374fba18125d2a3a22060ecefff109c2565b2530ddffee9e7026e6a8311492dd

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_374fba18125d2a3a22060ecefff109c2565b2530ddffee9e7026e6a8311492dd.html
Size 6KB
Sample260913-e5tpmacl9t
SHA256 374fba18125d2a3a22060ecefff109c2565b2530ddffee9e7026e6a8311492dd
MD5 86a2f4a0ad2f675cf53d5fce214c3ae3
SHA1 ce3248ea0dc8692fd95a93ec62ed91dd4557c6eb
SHA512 aa3f8ea3bf5d48132b0e84b48d742e086d2305ab498a05ee5667eb41ec7e5857471f57e572370b0ee60d7e62230e5a55b43daf194c9493abf16af7b264b1ed01
SSDEEP 192:zWLv15G5WDNl7eqmngZ1nZ691EcE8XECgUdDhQoKDejCPJu:zWLJl7eaf80WhtKDejCxu
TLSH
T15FE1A55A9E4C853F4100059BF0A16A1DD8DB487BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2948	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337863691258427"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{18351944-71A5-4383-9484-D3ACA11A1819}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 1504	4316	msedge.exe	83
PID 4316 wrote to memory of 2480	4316	msedge.exe	84
PID 4316 wrote to memory of 2948	4316	msedge.exe	85
PID 4316 wrote to memory of 2480	4316	msedge.exe	84
PID 4316 wrote to memory of 2480	4316	msedge.exe	84
PID 4316 wrote to memory of 2620	4316	msedge.exe	87
PID 4316 wrote to memory of 2620	4316	msedge.exe	87
PID 4316 wrote to memory of 1700	4316	msedge.exe	88
PID 4316 wrote to memory of 1700	4316	msedge.exe	88
PID 4316 wrote to memory of 1700	4316	msedge.exe	88
PID 4316 wrote to memory of 1720	4316	msedge.exe	89
PID 4316 wrote to memory of 1720	4316	msedge.exe	89
PID 4316 wrote to memory of 1720	4316	msedge.exe	89
PID 4316 wrote to memory of 4180	4316	msedge.exe	90
PID 4316 wrote to memory of 4868	4316	msedge.exe	91
PID 4316 wrote to memory of 4180	4316	msedge.exe	90
PID 4316 wrote to memory of 4180	4316	msedge.exe	90
PID 4316 wrote to memory of 4868	4316	msedge.exe	91
PID 4316 wrote to memory of 4868	4316	msedge.exe	91
PID 4316 wrote to memory of 4284	4316	msedge.exe	95
PID 4316 wrote to memory of 2844	4316	msedge.exe	96
PID 4316 wrote to memory of 4284	4316	msedge.exe	95
PID 4316 wrote to memory of 2844	4316	msedge.exe	96
PID 4316 wrote to memory of 1732	4316	msedge.exe	98
PID 4316 wrote to memory of 4664	4316	msedge.exe	103
PID 4316 wrote to memory of 3468	4316	msedge.exe	104
PID 4316 wrote to memory of 3328	4316	msedge.exe	105
PID 4316 wrote to memory of 2164	4316	msedge.exe	106
PID 4316 wrote to memory of 2164	4316	msedge.exe	106
PID 4316 wrote to memory of 1836	4316	msedge.exe	107
PID 4316 wrote to memory of 1836	4316	msedge.exe	107
PID 4316 wrote to memory of 3408	4316	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_374fba18125d2a3a22060ecefff109c2565b2530ddffee9e7026e6a8311492dd.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff86466c188,0x7ff86466c194,0x7ff86466c1a0
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,3183992496036011831,9689709719076884829,262144 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,15515624898249576258,18289649587446161468,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,8159674170639020192,4373487525166309999,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,8526786917474104418,439605702203526323,2097152 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7867328895870551142,5113548492405736339,2097152 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,13811752137044534710,290910443112211151,2097152 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,16954914102807823016,4986552172982820170,2097152 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:2
