023f298642b818b43118df8ce5206c779adc755914501166e0a40a5588b0f74a

Analysis

max time kernel
148s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_023f298642b818b43118df8ce5206c779adc755914501166e0a40a5588b0f74a.html
Size 134KB
Sample260912-klgtlsvvht
SHA256 023f298642b818b43118df8ce5206c779adc755914501166e0a40a5588b0f74a
MD5 4bea12c9d92ff5074dcf558eeb6c13ec
SHA1 4c6df42e78cb840c483b3fe6138137cb3fd36ad3
SHA512 bcede4e95916b655783eef1bf0e8a841ccb9329f8c63d505b56e5a7d078402c5d060022669f0c268d6e704552b3f439287d62ada26c46d131e8f1626d1d97cb5
SSDEEP 3072:WlNQkNom01n9edoFdoxfTE7csXSEVSSZy:WfQkN/01n9edoFdoaZy
TLSH
T1E9D394A323604CF5EFFC19B309D6086F382D1437980260B8E3ED8E969FB795D0749999
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338179154520081"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{C0ED7E12-2061-4454-BC6C-22A160FCEDAA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1248 wrote to memory of 4724	1248	msedge.exe	87
PID 1248 wrote to memory of 2628	1248	msedge.exe	90
PID 1248 wrote to memory of 3656	1248	msedge.exe	91
PID 1248 wrote to memory of 2152	1248	msedge.exe	92
PID 1248 wrote to memory of 2628	1248	msedge.exe	90
PID 1248 wrote to memory of 2628	1248	msedge.exe	90
PID 1248 wrote to memory of 2152	1248	msedge.exe	92
PID 1248 wrote to memory of 2216	1248	msedge.exe	93
PID 1248 wrote to memory of 2216	1248	msedge.exe	93
PID 1248 wrote to memory of 2216	1248	msedge.exe	93
PID 1248 wrote to memory of 992	1248	msedge.exe	94
PID 1248 wrote to memory of 992	1248	msedge.exe	94
PID 1248 wrote to memory of 992	1248	msedge.exe	94
PID 1248 wrote to memory of 4712	1248	msedge.exe	95
PID 1248 wrote to memory of 1544	1248	msedge.exe	96
PID 1248 wrote to memory of 4712	1248	msedge.exe	95
PID 1248 wrote to memory of 4712	1248	msedge.exe	95
PID 1248 wrote to memory of 1544	1248	msedge.exe	96
PID 1248 wrote to memory of 1544	1248	msedge.exe	96
PID 1248 wrote to memory of 4796	1248	msedge.exe	99
PID 1248 wrote to memory of 648	1248	msedge.exe	100
PID 1248 wrote to memory of 4796	1248	msedge.exe	99
PID 1248 wrote to memory of 648	1248	msedge.exe	100
PID 1248 wrote to memory of 2496	1248	msedge.exe	102
PID 1248 wrote to memory of 216	1248	msedge.exe	109
PID 1248 wrote to memory of 5000	1248	msedge.exe	110
PID 1248 wrote to memory of 1792	1248	msedge.exe	111
PID 1248 wrote to memory of 4604	1248	msedge.exe	112
PID 1248 wrote to memory of 4604	1248	msedge.exe	112
PID 1248 wrote to memory of 1628	1248	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_023f298642b818b43118df8ce5206c779adc755914501166e0a40a5588b0f74a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb75ffc188,0x7ffb75ffc194,0x7ffb75ffc1a0
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,17427677727174563645,15816706735803391239,262144 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,4834943408702069416,841088122265109409,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,783514199449092960,6037903202155240371,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=3204 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,10757931739144689970,196456234599728982,2097152 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,4976089366695289558,947568838841252321,2097152 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,14732824680781084808,17774050064956625471,2097152 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,7974529946634742287,7264227565325785145,2097152 