2eb4ee5d12fdcac82deeaa5d23e8323ab85f82280af089fdf5d7d3e260534253

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2eb4ee5d12fdcac82deeaa5d23e8323ab85f82280af089fdf5d7d3e260534253.html
Size 6KB
Sample260913-ew69csfa42
SHA256 2eb4ee5d12fdcac82deeaa5d23e8323ab85f82280af089fdf5d7d3e260534253
MD5 523e358bda4d763e91fce282d3a485bd
SHA1 6e4e6a16aa8e56e4e1e68ea6bbdcf599d3cfe10a
SHA512 d5a85d3071e50db15a0eeadc3183140abb383e71602b01996ce09c63aacf7419c3ff401d3ea80dbeff6d206d49c632d05ee2369621a439d6455d56a382f87450
SSDEEP 192:zWLv15G5WDNlxeqmngZ1nZ69eEcE8XECgUdDhQoKDejCPJu:zWLJlxepf80WhtKDejCxu
TLSH
T1F7E1B61A9E4C853F410005DBF0A16A1CD89B447BD312D8A6FCFF412E3FD9EAA45375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3772	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338288457539660"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{5BC07014-AB0D-4C10-A188-40690E8C40F4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
760	msedge.exe
760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 1520	4048	msedge.exe	87
PID 4048 wrote to memory of 3772	4048	msedge.exe	89
PID 4048 wrote to memory of 4108	4048	msedge.exe	90
PID 4048 wrote to memory of 4108	4048	msedge.exe	90
PID 4048 wrote to memory of 4108	4048	msedge.exe	90
PID 4048 wrote to memory of 4512	4048	msedge.exe	91
PID 4048 wrote to memory of 4512	4048	msedge.exe	91
PID 4048 wrote to memory of 2616	4048	msedge.exe	92
PID 4048 wrote to memory of 2056	4048	msedge.exe	93
PID 4048 wrote to memory of 2616	4048	msedge.exe	92
PID 4048 wrote to memory of 2616	4048	msedge.exe	92
PID 4048 wrote to memory of 2056	4048	msedge.exe	93
PID 4048 wrote to memory of 2056	4048	msedge.exe	93
PID 4048 wrote to memory of 3396	4048	msedge.exe	94
PID 4048 wrote to memory of 3396	4048	msedge.exe	94
PID 4048 wrote to memory of 3396	4048	msedge.exe	94
PID 4048 wrote to memory of 5068	4048	msedge.exe	95
PID 4048 wrote to memory of 5068	4048	msedge.exe	95
PID 4048 wrote to memory of 5068	4048	msedge.exe	95
PID 4048 wrote to memory of 3696	4048	msedge.exe	100
PID 4048 wrote to memory of 4088	4048	msedge.exe	101
PID 4048 wrote to memory of 3696	4048	msedge.exe	100
PID 4048 wrote to memory of 4088	4048	msedge.exe	101
PID 4048 wrote to memory of 4820	4048	msedge.exe	103
PID 4048 wrote to memory of 4212	4048	msedge.exe	108
PID 4048 wrote to memory of 3496	4048	msedge.exe	109
PID 4048 wrote to memory of 1700	4048	msedge.exe	110
PID 4048 wrote to memory of 4716	4048	msedge.exe	112
PID 4048 wrote to memory of 4716	4048	msedge.exe	112
PID 4048 wrote to memory of 4928	4048	msedge.exe	115
PID 4048 wrote to memory of 4928	4048	msedge.exe	115
PID 4048 wrote to memory of 760	4048	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2eb4ee5d12fdcac82deeaa5d23e8323ab85f82280af089fdf5d7d3e260534253.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffff749c188,0x7ffff749c194,0x7ffff749c1a0
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,16031984824174302287,965630820605019477,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,12028149964919139179,6717493031104692278,262144 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:2
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,14307333067142741484,14338605934498742789,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,5876618065933745183,4540134505458378330,2097152 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,14768241439484854711,6000889874976872043,2097152 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,1727250708448843671,13238888363202987892,2097152 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,1199933427089478707,6311097996612358938,2097152 