d9b3b817a6b74180ad337c20b254aadbeeff199af8868d79de9aade49f680ba9

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d9b3b817a6b74180ad337c20b254aadbeeff199af8868d79de9aade49f680ba9.html
Size 118KB
Sample260912-2ccxqsba83
SHA256 d9b3b817a6b74180ad337c20b254aadbeeff199af8868d79de9aade49f680ba9
MD5 3e20f81deb3a13029cb5981eca7b112e
SHA1 ac80a82e98e886c661b90f07ebdec8280ff3ca58
SHA512 b29e0b80e626718a679d05084fb118fa16a913eb4afe703713d6b4a29d23f2724829f1deac973da73ae0fa7f7467391ec409d713c06c41fa2247fb6c643b5b85
SSDEEP 1536:APxwYn+h6X2L5Rrcp1BFe5GJuSQpTtd+o9xMH0HNT7bEao/bEaoZb5b3rGPZJq:++69QR+JHwNT7do/doZ1jrGPZJq
TLSH
T199C3A4C701208CFAEFA04DB2465F485B3C6C5837B857D1F9E3FD8E9B2B459AE0245269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338314948959224"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{08799E93-CC59-4C95-A243-13FF9209B1AC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 3120	4416	msedge.exe	86
PID 4416 wrote to memory of 4752	4416	msedge.exe	87
PID 4416 wrote to memory of 1352	4416	msedge.exe	88
PID 4416 wrote to memory of 1352	4416	msedge.exe	88
PID 4416 wrote to memory of 1352	4416	msedge.exe	88
PID 4416 wrote to memory of 1828	4416	msedge.exe	89
PID 4416 wrote to memory of 1828	4416	msedge.exe	89
PID 4416 wrote to memory of 2444	4416	msedge.exe	90
PID 4416 wrote to memory of 2444	4416	msedge.exe	90
PID 4416 wrote to memory of 2444	4416	msedge.exe	90
PID 4416 wrote to memory of 5040	4416	msedge.exe	91
PID 4416 wrote to memory of 5040	4416	msedge.exe	91
PID 4416 wrote to memory of 5040	4416	msedge.exe	91
PID 4416 wrote to memory of 3500	4416	msedge.exe	92
PID 4416 wrote to memory of 2220	4416	msedge.exe	93
PID 4416 wrote to memory of 3500	4416	msedge.exe	92
PID 4416 wrote to memory of 3500	4416	msedge.exe	92
PID 4416 wrote to memory of 2220	4416	msedge.exe	93
PID 4416 wrote to memory of 2220	4416	msedge.exe	93
PID 4416 wrote to memory of 3680	4416	msedge.exe	98
PID 4416 wrote to memory of 3680	4416	msedge.exe	98
PID 4416 wrote to memory of 4324	4416	msedge.exe	99
PID 4416 wrote to memory of 4324	4416	msedge.exe	99
PID 4416 wrote to memory of 4404	4416	msedge.exe	101
PID 4416 wrote to memory of 1880	4416	msedge.exe	106
PID 4416 wrote to memory of 2840	4416	msedge.exe	107
PID 4416 wrote to memory of 1580	4416	msedge.exe	108
PID 4416 wrote to memory of 2536	4416	msedge.exe	109
PID 4416 wrote to memory of 2536	4416	msedge.exe	109
PID 4416 wrote to memory of 4176	4416	msedge.exe	110
PID 4416 wrote to memory of 4176	4416	msedge.exe	110
PID 4416 wrote to memory of 3820	4416	msedge.exe	111
PID 4416 wrote to memory of 3820	4416	msedge.exe	111
PID 4416 wrote to memory of 1572	4416	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d9b3b817a6b74180ad337c20b254aadbeeff199af8868d79de9aade49f680ba9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff8f63ec188,0x7ff8f63ec194,0x7ff8f63ec1a0
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2308691853444112836,16774198379943393365,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,14913131087393738890,16207302285345508359,262144 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,1810218803821925298,17161531593182103042,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,406865913584220123,7335478838396937889,2097152 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,4387216728767040602,12647475923109684048,2097152 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,4116958410251375144,5141742749681440261,2097152 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,10049465425792964215,5019282104607423488,2097152 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,239081300484302993,504993970743533724,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,16595443054449475314,13888371791847495982,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,1572386646712955353,16391392677538582038,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,1572386646712955353,16391392677538582038,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,16009003991774979913,13951020073841899438,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,13200483013960857686,8958707661057097097,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=1624 /prefetch:8
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,4591428922227540772,5159975090108146376,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,13834961283377537257,15999647064363079741,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,18101419906837169589,2008068716872228490,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,15887402027040512500,14642653773616524474,524288 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5236,i,14206586000227448136,16618697219127796754,262144 --field-trial-handle=2324,i,8088013057668136277,11299827132567636638,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4652

