ea204ffab53e96d94356c2ab25c1bce095f0b45a31acfe972ec3da881e3a0617

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ea204ffab53e96d94356c2ab25c1bce095f0b45a31acfe972ec3da881e3a0617.html
Size 111KB
Sample260912-kl88vsselc
SHA256 ea204ffab53e96d94356c2ab25c1bce095f0b45a31acfe972ec3da881e3a0617
MD5 f5b9efb314d2c432fc1ddc42e0efcfc4
SHA1 a77940fac4a7cf40cf3b2dbbf868cfdaf507d623
SHA512 4b4d6e439fd2370d24fef414b019cb760f882990dc8ab4728103d0a7b615501232714633056fb3fe886a094285ee20a879b15ba31a3c70c150db00963ebb4afd
SSDEEP 1536:ZmxmYn+htrxdRMXu8xsM27olNQfTtLNocxH/2YbEaoMbEaoyM6gR7b4M:IUIQ9NxeYdoMdoyM6EMM
TLSH
T16CB3B58711204CFAEFA40DB3419F086B3D2C1437A84791B9E3FD8F972B56D6E034A669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2100	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338179684170446"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{F81E0079-773D-49A4-ABC9-245EEA200D55}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe
4008	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4008 wrote to memory of 4452	4008	msedge.exe	86
PID 4008 wrote to memory of 2100	4008	msedge.exe	87
PID 4008 wrote to memory of 1708	4008	msedge.exe	88
PID 4008 wrote to memory of 1708	4008	msedge.exe	88
PID 4008 wrote to memory of 1708	4008	msedge.exe	88
PID 4008 wrote to memory of 3856	4008	msedge.exe	89
PID 4008 wrote to memory of 3856	4008	msedge.exe	89
PID 4008 wrote to memory of 4168	4008	msedge.exe	91
PID 4008 wrote to memory of 4168	4008	msedge.exe	91
PID 4008 wrote to memory of 3024	4008	msedge.exe	92
PID 4008 wrote to memory of 4168	4008	msedge.exe	91
PID 4008 wrote to memory of 3024	4008	msedge.exe	92
PID 4008 wrote to memory of 3024	4008	msedge.exe	92
PID 4008 wrote to memory of 3848	4008	msedge.exe	93
PID 4008 wrote to memory of 3848	4008	msedge.exe	93
PID 4008 wrote to memory of 3848	4008	msedge.exe	93
PID 4008 wrote to memory of 1756	4008	msedge.exe	94
PID 4008 wrote to memory of 1756	4008	msedge.exe	94
PID 4008 wrote to memory of 1756	4008	msedge.exe	94
PID 4008 wrote to memory of 1636	4008	msedge.exe	98
PID 4008 wrote to memory of 728	4008	msedge.exe	99
PID 4008 wrote to memory of 1636	4008	msedge.exe	98
PID 4008 wrote to memory of 728	4008	msedge.exe	99
PID 4008 wrote to memory of 2096	4008	msedge.exe	101
PID 4008 wrote to memory of 1032	4008	msedge.exe	106
PID 4008 wrote to memory of 748	4008	msedge.exe	107
PID 4008 wrote to memory of 812	4008	msedge.exe	108
PID 4008 wrote to memory of 2620	4008	msedge.exe	109
PID 4008 wrote to memory of 2620	4008	msedge.exe	109
PID 4008 wrote to memory of 4552	4008	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ea204ffab53e96d94356c2ab25c1bce095f0b45a31acfe972ec3da881e3a0617.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd68fcc188,0x7ffd68fcc194,0x7ffd68fcc1a0
