104
PID 4528 wrote to memory of 2596	4528	msedge.exe	105
PID 4528 wrote to memory of 4776	4528	msedge.exe	106
PID 4528 wrote to memory of 4532	4528	msedge.exe	107
PID 4528 wrote to memory of 4532	4528	msedge.exe	107
PID 4528 wrote to memory of 3672	4528	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a07841b3f9503cfc7178641d2e3884e73a216411b5ce0cfa448c049f809d52e7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x260,0x7ffc4c7bc188,0x7ffc4c7bc194,0x7ffc4c7bc1a0
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,11859125223307896867,1990524817320013192,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,9047363116251057966,17001085749058332937,262144 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,5847802548035151775,4352359798477914338,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,2869906926889385225,18048150498132020193,2097152 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,15296711571843218406,11681290087326283941,2097152 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,876344060567840062,4200711319194125647,2097152 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,17200878223001071733,5326057438670650195,2097152 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:2
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,1064452065489978917,13946330656797869935,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,9931438014780506884,14564087880552927592,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16123518204987317537,7556658387318770318,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16123518204987317537,7556658387318770318,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,10119442426971241652,1943741013622758521,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,17261876353959637169,9466110335572502364,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,12169717320361750905,9286457326238736202,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2860,i,3765556068452730360,14082578474202220968,524288 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5972,i,16117863953861288053,11015732072333664869,262144 --field-trial-handle=2936,i,8929011615427253094,4375834378314493791,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3672

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9356b3cb4041d1e12d573a1af7d2d9bf45cdee316a77db5f68a501b1c4de52b4
MD5 e732ba324eb13badd6f1bc124579b339
SHA1 f902d5cb6bf8bb36d4c71bba6ce23f476bb29a12
SHA512 10784b8069210252e9746b8169e47e46dd55d7912a3a98b47771ce5deeb2b64cc045f52f20cbdec85e3cac2570b7a444d6fa80ec92255f2402ba9f7f9350005b
TLSH
T107510B81E594FA60FBA8C03842D616F732376BB0B2830D8E0FD3C4781817755A2B30B6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593c73.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593c73.TMP
Size 3KB
SHA256 1dd9905bbb2c0b2eb1475e19c5a7665235e47f15f27fb20fcd6a214ab2eaa2ff
MD5 9bc25b2e638f449926bd36e3b11deddb
SHA1 609dc2635ba174d08da097effe6ceb9ebd7aa0a7
SHA512 d5179a3cfc15b25e760281b6ffc37e6268558dbabeb61acaf33b8f0bf96f57afcb552ed0df586d970f20c24c392fa250c36031be8338bc46dae4705e5ca9b7a8
TLSH
T18551EB81E554FAA0FBA8C03886D616F732376BB1B1831D8E0FD7C4785857755A2B30B6
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a3f2f97905d33429dd4b4ef2cc3cdf6b67e9253cd8621fc742b28cf061982342
MD5 d92b6454808629491afff4adb3df6252
SHA1 0a553471db8f65a81b727629f5c0a0a77d2e6743
