eade30e6e735c6ae0da219561d6ddec739b007cdb9f95aabe2a129905a4336a4

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 02:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_eade30e6e735c6ae0da219561d6ddec739b007cdb9f95aabe2a129905a4336a4.html
Size 122KB
Sample260913-ch2qlsssgs
SHA256 eade30e6e735c6ae0da219561d6ddec739b007cdb9f95aabe2a129905a4336a4
MD5 a8e8032bd149364f046119886edf078e
SHA1 faa44ae1a58b5f00260c3980960c2ba063315b20
SHA512 0c82aa643ef2ad9d2cc30ca4167ef5750a293f94c67c5c861cbd7243b5ac9dfe3acb5e7675d8a1127bbc5e13b14ed8984de6a21b0be5ab8caf2ad2f16a45f994
SSDEEP 1536:0mxdYn+hkn+9Re4ajJ0qUEj+dglHQDTt5NolxntqJbEaoQbEaoLmyvGrYdvwzGxM:lxyQzNioJdoQdoLmrrYSzYbD8
TLSH
T1D7C3D69712204CF5EFB81DB345DB086F3C2D1537AC0390B9E3ED8E962FA696D034A569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338276540810693"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{8A679E67-86F2-43AE-8697-F2B78B8A7833}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2504	msedge.exe
2504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 4640	4908	msedge.exe	82
PID 4908 wrote to memory of 4808	4908	msedge.exe	84
PID 4908 wrote to memory of 744	4908	msedge.exe	83
PID 4908 wrote to memory of 4808	4908	msedge.exe	84
PID 4908 wrote to memory of 4808	4908	msedge.exe	84
PID 4908 wrote to memory of 2656	4908	msedge.exe	86
PID 4908 wrote to memory of 2656	4908	msedge.exe	86
PID 4908 wrote to memory of 3348	4908	msedge.exe	87
PID 4908 wrote to memory of 536	4908	msedge.exe	88
PID 4908 wrote to memory of 3348	4908	msedge.exe	87
PID 4908 wrote to memory of 3348	4908	msedge.exe	87
PID 4908 wrote to memory of 536	4908	msedge.exe	88
PID 4908 wrote to memory of 536	4908	msedge.exe	88
PID 4908 wrote to memory of 2164	4908	msedge.exe	89
PID 4908 wrote to memory of 3600	4908	msedge.exe	90
PID 4908 wrote to memory of 2164	4908	msedge.exe	89
PID 4908 wrote to memory of 2164	4908	msedge.exe	89
PID 4908 wrote to memory of 3600	4908	msedge.exe	90
PID 4908 wrote to memory of 3600	4908	msedge.exe	90
PID 4908 wrote to memory of 2488	4908	msedge.exe	94
PID 4908 wrote to memory of 2380	4908	msedge.exe	95
PID 4908 wrote to memory of 2488	4908	msedge.exe	94
PID 4908 wrote to memory of 2380	4908	msedge.exe	95
PID 4908 wrote to memory of 4048	4908	msedge.exe	98
PID 4908 wrote to memory of 3868	4908	msedge.exe	104
PID 4908 wrote to memory of 4280	4908	msedge.exe	105
PID 4908 wrote to memory of 1888	4908	msedge.exe	106
PID 4908 wrote to memory of 4020	4908	msedge.exe	107
PID 4908 wrote to memory of 4020	4908	msedge.exe	107
PID 4908 wrote to memory of 2504	4908	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_eade30e6e735c6ae0da219561d6ddec739b007cdb9f95aabe2a129905a4336a4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffbd808c188,0x7ffbd808c194,0x7ffbd808c1a0
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,10628500755499483962,8227844527308334466,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,3906122116927803536,5838891123666283261,262144 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,13939651125015407685,6513372541247981240,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,668574716344285735,12196088052826009011,2097152 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16703983210130737887,5004246413549438277,2097152 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,17672668943947350526,13512386441484526837,2097152 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,13376331550512224336,12142108696156765365,2097152 