7e072e3e3a33f591152e407b623ac5bb0833d68c0f55fb42eb6f90211c477107

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_7e072e3e3a33f591152e407b623ac5bb0833d68c0f55fb42eb6f90211c477107.html
Size 6KB
Sample260912-jxhplsdk21
SHA256 7e072e3e3a33f591152e407b623ac5bb0833d68c0f55fb42eb6f90211c477107
MD5 dd0353e79c362911752fe14baca73157
SHA1 8f98f7811bf22f1a351d64c40f8946a919eb66dd
SHA512 6fcb98ea481f4278241180d76cf72ba5f343fcf0abf09830949779d2780b1bf5489038e763a33de2d6c6e7b7d1d6aa3ee0b56bb622bf485f54081e4d6484f4b2
SSDEEP 192:zWLv15G5WDNlUeqmngZ1nZ694EcE8XECgUdDhQoKDejCPJu:zWLJlUePf80WhtKDejCxu
TLSH
T1BDE1B51A9E4C853F4100059BF0A16A1DD89F487BD312D8A6FCFF412E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4940	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338177281542642"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{7D82A832-F169-474A-AA81-14ABA53869AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
64	msedge.exe
64	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2164 wrote to memory of 4444	2164	msedge.exe	85
PID 2164 wrote to memory of 4940	2164	msedge.exe	86
PID 2164 wrote to memory of 4388	2164	msedge.exe	87
PID 2164 wrote to memory of 4388	2164	msedge.exe	87
PID 2164 wrote to memory of 4388	2164	msedge.exe	87
PID 2164 wrote to memory of 720	2164	msedge.exe	88
PID 2164 wrote to memory of 720	2164	msedge.exe	88
PID 2164 wrote to memory of 4328	2164	msedge.exe	90
PID 2164 wrote to memory of 1052	2164	msedge.exe	91
PID 2164 wrote to memory of 4328	2164	msedge.exe	90
PID 2164 wrote to memory of 4328	2164	msedge.exe	90
PID 2164 wrote to memory of 1052	2164	msedge.exe	91
PID 2164 wrote to memory of 1052	2164	msedge.exe	91
PID 2164 wrote to memory of 2912	2164	msedge.exe	92
PID 2164 wrote to memory of 2912	2164	msedge.exe	92
PID 2164 wrote to memory of 2912	2164	msedge.exe	92
PID 2164 wrote to memory of 900	2164	msedge.exe	93
PID 2164 wrote to memory of 900	2164	msedge.exe	93
PID 2164 wrote to memory of 900	2164	msedge.exe	93
PID 2164 wrote to memory of 3544	2164	msedge.exe	99
PID 2164 wrote to memory of 3544	2164	msedge.exe	99
PID 2164 wrote to memory of 1264	2164	msedge.exe	100
PID 2164 wrote to memory of 1264	2164	msedge.exe	100
PID 2164 wrote to memory of 4248	2164	msedge.exe	102
PID 2164 wrote to memory of 4796	2164	msedge.exe	107
PID 2164 wrote to memory of 4380	2164	msedge.exe	108
PID 2164 wrote to memory of 2076	2164	msedge.exe	109
PID 2164 wrote to memory of 4440	2164	msedge.exe	110
PID 2164 wrote to memory of 4440	2164	msedge.exe	110
PID 2164 wrote to memory of 3624	2164	msedge.exe	111
PID 2164 wrote to memory of 3624	2164	msedge.exe	111
PID 2164 wrote to memory of 64	2164	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7e072e3e3a33f591152e407b623ac5bb0833d68c0f55fb42eb6f90211c477107.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffacc8dc188,0x7ffacc8dc194,0x7ffacc8dc1a0
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,4930463200770042621,10288635342483524010,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,13704772584971955561,15007112912310541614,262144 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1352,i,10494744710662126632,6148696235293569600,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,3631917519801147347,10003054187600914460,2097152 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9962418453692963263,15798461975605213804,2097152 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,7051447165821510170,14124291473280690560,2097152 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,6932373904761917563,1375388201159326546,2097152 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:2