SHA512 d8d3764c817eb0071cb94cf4d6ce239600a022526f070ff2e139809265fa53feab00b3a0dc2179547f4e9d3d4abbefa2eb196c23a2af384991674afeaac6f2c0
TLSH
T1AC417EB7C3D48A7E890156F05B24AE27CE1D0A4A426C3C16C9E4EF5F67F24B4D20199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e19980a6f635d529c9a74b47674b94bede6ad7ab3eeea3489fb03063757654f0
MD5 7c9d5035078a44079e9c91624fb2a043
SHA1 4f6a660d7fb63e1cc68b73e33d67444a42218dbb
SHA512 8a08557862ea44768e25948eeab7b557651b015286c75f7bbba5b66aa8fc9c611e1113d3881a3e34944be5fbc7e012e5c3d62853a159df571ddf8629361036ee
SSDEEP 192:sxZlRYW7/fosJrIdpdYHW6+WNGY36aMJIgrJ:sxZlh7/fosJ0mHbGXb9
TLSH
T12112C8526E28A97B8CCFD20DBA25BF53E6F9503261D41E48E6FC961C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5b5f38d6032b73c8d5cbe51543fc75cb4e0d30cc5b345cb3dc1621cf280632d9
MD5 c23d59977069c4eaa5ea53f3045d6ccf
SHA1 2a7f094e9c6481df4219b5879a7505ed1581dd15
SHA512 3fd23059286f6854b908ce1e86d7fd837d3fe0ed1f34eb47576fc87f25ceede00e8efd4da608046f68986ea5943cd062e7697fff0fdb41bb0ddcdc8f7e106d98
SSDEEP 192:sxZlRYW7/fosd6rIdpHYHW6+WNGY364MJIg5pJ:sxZlh7/fosd604HbGXNR
TLSH
T1EE22C8566E28697B8CCFE21DBA15BF93E6F9503261901E48A6FC961C05E6ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 869ed8b6b9e9a3b79f7ffa3b548f77d18b255af6cd1953a0581adb57fcd7a81f
MD5 dac559bfdcc71660b3931c47eb8c006f
SHA1 0213dee83fe748f7ca9bf2b8cbb07eff22a1f118
SHA512 99fe3218edf66c3d91d6063c1c04912b02655d8c0478b565dcf1059154e7dd9b3e64b1cb300dc7bdbc2e2ac09efa5ab9a9f2c775e5d97fb23a7e84bea10bf133
SSDEEP 192:sxZlRYW7/fosd6rIdpdYHW6+WNGY36kMJIg5pJ:sxZlh7/fosd60mHbGXBR
TLSH
T14922B7566E28697B8CCFE209BB25BF93E6F9503261941E48A6FC961C05E6ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f24644a11a97ae581ff5fbb67e5f52c490eebb7ccc007f60d66457ae825d3076
MD5 a33c32e7e9557c7220a95c181585f8d3
SHA1 c44115f2637c02c4de5de700b172d9a1b7d1928b
SHA512 a4ff0960e612d5572e3a57109ef0f3b82beae9d131af3934239f60797a9655663af610e9f32e51b278f80b4fd1f497fdd5b0f5a0393a2320af06e31b41f29a9a
SSDEEP 192:sxZlRYW7/fosArIdpdYHW6+WNGY36aMJIg5LJ:sxZlh7/fosA0mHbGXbP
TLSH
T1F422C7566E28A97B8CCFD209BB25BF93E6FD503261D01E48A6FC961C05E66CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8898c26a4fd9c3cf0495ffa3476aebbfe39beb4b40fcd4fe1f40e73b516bbe40
MD5 f7c9b968e0fce23ca1af8f11cea2fb86
SHA1 b610e6967e0a7a9b81d1c9496689583cffe58aff
SHA512 10932ba144b7f677160dc71113258ea5aa203842b12899240f4e27c07af073b57a2d71cbcff6e7420bf53d5eae0ffd83228c331dd2f7b1145bc3ec1c4c8ba553
SSDEEP 48:K0Py7PxRxKbJE5ISfKK9/11KxvaY89/jyL8rKWkmKzb6ZCISOzK9q1IzxsjYhyKi:KEYQKhmOej+KE42WLWKQUo
TLSH
T1E291A15531BF120538BE69489068972A525131B3309CFA7AFFBC11668EAFE044DFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b473510c-d40c-430f-aea3-5c3e15539e29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b473510c-d40c-430f-aea3-5c3e15539e29.tmp
Size 27KB
SHA256 d31f421f3765501fc77e9b6a2f77a358b4da9f0bc0b06583c4a6c2bfbb840c05
MD5 3a85952cb392cc6bb18aa0bfa45f6a77
SHA1 ad7b5ce6c5b55f15f9ae525b9439077d1bba1f3b
SHA512 4c7679794807897c5ece9d5f36f9ed70fc069535f40e35c9bf93ca2579bc074414739790b488f65604bb76ebfd5f59523190e285a4d09742fb7212511342e0d7
SSDEEP 768:i0Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/hroAO:i0Klm7QWvUYe0u1ja8/L/E/aAO
TLSH
T153C2FA3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d9f7d6d87d46b1b7636be6370705801bde00ce208e6d4294e7870f15ef1f51cd
MD5 e8de058df97162577fea6257f7251e17
SHA1 62ba6259bdd980dc7e3d914d3982d49470d76b07
