2f8411ad7c175c762040019a514d32cdb3752eba32fd710711cffb66003d525d

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_2f8411ad7c175c762040019a514d32cdb3752eba32fd710711cffb66003d525d.html
Size 1.2MB
Sample260912-tfb6lsbp3x
SHA256 2f8411ad7c175c762040019a514d32cdb3752eba32fd710711cffb66003d525d
MD5 346c348a73e31a3a5aca3a7abcdf88f5
SHA1 b29c65046b990ec6c793c39e3ea1539c6bdeab8e
SHA512 85e64badb228b7bb6056d85cc02a903ab96deb0246a636e6a8c0423ffdd2095bc44e0c62934d6e5f556437cc475ef96b59551d47c704df03b90a3022d542c18c
SSDEEP 12288:ICeSXyMTNrjTEY0+kC6bhxs7jbrJTXwhKWW:ICRyyjT3kC6bhxsXJTXwhKWW
TLSH
T15145C7DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338243917794905"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{5879739D-1C00-447C-AFFD-31420DF77D27}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3784	msedge.exe
3784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 3056	4308	msedge.exe	85
PID 4308 wrote to memory of 3520	4308	msedge.exe	87
PID 4308 wrote to memory of 3412	4308	msedge.exe	88
PID 4308 wrote to memory of 1876	4308	msedge.exe	89
PID 4308 wrote to memory of 3520	4308	msedge.exe	87
PID 4308 wrote to memory of 3520	4308	msedge.exe	87
PID 4308 wrote to memory of 1876	4308	msedge.exe	89
PID 4308 wrote to memory of 944	4308	msedge.exe	90
PID 4308 wrote to memory of 2540	4308	msedge.exe	91
PID 4308 wrote to memory of 944	4308	msedge.exe	90
PID 4308 wrote to memory of 944	4308	msedge.exe	90
PID 4308 wrote to memory of 2540	4308	msedge.exe	91
PID 4308 wrote to memory of 2540	4308	msedge.exe	91
PID 4308 wrote to memory of 4540	4308	msedge.exe	92
PID 4308 wrote to memory of 4540	4308	msedge.exe	92
PID 4308 wrote to memory of 4540	4308	msedge.exe	92
PID 4308 wrote to memory of 4924	4308	msedge.exe	93
PID 4308 wrote to memory of 4924	4308	msedge.exe	93
PID 4308 wrote to memory of 4924	4308	msedge.exe	93
PID 4308 wrote to memory of 836	4308	msedge.exe	94
PID 4308 wrote to memory of 836	4308	msedge.exe	94
PID 4308 wrote to memory of 836	4308	msedge.exe	94
PID 4308 wrote to memory of 3180	4308	msedge.exe	98
PID 4308 wrote to memory of 3180	4308	msedge.exe	98
PID 4308 wrote to memory of 4792	4308	msedge.exe	99
PID 4308 wrote to memory of 4792	4308	msedge.exe	99
PID 4308 wrote to memory of 3068	4308	msedge.exe	101
PID 4308 wrote to memory of 4520	4308	msedge.exe	106
PID 4308 wrote to memory of 4568	4308	msedge.exe	107
PID 4308 wrote to memory of 3964	4308	msedge.exe	108
PID 4308 wrote to memory of 812	4308	msedge.exe	109
PID 4308 wrote to memory of 812	4308	msedge.exe	109
PID 4308 wrote to memory of 3784	4308	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_2f8411ad7c175c762040019a514d32cdb3752eba32fd710711cffb66003d525d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb8ef9c188,0x7ffb8ef9c194,0x7ffb8ef9c1a0
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,14049657151451725400,14304574869264766029,262144 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:2
