cfbd6fe7c2772ef2a1cbac0dcaec3c7a2934644defec651097b90831306c2287

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 16:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_cfbd6fe7c2772ef2a1cbac0dcaec3c7a2934644defec651097b90831306c2287.html
Size 116KB
Sample260912-t2seqacj2v
SHA256 cfbd6fe7c2772ef2a1cbac0dcaec3c7a2934644defec651097b90831306c2287
MD5 a87911a8e2936dcd389b7cc682aa7217
SHA1 ac464e61596ae6ffb15162e2347e24363b5c7c8e
SHA512 0f3ce73b76be16cafe6d4bf6429c90fecfc175b8b84dcc6e5c6902605d866178cc2221997ec86a8aea192c0328472eba38cc8fb3e95774cf2ea23de1075ca1f9
SSDEEP 1536:zmxPYn+hds9WRzT8Zwve+lAQQTtiNoQx/7fK7ktwbEaoIbEaou1W1371qt53jU1P:y/+Q/Nt7S7ktwdoIdou1W1371qt8etKX
TLSH
T1D7C3C58752204CF5EFB45DB3469B086B3D2C1437AC0790B9E3FD8F972B9686E034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3732	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338246329246997"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{3AF85F27-6A42-44BA-828A-9CA1FAC2ABA2}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3328 wrote to memory of 1240	3328	msedge.exe	84
PID 3328 wrote to memory of 3732	3328	msedge.exe	85
PID 3328 wrote to memory of 4124	3328	msedge.exe	86
PID 3328 wrote to memory of 4124	3328	msedge.exe	86
PID 3328 wrote to memory of 4124	3328	msedge.exe	86
PID 3328 wrote to memory of 4576	3328	msedge.exe	87
PID 3328 wrote to memory of 4576	3328	msedge.exe	87
PID 3328 wrote to memory of 3932	3328	msedge.exe	89
PID 3328 wrote to memory of 3932	3328	msedge.exe	89
PID 3328 wrote to memory of 3932	3328	msedge.exe	89
PID 3328 wrote to memory of 2308	3328	msedge.exe	90
PID 3328 wrote to memory of 2308	3328	msedge.exe	90
PID 3328 wrote to memory of 2308	3328	msedge.exe	90
PID 3328 wrote to memory of 4884	3328	msedge.exe	91
PID 3328 wrote to memory of 4884	3328	msedge.exe	91
PID 3328 wrote to memory of 4884	3328	msedge.exe	91
PID 3328 wrote to memory of 1640	3328	msedge.exe	92
PID 3328 wrote to memory of 1640	3328	msedge.exe	92
PID 3328 wrote to memory of 1640	3328	msedge.exe	92
PID 3328 wrote to memory of 1112	3328	msedge.exe	96
PID 3328 wrote to memory of 1112	3328	msedge.exe	96
PID 3328 wrote to memory of 4428	3328	msedge.exe	97
PID 3328 wrote to memory of 4428	3328	msedge.exe	97
PID 3328 wrote to memory of 4184	3328	msedge.exe	99
PID 3328 wrote to memory of 4992	3328	msedge.exe	105
PID 3328 wrote to memory of 1668	3328	msedge.exe	106
PID 3328 wrote to memory of 3736	3328	msedge.exe	107
PID 3328 wrote to memory of 3148	3328	msedge.exe	108
PID 3328 wrote to memory of 3148	3328	msedge.exe	108
PID 3328 wrote to memory of 3952	3328	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cfbd6fe7c2772ef2a1cbac0dcaec3c7a2934644defec651097b90831306c2287.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ff941c5c188,0x7ff941c5c194,0x7ff941c5c1a0
