370fd91dae2d97e5d41568ce261d0c325a67470f3288ffdd23a12fd2317753da

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_370fd91dae2d97e5d41568ce261d0c325a67470f3288ffdd23a12fd2317753da.html
Size 6KB
Sample260913-ee5dfa1drh
SHA256 370fd91dae2d97e5d41568ce261d0c325a67470f3288ffdd23a12fd2317753da
MD5 552ca25c1031638091e65605d17f3a34
SHA1 51c9df21c2330731e0c89c4221b4ce70221f801c
SHA512 a161a1c527941446d6d3e042c1f5f0e2b2db098be82ea54e45a35d67406adf0d64ad0ac8dbc6ff87907c2bc785572c6e4cb46e2e6df2b3e2c6de85c8ed1d52a4
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69KEcE8XECgUdDhQoKDejCPJu:zWLJlxelf80WhtKDejCxu
TLSH
T14CE1B51A9E4C853F4100059BF0A16A1CD8AF447BD302D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4560	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338194987906291"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{6DD51F8E-8912-4310-A6D0-75998D3BB75E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4352	msedge.exe
4352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4828 wrote to memory of 4704	4828	msedge.exe	83
PID 4828 wrote to memory of 4560	4828	msedge.exe	84
PID 4828 wrote to memory of 4724	4828	msedge.exe	85
PID 4828 wrote to memory of 4724	4828	msedge.exe	85
PID 4828 wrote to memory of 4724	4828	msedge.exe	85
PID 4828 wrote to memory of 4720	4828	msedge.exe	86
PID 4828 wrote to memory of 4720	4828	msedge.exe	86
PID 4828 wrote to memory of 3052	4828	msedge.exe	87
PID 4828 wrote to memory of 3052	4828	msedge.exe	87
PID 4828 wrote to memory of 3052	4828	msedge.exe	87
PID 4828 wrote to memory of 3372	4828	msedge.exe	88
PID 4828 wrote to memory of 3372	4828	msedge.exe	88
PID 4828 wrote to memory of 3372	4828	msedge.exe	88
PID 4828 wrote to memory of 1572	4828	msedge.exe	90
PID 4828 wrote to memory of 1760	4828	msedge.exe	91
PID 4828 wrote to memory of 1572	4828	msedge.exe	90
PID 4828 wrote to memory of 1572	4828	msedge.exe	90
PID 4828 wrote to memory of 1760	4828	msedge.exe	91
PID 4828 wrote to memory of 1760	4828	msedge.exe	91
PID 4828 wrote to memory of 4140	4828	msedge.exe	95
PID 4828 wrote to memory of 4688	4828	msedge.exe	96
PID 4828 wrote to memory of 4140	4828	msedge.exe	95
PID 4828 wrote to memory of 4688	4828	msedge.exe	96
PID 4828 wrote to memory of 4288	4828	msedge.exe	98
PID 4828 wrote to memory of 948	4828	msedge.exe	104
PID 4828 wrote to memory of 4820	4828	msedge.exe	105
PID 4828 wrote to memory of 1600	4828	msedge.exe	106
PID 4828 wrote to memory of 3784	4828	msedge.exe	107
PID 4828 wrote to memory of 3784	4828	msedge.exe	107
PID 4828 wrote to memory of 4352	4828	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_370fd91dae2d97e5d41568ce261d0c325a67470f3288ffdd23a12fd2317753da.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff9505c188,0x7fff9505c194,0x7fff9505c1a0