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,2180594095036015490,2158184421392580754,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,5865663379058605429,5376532755465014062,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,2604710709672371896,13285275727334918428,2097152 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,16458657992946713180,4494645168517021634,2097152 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,13294359596017660703,6182442425134861583,2097152 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,9713570599845092741,3608649083921933332,2097152 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:2
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3708,i,10667209112218518975,14731194911339253096,2097152 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,7141414271309453010,16529480930214019276,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,11036488634694349135,2838421600578613731,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,17679261615739880927,8868356424209307065,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,17679261615739880927,8868356424209307065,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,15870595991027805004,3116992626796319040,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,2632673233802239972,5579890172563455244,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,3020235842236013709,11993774407098057860,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,316730966353934422,15169673547582443024,524288 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6304,i,5328115630742853092,17183163775854455889,262144 --field-trial-handle=3128,i,4463411645234792521,15996579222092800253,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3784

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b620f8263915e049fdad7d223a36097521b405e220e24c3330113274b4f2156a
MD5 3b2741365a3a52ccad28b9c4ac22b577
SHA1 0fd7a1d8f942d2c53fad79aecf79ae6571114a98
SHA512 d3edf00aa419052a02bab463945383b7645f3a48d0055abfcdde786377f14383823ce77ee6f0e0f86fb374516bb163c29b6ca2fb35266f8668e6377a01d9dbb0
TLSH
T1EE6193D2C4E069EDFBFC43BD65D53B87B73895C2768B5D2301A4D4BA44063D9E242074
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591284.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591284.TMP
Size 3KB
SHA256 ed2d89893d0e88cd62d2df8be962f7f8cf11e9f5426899ac1298f4cf50459288
MD5 ef58c896459e8cf2b141fba79cd9ae07
SHA1 7f2929ab1fb8d514d57b015e0ce22ba7be2775f3
SHA512 0cad04fdf53e13f5c4ab802b6900dcaa734c40b8ad4b787f85fefa8147b2c898b3cb800db7922cb8f7efc91e65e6a31057072fdccd382a3f48af745a175ee6a3
TLSH
T1C06194D2C4E069EDFBFC43BDA6D53B87B73895C2768B5D2300A8D4BA44063D9E682074
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2a6b20761d5dcbd0b6b0168342ac011e2884b2eece49ec5c7e329eeecea1c7cf
MD5 0c3d5001f8101bad8224209f759de660
SHA1 6c561e1d571659b39e777218488df58d69d9f94a
SHA512 e4584327a440a1d00688a665947bf73bcc005feacaa9282e655dd0a30ba0df2e0612848d0c2a9b55d35291e90a89e10d44a74eabe5f6a949372b8aa80d7e5a2c
TLSH