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,5961053976846258747,1654683819026130631,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,12452552962646148297,7584206125004505860,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,5243621048790189006,15135865082287637311,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,5243621048790189006,15135865082287637311,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,2864428633841043645,3860548958958370825,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,5856966175511322315,14534088430835151664,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,11684490395112244745,5064630821244520450,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,13289061261554048387,10278040024685087418,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,10489859954852716163,372716626735161353,524288 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,3081989904907845673,18397195885920367112,262144 --field-trial-handle=2280,i,18146932532160322113,9363056526340388781,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:64

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a31af01d5195e8fa4025254fbe20295ca74f12c6ace1f11605f05226a83b5c4a
MD5 0628564ce65ff901afb734231ae8476f
SHA1 b320cd9c6bd0c8cfcb24c31ee5668f2aef5960bf
SHA512 563319377928886657a4986cac2832c2178e677f0c8d91625fb093c1708a3eff02163c2de86458f77ab821f88989a483e16859804aad51b264075bb8585b54aa
TLSH
T13351208BAE604C91FF671332B2D53383B63891A43E930E420FA1D7FB8C12735591806B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4e3b7dd26df9465a7d13ccc4711e32f95de46e33d80f00531c6d940a7bade43d
MD5 9c4de98ca532278197cc8784f577b33a
SHA1 90a69c4804fdd28ac1924b64ce872061e0950af4
SHA512 c3d073b4aceb231819fa79d74cbb206cc392a7e66d4bbb6bc910627c03f1ea6be4db7f0a3c5c4825852e648c2c8cba600ce73bfcc4ccfc3f0597eb273a341098
TLSH
T1862182B7C3D586BEC91156F05B24AE17CE2E064A422C3D1589E4EF1F93E3475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 67875d2d42433e1261f8f9321a28911cdacef1df6eb07b9826a20500d10d054c
MD5 086900230d68416166ba6307a1932c53
SHA1 b97290d198e061e433c3fc231e6aee189e5b7c77
SHA512 a6ace37f90e833c50f8ad889fc2f6c9514808a24c52d62a8bfc6fdb6738d1f66255db128bc626975e1dc7e664a11219295d20c16f569521d68d747e66f611250
SSDEEP 192:sxZjRZWk/f6s0CUsIdpHdHW6+WNGYapsabIg5PJ:sxZjak/f6s0F9HbG3H
TLSH
T1D122B616AE28A93B8CCBE21DBA55BF13DAF9503251D41E48EBFC861C05E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e124d1d30734743221a3f58d76bd3d8a219ccdd382b4162d7087af00135b92f0
MD5 71e1f1fd317c47de2ad9ad7ca7136a6a
SHA1 a7755e811a1b0f33ca4a1e29a997abf77eab724d
SHA512 a5d099a532c68503e4bd138c5cde73ea8f8d8594c807c0ea033c37f7c404dc647595ece17f755b4fe1870a00909a794085262033b9386d4c801348053b428b9b
SSDEEP 192:sxZjRZWk/f6s0CUsIdpddHW6+WNGYapnabIg5PJ:sxZjak/f6s0FPHbGWH
TLSH
T14222A612AE28A97B8CCBE20DBA55BF13DAF9503251D41E48E7FD861C05E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d87f5637359e6fd19d7dd35d023dc68d5f0031357fd9931324e01cc1daf72ea8
MD5 773a89e2601931a51ea6fa359c1947f4
SHA1 47694e62243319e08391374282c9674c223e4119
SHA512 f4a2382ed4e52ef79d898eb62e450e782bc7603ab642980f882b7cbd044221c15f79bc0f5bf6ae54eecdbf1040f96ea086508dbcf03520f6bb0e2d07906b026b
SSDEEP 192:sxZjRZWk/f6s5esIdpddHW6+WNGYapYabIg5lJ:sxZjak/f6s5YPHbGvh
TLSH
T13222B812AE28A97B8CCBD21DBB55BF53DAF9103251D41E48E7FD861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bd1de82a1ab8f56f3bb51a8668dc47a173c1229bfe14ee00d042942a784d16bd
MD5 c07f1de1ccf045d107624e0f42b2e8df
SHA1 b947fd1837aa7f22355645f74aaf3e5a57cf1a03
SHA512 2fc284fbb2c8c5a65e01509c4a1a910342b8ea739259e707703fcb43e1559d4afdcae0b3fc1d0acf43b598aa5973520b4e51e642f18792d5b3ce26abf461da2e
SSDEEP 768:IMWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7zro426feimRf:IMWPcLKWvKeEeu1jaClLiF7A4jWimRf
TLSH
T194C2EA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c64e13dcdf452e394b0f7bddfffaa1b05aff6a43222e77683b94a5d6af9e68c0
MD5 ddd1b1cfa8447dd3251afe3b9df0ce05
SHA1 1ced1d65de35f57255d36ea6e8b79d4e3936f1eb
SHA512 8d88c5b5b1f2fa9a6f1d1f9097e96a2950f08dfd2abd1ab3008660d74481f6e7f93d43f5332dd0a7f4ff4c5e0687ac023e7efcfb444194d1d6a5b99edcef3db0