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,11075644184237189957,11100077175715751593,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,3286181953962241307,1446104889176622144,262144 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,1519811544678975224,1643773153678416686,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,14493862574578858674,3256430355424672956,2097152 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,2585861337356960526,5979478440389376371,2097152 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,12126348668615012348,11260482024013250389,2097152 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,16003352722578240413,12869271028345389933,2097152 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:2
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,1124061479268525899,4881875290782016212,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8456814112171516709,17866914318589729897,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,15070501185432776042,6011878231196815180,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,15070501185432776042,6011878231196815180,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,9547141842475896417,6440141165478933757,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,15115353684322403347,17038930445315141626,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,11176355816720653619,16325159471457103002,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3028,i,7499700603473482539,9479123300295784848,524288 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,7928209155173330581,8899001475858542465,262144 --field-trial-handle=2260,i,9857114760537777120,3252389497827279551,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2319b8f0d81195b458dc46af615571671446892ccee76cab02aa780cb757a154
MD5 0b88e01988da196bf2e9d12d86e00ab7
SHA1 0bdce9e2d12a0f9de5dfe5bf0be667eee73f7d39
SHA512 5620e451cf7914d515df234540fdb572df0fc88a8d1facdc88ce5a3f6b31d9b9ab88a4bf347fd8a8affe7a1b97428764078711269e025bcb06009581b23d293a
TLSH
T1C75192B908AB6451D77EEF7093DD22ABF63097F177937D03A6AAC574A7373009105044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f383.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f383.TMP
Size 3KB
SHA256 4734a5d1321a6e791ab7f36b80a98e124dd4935e909360a83e5b71442d724eb5
MD5 857656bd84677ef0e8d5de55d68d4f6d
SHA1 4c7f62b7c74bd364f776e45504a005d88b428ed2
SHA512 a7a8142799141647fa731efc822c116f869de75a73b9a3b6e8d1656dedf424766b9f51a68a4b4666f84b5ca124b475f3ac7cc4b51f671b0aebe36c33b4f90619
TLSH
T1C85191B908AB6451D77EEF7093DD22ABF63097F177937D03A6AAC574A7373009145044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dbdade7418266882920c6d0b21c8f3914a9bc12294a8a0f6f5207ebdc24ce1df
MD5 6fc04517b792a89180eb90393b9ff1dc
SHA1 fe72eaadf45f931305acdff8c52d2de040ec8291
SHA512 3f58238361ef6d18c19c1ddf39cd9589f7107ddbdb846f6fa4674006b00fc8eeece820d0b33ac7fb3ed8f0aac1d14a221e568056a6ead1c47bce22a6d1d7ab20
TLSH
T1AB317AF7C3D4867E890156F49B246E2BCE1D0A46422C3C5689E4EF1F93E68B4D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e62b16d1a1ac7fd31b3058eb494d414682674f066845d08bdafe3b49e4938914
MD5 8d0c2823f94392d80d4b88e2277c2638