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,15422606425239645751,2471981256013430221,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,9331587943382616315,4223962161651813945,262144 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,6891236148524465023,14140852108616153467,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,11636740382572188506,16332362294230570440,2097152 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,4243801762756781795,11416042945865453307,2097152 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,3174704147973060764,7571896448826601938,2097152 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,10751154211938852931,16853192351509707735,2097152 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,17083004256029147157,14209358297087419341,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,11577419514245746190,932892477639506309,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,12190189719967058117,12173712930427687438,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,12190189719967058117,12173712930427687438,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,8978985330228402665,4933794712462041257,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,5449785861167633269,4765676347909519769,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,14958230488299707771,5866833129226032960,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,5248635010393506393,11653055562423358401,524288 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4964,i,14876058478438339672,4472455415036429195,262144 --field-trial-handle=2168,i,8003228974031732960,14310169170230367561,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d0b45c68a6c44c2ba411cd5f6724d244a8c5e5714acab23429fd42da226cc0ab
MD5 c3cad08604b0720c93d260039d890c14
SHA1 59b8cdb5f0e5a25ca177c8d1a40aaddbe057db6d
SHA512 f7ccfc65c4363dd690f6a7e1a6bb16ea12bdff0842951536fc4dfb6c1d9ffd002b110628ee8c833c0d93db12b83da65ae316a1f14c7703918e7fcf7e2219e44a
TLSH
T1F76181C198A14095FBF744F392E9F08B37F446A38FB32DB19354D978D70E755A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fe7f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fe7f.TMP
Size 3KB
SHA256 8d0372dd5b7d64db21ddeeee9e4798cb566086705fef7949f46d7d309c9e9752
MD5 ac036182e8c04fb63698978b15cd2568
SHA1 7cca8b175bb7e6a60cd35d97ed4791473fd6cdab
SHA512 c96e24c5fcef28d457f25ce759575d218f400b05259da86e99a8f248f38f22cf267f856fd4d41f37949e29298aa540367ebad94059b1cfb58cb0e94b15c90e2d
TLSH
T1AE6181C198A14095FBF744F392E5F08B37F44AA38FB32DB19358D978DB0E745A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3345359fcd53ff918a9384d0996ea715981dfeabe3ced044d8f93b55d4090b0e
MD5 f120c71a390058e2625a0d67a310e48a
SHA1 4170a20d5d8b526b95dec1dd0a2477e1f9a62d08
SHA512 85f7eebf6bdfab0128067332270da260aec6a16a8de102a6e89555ba45f2e73df75ebe460ba8c7ae9e369663d5dc9563b5498c46dae81070c2d2ce49b070f231
TLSH
T1934148F7C7D8877EC90156F09B286E1ACE2C0A56422C3D16C9E4AF1F67E28B4D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2409546b4cf250a15972672767236d2ef37d0e066dec943f1abbbeb3817a427c