SSDEEP 96:KYj+KwciOv6KcgyiTeyYcw0w8R/OK0KWxOw0KyyR4Spm4:AdFZiTeyYcwt8RmKGxOwdyyR4Sp9
TLSH
T1F991FF8033BA0201787E3948A2A49B1F424135B33469E62B7BFC55E5DE2BE144DFE5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b80fb1b0-99a2-4985-afdb-77ffb0e61080.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b80fb1b0-99a2-4985-afdb-77ffb0e61080.tmp
Size 9KB
SHA256 8ee57f160e63f797f725ac679c0c984f3d7b7b5cab827d6cea832aa015e8e5f5
MD5 ca7c7be5f130d0d455f8edbc722fc9cd
SHA1 f7493a54ea68356be9c6d0c4ff419210992d5464
SHA512 fac59c2856749ae2fee56f50847178b006fd371e07673aa98d8243bdbbecf8648a6260d12f337499aa51d1d0fc66d60c2a5e97b89bcbd42ccd505abbf73083de
SSDEEP 192:sxZjRZWk/f6s5esIdpddHW6+WNGYapYabIgrJ:sxZjak/f6s5YPHbGv9
TLSH
T1E21296126E28A97B8CCBD21DBB15BF13DAF9503291D41E58EBFD851C04E66DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 be268f50d2779831cc7551505c19cf07696d083f7dc7462e931af19ff1f93bb7
MD5 1ae11b2060fc6bc4208ab722f0be4e48
SHA1 c5668e576ac264d9e1a8d7f4823f6be9f3ba4478
SHA512 bee99a49f4b4a90d47dd0af5e46050171613e70a6f1fb5e53b331fd3f1718b4645f973056b7eacab0bbac53d190c602fb8b52de2aebaefc248fe168227b77bb4
SSDEEP 384:6ZcIGCsNjSqph3U1bpMzIGmf9waOXiBsa+VYId7UYoj:4XuormAuVXiBhgLVM
TLSH
T124927D729CB8AC7799F7A281F9873A135DB8416396C83F94D6DD9B0D00DE358030792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 33a364fbf7076eea1cb5c2936d5c8370bc9c97fdb087165252ce8ead246492f7
MD5 814422ed068290d5d321137f5672d2fe
SHA1 cd947ddb3420298d11fc3629e2e70c11b312fdb0
SHA512 bd10ea1e6eb788cabbd545a90cb5513c996a00a20cbd14af48014b0e748bf131d96e3325773e309c82133bcd29fefe39179a47dc091a5aa8363a980a9492252b
SSDEEP 384:pZcIwsNjrqph3U1EpMzIGmf9wayiBsa+VYId7UYoj:hwBoOmAuniBhgLVM
TLSH
T1A6828E729CB8AC779DB7A291F9873A135DB8816396C83F94D6DD9B0D00DF358030B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1fd56985392e75a8c132c171ff88f9bd7026c875fa84f7af1dfcc412e5f83e59
MD5 2048877692fa22521abb8b0d22082e92
SHA1 f2b39b44b9f8e551604a54a8225fc3ddb4fd3fd9
SHA512 88c9dadbbdbfbc04caba1db679db55b2a8e991572f856196eca6b4b5bdc2dadb084eee69f83df8d112844eaa59a979bb6a6a51f65991f5994128c5248bfe66d1
SSDEEP 384:8ZcIwsNjSqph3U1bpMzIGmf9wayiBsa+VYId7UYoj:qwuormAuniBhgLVM
TLSH
T159827D729CB8AC779DB7A291F9873A135DB8816396C83F94D6DD9B0D00DF358030B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cfa81adcd921cd34c632daa138fcae9f13c586ea945719c8188900ccbedeae07
MD5 c8fe5852053cfb4c5f4fda1a57070eda
SHA1 8f83b095b1d1a2daba754a052cef3322d79f9d2c
SHA512 277f0883acda327edc38821e0e49e922a6411024b0aff4d7c8092ff271eb8b8a485f2a5eba19d9196f436853720face320cafea78371c9c46e6440bfb0bebc92
SSDEEP 192:aONU6IE7QmiUyVuTPuIGmfpL5DC7sTAU6:aONU6DtnPuIGmf96sMU6
TLSH
T1AC02F835EC787C7B9EF3AD48F4877B236EA5112BE5942F84DAE85A0D00D724C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9909df662bf1b9b63b875decda00745afa94d0236ca1075d547f4924b2666098
MD5 fb25906070a2b78391c49be5226c8aa6
SHA1 8c8cd879f7aefebec9607452be727e11eaf94c93
SHA512 1a2e7b79489f6a03bc7b572be1a1dbf05ff072d2d608c3b2238afb4bf0fcb8512eab7688484f150f66e5cbb89ca3980a3623a2f0dcab80474353ada358938547
SSDEEP 192:aONe6IEYQmiUyGuTcuIGmfpL5iaK27H1/3U6:aONe6D4acuIGmf9wazHBU6
TLSH
T102120A36E8B8BC676EE3A844F4873A135DA54227DBC87F90D6DC1A0D01EF25C530B966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afdf548c-49c8-42ef-b0e3-29be44c78df9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\afdf548c-49c8-42ef-b0e3-29be44c78df9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f122348b36dafeb0ba16413c78e00d6559527f4d615a86eb4da38b392218f74
MD5 61f1291e87ea11fb0136a769fb6d8885
SHA1 555339578cc02ebaf749e363ecca0ddc46e3e10b
SHA512 eb63362d97772eb2d58dc0790be4dddd05b5a17e811305ab52ff3adc4f0075eedffa3ce5aa84ce4294eaf738c56f617b8271a01724fcb7eb410fac859a3c49bf
TLSH
T1B241D758A6F91148B3B76F5A9BF7A86D447BB8372E06D45E00010E4F0676B40CD61737
MD5 SHA1 SHA512 TLSH

Submit Download