c74150cd2c02a329e88e11b6902921b5aced266f4fc8208b6296bc558c3b6f36

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c74150cd2c02a329e88e11b6902921b5aced266f4fc8208b6296bc558c3b6f36.html
Size 132KB
Sample260913-fdc38scm2y
SHA256 c74150cd2c02a329e88e11b6902921b5aced266f4fc8208b6296bc558c3b6f36
MD5 59d481637bc0ed2205b784d4842530ba
SHA1 df22ef4ba4813735b9753a666bd4e14f204cc06d
SHA512 dd913ee550b9f20d3b4b25e2853ecd4f08afdf07441ce8701e9adcbcc6beaf893d4bef751a33a714c33d95fa4ef52f2cdfb0a340118c4b231cdb0b4247c01c14
SSDEEP 1536:j0tHt2JaUS7N/QnXFwWRYf/DGO+5ih8s0bjp+BokXCJ1vsT6cMYcLzqIK21h0n:jmHguin0h8sQjupndMYcfK216
TLSH
T15DD3DAC8B6A5B49593A3B4F5002F000BB23A6CABE4489CACF18DD5E16FB4559413BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337871870769512"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{733E70AD-F61F-472F-AC71-7C3BB7185546}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4504	msedge.exe
4504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 2616	5112	msedge.exe	83
PID 5112 wrote to memory of 3728	5112	msedge.exe	84
PID 5112 wrote to memory of 2240	5112	msedge.exe	85
PID 5112 wrote to memory of 2240	5112	msedge.exe	85
PID 5112 wrote to memory of 2240	5112	msedge.exe	85
PID 5112 wrote to memory of 2836	5112	msedge.exe	86
PID 5112 wrote to memory of 2836	5112	msedge.exe	86
PID 5112 wrote to memory of 2480	5112	msedge.exe	88
PID 5112 wrote to memory of 2480	5112	msedge.exe	88
PID 5112 wrote to memory of 2480	5112	msedge.exe	88
PID 5112 wrote to memory of 3800	5112	msedge.exe	89
PID 5112 wrote to memory of 3800	5112	msedge.exe	89
PID 5112 wrote to memory of 3800	5112	msedge.exe	89
PID 5112 wrote to memory of 5040	5112	msedge.exe	90
PID 5112 wrote to memory of 5040	5112	msedge.exe	90
PID 5112 wrote to memory of 5040	5112	msedge.exe	90
PID 5112 wrote to memory of 1264	5112	msedge.exe	91
PID 5112 wrote to memory of 1264	5112	msedge.exe	91
PID 5112 wrote to memory of 1264	5112	msedge.exe	91
PID 5112 wrote to memory of 2976	5112	msedge.exe	95
PID 5112 wrote to memory of 2976	5112	msedge.exe	95
PID 5112 wrote to memory of 2996	5112	msedge.exe	96
PID 5112 wrote to memory of 2996	5112	msedge.exe	96
PID 5112 wrote to memory of 740	5112	msedge.exe	98
PID 5112 wrote to memory of 4620	5112	msedge.exe	103
PID 5112 wrote to memory of 4652	5112	msedge.exe	104
PID 5112 wrote to memory of 3100	5112	msedge.exe	105
PID 5112 wrote to memory of 1192	5112	msedge.exe	106
PID 5112 wrote to memory of 1192	5112	msedge.exe	106
PID 5112 wrote to memory of 1604	5112	msedge.exe	107
PID 5112 wrote to memory of 1604	5112	msedge.exe	107
PID 5112 wrote to memory of 4504	5112	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c74150cd2c02a329e88e11b6902921b5aced266f4fc8208b6296bc558c3b6f36.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa5bb7c188,0x7ffa5bb7c194,0x7ffa5bb7c1a0