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9154579755671368170,17675659144956213704,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,1778726918222234645,831680667679674497,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7926277269956706033,5766172178291854471,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7926277269956706033,5766172178291854471,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,10591580890136227084,18032345983446159412,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,7279740704481129289,8845038167793417466,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,15479431476228328706,17969918928618252536,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,54876642011250742,11245884351004630380,524288 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,2892374331382695804,7729625876313740824,262144 --field-trial-handle=2772,i,12424479455762577962,1667435673911337480,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6eef49947febe22fe27bf48094af4e6a9d1eadf804bc0c0178db762a65a3367a
MD5 0dee5dea4222e082c3c6543e9b4a6cf8
SHA1 7570237817d1eee82ad8140096d101747ef18a46
SHA512 bc2e30e0b28dea0f49e65aa8c462088e30c8100d684ff566fc114b5e791301f02cf30ca2b716c9f506c3ed33d6ddc4beb59e49c19d8543dcb3790ae1b88a660b
TLSH
T1B0613AC65113C2DEDB5982B587D921863EBCD6B8A2C3CD9101ABF83B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bc17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bc17.TMP
Size 3KB
SHA256 c1a63cac3e3af23270364c797f2ced126369775873553ec52f4b2de4529a6a6a
MD5 9427fa7a075186559dd0387a42cd324b
SHA1 4096d4ab75e8bd63e2bab1a19de4350d90fc4c66
SHA512 e21592ddc7bedff70ada592fed83eaf38ccf78cd938b984464fa63a2e9a277b07ec5e33634891cd442dabc1556b3f2e0b0771ffedb5c5e5b51cbca4eeac9a033
TLSH
T1FB613BC25513C2DEDB5982B587D9218B3EBCD6B8A6C3CD9201ABF87B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ef87c99321a09feebc36283f48a7e598a206654dde60a2ff976bc19e7eb65a98
MD5 8126190512ac5996706dc1d74756f95a
SHA1 e2fb0aad53bd788cb84a282fed733676b4ca54e2
SHA512 5d25509b021b429e66d5cdbe8084bb717dffa5d73e72fef0d84ca272a8aa6243c9c098a67eb67f8511e6c07a4f37935ccbaa3fa53fb42f8944894dc15632c7ee
TLSH
T104416CB7C3E4477EC90156F05B24AE2ADD2D0A56522C3C1689F4AF1F63F25B4E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e02fb628648b4f36ec86a2bcd848d31e64842272bf6ad8c8468925482a9e9d5b
MD5 b7d03db01cb6027ac9298d71ce16145c
SHA1 33a15bec2fbc8c442ca60d38d204f168d96732e8
SHA512 8a3c8fe89388408d0e45a49a531a91b1d2fff9a50fc5040f90faf5d65a3c4c667b762d92da8757e56298796c07aae228a5227485f8d9a1422994ce8642cd1c8d
SSDEEP 192:sxZTRUW+/fDsGPQyIdpdAHW6+WNGYapYKZefIgrJ:sxZTF+/fDsuAWHbGO9
TLSH
T1D312A752AE28A97B8CCBD21DBB257F53E6F95032A1D51E48E7FC851C04E66DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ed0e607b861fbc9898fe5e4b9ec81badad2f611cf9cbabe6f9555e7ee00deddb
MD5 c87cb505e26636bc17dbc8e768399cfb
SHA1 fdcf5b23dc3d41e8b3f00c254b4e444d1ab6862a
SHA512 c50ebe40438538c548b5cc4996b17e2d6c677687093883efc3db228e34d33af8d8e2c2082caf9bdf6dc7e82c57099facea6ac0a0635da59d3b7db949de2a3923
SSDEEP 192:sxZTRUW+/fDs8fQyIdpHAHW6+WNGYapHKZefIg5ZJ:sxZTF+/fDswAgHbGb1
TLSH
T17E22B752AE28697B8CCAE20DBB25BF53E6F9503291D01E48E7FC861C04E76DD134780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6660a573cc24f3451dfece3cb3b3ae5a143f10462f96a752d7c749123137c4f3
MD5 b7e94c6a4e5559c35e5ca504630d6416
SHA1 f126d5285487df9fda43bfd6b34756cc2ba7a38b
SHA512 ac3619f8ce20f83cfcefb11d7bcfa526cce8632705a479a64d24845bc522237ade89794144fa01fd218660bdc962aa971fff84db65621de874846df0fcbc506d
SSDEEP 192:sxZTRUW+/fDs8PQyIdpdAHW6+WNGYapYKZefIg57J:sxZTF+/fDs4AWHbGOD
TLSH
T10422B852AE28A97B8CCBD21DBB55BF53E6F9503291D41E48E7FC851C04E66DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a30058f0c6b5a2e4dc4cd20db06584c2a3e9be94761e6b5c3d27cab3d39f03d9
MD5 4802a32ba6c254b50c9d94e9d59e54f6
SHA1 7fd349c0c18d6f789edc92fd521bc64370b8a838
SHA512 3e0d220a8012e84bbf0474466993c27203c6763eb73868b27cada55548be49bac81cce50797a220a7502fe1a54334807507dd5b710c4ee0a1ddfe0a721206486
SSDEEP 192:sxZTRUW+/fDs8fQyIdpdAHW6+WNGYapYKZefIg5ZJ:sxZTF+/fDswAWHbG21
TLSH