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,3547909061511498929,15554513614628433968,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,11685748289610987598,5520988243780792705,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,16010745459431205481,5737559268266300522,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,16010745459431205481,5737559268266300522,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13929453799843757323,14229012779302007857,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,15773185047936565540,10279473334685974605,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,12354713121656762470,5616327260918549264,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,5753517474068048085,811884775811355125,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,17074826669358528246,16625261503556490706,524288 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5100,i,2499525657998331248,11325705025843512145,262144 --field-trial-handle=2460,i,4387217933834827289,17797504918595288093,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9119242af7962ca418ff59e7ec6d266d9048b9bb292c1ff28b44b47e88a59d99
MD5 e5ebfe0849f4814dc80d7b65c5b4fd10
SHA1 2d5a5cd095ead3205f7044ebdd95bb192c84e497
SHA512 a771b49cc526e1c629baf8d4a900f7a65612a3d8bccc0fd54d99e1019d0f6debd8b4e3754369d5a9bbd151f3b1f32777fb0088f1c8fe2aa4dd6d9d0c62a06e0b
TLSH
T1BE517E9C17E066E1F7A9CF34A2F3118FB8F0C0C1518B1EDE50E8DA7AA866F025074C18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e17373395d01caceb0303bcae583ff2a255567b0e385faa2f094d2bda8ba7699
MD5 04a7b5b45a66a37aebb2056ff4f9e5c5
SHA1 4bcedb514956cb28c42728778806da0527771180
SHA512 796ac92c49903e10a9ea6da43be8068919c61462e70f80d993d201808c338a7682bff34baf7b5f34b4843e1d77238527be2970e0b521aaa90b2552a2480efba3
TLSH
T1A2215FF7C3D8867EC90156F05A24AE27CD1E0A46422C3D5689E4EF2B97F34B5D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 66f0a77b68faf56ebe94e80a3aed1dcdde63ef46cd7bb7ef3d224d34dd6a46c8
MD5 d7206d37ad101fa3cabeb98c6ca60791
SHA1 e7231a6f1611b2f280f10eb83ced5ebca62ade47
SHA512 c76e1263c058548147b4a640dbb50dbe0db41816eb8a25790b990dae3a158cc885e469c66cf3cdd6dc278fe28647148b3dbd8a9dd896a47423f6a06867eee517
SSDEEP 192:sxZNRYW+/fDsDnIdpHNHW6+WNGY363fqIg5eJ:sxZNx+/fDsDotHbGXig
TLSH
T1D122D9566E38A97B8CCBE20DBA15BF13D6F9503251951E48AAFCCA1C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9be71eacfdbddb808cf06b44504e06547fb6daea17662ccb37e2ef3872513edf
MD5 d40845f803605066b186ff611ddd09ce
SHA1 e22972571cc00eaa54ce54dbb5a600bc1012f0c4
SHA512 19f1510f3c8cbefbb34878abc44d5b86a5ee36969e9e8ba3d9e01264e1b61e066b678154ebcf9d9ff1fdcb8607ea8b5d3ad3662b2cfad8b7764cbe049410dbec
SSDEEP 192:sxZNRYW+/fDs4DIdpdNHW6+WNGY36afqIgrJ:sxZNx+/fDs4cHHbGXZ9
TLSH
T17E12C8126E28A57B8CCBD20DBA25BF53D6F9503251D51E98EAFCCA1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b70536da5fb51e7ae53bd9979d6baa5bf525cc34f975eb2f9c2ed48c73a54eb9
MD5 cfa4a86eda64a16c6933327b1f63ca44
SHA1 f837e964f4289d2f51d10af276f5d921dda792b2
SHA512 0402c3f25a60992fce7f3378d135a1c1e149c7aa9f6068e61e2b00d223d803762746c997b6eb59c83cf992abf8d3321c56d834fff903592a057a8e45a43ea191
SSDEEP 192:sxZNRYW+/fDsDnIdpdNHW6+WNGY36/fqIg5eJ:sxZNx+/fDsDoHHbGXag
TLSH
T1FD22D9566E38A97B8CCBE20DBA15BF13E6F9503251951E48AAFCCA1C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 85b7e0128bd35d487b2a831a3269f2ef5a253c7cf68bb8b8a2d08e47f0ecc5d5
MD5 27e010af32b0d281e568f79b08fc60c9
SHA1 1d2ebd8d3da7d75639ad1f9531baf212fd73bae8
SHA512 f98ec41c1936eceefe50d7fbf5c8f0db1fa1b243a2154bd802b0cba8c2444fb9e99a4958a58cc7f58c0f48bc0be338465a008b28741ad29315e2bf2d65c2c121
SSDEEP 192:sxZNRYW+/fDsADIdpdNHW6+WNGY36afqIg5sJ:sxZNx+/fDsAcHHbGXZi
TLSH
T10522C8126E28A57B8CCBD20DBA15BF43D6F9503251D51E98AAFC8A1C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7530b93bde837b024a406f12f1ffa19bf8f1494c9f391a37e3b1c16c58c6b970
MD5 38588c5b6bfcb36f953561c435fc5b35
SHA1 d193ef7c47573c4626822b675ee25b766e9cbb02