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,11705379364781477923,12908797337759497534,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,3126148371388400430,1692351672602428349,262144 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,6636555994448749080,5453387545659409057,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,16875465120253582275,9299553214788740894,2097152 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,3704749915061908576,5456037998954367145,2097152 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,9966305550263248396,4450103161262122319,2097152 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,9269828185562856222,2997399928760156280,2097152 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,13734736229809826541,527257134279777317,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,1720701667832703569,9476031031302078369,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,10166293715068527751,10040128034324883648,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,10166293715068527751,10040128034324883648,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,8069284308632462979,1429322105553994061,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,13238852878597301910,17925250908393285341,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,6351422972688630474,12266444008771611233,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2988,i,13508605167427304650,3057288088199397863,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,13093182860854495688,12699349168939406521,524288 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,2755000030782508585,69081204482596115,262144 --field-trial-handle=2304,i,6818375106057024160,15168299486318481891,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 cb6de6f4238baa6d99e7e71e13ff109c20c106c8870a3d473c174e11b5ccecbd
MD5 1f8b34a522bdf2ab5146028921c93683
SHA1 4b3000c4a7b49ea4364978711932c33b59e18938
SHA512 3ffbed3ba76d3379622f331753b45b12f27a64cb8292f9730cf350d25ced184d348364f3d3354d99b1aa0d86163a53769fdcaeb552ce98b7889bf29a056750b9
TLSH
T14C5180817AE4C084FFA45FB1D0C818AFBA32D58CA483BF130FA4E4B96B123348149394
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a3103be38dc95771cd16efe34542703abdb5f752dc73bca48556879762db523b
MD5 7511b6cdb2fb2e9af23c891f38c36216
SHA1 a8d3ba8a31ac78bc62c5ea7c298fc595d231a492
SHA512 96a021efb49823641bef0a8e4faca04e1e0a0253fe8c09b59139d8c89384a4d0ce8ea6534a1b8373b2e21944b983c4439fa7208a8b5baf9ca5cbd3784e925095
TLSH
T15B41ADB7C3D4877E891112F09B256E2ACD2D195A522C3C16C9F4AF5F63F28B0D20269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a1bf3281c1d6fa2744fb76fc46af91f8ad1acbec218d5b0a4cfb71a1a62c1428
MD5 c095fb05831198ec4819b453af90086d
SHA1 33a634ba4e7e16b10d3137e61bdd9ee95b8c9dc9
SHA512 524377dff7a03a068bd0ce0e6c33e65067bf80fb8fdc40fd826099810ea3dda50cb13e83e4317407b43ebd64184f41534fc9122ce47bc78d957baa0b8653623d
TLSH
T12F417CB7C3D4877E891116F09A256E26CD2D195A522C3C1AC9F4AF5FA3F18B0D20259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 386085c0806b950c521cf284ccbd0447a0531f704f74cd5649d91181c3fae2bb
MD5 ac0fee16c0e54d4bed0061ac62dff721
SHA1 c109b8b868f2ee5a938d95a3db88af975f14cc2c