MD5 655e5e52e454edad9e3dead6985c0b6c
SHA1 b21dfd63b2afffc5f53076b715f28a30d6c6e48f
SHA512 3078bd235ccf1ccc1087f0a6fb482c65fc24cc732a3734f722ebb3d4cc9bd94e2c49e9a454264abc77313e0814458403921913b322c67ce3a2ad1fa43b4ed680
SSDEEP 192:sxZcRPWp/fusF6HgIdpdaHW6+WNGY3RVtIgrJ:sxZcIp/fusF6HhYHbGO9
TLSH
T15E12B751AE28A53B8CCBE21DBA15BF13E6F9503251D51E58EBFC861C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5efa5e5dcbd0fd455cb3697e9549ccc9d2a0f1a8b6f0b2748e286e8885f10383
MD5 497517211dc1a795db7d8aa9a391d8a1
SHA1 3bf3dc5e9e64f5a8d335a37db4a651357affc471
SHA512 3436ef5361ab6e4a7e9715c49de99cf2bd09b54578eccb290e5bbe75630558e9ac13656b7486e718bb35e8d8516037f33fe30b715565b3a5fb41c649287c32c4
SSDEEP 192:sxZcRPWp/fuse6jgIdpdaHW6+WNGY3FVtIg5tJ:sxZcIp/fuse6jhYHbG8B
TLSH
T1AB22A751AE28697B8CCBE21DBB15BF13E6F9503251D51E58E7FC8A1C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 67aa6c84dd4937bbfb0ae501dc6b430169d56904c0ad92466874aa5f5fac399c
MD5 71be9b11e207cef0a08734d64da0b3fd
SHA1 3b3f0cb87c7c42389f49244f15423a6cb7939f16
SHA512 8480d38bacb08f712fc596b42ca175181f587477fde454d6b315ca22facde87cbbdfcb80dad7123b4dd2fbe7af08eca2de179371d0c267a1b2d2255bf62f8fea
SSDEEP 192:sxZcRPWp/fuse6HgIdpdaHW6+WNGY3RVtIg5PJ:sxZcIp/fuse6HhYHbGO/
TLSH
T1D022B652AE28A57B8CCBE21DBB15BF13E6F9503251D51E58EBFC861C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 685029f381ec4b2cf6312f43499dcb2ae9649239165092036464b1510b3b1d0a
MD5 6589a9350b9b13720b426b0a01a2668b
SHA1 2fd0b66c2f392eb61a533e8671c5174ae1b72ee7
SHA512 9a0275f80aa19cbac272c28d80d1dd74eccb935f7facd0c8fa422f60acf10dc52db15a072870693a6fc052b2b21f0e5e88d3571c0ad09a9a12fa32026ce4f48a
SSDEEP 192:sxZcRPWp/fuse6jgIdpHaHW6+WNGY3XVtIg5tJ:sxZcIp/fuse6jh6HbGuB
TLSH
T1B922B852AE28697B8CCBE21DBB15BF13E6F9503251D11E58E7FC8A1C05E76CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 43c6ca5662a49811957e7c613cacc8c0df49a51a7246141efb77d5dd5be5d78b
MD5 9cc20b5ca497d3d23e2954f339f55aca
SHA1 e7d2135f69e70d16d4235012a8e7241e937ee8cc
SHA512 b24564c4cb90e037fe98677c78022fb388e5bd59c51770b910322a713ea9ede86df936e6ec982b4898140cf3ded90bec9a910a0deabba22e253d771a76287d83
SSDEEP 768:FD30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72+rolZMQ:FD30AbSWvS2l9u1jaLmLZ12VD
TLSH
T10EC2DB3B640CCB7E4FC05A9DDC6A6F9B6E9C02C796544D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6fe67db70f3b890ddce96bd88a06e0fb44822314b439825b07557a8304790b00
MD5 ad7f80428c060f741b7dfcd999b70a03
SHA1 0b8eb71a89d83925e2af5cf89a8647ee109467fa
SHA512 a872319a6e68a206fac48fb9d20941a459c52245fc370667a58fd695d8f79180bc25f44131ca5f59e56fdc61b57d3ea3a9f34a8dd8e47f5e8e946a468dad6a32
SSDEEP 384:sZcIesNmPL522c+puKp09iX5FCtpusa+VY7d7Ubo5:6ex522trwa8uhgi6i
TLSH
T1C9829F329DB86C7B48F7D251F54736139EB880A796D82F54CBEC5B1D04DA2D8030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 44dd084bc8b38199130fd8ae503e9138ac1eac6f7c2c688768ece7ce0ec3e39f
MD5 b21df55f60f132bfa0eb1b4ad225f989