SHA512 46e5c08c5f54915c4e7146eabad7b23a0a35e78e201342b2a11577606a76b8e4095ca0f5ba5a9a5813a3c2924f8fe3ab938e55aaca42566905ee3838ab731bc0
SSDEEP 768:H/Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/0roTf:H/Klm7QWvUYe0u1ja8/L/E/fTf
TLSH
T1CDC20B3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f98381db490a4dd03ac2d9f833d92b1ddf0fda241bec3b043ff621560d874c89
MD5 31aefe16585226e75851a43afc2e9d0e
SHA1 78a4c2da871777624d9adf2225db7ddd013e60cf
SHA512 04f811f136399e8a23ad695ab7e6a3844d857f7027f1ae08b5e538ff5a2b825991603cb168b3a78718309e5a0c5562fccc72a843a922c5bbff639ee39dab3f01
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLMb6G02aDbqpyIS+DK9a14Dx8TYRimE:Kg1eKeAiOD+KsAv/aKI8mZ
TLSH
T10E91451531BB021439BE64A89164872E864235733118E53BBBBE50B2DE6FE050DFF9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 89e4acbbbba4fe4f750305cd94516192f2880d83a41c584ddd3a38650488ec2f
MD5 5df5e3ab6d23f5f24914c19a9124da94
SHA1 581d59f9629bbcb0be9290e6a42a7a8e4b1dca95
SHA512 5407952003ba56b289dc06a489816eb6b580c6b3cf4b47eb9809b6909829336d62c10476f77532396d7065b9bd74bd54f041d8f408b6f5242e46346e526ee609
SSDEEP 384:YZcIarsNOPqhAblGvh//ySo2sa+VYBlmgo+:mWohx5/k2hgNgR
TLSH
T14B927C766C68AC774CE7D282F58337138EB890A397C86F94D5DDAF1E05DA1981303C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79eab2fdaa80fc6da46d96ccdfa7f08952273ef2a9ceb013599cd146f6ea8cd0
MD5 ec22df0fe2e499c36a81ccd85bc28800
SHA1 5dce5a2e7b2d333a8709d2850e5e8f5b8d24a6a1
SHA512 c7d6f7e46474bfc2856cdc0c6ed14d403639aafdffb8f53593f15f98e8e9a326d44f097d29ec490b5f46d9119a3bfa7205ec3ec318c035b0c779fb1e73144fee
SSDEEP 96:KqONkbQsjpfbUSH5ih/cIPURHl8h4otop5bs9D8BtP4v+Y1xf//ojdixSYiywMxk:BON/6JUxQmiUyWQto//WywSVNxP/WU6
TLSH
T1E3120936B868AC7B5DE3A595F08336239E644067EB856F80D5DD2F2D02DF56C6307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6d124d3222b909bdc9775df302d74891cafe76a29e00f9f45e046a965cda2937
MD5 cff8c1bd9cc68d6f550d2eb2428e8a1b
SHA1 d7f036d500ff0b50d665f9e9c11ef8b57e72b9af
SHA512 4c21b21e11e8ce7105d38214f5f95bb6c2883308dd63d3b163e3333d299bc30a77a5d89dcf6e5de28312e0ac8258b92b80d97777cb30c985fef12b5270fe8c7d
SSDEEP 96:KqONkYQsjpfbUmjH5ih/cIPURHl8h4otop5bsaD8BKP4v+Y1xf//ojdixSYiywgt:BONs6JUm0QmiUyRQso//WywABCjeU6
TLSH
T1A302B639BC68B8BB8EE3AD45F4877B239FA4106BA6951F84DAE81F1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b4267a80dfb04b1fe027bff188a8f79dd8fa882a368598a3b8964bd283bba28a
MD5 358db05d5f870f2ee5a051abe74063ce
SHA1 c613ebe070443c6933f7c01159de1e6f1bd38598
SHA512 67086b7a60191ae2db7ddc95f5bb4dbfda505df372855fc9db9f01534f2ebadfcf138bf5f0dd5d3a3653e837edbf6802d479559bfeb7d5a7514fdc4647f6f65a
SSDEEP 384:hZcIJsNOqqhAbNGvh//ySP2sa+VYBlmgo+:pJrhh5/L2hgNgR
TLSH
T182827C366C68AC7B4CE7D292F48337138E7890A797C86F94D5DDAF1E05DA1981307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b3f75bc56d97f15ef5857423371e59419badb996b4b5c3556d6245f093d2788d
MD5 de8c19949f12885a1f2e9f27e059cfb9
SHA1 45cfae0a0102dcff6d1e3f9327196c49d43b5837
SHA512 f1df15659e2aade09d93511fcf087c0669b2d02dbd816ec023d80c0bf445e1050e656009075a844bbed890163d653281036fe194c947789508904983030312c2
SSDEEP 384:EZcIJsNOPqhAblGvh//ySP2sa+VYBlmgo+:iJohx5/L2hgNgR
TLSH
T146828D366C28AC774CE7D292F58337138EB890A397C86F94D5DDAF1E01DA1981307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5beac98-90aa-4c55-b1f9-8aaf072ff1ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a5beac98-90aa-4c55-b1f9-8aaf072ff1ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7a7b055bdd60b2daaf6d4fda8824262084ffb39642f999d71b19cdab5c2ba2e6
MD5 c2f97dd546f7787751d62637b2f8ca54
SHA1 960db5b32755ecd139ac685bf60ff4f505dcdbb0
SHA512 29427bad41fd69881449fa0e4dd976bc8acb41029dfe3e31d1969408aa5f0914e120857193ca9d8ec1cd609fc3eefe2efe7d20016c4321aa2a1ddf7cf8148338
TLSH
T139411958BAE91148B3B37F5A9FF6A86E047E7D772E47949D00100E4F4A23B40C862737
MD5 SHA1 SHA512 TLSH

Submit Download