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,5246493118690875423,7398288687048113434,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,9231433177294371329,8820893928528411461,262144 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,17598031000662718726,17450983742706064206,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,7432194231801721947,18011681267742116086,2097152 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4701190845151336729,11282352075057555913,2097152 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,10575689609372519342,16721011477463109959,2097152 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,15826172622809796702,4472654968586533825,2097152 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,5317296706098667668,5703180184928336020,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,14562366640245478720,8973576640445875405,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,4671579148690134440,12694219752946942834,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,4671579148690134440,12694219752946942834,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,8202310220269321257,18418373021285529978,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,9492468409476256180,110616004459520196,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,12937143824590717220,15869346842781906392,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,2109975501397272767,1504018980156822138,524288 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4332,i,1204306251321917822,13067250433020431802,262144 --field-trial-handle=2216,i,16501173525352637061,14849717398184790120,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4352

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fb2c2c030fedd313e6872673c479c4cd1b5588e24c8be430fe1af3f6624e0625
MD5 6ac180b9aa346f250c767e3d71c74027
SHA1 cfdf2397373a60dc7895c9b4b6fb19b63ddd5437
SHA512 e14a9c1010c6cccce2ba5de054c50fb812f4f0cc2fe1a563c5d98bf0a4eed3178503c78ae40baa54c049457dfc7545f36945083a2d46918b55c67827e3d107db
TLSH
T195514E8526A14D94FB5E657C73F2A1FB31B2F6B043831E0D3A64CA795B7675F808089C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e23d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e23d.TMP
Size 2KB
SHA256 de6c5451f14acc2c5114b664a4a965b5657289c3264fbb86d6c509b6dbde398b
MD5 b34e17192f0e2d7e043b269a943e06f7
SHA1 dfda888758e26a09d0ca4d68861475f55fcb117b
SHA512 ecd25b66f67f1c25ab6a64f138962a804394b687f27605ad115cd5e5a37f12f018cafa378c0303713a3652a453d48d0812524d963c190a325338336a10af7814
TLSH
T1AC515F4126614C94FB5E617C63F2A1FB31B2F6B047830E0E3A64CA791B3671F808048C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 77ade40a29bc5b5f52a06d4bb02da4417bf9bf1527a1758c423a5559a3364963
MD5 35db593dbf09f9a63484bc8936c07a59
SHA1 e172eacc2558deaa22e9b8f3464daa7013151961
SHA512 ad8af8dc9c62dbcc69f35d4330061f665addff740c58de86846c85ee82be9455adb789bcfb01c69ee7a424bc34f82707c56eaacace88019bd202d49d07f91a1b
TLSH
T1E2218FF3C3D59A6EC90157F06B24AE1BCE1D0A46422C7D1689E4EF2B93F2475E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4861ff8ee415919917798135d0bad9d03ee4ff4d342fa85dbad0cf8324dc5d9e
