dc305ea0eeac99f022482df933bf87af63e54d070d61b9d933b397ead7fb95c2

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 03:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_dc305ea0eeac99f022482df933bf87af63e54d070d61b9d933b397ead7fb95c2.html
Size 104KB
Sample260913-eb878aef89
SHA256 dc305ea0eeac99f022482df933bf87af63e54d070d61b9d933b397ead7fb95c2
MD5 442e11cceaed9de17e4727553e307e8e
SHA1 53deb7f600d24ec679cffbc0890e006ae59f87ff
SHA512 2cedcc9eedf0447a8e3d85ac3eda1fc0acd258db343a790639bc30e61666f9e000c6680a37ce564d082469bf9fd56284f9131efa1995ad586db0947c75bd5d1d
SSDEEP 1536:GmxiYn+hELh5RBgRcQ74X9UMlKuTtwNo70KA1bEao7bEaom:fsJ3NvJ1do7dom
TLSH
T1CBA3A38711205CFAEF6049B2465B486B3D2C1437BC5791B9E3FD8FA73B41DAE034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3536	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338296898896550"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{691E2E24-3F0B-41EC-9303-48E8E108D177}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1604	msedge.exe
1604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 4920	2460	msedge.exe	86
PID 2460 wrote to memory of 3536	2460	msedge.exe	87
PID 2460 wrote to memory of 2240	2460	msedge.exe	88
PID 2460 wrote to memory of 2240	2460	msedge.exe	88
PID 2460 wrote to memory of 2240	2460	msedge.exe	88
PID 2460 wrote to memory of 3924	2460	msedge.exe	89
PID 2460 wrote to memory of 3924	2460	msedge.exe	89
PID 2460 wrote to memory of 1768	2460	msedge.exe	90
PID 2460 wrote to memory of 820	2460	msedge.exe	91
PID 2460 wrote to memory of 1768	2460	msedge.exe	90
PID 2460 wrote to memory of 1768	2460	msedge.exe	90
PID 2460 wrote to memory of 820	2460	msedge.exe	91
PID 2460 wrote to memory of 820	2460	msedge.exe	91
PID 2460 wrote to memory of 4148	2460	msedge.exe	93
PID 2460 wrote to memory of 4148	2460	msedge.exe	93
PID 2460 wrote to memory of 4148	2460	msedge.exe	93
PID 2460 wrote to memory of 3860	2460	msedge.exe	94
PID 2460 wrote to memory of 3860	2460	msedge.exe	94
PID 2460 wrote to memory of 3860	2460	msedge.exe	94
PID 2460 wrote to memory of 5040	2460	msedge.exe	98
PID 2460 wrote to memory of 1032	2460	msedge.exe	99
PID 2460 wrote to memory of 5040	2460	msedge.exe	98
PID 2460 wrote to memory of 1032	2460	msedge.exe	99
PID 2460 wrote to memory of 2988	2460	msedge.exe	101
PID 2460 wrote to memory of 2688	2460	msedge.exe	106
PID 2460 wrote to memory of 4080	2460	msedge.exe	107
PID 2460 wrote to memory of 2396	2460	msedge.exe	108
PID 2460 wrote to memory of 1204	2460	msedge.exe	109
PID 2460 wrote to memory of 1204	2460	msedge.exe	109
PID 2460 wrote to memory of 1604	2460	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_dc305ea0eeac99f022482df933bf87af63e54d070d61b9d933b397ead7fb95c2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffedb68c188,0x7ffedb68c194,0x7ffedb68c1a0