SHA512 632069dfeba858c39047c40226783a5ae37df880f76f81d4eb6967f53bde222ff430c6b4209f0e7914901b8d1901ca1b2d2e5bd9ac2ee6b360bc5784c33f5194
SSDEEP 384:QZcIP5sNPmpor9GnbxyFuh//cponsa+VYFlqHol:uxD8M/TnhghHe
TLSH
T1E7927D756C68AC7798EB9281F44332139EB880B797C85F94C6DDBF1E01E95D81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6ee2c2c6b0f89de7960b0eadde9567f397f00297c17ea21752f016e26237e9b9
MD5 b4085dd88818bfe912137b7512d2e48c
SHA1 0119b6144a1f367d685f6f2c9fbb276fb8fe110c
SHA512 44a01a15662fb956f4f38afa48b0a992f26ffdc311ebdcc6fa832f86b5c4c5a03d6b67e8d5a33087d8969ae5e2e525f58bb4e9de253270a2b410768182a2fb44
SSDEEP 384:zZcIDsNPvpor9GnbxyFuh//cpensa+VYFlqHol:rDC8M/lnhghHe
TLSH
T170828D756C68AC765CEB9281F44336138EB880B797C95F94C6ECBF1E01E96E81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9566981367a0273a78ff46241a19c38c4bbff4073abe2bb5fd350fb7ac0a42cc
MD5 79f06f8342d1ea6839a5b4d2cae229ea
SHA1 2ff8c69bb637c325769b25da2923b02b2883294f
SHA512 ad1f6684ca5f07cfa576b073a7a63ac786fcda7a305871ecd1baedf45972e277270d204bb2d1c95971a6ef323ec4ab135688eb1caf026c1e8852bb5bb8de2d42
SSDEEP 384:YZcIDsNPmpor9GnbxyFuh//cpensa+VYFlqHol:mDD8M/lnhghHe
TLSH
T149828D756C68AC769CEB9281F44336139EB880B797C95F94C6ECBF1E01E95E81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0fc83e00167701e671949a94c16f4426377b075b8431c55f9da6eacaa5e5a635
MD5 e155fdf86b82e27d329cf1c2928ba155
SHA1 904e8a5687ab1012724d58be6ab4b9ff65504131
SHA512 1ebb5a38326c325a38b5d952b27fb0463f8be41891081d2af1e6a6bc1037335076d8eb513e8896b4ea2c7d731d1d30019a94bb5ccfd4483ab990a33b1ecdad09
SSDEEP 96:KqONkoQsjpfbUmjH5ih/cIPURHl8h4otop5PaDnBKP4v+Y1xf//ojdFxjYpoR1//:BONw6JUm0QmiUykBso//ORhaBCiaU6
TLSH
T1B702E739BC68BCBB8EE3AE45F4877B239FA4107B96915F80DAD86E1D01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 dae630e27b6b091f91adef4a5b04c06ce094bf66fb8ea40626dc6cc69e314d30
MD5 fe1496d2d792b83c977196c8e2a3d3a4
SHA1 bd2cfdb9c65d644d2dfb3c02742044b583e99fc9
SHA512 192c56a654ddd8971c999b23e3463304f3f2d6cb6bd92022a9017623e345caa7a097f01f5fc82ff6487c9e40ac326f12e3a3ff2ccc7983a92daf3b4bd600b2a9
SSDEEP 192:uNRsNPCQ8or9Lm9SNUbvoQmiU1t6FB4h//ORhpEaoq/UDqva+4LcYLWAdFl5:MsNPCpor9GnbgyFuh//cpensa+VYFl5
TLSH
T1BE624A797868AC768D9B9281F44732139EB440BB97C92FA4C7DCAF1D01DA2AC1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a23d0b22e2dfe33fd8f7bdf236f5de459da8c38faabe08106a08123facbd709f
MD5 ab2b34de01f704a09abf145721acc5be
SHA1 bc9d8d28feaa52b10a88920e6a93a0e71661a299
SHA512 0032d307e1c89a7d263f382f81c5d8a7b8b97295580ab3bf48be06cecaa6c80831a7421d91a6896d8a8c9244bce05049cc9ba9872f7675a8e646627868332afc
SSDEEP 96:KqONkaQsjpfbUVH5ih/cIPURHl8h4otop5PmDnB2P4v+Y1xf//ojdFxjYpoR1/L1:BONS6JU+QmiUyIBwo//ORhpRNxq/UDU6
TLSH
T13C120835B8A8BC7B5DD3A580F08336139E64407BDB895F90D6DC2F2C02EE1AC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77251aa6-1011-4bc7-a5c5-f4a42c8c66f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\77251aa6-1011-4bc7-a5c5-f4a42c8c66f8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7e840b3e388a6d04a11e3c42d8f2f78e9fc74f72c562e4648507d71b336bad08
MD5 08d58989205fcf835fbaca42b2db6613
SHA1 46aa850c9a962c9e00ad43c4e7d4aab8a4010740
SHA512 ba1ae302f7cd990f296cbde0f14a081dc97f04e8ec3233a9c7caa60253402457bd9212102ffaebdebad87155156ebcc6cd26d9a630862dbda5d083444d63a50e
TLSH
T1754129ACA6EE1148B3B77F1AABF6746E443E79772E0AD05D10010E4E0772A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download