T159316DF7C3D4867EC91116F05A24AE2BCD2D0A57522C3C1589E4EF6FA3E24B5D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e529f04ce823278bdaef1f20b0b42de2d2352d1e5d3ffd2f461170947f025bd3
MD5 f5ec9995040570eb8ee6c72a6ce6b796
SHA1 b51bddc4fa4120db422ab7355164442169a3c15d
SHA512 ce817683731e1d7e8998eca385e6f45e07dd3f3802bc37c7ee4940a6beb98abbb61e8ffa3b494e7328c95cca041d34f9b81edde9e317f219efd1a996509a2da8
SSDEEP 192:sxZsZR1WJ/fgsckIdpdpHW6+WNGYYBaslIgrJ:sxZsZ6J/fgsc93HbGf79
TLSH
T1CD12A8116E28A57B8CCBE20DBB55BF53E6F9543261D41E58EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e3d95e6ac255d86c5f442e0c86ddf026d3b10e8edab2651bb4b9ca1409a99580
MD5 90579a0be4ea6f6295bd1978d189d20b
SHA1 ad82de81da209a9a482bab046176907cb8af5435
SHA512 d5b424fea9bc30fadf8beae86fde7af0e5546d5efada24e9cba1058f650824d7ed9db4d6a23abb700aaabd5eb23ebcd9b8377de6624c107806e6f877302a05d1
SSDEEP 192:sxZsZR1WJ/fgs+kIdpHpHW6+WNGYYBfslIg5VJ:sxZsZ6J/fgs+9JHbGfAh
TLSH
T12722B8116E28A97B8CCBE20DBB55FF53E6F9543251D41E44AAFCCA1C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 babfe7f5e81ec5cf9404332da1e419e0eac3c3c6745b6f1c7506be62d1c3ed6d
MD5 1bdd925e5192a67534cabc316d08c600
SHA1 1f3165ae6f38118da95e2315cafccccc01cce8c8
SHA512 4ea1d3bbbd9d0ce3d256989d7408a1db597db64d29a9ed5bee2aa441752cd53ee18e11f5e3a2dd8ad882ef21fedb6203882ad9157cc1bf17d17b8625389534be
SSDEEP 192:sxZsZR1WJ/fgsykIdpdpHW6+WNGYYBaslIg5HJ:sxZsZ6J/fgsy93HbGf7f
TLSH
T16322B8116E28A57B8CCBE20DBB55BF53E6F9543251D41E58EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 06185424ecc1662978525e68bb089f44e0f315eb3ca10dc52a75a9b633f58bf0
MD5 4104f126633961acdb615baf79908c60
SHA1 3c2a4f7c76c8d2f27940ee693e3577809d95914d
SHA512 17ed684612c7d6c0ebb1d5e89b7ded8c01805a40f5402a6184982bd525e03a2a34563ddd34765045bf13ab946dabf099b986359de0b9aaebf95716f3685fed0d
SSDEEP 192:sxZsZR1WJ/fgs+kIdpdpHW6+WNGYYBLslIg5VJ:sxZsZ6J/fgs+93HbGfsh
TLSH
T15322A7116E28A97B8CCBE20DBB55BF53E6F9543251D41E54AAFCCA1C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fc0891abbac8de91f8adbf1f0c1bbf7bf924dc6ac4439fb90964986bec755055
MD5 06c02d407adc6d6dab477f7ca04f0374
SHA1 a9e6abacb3408a103ef9aef17850adc2e10a496b
SHA512 dcd311234402454817142501d2d9ec50b7e61356976935fbe483b307e445f9431f6228a1e81458000cf367e9532b88995dfc13bfa99e1c2d414fa221215ac37e
SSDEEP 768:YpyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXLropg23:YpyYR7jWv3NpBu1ja/CL8OX47
TLSH
T1C3C2E93B640DCB7E4FC01A9DDC5A6FDB7E9802C796548D4047FA984C02C77EAA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2f9ad1f057e7f8cf8f3ef35e55c8f71012580b8f828e0b46573e631681e1eac4
MD5 4bd185e4ae89aefea1fac68594c890e2
SHA1 7dc1d62f2be3645586f0b39eecb88da265e3be26
SHA512 e41330638e8b4fb6345d896af66815434737d6873d21b517caf630619b7aee57b50b95cff435ee2dd501618e0b9fb760373c7f3500f3d120a83578d4e399b678
SSDEEP 96:KwhQwKpq+nvKFxvV1xQRAsyJxKa4yPx+Hf4JgCoK7qq:ITnvKFxvV1+RAFJL4yPoHf4Jhp
TLSH
T18891364131B7025039FE268C85A4972F428275737119EA2B7FFC61B99E6EE081CFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f229f9b99fc6286bc94135b39b8544c58d1cc928b1746797690e78eade8a54ce