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,8260515570046108456,16291633338577750981,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,7056566875931227156,7612596431066622112,262144 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,13937012572849735606,11087166835677214447,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7192684482716267024,8065328658458907978,2097152 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10238475019433190987,6085514066603249545,2097152 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,15928918670390707298,120299919372409144,2097152 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,13864290206886547686,10797796499816679311,2097152 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,17361127870164332708,2140882797012684488,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,12369384901122170024,2105290975587829381,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9355093998848868065,17523020123287580042,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9355093998848868065,17523020123287580042,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,2349764950683233547,17264250954666890525,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,4453528641616489613,5522585240077989531,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,6179141419043404339,12218570512014199609,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,400155764358028820,5619937342472525814,524288 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,15991742504837184047,13668572598743378063,262144 --field-trial-handle=2240,i,13312536772883122330,15112082263548802482,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a6a25c800d9bb645d732023c87189dd82c4227d9b8b868cfde53b725846b7e4e
MD5 675574a0a3a56a88a98fbb4d1613ea9b
SHA1 75f15a051af8847d0a958c692e0ecefb4332f2b0
SHA512 fac4cb83afe9f8c0314ba52ab8f995730e477bb7e74ea6233b2a69e1602c01f756f3bf728a8088c56e81b880dda80b40b94ef35936f63e15b0f48645457af5ad
TLSH
T111612B81077054BACB68613895E909CEB6784CF5E583CF8223A6FC6FEF063744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5904e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5904e8.TMP
Size 3KB
SHA256 4ec07cc3a1aba2172b639636a079ffc8d12303440131d6947392757d10abf325
MD5 d4dd350fbf51048544fd5640815af38f
SHA1 4912c642d226535ccd383714d4a062bf84f3ec8f
SHA512 90364ee8c50410bbc71b6c427cc1d7f1efbb13ee39bea907fa2a4b06ea391c876d5172b5ec18e988fbf11fc5e40f40ee410b8a88382499f491fa3d16c560aceb
TLSH
T136612B81077054BACB68A13895E509CEB6684CF5E583CF8223A6FC6FEF063744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1daa16964d7aa5d6cb97d500d578ff75bf48b0c4b22228854752ded8083feae1
MD5 d10fa2aaaf02d094195724f970a53f09
SHA1 27e41e8f0e5e8ac58303cc04101d964890f9b94d
SHA512 9bc31521dbf21359c535475fc4c59e71beec05de5c93e61e077e864c8562ac7cc700cbc314c4909a501c3041ac02668657d93ff90e80cc12c7feeb2b0f53b6d0
TLSH
T10D419CB7C3D8867E8D0156F09B646E1BCE2C0A56422C3C16C9F4AF1F67E24B4D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 248247019f9d52fc57636d247badc7b650ad1eaee3ffd7422af079895e9f62a2
MD5 36b232a850687e76e7bf407935d17758