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,6818803988079803207,15450033450228482762,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,3720541146627239417,16645265003303514433,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8967817218765187137,17364223519169304616,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8967817218765187137,17364223519169304616,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,9945559565462116985,10584686896605073948,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,6984307015144470116,1980097904345585761,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,3626937515965015147,11595627389518299049,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3044,i,14856926696178472949,12955292229118117003,524288 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6020,i,7605379770996743652,2787736773288205780,262144 --field-trial-handle=2284,i,5301369502032359087,18071924511738332970,262144 --variations-seed-version --mojo-platform-channel-handle=768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4c63caf8fdba99357077018ec12629916c33330094065eb207183c7cffa60d7f
MD5 1631c4d31ca3c3b42bf211d6e7ca262b
SHA1 2655e2055b235677af441899be771817309eb971
SHA512 224e3b5e6c86ec9d03276f6846bd6b7156697af83ef4d718d431e88e907d19708d77345a102accf6c78901e82febe6199d7b7edfb30e031cefea345c64b8bf1d
TLSH
T12B6175AFFF5AD26EF7944070E9EB2B9B393C0DA338C3DD0325ACE67A64463584112064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5919b8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5919b8.TMP
Size 3KB
SHA256 8caac93e8bba8f0b16fb4d319f65bab8a8aae25795eccb95723be94e8b416f71
MD5 1a4ce2ca016fa589cd5906c42c513595
SHA1 d73afe2b0c11039fa99d7d3cb3f6ce74ca433d08
SHA512 73002ae1ad131b185c21f80ba37189f2807944301d1ef450ef3431e5f2fe289bde5bc01c9821b30e0e186f4eaf5cb302ea0e47cf85fc5f8e6cd72afa57de73b3
TLSH
T13A6153AFFF5AD66EF7944070E9EB2B9B393C1DA338C3DD1324ACE67A64463584112064
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bd9b6920d3b3508c828aa9cff42ea9300318c12652fd7ced84de879a545b629f
MD5 4a35efd76bedf12149d7a91fd2853ebc
SHA1 0cffbd448fdc19da836f243819693b3b33747442
SHA512 6ee1d8cfcbe4982a4d76b4d3bb0c76979f20a115c482938a82c6e80e4a09de0075a85affe43ba6f7bc1ff858a9af121e98793d50f3bd6e5236f6b8dc994604d4
TLSH
T1E141AFB3C3D88B7E891156F49B246E26DD1D0A56422C3C16CDE5AF1F63F24B4E1015AF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 69354e2aa2584c871a8374be2032f784f8d7ca95d5bbefd73953ca9f0896ab29
MD5 14eada9b16f4ca8089e97a2a41668c7f
SHA1 d64bfc213244dfd7e2c75f3b6ddcda197b6e93c6
SHA512 1ab175fdfb138d914bf127baf319460ec586ede05492be6ee457e6b72af741e2f19d7e5708de27b70ac336b9d3abacc214b7e919f964cadb48dc73347a3cfa86
SSDEEP 192:sxZWR8Wr/ffsqCIdpdrHW6+WNGYrbshIgrJ:sxZWxr/ffsqrlHbGb9
TLSH
T16C1297526E38A57B8CCBD20DBB25BF13E6F9503251951E58ABFC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 61cce4b7d21876d5a161c386d1824899f271e2d73a22b61bca1fb0d22423d40f
MD5 ccb18445ce9e3a655f545e7fa206af1d
SHA1 d2979ce0b37903489bf6a727ac312b12473dee0e
SHA512 9c4d3e00fc0f299cb8abaf4551ae8ac99a0b02b6d7c5b332eb2b549a2345be8b9a407510612bbcb2fe5e1fbfde58e96d4e26fb522cc5f24c3db52d6360475726
SSDEEP 192:sxZWR8Wr/ffsQCIdpdrHW6+WNGYrFshIg5FJ:sxZWxr/ffsQrlHbGfB
TLSH
T1CE22B9526E38A97B8CCBE20DBB157F13E6F9503251951E58A7FC8A1C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f6eec90a7c2bde2eec9c2f3f0458e776cb7e5d9ff7ccece295446666574c4726
MD5 5880b0445744a48247d25fd8ef3c7810
SHA1 cc125c53ab679e146b69f4aa031b9d1a13b25cd0
SHA512 3a017bf3cd36ab2ff17af5a72dcc222c9b81d7c371720742219c1747f5cea800c14f7f7427e06159fcf4278cd4b94cd53c33adf6e0e03112b9a1b3c37240177b
SSDEEP 192:sxZWR8Wr/ffsiCIdpdrHW6+WNGYrbshIg53J:sxZWxr/ffsirlHbGb/
TLSH
T11A22B8526E38A97B8CCBD20DBB25BF13E6F9503251D51E48ABFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7d577964af608fdff2e6c82d8c6d25ceefc72b67e3c9438207d07dd001a640d9
MD5 ab113471c5d52f2d2895906294b951ac
SHA1 366ec4af4d6eae7d8f1f480ca4342531e90725ed
SHA512 58c0adc0609c12d6609c60821dd5ea84ba35a8e4148fdabdcf5e39c2795d9e9736430b74d5ed470b90f5ccfa0d49bbdaad704c0e121edb704748f94d382db571