SHA1 c6cf76d2429a0ecafa8766b2b24ffdd435ba0692
SHA512 47f509bc0b08a757015533ff7d7500d6f2c8ef03e808b9942245276f3254e2b896593d7e1f75fc0068e6418197bad57de7d1427a5346b8ba1e05bee47d43b7d3
SSDEEP 192:sxZ5RgWK/fssroIdpdXHW6+WNGYYBa/bIgrJ:sxZ5xK/fssrZFHbGfE9
TLSH
T1F71296116E38A57B8CCBD20DBB25BF53E6F9503261951E58AAFCCA1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9e171da01c2efb25b91307164293502b7f87a2b8675823de70a6bc374e363d4c
MD5 38bbcda7193befc847bfb13baaa5a2b5
SHA1 94f08c066cbfe3d9156d260d350a3a014c2526e3
SHA512 e03ad2d95dba01c7b3ea44b344cd540dd3996c293934054132484f15074ceff677ac818c21a9a080d2ba8e3b4c7bd78ed7b0e37ea52f5505738f03018fac4ae4
SSDEEP 192:sxZ5RgWK/fssMoIdpHXHW6+WNGYYBU/bIg5TJ:sxZ5xK/fssMZ3HbGfST
TLSH
T12B22A7126E38A97B8CCBE20DBB15BF53E6F9503251911E48A6FCCA1C05E76DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9a9f1e076edb2230583f31459a10b9454d8c354f15a54b64b0a7012d89a2d109
MD5 119459d7385af1d0f55d977dc9f93aea
SHA1 65ccb8df4ecd43da759d1590cb3738833e363c97
SHA512 ea89eb9504efc9ca0e8b3920d4103765ab8b8c952b42e9f8f6a11eb99c51163d83d22b3c169c884c0bc6cf86bb448cec98b9aa63def60995fc8fdec9cbd629ec
SSDEEP 192:sxZ5RgWK/fssMoIdpdXHW6+WNGYYBy/bIg5TJ:sxZ5xK/fssMZFHbGfMT
TLSH
T1D122A711AE38A97B8CCBE20DBB15BF53E6F9503251911E48A6FCCA1C05E76CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b6bae2b2646ddce79aed7fa998cd838d06613ae7e3049a97967488be4d5d6da1
MD5 dc4b7e0c6c6a82baf36933199196dfc8
SHA1 d6d02534c12bd3bf4c54428eee02757ccb1ded52
SHA512 fc08cde92682c7e45af1a4f396ff83d99215b50b86cf15b96a5e8992a2819306a1bd360db4a001c2c6c1f032bc015af93dd1adfe067acd90c23d3aa2e40961c8
SSDEEP 192:sxZ5RgWK/fsswoIdpdXHW6+WNGYYBa/bIg5pJ:sxZ5xK/fsswZFHbGfEd
TLSH
T15A22A611AE38A57B8CCBD20DBB55BF53E6F9503261911E58BAFC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ffd92b4080817a844e692458537640a75f673fe20cd2538200ae9834ff4a8bb5
MD5 34afb3e645a1906a3838d98060d5fa24
SHA1 e32746d180ad5978ae9fb5608dcdec7417c24d7c
SHA512 1185f219e73602da30bfa9c3552af886bd8d8d47c05fe2b4ce6bc1722093f62c326751b6a7055c57ca9e133356ccb1d9ba8fbe00e0abc91fca67d13d6f7ae621
SSDEEP 768:sJyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXrrop3lET:sJyYR7jWv3NpBu1ja/CL8OXYW
TLSH
T1A8C2E93B640DCB7E4FC01E9DDC5A6F9B3E9802C796548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 edafbc3fdba27a73deeb4bc3ae8323c1b4a752da0780898efe1763e3a0da7380
MD5 b256ac683971ad761761fa197b9161d8
SHA1 85ff0f79f611df7eeb709a66cabcafd484b08e3c
SHA512 154556a9c703b76bc8f31bd623c146c9f984e158c940e1f039de351e57960574d88e1d263b37da64b89aec6472861df2dc9344c91200096cfb0c3183537cb1a9
SSDEEP 96:KAkgKdaOiKMK7KkCEKTqKOJqKiIG9gvT9/K:mbf8nNr9gvT9/K
TLSH
T1BFC1FF5036BB065178BD259885B58B2B124232B77119F63BBFBC11B59E7EE040CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

100258d1-b034-464f-8c64-be34ec6cc8dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\100258d1-b034-464f-8c64-be34ec6cc8dc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e12bf388d9b4887d38ca07ee6aa128e5dca371c5134b7cc94bada38a3d2842e4