MD5 f07ba990869644f520b4987c5e2ac0f1
SHA1 4870074861f99214e6af23b6f221a639c4eb68a4
SHA512 0d7d31f24329646759aacb9a208d822f071c0bada7f7070795f02d310e63894ac67176a989ab2b8ab4ebeab2196f13f3d4aa4bb4bccf83de071416cf92e57550
SSDEEP 192:sxZGRAWP/f5sOJIdpdEHW6+WNGYYBaTLDIgrJ:sxZG1P/f5sOCeHbGfI9
TLSH
T15612B751AE38657B8CCBE21DBB25BF53D5F95032A5901E58EAFCD61C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6e830741e883e4246a033e9b8bd02b1fd49e90ca2ff6ede3f243147bb2e9126f
MD5 378dbc77847895280d87a7731235bf30
SHA1 650e10a5b2f7abf2be17d3218418cb038c026e3f
SHA512 d8158c266f609dd8cc2389bb7e18d98e95357b9cb6d6be487b37610667e6c68e50f7c365578a2509ae19df3768444d9e49e050ebe6defa3de452a1b7bc1f9ffc
SSDEEP 192:sxZGRAWP/f5sZrIdpHEHW6+WNGYYBATLDIg5qJ:sxZG1P/f5sZ0kHbGfmA
TLSH
T13F22C851AE38697B8CCBE20DBB55BF13E6F9503291941E48AAFCD61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f92eee70f3989b2c6cdb2693c3229b5ff8d2b0ea98b854e39a9d49c5b88f0d6d
MD5 7d8e8bb81b134fae83a30e22676a07be
SHA1 f66ba485107d91e272e5af416458d868338f2b63
SHA512 d9c03ee25d42e96c0ad37df68c84c1862d8158f461233488c2a5af4c01c00dcba544c4b24a3d7bf47ff84d41a12ef23fa67022d0e8b997270b4c7d284894714c
SSDEEP 192:sxZGRAWP/f5sZrIdpdEHW6+WNGYYBcTLDIg5qJ:sxZG1P/f5sZ0eHbGfCA
TLSH
T15022B851AE38697B8CCBE20DBB55BF53E6F9503291941E48AAFCD61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3120cbc93c7d8e4f7d9d7067be8bb6ec16d0ac0ff74128bae55245408e4eeb5b
MD5 8c135006d8a2bf97889e66bc4a898822
SHA1 833c0e092ccf9c29dde278bc256a725436451556
SHA512 f54f513d6dd209d9f148f2d33e67e721a8c9864734412be4b53ab8049bef014eafc378000c5d774c4f05741853695e8e1f0c7038d09500630048c3262dafe99c
SSDEEP 192:sxZGRAWP/f5sEJIdpdEHW6+WNGYYBaTLDIg5IJ:sxZG1P/f5sECeHbGfIC
TLSH
T12522B751AE38657B8CCBD21DBB15BF53D6F9503291D01E58EAFC961C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e33a6e156a1d83af20f7f7cb93e511374527457bb539d6e776fa0c4a8cbf8237
MD5 467382aad5d4df5853a0e73cc1dc5257
SHA1 bf8176a4dea31c76bb64dc9ccbc52b6fee46b0a3
SHA512 4667228a2d62705524b30fc3ac8af4df89d32214a65ed360d8bd4593df9caecb3d499089e028599cc8ba2797d62214f43e78a0c1f90ba4edb797e110361a25da
SSDEEP 768:3oyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXkropLos:3oyYR7jWv3NpBu1ja/CL8OXvf
TLSH
T198C2E92F640DCB7E4FC01A9DDC5A6F9B3E9802C7A6548D4047FA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 09e555a0427163ebfc4727acd889b1f71b902db3240a33986d8cc43709fc84ef
MD5 3cb35baa9b4ab3ad92dd238fae7d4f4a
SHA1 d7db322360702d0bb5088876aac05bca36b05698
SHA512 b35f249dc58e742a519f35ffaf052d6d65e907a5c1e99a06c79609ead2a20502f3ce932c96374c65831feb5b00d751c41a6324eb150d40a4684595a63af68639
SSDEEP 96:K0VCKOMq2z7PyT/95V89pgn7n8KTp718/v/ANvhAHKrXVxdU9RYf7fUKTR7dU/XN:E9gPyT/95Vkpg7nbp71kv/ANvhAHKrX2
TLSH
T176A1BF1175BB1A1438BE258D8574972A524132733218F62ABFFD04B69E2FE085DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 47736482cf7e009fc1eba1ba392b4eb475d744cbb2eae5ab2435515bd3369663
MD5 492cff54fdcb3d687d1081a7ee892b0e