SHA512 6658df780162b5d5bf26999a50d609afb3bdd5ccd9af5151e359e56726773cdcf2ab21f0cef2701d534a362308e78bcbfd98b5247f6eb8519ea6e7141038baf6
SSDEEP 192:sxZBR1Wx/fEslYIdpdxHW6+WNGYgUsfIgrJ:sxZBqx/fEslpTHbGJ9
TLSH
T11912B711AE28B57B8CC7D20DBB55BF13D6F95432A1951E48AAFC961C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bb1797a5c4946ec1413365fe26584ac92bc18186337d383f9c7ea7d49a101dbe
MD5 5bd670d6f6e963ef17a3500c65ba99d9
SHA1 2208dbaad986060ee5f260a91c1c352d430aff82
SHA512 618f0e68d410cf9f23e24ca89a0373cb2d454bebd74a14a0c109bc0095c913b47468d6365660581bd4a4539e93b3b607a19af79c21b26cbdb06a52e2d313e031
SSDEEP 192:sxZBR1Wx/fEswYIdpHxHW6+WNGYg1sfIg5oJ:sxZBqx/fEswpRHbGWW
TLSH
T11B22B752AE28A97B8CC7D20DBB55BF13E2F9543291911E48A7FCD61C05E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 edb2fa6de71d1ea67af58a2e55c3fb0845e7b479391b97daaf842d04ae1a48c5
MD5 36be2a32d7ab441ec87e1d554c44bf00
SHA1 4449fa8059a3d56d94abac539a43eef9d2f35335
SHA512 ed32a6a2a91caa9d8028b4285267d590f8968a14ffebb0bf5364a714eb566df4f7cb6ac56182a5b75cbc8af5a22832a9d16865facebc4ca2e96e8861aec14e21
SSDEEP 192:sxZBR1Wx/fEswYIdpdxHW6+WNGYgvsfIg5oJ:sxZBqx/fEswpTHbGEW
TLSH
T13322B611AE28B97B8CCAD20DBB55BF13E6F9543291911E48A6FCD61C05E7BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e2674761c383e51cfd6344bc2d690e17424b381a8b84ab788bc5e260772d4582
MD5 4f5f6256079199dd6bf3bb91c512fba4
SHA1 69670c2475f713381dc6e37ecee267190b3349a1
SHA512 a61cd24d9647a1ac3c3bb583b303c6adf4d31727a7faf179e77ce0e89669cc9f23074292919630d68959ebf15114eab29eafdf4de4b567af09266c92b4683dd1
SSDEEP 192:sxZBR1Wx/fEsiYIdpdxHW6+WNGYgUsfIg5CJ:sxZBqx/fEsipTHbGJc
TLSH
T13C22C711AE28B97B8CCBD20DBB55BF13D6F9543291951E48A6FC961C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fcece66572f9ad7f56e9ffffea41841d9ba1d93f5019f118efca4c768aabff49
MD5 bac8866e6132fb7de73865ad81ca15cd
SHA1 f76cf3e41417a715b670701c3f05231d6ed7f26b
SHA512 c37fa95463c0d6342d66149a37ee75b183e4cd5c6f1bd0c9674624145050da8f0c4a7d0b386dd447df06d4544d58f905e424f825ecbc680d4c52baba4e017154
SSDEEP 768:aLichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzNro18C:aLichfPWvPZplu1jan+LKgzmmC
TLSH
T15CC2F93B640CCB7E4FC01A9DDD5A6FD67EA802C7A6688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 15959961dd552b35cd9716edbc31ce709824ae3134a19205561a75fc90fbf8e0
MD5 2a2d8f6b68aeb280c162923140026faa
SHA1 0b82f3c214fc84551c94c2eabc26f18c1ca65f45
SHA512 48179749cbf73e173dce44d3446dec8d75e53d032781d72083cf074db79728a14f215f6a6794869fa98343033e1d9620ae74f5f25ac0cb5afce6612237147078
SSDEEP 48:K00DCOcey7bCxKISm7K9C1Q7x0rYZ6SIyLZo1JTXrEbXyvIShEK9h1LExpUYSTX1:KoLWKQsSKeoKDio+UKj62I
TLSH
T10F910F50317A12547CFD294990A7A71B124271B37258EA7FBFB810B28A6BE094DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bd8b40eaff32bfbbfca238efe0ac1fa3c7e4083ed19fb9cdedc44d6589d82368
MD5 0a804e00880de0e7eaefdf1d6747a141
SHA1 5464c330e7821a820a43c4126db9a806537196b6
SHA512 f3cac8545834d43fbe4fce3efe029d4bf9f4a66ce1ed013f069f320398809e6844b76be45149b009f8294cf531487ca94de71532ca823813f4980ef0c429abdd
SSDEEP 384:SZcI1sNXTvcc5532kBGYX5EWS4It18Unmsa+VYul+on:g1+ka8+GYuWXIt6Unmhgy8