MD5 9dd87b266f77f102650f6910e78b17de
SHA1 9f2d2b0c893a85d37b57c2e1021af47d816ff9eb
SHA512 d7f1a120c238dd80e1d6f8cfe317f220455f8179bbb61bdbffec0639dc18997b1e5519d5eca0e08dce21b903cb2c631aeca79778cabbc6ae06bb7d7c706d0c51
SSDEEP 384:wiFiZcIHSsNt8TUNTUlIl45iGiC7QX5+DtH80gXml/w27O6R2Feo3/oE:LFQy4wg8zTskD9Qa/w27TRw3
TLSH
T1FEA27D725CA8D83B6EFADA95F5493113DEF840A7C6C5AB80E7DC5F2D009A59C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e2cb0cf3e138d385bb7e0afcadad0b0ea0d1b61545cd8ce9f473cfbf45d99625
MD5 5888adc2ba21c50669fcf89d18b4f9b1
SHA1 e1c3e60fb71838bb3a4fc4dc5d9e8d9aa5d98b30
SHA512 a354e37b335b320619d9376984e50c59911a56136863bfbf9cac7450122dcf759b40733eeb357a7e1633c9f37e7fa6a34b882922bd2889a4f658f6ad51afe6e5
SSDEEP 192:EONI6nnHGQmiUyVhQYcX5hQDP1fjzorLoaMc/4RU6:EONI6nCAQNX5+DtH80C/0U6
TLSH
T17802C934BCB87CBB8EF7AD45B48636139FA4216BE5952B80DAF85E1C00D765C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2008d20865932b56da87e66486fcd584ff69d7281fd6857c2e6ded86116426ff
MD5 70f07eb37525918ce3d8e5bf43a29cd3
SHA1 4c7a4ecd91dfc94c25090271d9db979af210a250
SHA512 f46a53702a54afc4aa565d2a9fd150ca2345cc49dc104f560e2984d21e1320419ffe444215402859aa15d6d1c833df4efb20c4b5a30345bf85b3a29d0f0f6d4c
SSDEEP 384:eZcIcsNT45iGiC7QX5+DtH80gXmI/w27O6R2Feo3/oE:ccvzTskD9Q3/w27TRw3
TLSH
T173828D7168B8AC375DFAD196B58635139EF89057D6C85F80E6EC6F3D00DEA98130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2b43036a52399a4bd6abfc1db3bf4788a053786577b6494af14954e071ba362c
MD5 af6020e0c3ad6dc551a654c1d6b420c0
SHA1 223691b7230651a32d4f65054e14061d66d52fa4
SHA512 1a3c779496701aadf9106bfada4d98269a7acee42d1ea6188f9a50c2171bd56276b0dc54d110388d27a87a765b930ed908b898ed43d393660a01cd700c99e8a7
SSDEEP 384:kZcIcsNTd5iRC7QX5+DtH80gXmI/w27O6R2Feo3/oE:Cc03skD9Q3/w27TRw3
TLSH
T1F6828E316CB8AC375DF6D196B58635139EF89057D6C85B80E5EC6F3D00DDA98130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8de06cf6555e6ffdc05ff1bae0fb93425f6f7d35dc97a84b7c9e710685feebe9
MD5 a709379c908341feaaf32015cc7840ad
SHA1 0836ef90ebc28b7434a7381390c1b1510c5c3112
SHA512 ffacddf86aebf12daf764cbff7f3f5cf84e11edb9c503b595c26257d03f346255bd1e7f042a5cb9fe0cc31a91d8577326ae77606e065c7bd22de0a20a0e5dfd7
SSDEEP 192:EONO6nnHHQmiUyChZYcX5hQDP1fjzorLogXXbKjg3/W/52U6:EONO6nJdZNX5+DtH80gXmY/w2U6
TLSH
T1D2121B31B8B8AC771EE3A595B48731139EA55127EA887FC0D6FC1E2C01DF69C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b191bef-1e94-48bc-a247-ca1bbac0e96b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7b191bef-1e94-48bc-a247-ca1bbac0e96b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c93996bd26af4e4cc962bb807d4324a9ed9fc1e1071c49a9a7d8ff050af63170
MD5 e64ad0e592623418caa52d9c1253aca9
SHA1 325cf78828cb143912c0c2733102d74b406e6a77
SHA512 d9b5f55c64744bf98ffe96d16c115f57eb38266a59c645e33de6934e98610a1c93b1e49603b844ed6d80754b8b4ed42267f434eec31b8e98e6aeb3ee1117d3aa
TLSH
T1EB41365CA6E9100CB3B77E56ABF6A86D487FB9372E0AD55D10110D8F0A23B41DC62B37
MD5 SHA1 SHA512 TLSH

Submit Download