SHA1 0ca9e77699e6a7e5b5e5a0e9ca50852c91a2ce5a
SHA512 ce5826c47bd0ca7cf4d9ceca8d2899b1c9276837de72c8fda6570744e3e4880383010d7557b709e8bef29f26e01ce9810617131518342c9fa1aedd6b5e01e5c9
SSDEEP 384:QZcIdQsN/30taosi6dhHYQX5+Dtyz8G46XTqpsa+VYbZok:uGvZsNhHLkDY54iTqphgS3
TLSH
T1D4929E31ACB4AC775CE7A285B98632139EB8505792CC7B80D6EDBF1D00DD6A8130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc7bce3dd3db7d9df905e60253158cea7b3755c0c4d3c078be5a91fdbd40503d
MD5 382ad9921719e577dc5ed27c5620c53f
SHA1 3f1ca76c5e11613d896f3b0755e8853daaf8667b
SHA512 99055e231e12ae210cc3935544dd67f94d88aa5c152b1ff825faba71072a889c8819f0b43196d9df283b371f5a1de8c03db45a5f0d5117d5ffdd5468ac05cc61
SSDEEP 192:EONh6nnHGQmiUyXlXjQYcX5hQDP1yjjzorloQMchNfU6:EONh6nCwVjQNX5+Dtyz8GEDfU6
TLSH
T1E402EB34ACB87C7B8EF36D45748636139FA5216BE5956B80DAFC1E1C00D769C230A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9f5ebb8c5064e8bc35885d11dc5f25efd754c0063ef8370b1882210199dc7f55
MD5 7460f35ef555c2d0441be0e5c5ddba85
SHA1 dd0cf6e1a39fbe9e576b825c1103bfd354b8ef8f
SHA512 c39606aefd720ab6a3377af7cc2fcb1914cfed79249295a0dd82a7dcb77d715f4a51852e3a6b3ab0ab6f686821efa5ad42be4ed7970e026cc06dfa97136e96d6
SSDEEP 384:LZcIqsN/a0taosiadhHYQX5+Dtyz8G46Xoqpsa+VYbZok:TqgZsrhHLkDY54ioqphgS3
TLSH
T102828E31ACB4AC775CE7A291B94632135EB85067D2CC3B80DAECAF1D00DD2A8130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9ce1ff017ed37716a64a687346cfba11f4d956acbe5b852ba363b9ab250277a7
MD5 e92880acbef06077b09c8561f2da461f
SHA1 bfbdaab28c3e321a35697927cad2d283c3dc4bdc
SHA512 26ac24e332ce89e670629a9d0d6a37d434ae96be65843f3535b335f8a513b0ba3289a78a7eb045b877ea2f7cfef706237909b8e431bc33f90cba8fdd3eaf3198
SSDEEP 384:PZcIqsN/30taosi6dhHYQX5+Dtyz8G46Xoqpsa+VYbZok:HqvZsNhHLkDY54ioqphgS3
TLSH
T1C9828F31AC74AC775CE7A691B98632139EB85067D2CC6B80D6EDAF1D00DD6A8130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5977a9629c57294227f6d37cee9cf57a4c104bdc90341a6499f055c0d8f415aa
MD5 87b4dc09f55961dd39e9b0626b56c828
SHA1 6d3af31ed6f68f7951c382808e6d78eca82deeab
SHA512 fdd4bc7622adfaa42c3edba36756c299fbf7ca8edc3bc2c1121b860b61098081b656090126cd864e82ea5f4a94a1b907031c306a794ca228b580c217d6dd9278
SSDEEP 192:EONS6nnHbQmiUyXeXjoYcX5hQDP1yjjzorlo46XFhg3I/5pU6:EONS6ntwkjoNX5+Dtyz8G46XQqpU6
TLSH
T1A1122C31E8B8AC6B5DD36595B08731139EA55127EA497FC0DAFC2B1C01EE6AC130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19eb2129-cf4c-436d-966f-8205992c2591.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\19eb2129-cf4c-436d-966f-8205992c2591.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5c5f1d6e00d013bd1784f193009ee6fd8305a97e95d212edbb75c3e6e774dbac
MD5 1d4019f243bf55664861efd4ad0778d8
SHA1 ab7510c23de798919086d251b2c7d935dafb6105
SHA512 2380104a0a87c11b11ef6dab6cc634978cf229daf6088d85cd2478a8c5b9c21e75dbb3983f506ad7b3832cbbaafd22da5e4f037ca37512a7d0adffd197622049
TLSH
T1F6411D5CAAFD1108B3B7AF169FF6A86D447BB9772E06D45D00010E4F0626F41D862B73
MD5 SHA1 SHA512 TLSH

Submit Download