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,7195076928369071509,4215824072809674406,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,15653669216685383475,1843110814477070804,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,11350549410374024973,12913859351675653688,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,11350549410374024973,12913859351675653688,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,12217857386919741103,9902737169546062008,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,3308538758973614794,2596936265599901089,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,13153352522694979859,14936668069765550607,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,17837908688069079723,5468731058157379449,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,6787690543513696576,1912967930659386260,524288 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5156,i,744919145879332085,10827041751277840644,262144 --field-trial-handle=2428,i,6083368764080430213,35048278715271547,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b0975cdd5c8553f00758daecee780191804c054467f5bc81d2e048c56c48d0c0
MD5 01d55e20dc0c00a8244de9602d4fea2e
SHA1 deb630722bc692200b865191912db1062bfcf694
SHA512 b39763aeb4cb775d60fd13ef0eed26765c12ac418ef58dfe0135912cb2bb417164e6d8643fd3a4c7d520af38cdcfe904531dfe557cacc2bd18c59a0dd4534f56
TLSH
T1766194A954B00071DB996132B2F0A0873675F0B55FA3EE7200DCC8BFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594b28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594b28.TMP
Size 3KB
SHA256 7c456822cb99ce1621d4696f898ec9ba69eb331790afe84a14876586f2ecd921
MD5 8fa51e05162695dce9441ada12cde37a
SHA1 bc6fb56017acb52626b90b7980b4fdbbcbec924d
SHA512 07a8ead50b3ffba048a07875e1c03a8fd7785145e6c019a06230e137f48bb7374f1a3a57b7cffa9358a7c85fcab051ff49107bec6232ff279b7dcf358258d89c
TLSH
T1D86194A954A00071DB986132B2F4A0873676F0B55FA3EE7200DCC8BFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c9ccc1fd2ca7c9f56a15e84c303f46c005b29fc5d9954011b07c123cc9407453
MD5 8a3f9b08fcd896016dd5dffa0aa95533
SHA1 b10880ae771840a052e82ae36b06d927a9351ba0
SHA512 4f70170b3473bb0d36882decf7cc3282cb9477321983423b82fbee71c025ec9318904cc18d221f7dc49e3b6be616b66c069e615df2fe85196d3cdfff1964a48f
TLSH
T136217DB7C3D586AE890156F4AA24AE17CE1D0516422C3C5AC9E4EF1B93F24B5D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d41fd0d13710c3cd79d1ffbeb77a3f55fafde571a6da55077839924fc5084f24
MD5 b997aeff6dfe6dc283aa684ec56bb6bc
SHA1 66e9bd8f286234e2c4d81bb8b9408b61b54ada34
SHA512 e095683db198abdbc195e16c8d313325f239ac817de223dab21005eb1598f6c9552f3ea9bc9b40a21868ed54f8ac8f757cc5a3c9a2e0e8d7bcf03b3122303fb0
SSDEEP 192:sxZOvRfWK/f2sofLIdpdkHW6+WNGYaQvJIgrJ:sxZOvUK/f2sofUCHbG09
TLSH
T11112A8116E28A97B8CC7E21DBB25BF53D6F95072A1941E48E6FC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 383c7173044c23c705a54affc0780b9c9427afb1253119885f41857371e49fc1
MD5 14238ecf04bfdc14af0e230a3f7dc51e
SHA1 d2890110199046ae7500a36c7f5c23c968ec6ca0
SHA512 3e2d37256e3f27da4af5edbd38c62ce766a738ce7bee409693a2c8365bb7cda3528494d0f66356dd479aceba4c81f6de8def70dd61278da16d822808c239b3ea
SSDEEP 192:sxZOvRfWK/f2sIVLIdpHkHW6+WNGYaFvJIg5ZJ:sxZOvUK/f2sIVUEHbGvV
TLSH
T1D322B812AE28A97B8CD7E20DBB15BF53E6F9507291941E48A6FC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1eb26b6b710df98a11d7f3982d6a31898eab376137dd52828e8c14b9fdeb04ef
MD5 bfd57be2d280b0df3d97256ab3673c94
SHA1 7a8cc1ca157412135a1c5c462bed84e7f67968cc
SHA512 88635f4b1da4d1e59d76e6e55a5e7907d30efeedf6420f0f8f819838e9015870ff5ebff53e77ee5e111f5508b38fc08352d6797b61ecaa20c2f472a6cc6c5ed3
SSDEEP 192:sxZOvRfWK/f2sIVLIdpdkHW6+WNGYalvJIg5ZJ:sxZOvUK/f2sIVUCHbGPV
TLSH
T12822C911AE38A97B8CC7E20DBB15BF53E6F9507291951E48A6FC861C05E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ec800409eb67283e002462f624548ea5bf3a53508b24b3965dd087b785522012
MD5 c096a927156e32fbcc8fb3d3642acd8d
SHA1 53893213e67cc2fbe73c2a147d227dd2679b6312