TLSH
T14E827E329DB4AC778DA792D2F9873A034EB8856797C87F5496ED6B0D00DA2981307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 387087126147abd30630092637b4abf2a7b4b611f7277aec3932713ff60d28dc
MD5 e53a80acddb959cc6a0b782e933805a5
SHA1 a1834c8d94aa0cf52aa4d6cbfa6670a1638a2e3c
SHA512 839109db97ab8799c082b04973bab49abc34b4dd40891e94ae2d4aa106473a1dcfa9d451847a80a7b8554e237d3d1dbc44725f29b94be609c5ce59889b878cb2
SSDEEP 384:1qZcIsbsNXIvcc5532kBGYX5EWS4It18U7msa+VYul+on:OAbka8+GYuWXIt6U7mhgy8
TLSH
T178927F7198B8AC7B8DE79292F94736038EB8856797C87F5496ED6B0D00DA29C1307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b5aebd6c4e5d516cd2f0f9810bd585fcb4ec0b3a39fd889e6a00eedb36e0b21f
MD5 722ec875d99561007accac7060acf30f
SHA1 fa9620765349bee64e19f078359ef9458094ea22
SHA512 c1dd25b8c1833b88743d8fb02eebbf1bdcfc2aee26550a69251dc579d230b124d73dfda3b99235abd6ff0e51934152309f06d0ded49f442fbadfc0b17cae04a4
SSDEEP 384:sZcI1sNXIvcc5532kBGYX5EWS4It18Unmsa+VYul+on:61bka8+GYuWXIt6Unmhgy8
TLSH
T14C827E7198B4AC7B8DE792D2F9873A038EB8856797CC7F5496ED6B0D00DA2981307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 5dc0f21419caf1878594302de736dee77eb1ce0b25be099d67b05dcab4965a6b
MD5 91f5591e3559c1963e0402d22bccdc35
SHA1 24004e2bd34697851f7b18d9a8c5739cf2e5b498
SHA512 8f39b97b6180ee4582312a3d893c02907a900cd2ac6d72b9244d54791404a45f6a968d692149120b7f81351d84d57ba2f82dd73fa24c3de9401ae6eca6ee0d1b
SSDEEP 384:5sNXjcc55e2kBGYX5EWS4It18Unmsa+VYull:5ba1+GYuWXIt6Unmhgx
TLSH
T1C3623B36A8B8AC378D939692F5473A139EB4456B97C87F5897ED5F0D00CE29C130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d3aac8506df2157b31d1901b0e799a77fcfe073d8621b6e1de4f90650b7b70c4
MD5 788accda067239efb57fdf8d6304ba5f
SHA1 60c664291eb1c399696e463cf02e2bc545ddafb9
SHA512 d26e74df51bd8ef701983afeac44bdff5ec649f4a9ec52e653d030ddb5ccac31cd0482a74dbd6a439d1ac4587cd5bc1a75c1ef12eb33c90750b0ce2e60453964
SSDEEP 192:LJONg6DphmqQmiUycfq8wGYX59eznCS3oInkk7VLqbU6:lONg6197RwGYX5EWS4IP9qbU6
TLSH
T1D602FB39E87C7C7B8EE36E45F5872B139F94112BAA946F84D6E81A1C00D769C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c8d3cf866495d6e4eca319eed3815fd13226661a5d2dc56952f35399f151f8d4
MD5 eab728f9c1740101f8a6a672bce9436e
SHA1 6bb93e6ce9779281d4999dafa99a89a7c72ad643
SHA512 f3d8c86a180b06a701bf43489e172e70a3d57437ccfbd81698469afc127d2940e2d4d87558c1067b2a48dbce691a8df403d23a062b10d779e2b669830848f35c
SSDEEP 192:LJONq6DphcqQmiUyofkwGYX59eznCS3oIt18UPkIIM/5xU6:lONq61DRkwGYX5EWS4It18UYmU6
TLSH
T18D120B35E8B8BC2B5DD35591F48739138EA4522BEB887F94D6EC1A1C01DF65C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 da5dd03f3d5e0c3983d8e801984cbf3cc299fdcdb2f3a8730d42dbcc144f477e
MD5 8cb9eed35a0c5bab08b14963f20fdd12
SHA1 e6c192e0346344ef730d9fc46dbaf59f246a6ab3
SHA512 19a9837d24b23e3d7d9950935ae6f8993c8d77936b5bb986d8f7b36307e76ab353e8fea1c04d6bdf50578fd52f43857d4d33f73d34a23be6b954733e3d47193f
TLSH
T15441095CABFA1148B3776E4AABF6A86D487FB8371F06D45D00110E8E0A27B44CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download