SHA1 029ef367dbb339c24a2cdbeec8962f49cd9e33f1
SHA512 9a7735aa25dfbe12e85333f8ecf6db69beec56d84325d740e99238165eb64fe218b1c846199b7651f7fc7a37a64d956fb3b1bc640d9affee8f0f5d78fdee3bcd
SSDEEP 192:sxZKRRWG/frskXIdpdkHW6+WNGY3R9bIgrJ:sxZK2G/frsk4+HbGA9
TLSH
T10812A8126E38A57B8CCBE21DBA257F53EAF9503291941E58A6FCCA1C04E76DD131740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 30b794e4f4f3cccddf81c4a0abe5e7d62d530d3b60763af30ec6228030183dd0
MD5 62f7087199707e3c214ef76aa968ab1b
SHA1 8ab6b9861617efd1008245876dc179bb95cf7c75
SHA512 71b3958c6e0dcf7639d5a5475d56ce427ee634e728fd4055abc79642e1542264fd4a0bcc8e1ef48050f1d9eea60e92d13dcd9c2c5c2e382f22925ed515dc64c6
SSDEEP 192:sxZKRRWG/frsQXIdpdkHW6+WNGY3R9bIg5jJ:sxZK2G/frsQ4+HbGA7
TLSH
T14D22B7126E38A97B8CCBD21DBA25BF53EAF9503291901E58A6FCCA1C04E66DD131740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c63d084496069ad14a6041dc3e832250e718fd66b325b6ec4550406a559e7fde
MD5 76b7fec612712e954f4b96af2b979dd9
SHA1 6ab8802cc24611fe73212627c1ae290b9f4f33f9
SHA512 ed5e53a1c320cb72007ce20292ef157c336d6dbc0ddc565f6181a289d1615b4bd725ab605de05f6b8329ed0fc4d71e6dd0bd6ae94d7d6d5a4dface2185a47054
SSDEEP 192:sxZKRRWG/frsvXIdpHkHW6+WNGY3a9bIg5xJ:sxZK2G/frsv4EHbGr9
TLSH
T16622C9526E38697B8CCBE21DBA15BF53EAF9503291901E48A6FCCA1C05E76DD131740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cc1cd4e72f3537346693afc6195f24780ea6429ba1dba716e95d19ada30bfc69
MD5 d01ff991c28724de615c6e06ca3cf85b
SHA1 6a58169c528a71d45d215c4dac0e0547789c7908
SHA512 21f63c7fc5e1ea26126fde715053ab8f58e02cd79cf4d24e47e9bbaa90f58f795a2a44f3e105c9a313c5846c1c93ef15ec06143a080af66b1e9a5c122c65b1b9
SSDEEP 192:sxZKRRWG/frsvXIdpdkHW6+WNGY369bIg5xJ:sxZK2G/frsv4+HbGn9
TLSH
T1DB22B7126E38A97B8CCBE21DBA157F53EAF9503291901E58A6FCCA1C05E76DD231740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 392762a71e7889426ff18710039a31f5f5a76100c7511bf7d2e4259e40afadc0
MD5 d8f8e1f7eca684fe1da1040ee7cd172d
SHA1 786174bcd869610ab7c6656b7352541979d2fc07
SHA512 51db751bd291eac1d683d9b8211230814c20741bcc0368e972b04466d258e11c47367e17d1d768bf70dd21bce04716e5a44f6068384d261e64d1290d627d0417
SSDEEP 768:TZ30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72wrolZMr:TZ30AbSWvS2l9u1jaLmLZ12bI
TLSH
T11DC2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3c61c18dc689bca7e6bd7f46ac9f9fa985e52fb0fe90ed0d6cf35e310718deaf
MD5 841035fc383c720b206eafa96f84dbf3
SHA1 027cfb77a25a390bf25d64e31e9fa850cb974f5f
SHA512 4ce408f4cfacf385b4aa47362a2898c6faa2b304d3f506e80083d405312dfd2b1693c77260b5f751ac27a5d2ed863f4188b032354701a1460a65da7cad17550b
SSDEEP 96:KQN2K+g6QS9uSwQACWIbx8CCKUn8ECYiqD8Sr25KKSUz:sZOVRO
TLSH
T1C091951230BB230038BD794C95A0873E465272B33429E76B7BAD10B69E7BE045DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61a859a9-e20f-4834-9470-cb79e852f053.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\61a859a9-e20f-4834-9470-cb79e852f053.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 af9fe72d3c00c5c83c88b2dd15dc1ae53fd23669c9ea3d327c95e95732e83221