SHA512 1d101719a0103dd929cf333c8b744a65c6c53f8e8db3af839692796e044096ffc503af33beab4688390da77639a9374780490377e6d44ed2fdd1f65f758032f8
SSDEEP 192:sxZOvRfWK/f2sdfLIdpdkHW6+WNGYaQvJIg57J:sxZOvUK/f2sdfUCHbG0j
TLSH
T18F22C812AE28A97B8CC7D21DBB15BF53D6F95072A1941E48A6FC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 42f8ea0674d194458119e0a6c3f4621e7abba210eb07cc61fa4e416d65d08b0c
MD5 aa900e4ea63e842ad00f10815647a7d8
SHA1 5fb668243e969594b1ceef9aeeb488549cfcd38f
SHA512 66bb31b1062995c6986bb9056c4e3bb861057c2abfa628b97383e663ca1651d8b405ef2a5615332d4299dd477a028712daebace62915582ab616e7b5456deaad
SSDEEP 768:5KyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3mro6Zvl:5KyQRbrWvvlpZu1jaXKLf33d6Zvl
TLSH
T1B3C2E92B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c66fe199-350b-4885-9c84-6c66d5a33154.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c66fe199-350b-4885-9c84-6c66d5a33154.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 25a22a27a9e6b6195e665708fdf6c2b15d686b8914e74cad00ea7323338c7a13
MD5 2fa956d5b97a281dec7d5a0546df0e73
SHA1 a7afd1469c456bbf578a1fcf542020d8479082f4
SHA512 2cf9e55799eee9d5a3481dcc30b6bc7ca416450b56aef4ece44922f5bb66e18d4d2f34b4cce257459ed290c8724ae70edc27af2662d4241d6e7327a19e19c1af
SSDEEP 384:MiFiZcIFJsNJ8TUNTUlIlsxvyrE2p5u8iI8AYoCvBkwc0aTJoW:3FQPUwgqRkkI5KvBkuaTJB
TLSH
T154A25D7358A4AC7BADF69A51F95B3603CEB88167C788BF80E6DC961D01DB1D81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 95a7c8ed04b4f941d31ced56e4efc207c6566dc0afcec322cdd12181a4ddd770
MD5 aa83eee094d345ee8a4bff0f8b730c04
SHA1 3fd55460cbc25968c91b2fc97927ffab09ed7a07
SHA512 ac7a5190088ea9ee878a5c394a48dbdbfe4ec783d8e3077ca5170261e6a073846d7112efa59a048a388d1960d517158cbda301962d640ca3f56fde204b3cb7ad
SSDEEP 96:PqONk/QsjpfwDISp5ih/cIPURHl8h4otop5zmDOBfPGxvw45RxmJm78lFDxv+Nj2:SONX6iDCQmiUysuHq5u88PINhSqg1bU6
TLSH
T1A602E739AC787CBB9EE3AD15B5473B175FA4112FE6952F84D9E81A1C00D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 16d069196aa8a117e617c2f285786a6e3bf3ec461bcc13e06f80371c4356baa0
MD5 2fa6d42885ea70a7d452418f4f83692f
SHA1 a91582553cca28ac6c8a1726b68aa392ef7fa2d6
SHA512 9424726a3e35883bfce8931bdafdb14d1ebf68882c285881159e390eee44220afb6841f0660a5d9fb346481063482d169e2f4b42e32f7e3d02409879ae87df91
SSDEEP 384:+ZcILsN3sxvyrE2p5u8iI8AYoavBkwc0aTJoW:8LDRkkI5CvBkuaTJB
TLSH
T12B926B7158B87CB668F2A551B94B36038EB8805BD7CC7F80D4ECA71E05DB2A91307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c7ec6f3691b4487964b18de3d09931dfa219b86bad1fa441992299e88c3f7594
MD5 3876f6c7e64df741a7228ae7f1ced5ae
SHA1 4c0ea65da2fc135a3d95e2b5a52cf3b7adfbba1a
SHA512 7c93a79a9082f394c0fdb91667b70e72f136e75ab4a11358ce50f1268591edcbc4d5be37db78412886e274c11b5528d4404b4fa1e186ddd3cf86db392016c205
SSDEEP 384:AZcILsN3NxvyTE2p5u8iI8AYoavBkwc0aTJoW:+L2dkkI5CvBkuaTJB
TLSH
T1D5826B3558B87CB668F2A551B94B36038EB8815BD7CC7F84D4ECA71E05DB2E91307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b5ee7e8a0a170e99a8c714ad8438e0005631b66f0a89b47705a25d4fc6f41945
MD5 bf9d3c9f64120efa5e0b22e3d6651a85
SHA1 feb63ffaa8bb6fe9f38f02715c3426062864b502
SHA512 92490dce6275d224dd59942f4c20e27bbc845f80b1ad26d428db360599f16ccd03a7f6f572b9633002ef8dfa757a3f1a4525f423c3ab314c753da81c519c51cd
SSDEEP 192:SONa6iD6QmiUyMuiq5u88PINuAPwoauZs/OU6:SONa6D2iq5u8iI8AYo9vU6
TLSH
T1C8121B35A8787C7B6DE3A865B58736034EA4425BD7897FC4D9EC161C05EF29C130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9b766e175249a4da610198f59722dda727b719ece348ffd5b62ca528f200aa8d
MD5 4ad0c89ebcd942f23227a71974aa72f5
SHA1 ce42f44cdda2b9799ae671154876e17910c76438
SHA512 b24e6ce63c85cef680f4a0ee540431ce81dfd4acb838b876f924f1a5f78ef7cc3cc74c9ae266aeb82bb300a33594c90e3f796336f94e6634026714d4f1b776fd
TLSH
T1EB412A6DB6FA1148B3B7AE55AFF6A86E487EB9372E07D45D00110D8F0672B40C862737
MD5 SHA1 SHA512 TLSH

Submit Download