T1C122B752AE28697B8CCAE20DBB257F53E6F9503291D51E48E7FC861C04E76DD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 12b2a6e4080ae227ab7232370773ac407c5fa4fe70fdf51d6ce42828bf1e67cf
MD5 fa81906c3c3b04196fd27566846ed8f6
SHA1 29ceafcad8ee045fd76b6ff1732544edcb0139d8
SHA512 b764214166b8a01326c3b5dc2f272142ff25a89f5a44b15731c73b382f3e16b326f15413ee3a9c2e5691ee06262bbd5c086b8497127e0a112b83b293b1af7abe
SSDEEP 768:MwWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7nro4bfeYmRt:MwWPcLKWvKeEeu1jaClLiF704bWYmRt
TLSH
T195C2EA2F640CCB7E5FC01A9DDC5A6FA76E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

246b3ea1-9cd7-4d93-9245-22ade741b6ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\246b3ea1-9cd7-4d93-9245-22ade741b6ce.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 123f2e6dce2ca8e2efa2712ca17ee64a84677acc6a4c3beac5c3089900a4f87d
MD5 75751c21fb947b3c46fbbb2322fec24d
SHA1 e4d0c806c78c7a2fc293fb2aa07f7f4178baa511
SHA512 bac563a07e63e7f28aa2a8d3e0a1c099302b782fdc891a934819a37903f64a995345304f3fb54f6c4c5295c3708bf35766f929ab244bbf31056963db1f7efb98
SSDEEP 384:DiFiZcIpbsN/8TUNTUlIlHd1GowuzIGmEb6Fr+i457O6R2Feoso9:uFQ16wgLx1rb4r+i457TRLW
TLSH
T1A0A26E739CA4D83BEEFB9A44E94A36038DF94167C6C5AA50E7DD5B1E00DB298030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c21ee73403c090d4e839e85f437a9a6abd6b9a4cf31b357ebf98d0b4d392a586
MD5 f01865d3e5577636f60898e958dd9756
SHA1 3f91b677c61e754b02db35a7115132a49d88ddc6
SHA512 b20d60f7b680c941ebb901cc33e441396e46a78a455dabdfa7e3a61a10a8ab836ea8bb5b274b91465b190ad961bab85195adc1a8968e73e26beef7b3451b1a96
SSDEEP 192:aONx6IE7QmiUyY1TPuIGmE7ROC7s4dCU6:aONx6DtDPuIGmEFs4gU6
TLSH
T18C02F835EC78BC7BDFB3AE08B4877A235EA9112BE6912F84DAD41A1D00D725C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6f732adc3b499cd7de2bb206dc00560b936e36247d962d05b398e596da848336
MD5 cd38ec114aae633045b84544f723d3c6
SHA1 c45da60b76c6a8418174846325f51395d1d414a8
SHA512 8766bf643bcce1739644d5da69689b59410ee4f540af96d2106e72b0d156882925ef13d79c4afc5866bbbdda7de68ef71993943b72ba70f7e788c6a4623da0c1
SSDEEP 384:rZcINsNled1GKwuzIGmEb6Fvi457O6R2Feoso9:zNBB1rb4vi457TRLW
TLSH
T1DA828E72ACB8AC76AEF7E005A8473A135DB98167D7C56F80DAED6B1E00DB354030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6fc56a360cb07682baac66e96e3422e334d9e263e75f0672287c0fffe6dca263
MD5 ddfa56169d87581407eaf88c667039d0
SHA1 cb3542d200c3e88b10ddf7aa6e631fdffa221e88
SHA512 65a40bbc7e5f6d84693b979b0d1ea3704da6abe8bd4a5c5a4de6d3277a51773f879cc553f3e69599be46bd0441000edce38f8f012b07c972d706e85a21587bee
SSDEEP 384:4ZcINsNlHd1GowuzIGmEb6FHi457O6R2Feoso9:GNsx1rb4Hi457TRLW
TLSH
T170827E72ACB8AC369EE7E405B8473A135EB98167D7C96F40D6ED6B1E00DB358030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3005972ab996da8e65101c0176d2949d6a0cff0dd99dd691f5c8bd19826c1c8
MD5 4063561bf07be6fed7f5c73a6ef0ce9d
SHA1 ca6598ce4b5a72b395908c1dac3defa28a72b565
SHA512 e063d2f7150f5d9c374b9cbdcad2d55332dd63eff561a3a961a44be0b98d094dbdb92c4179f7662b8c9da11df46f912a02d6ca94db82222ff5783f926ab84d89
SSDEEP 192:aONg6IE8QmiUyR1TLuIGmE7RYW6Fz27H4V/zjU6:aONg6DMkLuIGmEb6FAH45U6
TLSH
T18C121B36E8B8BC6B9EA3A804F48739135DA54227DBC57F90D6DC2A1D00EF25C530B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b33b8d90-78b4-4511-9daa-2fd06f426c11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b33b8d90-78b4-4511-9daa-2fd06f426c11.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4c24b8eaff5a9b56cabec25d28e7127d6c096a76b65c8067e77c79efeaa2032e
MD5 44d80f3aa727c8a4449faee2ef594e90
SHA1 021eaf43baff3ca930178545206986e5a30de295
SHA512 c99b5e012b622ac1d1e8c0b0218d7af70f504c285f27d1933eca20f191c5ad4add0f17264a6c1565c4f661a25722f037d977324af363ebb200a2de318640afb9
TLSH
T11F41265DB6E91148B3B7BF4A9BF6A86D487FBD272E06C45E10410E4E0A23E40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download