SSDEEP 192:sxZWR8Wr/ffsQCIdpHrHW6+WNGYroshIg5FJ:sxZWxr/ffsQrLHbGYB
TLSH
T19B22B9526E38A97B8CCBE21DFB157F13E6F9503251951E48A7FC8A1C05E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4fe253b5c4c8ea9a023c8b7f0b0ef33ca7705794826c19614640ea19f721d415
MD5 90e18de9fd820e346734c7e4ce5afc59
SHA1 c12b3d9b8c8172d5830c73465170fdec6876af91
SHA512 a78ee49cd615d9a7571ea54aac5fe1d43fd71a7507c7bff33a6e3eaa3c3341d0566c5e2859a0f5ab2f9af7a696c2ee3545b65cb4369ca03daf5635f8bcae1ff8
SSDEEP 768:bcy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbSroR22:bcy4J/DWvbtBhu1jajiLm0bJs2
TLSH
T10FC2FB3B684CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b8b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b8b7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8b9b731ff567634555712ee8b56a0df77b6d25f9fbd2ff22fac6447a21677d69
MD5 51ccc16172ba21e528f62d8dbdcbd84c
SHA1 b768818f273736f7b02c6186f8f6b600820576eb
SHA512 c40a60d4a39ad98f4842040538b933fbbc97a148b291a2c502c702b7408203d1de2540df8c4e2f7e50f52f1f78190399730f5fe288d60546ba42da4ef3080b59
SSDEEP 192:1ONV6wlDgQmiUyHxW4X58gZxjzorvA7wbDloYU6:1ONV6kgSW4X58EN8vAU9BU6
TLSH
T1D102E735F878BC6B8EF2AE49B58A36139FE5102BE6552F80CAEC1A1C00D765C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 80120e86c3a605955c3582033cc2680d512eed30e8578abca9db03658510f3b8
MD5 ba52074a93ea80656e8928210c0df887
SHA1 db616d408f8c2ac5bc5b6b0d221f167ee04aed0f
SHA512 0c7d408532d1df262f09c8133dc8f6fb1e471cc6bcc92cf4e568d46b28656ba5c6bd6b713b0513c7a60cec8e4fd931d5199f0ee8341d098ea550437ea80348f9
SSDEEP 384:hZcIjsNhO3WZnQQuHX58EN8vAU0Xf+2pFsa+VYRlyoy:pjEGdaTcflpFhgxZ
TLSH
T1C1827C71A968EC3B48E7D286F94B36039FF8906792C96F94C7EC9F1D01996A80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e66932fc58c1b0370e39248defc05856331242af365a0d474e0d02a5c4df0bda
MD5 b7ac671ac074774c19ee8b0489cfda2a
SHA1 118b2bb3016610e560c82563c037a679f950b3cc
SHA512 4f64479c02306d9be105785161327d1145001e0cef5e6051c2f032e2334858c582a509fdffde3f69c786ffccb54726e88cccf79030b15670cef1e0b4830b7ca7
SSDEEP 384:ciFiZcIdVsNz8TUNTUlIlO3WZnQQuHX58EN8vAU0Xf+2iFsa+VYRlyoy:HFQfSwgJGdaTcfliFhgxZ
TLSH
T1AAA25C729998DD3B9DE7D786F94A32038FF940A786C9ABA4D3DC5F1D009A19C0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 98131bd05e650c8902ae43ea51076b967b3664dee01780dd28125788fa45b537
MD5 7ce219e0032e975e0b4d0b43ee4189c1
SHA1 bee75a0cde6811a58f7427594cffe0ccc67d63db
SHA512 1b67e3c4ee9285ec54d4ad34ea49c8cb20704a94e5ff9946f0f6e480d4f85f952a3d883ec95fc5d5e83b2447c90ba10a129543e489f17af5cc42438c783ab64b
SSDEEP 192:1ONSV6wlDaQmiUyixr4X58gZxjzorvA7w0XN7R+2Yve1/HU6:1ONU6kWJr4X58EN8vAU0Xf+2jFU6
TLSH
T1A312F731B468EC2B5DE2A549B08B35139FE95117EA896F90C6EC1F2C01EB66C534A913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c6bfaf5cd10dd4a7cfa3e361b629d71a070ba902d60f4ccf8fdd59dc90b32eea
MD5 b277ba5769f28d3b5a38b79580155f92
SHA1 fffeb7c4a76e9b4bb5753bac3219e97631c65946
SHA512 18449d5a2c8d7bc6be0c7ea0e71a2b37d1d27072cf92ced1637134c9ceeb20b9ce325d74dac8fa4b75333e400240c7ab779a79fcc238d7cf57d90b028faefd76
SSDEEP 384:tZcIjsNhv3WZxQQuHX58EN8vAU0Xf+2pFsa+VYRlyoy:1jfEdaTcflpFhgxZ
TLSH
T195827C71A968EC3B58E7D286F84B36039FF8906792C96F94C7EC5F1D019A6A80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c81cff7-389d-4826-a3ef-533b31a90e02.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8c81cff7-389d-4826-a3ef-533b31a90e02.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 40847e22f5239a797f1fc17cb5aa292bb4798e16fc1534cc9a09bac228fac61b
MD5 8f7d34476a74edf7d00a3b9b8d7d37ea
SHA1 8f8d4185d6e3da364b8b6293d5b534d07d6ef3fa
SHA512 0b360801e19831f416f21c8d435e17ac6ad58d92cca96cd9a4d757a120d8f5f6f5f9bdbdaa46242885301c5424ffe5c52918bde1b3bd0a638bf9368f84ebbbca
TLSH
T1B1412A5CB6E91108B3B76E5A9BF6A86D487EB9773B0AD05D10110E8E0727F40CCA1733
MD5 SHA1 SHA512 TLSH

Submit Download