SHA1 220babe1fc944171ef6766b8c866c0f32166e75f
SHA512 8c424199d197f0e8d0ca5dd5764e87b274126132a2e32d71cd9f5a9c1b864f30b79e941846c0bc54605d27bb221417cc147933710e4e5941281f7d8b42d24f6e
SSDEEP 384:yqZcIfksNmmL522c+puKp09iX5FCt0usa+VY7d7Ubo5:l8c522trwaHuhgi6i
TLSH
T11092AF32ADB86C7B88F7E251F64736139EB8516796C82E54C7EC9B1D04DA2D80307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 18dae499357d92d41aa4361f31af252fc250fd8ee2e301b75a2391f036ef59d2
MD5 65f935132086b4c93ec5062bc84c2639
SHA1 11601221e8ff7e6a858887f742b54f629fd8ba79
SHA512 d615d734d66fc0017f244b6e93c00ab2c89ea06c02369a1e3c38574e4af90fed91203ef30da92a39e4cb69c82c0d535fa49da2b39c9148dfa2431fe6d8a9c1c2
SSDEEP 96:gqONk0QsjpfuMVwptaL5ih/cIPURHl8h4otop53iCDtBIPuva6zx8X5FxXxPYvPT:LONg6AmwprQmiUyZz6siX5FCYJi97U6
TLSH
T16D020A35BC686C7B8DF3AE55B04737139FA5116BEAA02F84CAE81B2C01D764C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 cfb05157632673430dbe270d41f17b8ba8aa777ec688a7da1cb7877eeb2fe746
MD5 bf0e8261192cf490e097ea4d390350ce
SHA1 0fec5438534238992c609dcb887b124a9a621959
SHA512 5d2c97b83b34f57272939a23ec8c118b4646417e146bce4b2d1fcb48591d18a624316c19db3bbb959bdea21ea800d3010befa4005a5fa76c4cfdac7f138b92c3
SSDEEP 384:ksNmC/L522c+pu2p09iX5FCt0usa+VY7d7UV:kQ522tLwaLuhgiU
TLSH
T1F0626D32A9786C3B8DE39661F50732139EB441A796C83F94DBED5F1C05DA2DC5307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b30a88d262a47655be92746a0d3f78d2225b5c00557b087dd2d1e444e92824b7
MD5 3d1f1d35d99372dd50e35a4c598f0c0d
SHA1 cfa075c400522481f449ce4470f8d1bb04dd5dc7
SHA512 dfaed79b2a76dc090aa38ddd2ad85e6e13ea79559101ef3087c6b356371964f21621f836f1a46d301aa7c55b28ee0c4ec874424a05cb441ed52f7d17453018ae
SSDEEP 384:LZcIesNmmL522c+puKp09iX5FCtpusa+VY7d7Ubo5:Tec522trwa8uhgi6i
TLSH
T119829F329DB86C7B48F7E251F54736139EB880A796DC2E54C7EC5B1D04D92D8030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4b73e7dc421204f12b518a5b4ecf62000fc449d5f2b69c1101bc67c7933f68db
MD5 ac76668d0d4835d0bd6639be6da17af2
SHA1 36a4d833c060e289885bec6affa5077a060776c7
SHA512 3fb6a097fb53b93ecfb49f52821da48136a306f2a35cee61b09676e8a70c11d1c3e6c4b69253682b6cec1fc0d1ea27fe9f66b3e03dfb07277a5692432e609b76
SSDEEP 192:LON/6Amwp/QmiUy1zUsiX5FCt5eHplRU/DU6:LON/6ipBgUsiX5FCt2uU6
TLSH
T1A7122B36E8B87C7B4DD3A560F04735139EA44267DB887F94DAEC2B2C05DB598530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cc0bfbc-0d62-467a-8a44-c08c438730b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1cc0bfbc-0d62-467a-8a44-c08c438730b4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 534ee8c4b7ae0e8dc08105806f52153e3202010f6acddc8f6c038a0f903b2a73
MD5 3be4fe32e02eca5b816d3ff1be6cbd72
SHA1 b70cf0e880cac55183ac256e11e004a9db87ebee
SHA512 4be789b57985ab146f286e06d6a42b766b8d9070e8a74ecc9bd71114d1482f8920dd7785ac250f45073b927cfa29fd06f001b1dfaf38606f1f146cec8c89fc75
TLSH
T18D41F75CA6E91148B3B77E5A9BF6686D847E78772E07C45D00110D4F0A66B40D972733
MD5 SHA1 SHA512 TLSH

Submit Download