MD5 f2f94ea7792280a85ffe1bc624cc7e47
SHA1 eba6b63bc5e413f10ec2129cb619dee086761b7a
SHA512 809615eb6265df6bf47e864c002da9879d4db7edfae9d0d65cc91a6c86daca3c04e279a2674579acaaf96b3d96256510b12286b21b76fb221371bf8c86f61317
SSDEEP 384:LZcIzsN6uXIpuEbP9iX5Frnfccsa+VYJd7UTo4:Tz97Fa3fcchg42b
TLSH
T195828E329DB4AC3B5DE3D291F54736138EF881679BC86F948AED6F1C05EA6940307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 40bddbcf086b82fa6def5c4f5b2e51ce586a69f9f05a36c38751b95adb391bc1
MD5 7f8a63ad59ba14772a0aafd0d83a35eb
SHA1 c096b15e0fe589a6eb94d19b5109f85e7b44df44
SHA512 8cd68a9551e3bc9012d14e710dd9ef38a0dcf307e90a786109db367dd3e29f8089e433f2a01097f7558785a9d80695354d33701fbc91cf3df5dff8622d732508
SSDEEP 384:qiFiZcI/5sNC8TUNTUlIlLXIpuXbP9iX5FrnRccsa+VYJd7UTo4:hFQxPwguwFa3Rcchg42b
TLSH
T1F1A26C335DA4983F9DE6DB91F94A36138EF841A7CAC8AE94D7DD6E1D00E61D80307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7ea1a1305c3c6df7f69914c72dbccee016ca0728999d07eda75486b4800fb7ba
MD5 df6008ae7bd331d4236027f1abe6528e
SHA1 9680b69bee891f1a839dd4ffe6e9f4ef2fed8d03
SHA512 641ea21f3bd208c2e26708380e9e2ef7bf6fbe78c5d2cfda3d149e96494ca9ed6ccbe98a2e6bae30d990972cb2a6f250c8cc73e66dfd9c48b88860f653179e2a
SSDEEP 192:LONH6AmwprQmiUyJj6siX5FGyhaJicS5BU6:LONH6ipdW6siX5FrRcSfU6
TLSH
T10002E935AC786C7F8EF3AE19B54736136FA5116BDA942F44CAE82B2C01E765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 51efee88c9e11038dfe5e4961fe7a91a00f3589afd1776f4e93965e6277a06c2
MD5 d8c2adca412913e9912f5fd80397973d
SHA1 ff39b4e0228781ac55be631f0edf98aa02dde86a
SHA512 4aa6177e42410d56733f87eae8fe349ab69b9d10254aed671b8501ceac6eb8779ab96f581b18fbd5eb892306cabfd5a1379217b927ba0276bb743bd1aee8d136
SSDEEP 384:MZcIzsN6LXIpuXbP9iX5Frnfccsa+VYJd7UTo4:azewFa3fcchg42b
TLSH
T1F5829E316D789C3B5DE3D291F54736139EF881679BC82F948AED6F1C05EA6940307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 796eb4a65a151d4b433d03b8bcf4e185f3b8b6ac0cae9dacbf7e29c99b4edd6e
MD5 a4347053db63df7257bfe36912309f76
SHA1 16444acf9e775f2c2bdbe40895dc8d06201572fc
SHA512 4755aa0a2dc62f5174ea6d9a9775ee3b50fd781235935e4a3819894505571a00341a397f291e072211938db5a6e0e751894c3d682ed26218404d7ae5f1df8b31
SSDEEP 192:LONz6AmwpXQmiUySjNsiX5FGyhd+lRcD/gU6:LONz6ip5TNsiX5FrnsccU6
TLSH
T1F8121A35A878AC3F5DD3A565F04735135EB5422BDF886F90C9EC2B2C01EB598530A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3076100a-5daa-4561-9818-5dc6ee325996.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3076100a-5daa-4561-9818-5dc6ee325996.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d4159767e95a556221df2570de4fb44f01c51fb1c35f9f3bc08df69956a65b3b
MD5 e8d5545ae57223cdb8000157d9237a90
SHA1 81e429ac222b157a5cb65233ccc673548f8d7a51
SHA512 f507ca3d483a141b36b73ed838c4730c853085ae99fe5505cfdfac3437a3236f9b358838cf43f3d1abe01a491efee23dc968b1e77ce494341e04a9c186a48ac8
TLSH
T19F414A5CAAE91048B3B76F069BF7756D887BBD772E06945E00010E4F0A23A40DC61B37
MD5 SHA1 SHA512 TLSH

Submit Download