MD5 52be9a811f539661c0a8d64679b8478a
SHA1 50c9ae824e6a4892410f2b627ec91cb9000aba1a
SHA512 2aaa4c41d9fa003775573062462c4e332807774e77300e2746dc80bbc543a32fc88774507be676934e3f1ba28bdfda0503f03a1b9a31ff071ef9bcb3033cbab9
SSDEEP 384:ziFiZcI0PsNo8TUNTUlIlKaiYI2QX5+DtT863IAXz/M7O6R2FeoEoc:eFQYVwgBo9kDLjz/M7TRbz
TLSH
T102A26D335CA8DD7B6EFB9945F44A3113DFF550A7C5C4AA80E6DC9F2D009B5A8130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 be7881a67b613645d5c13752862406487a7f8bac3c9d348c06ad7b3fd2140926
MD5 811ff62773d915538e8c244276607279
SHA1 58041fed601bbf1fa6c1520b336ce75ba2ee4c44
SHA512 8e21536e759d313c73ae6abe01b0e6910c961a3a9c10e963979eb5c7e20b97fe437bba5dcc6a6b959f5df4cdf4760c0b28f6efbb7a7ef772fcc83c13bb9419de
SSDEEP 384:OZcINsN4DaiDI2QX5+DtT863IAXI/M7O6R2FeoEoc:sNCr9kDLjI/M7TRbz
TLSH
T1A5828F316CB8AC775EFBE055B44B31179FB85463D6C85B80D9ECAF2D009EA68130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf84ff263613f6f2989250cd8e7b88d52f12ec47f6e71267c4f9d3a11a51fe2e
MD5 826aab6ad78a0c546896316974b93e2a
SHA1 5af331830dd5d132b89571cfd2a773b5271700c3
SHA512 1dca06459d295b49bc5d9e887009593a92ea58fc42ea63d108da6bb7460f4de66d2da7917c47fe84609bdfb324297002423c06a19cd0fa46ae43041951e7b562
SSDEEP 192:EONg6nnHGQmiUyNUQYcX5hQDP1Djzor63I3cMc5IF+8U6:EONg6nCJQNX5+DtT863IYiU6
TLSH
T18502DA34BCA87C6B8AF7AD45B48633139FA5217BE5946B80DAEC5E1D00D765C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4acb818ca80ba7fa6fab2442bd4589adb6f7c7d4d315b2e609500e0bb6c663a8
MD5 9cb7fc656da10b141207f5e02495e123
SHA1 852456c8ed51d4b828208fb7368575505b29ca88
SHA512 6ae0fc373890f5147839bd91ee6702c44924eab572f6773890a0c7d118866171fd24bae3ac35a21d7c1a36bd58f3eeb6c213404b9dbcb947f69fddfa94a27b67
SSDEEP 384:LZcINsN4KaiYI2QX5+DtT863IAXI/M7O6R2FeoEoc:TNLo9kDLjI/M7TRbz
TLSH
T17E828F316CB8AC775EFBE455B44A31179FF95067D6C85B80D9ECAF2D009AA68130AC33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3a923737cff1a0b8fd77abec50f9c4cbbeb9b7edfaea38c0989a7d68e9f1c938
MD5 c773f88252898170c67789c501a23fbe
SHA1 335fed6e3731348feca14e441e201dea3353fdbb
SHA512 7e84df2d06cad484efd1c413847f22ae1bed508c532941bb3aff8155f8009652a38dad317256d9533cfcf1b3008cfb396d9b64e59461a6c06edfac6779ab2546
SSDEEP 192:EON56nnH7QmiUybUiYcX5hQDP1Djzor63I3wXkeFg35b/5MU6:EON56nNdiNX5+DtT863IAXi/MU6
TLSH
T138120C35B8A8BC6B5EE3A895B48731139F651167D6887B80D6EC2E2C00DF66C530AD33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51449ee6-0e38-4efd-9fcb-161cd6d0375a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\51449ee6-0e38-4efd-9fcb-161cd6d0375a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 275cf9a027f5ad24d2adf999dead1f509616cd55dcdee708a42255c5cea81a28
MD5 159e00dbf8d054533efbf922bf4d5c92
SHA1 c5b0d0efe017734ecd28a7c175327647d19e2fa3
SHA512 c7752a6c1b825627b4fd87ebe3c33a6b4d7bfc67a6640b3e5b111c1daf708637b3dcfbc5024ab94d9daf10c936e1a34c40d5f431fd26cdcc3ad4769f265ac72e
TLSH
T13341075CA6FA1148B3B76F1A9BFAA82D847BBC772E4AD45E10110D4F0662B40C871733
MD5 SHA1 SHA512 TLSH

Submit Download