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 908aeb125807c0852f68dcbc8b280d77275a13df6520d1fc25d598d876df87b7
MD5 d145451e625aa8609011caefdc45b31c
SHA1 05d7363cedf510f7f199e05f80b6be21d60e1a84
SHA512 d8d05016b70e3eb3a93cf6d8dbc66d9a2039aea2ec752c652b35a83108d49a80fa67aa729aa038872b9530d999e04d71aa98a071b241da8e3e1759bdf2ffd7e3
TLSH
T1A7E0268986E8CA2EE2406787416C978C82B03B4F92CC7E1B5740E4A87803080F6A36D5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ec4c43cb299d44d78590fe126988d6de5d84cd05b3f130fdfe01e8012c439ba6
MD5 5a4b26bbf153f77c54a2ba558f682128
SHA1 04d7fbdf1743aeace35f5a6fae44489edbc90394
SHA512 abfcf6cb5f48337cefa0aa15e30d6ed5dbf4eac5f18b6f0b2b368728aaf01f06b87ad9443576590659e95cc0f7a30c300d6521cd925de83e365e291a3296c40d
TLSH
T12C616D4BC6B34263FBD88BF2C5E42187BA3B7E821A931D1E11A8E4B5840FB370C151E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5943c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5943c6.TMP
Size 3KB
SHA256 bae397ac0fc3e8f9e2ee0a79574ad363283cc731373911963c0c7c858c9c10c2
MD5 363ddc5f67e34ac7153d0d4329b5a61f
SHA1 f9bae43a263388f9eec38c74d6104dc733cf7b05
SHA512 258e27b0f1010d82ce798541c9945930f97e3d01021359a070ec2f478a41b45fe78f74a2d9198cd53dae5a6c481d916e76845a23655805dd62d14b6d118b63d7
TLSH
T1A4613D4BC6B34263FB9897F1D5E52187BA3B7E821A935D1E11A8E475840F7374C151E0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 64ce51c9061cea7644ef288c11eb6355c11290c00775b1f8c10327ef824ccdf2
MD5 d1de26819665c51fb9a5abc2bb9e43c8
SHA1 831c37128f4496d5543f24441438d20abab8ca57
SHA512 730ece036025b45f6e532226a8f3974d0480bc050e4ba63f6b4e2250f8f4a3c53fa5b8265130a3632e91e04f573d2df3ff1132f55b230c00007d862655620dc2
TLSH
T10E417BB7C3D4877E890256F09A246E1ADE1D0A5A423C3C1AC9E4AF1F67F28B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b762b26c345bcbfef2d7a29baaa0c72fd6479b2c69d0edec5602a9f91b33e19a
MD5 0f8c8e8fea54c54cdfb691240c574965
SHA1 43deeea10b869f104c5173d0d29b05985f6498cb
SHA512 b2c5072ea922a2c7822be7d384750457596cd0a3389a72e85477d0602452e16369b2a3e713a7bf77704300d19c8758b36ba8dceee79ca3b2f2e7c809dac79ec4
SSDEEP 192:sxZqfRqW1/fasJEFIdpd4HW6+WNGY3Rk4IgrJ:sxZ2/1/fasO2KHbG09
TLSH
T19512B7126E28A57B8CCBE21DBA25BF53E6F95032A1951E48A6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 faa48f3d5dbe6f21a0b0f642a45582a4fb6a0dd361e2c518f0621ffbecf46744
MD5 cf56286f2310f21300d925187c628297
SHA1 81e85d3b4b9037894a94b948e18d493cf85b51ed
SHA512 902a50ad8a798d40f48b60bf2e82b46e39a24b216760c08a490e1c32ba02f6e79f8fc21fcf69f806136f43f54336c896f88e21ad36b67a8049e616d745b4b68a
SSDEEP 192:sxZqfRqW1/fas5wFIdpH4HW6+WNGY3sk4Ig54J:sxZ2/1/fasS2YHbG3q
TLSH
T1BD22D8566E28697B8CCBE21DBB15BF53E6F95032A1901F48A6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 995d52fb4a860e64d647842d267a420a4f6081e3d21d25f926695b41f26085ab
MD5 7c4ef9db7d95e4655d614a47421464ba
SHA1 15783bfd1d57ea29aaaa7f1238ff1d6641ff07cf
SHA512 09def1fafedb7e13b9e55acae789a585461bb60e18cbb99be41db69a1a617b62e48017a6b94e1bcddaa89ae9bc5302a7e47283cf5fe43db1b120463f719b8690
SSDEEP 192:sxZqfRqW1/fas5wFIdpd4HW6+WNGY3Vk4Ig54J:sxZ2/1/fasS2KHbGCq
TLSH
T1CC22C8566E28A97B8CCBE21DBB15BF53E6F9503261911E48A6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 34683524a1fc64c6638e682e159e34a423868981c34d22eec0c1aa55b589f4cd
MD5 56147262f19c17c34a32402ded1547f2
SHA1 aaff8ab38a924f6fb271ba4e12466bd525acebb5
SHA512 81daae277f9405276dfaf65772c640163982953118248f66b1f2e8f82604e509ce696fa796d6977fc00e75aa3931ab72db6e3cbc4bf00dd38cabd3dc4bb77d51
SSDEEP 192:sxZqfRqW1/fas5EFIdpd4HW6+WNGY3Rk4Ig5SJ:sxZ2/1/fas+2KHbG0Q
TLSH
T12622C7166E38A57B8CCBE21DBB15BF53E6F95032A1941E48A6FCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ecbf821759e1082aba3c5b036c9201e85090d80fddd5ce18f49400617a967326
MD5 a8797abc6fb7e9922116e6d4079c6057
SHA1 d1e360ce894b0f7108cf78cc5a709dd1102ed071
SHA512 6e3e3ae35f3a5a035fdd38cb26e733213307e93fe80e9e172d37473c7b5a603a48008dfe39baa5297affdc0f7fbeaf0d91ad5bfcdfacd1ab1e91224bf678b422
SSDEEP 768:6e30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ721rolZML:6e30AbSWvS2l9u1jaLmLZ12Og
TLSH
T118C2DB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA944C02C77EA51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a73c5aceeab69ca8e68517d0b999d4fea393f150f01db4e9c8e5e469b4ea1ec0
MD5 eaf43caa28f3407229e352ec0b45afeb
SHA1 6d763ca65928a32134d2f13bc3c071ecba229721
SHA512 c087b73ceb56da214bf950c5067be647e8db87c529e83bdbfe97b191c925d4cabeb4c18439debf3602c583cf7e7634ac971a589d7330be1a278f91877318c546
SSDEEP 48:KgHIdK0UInyxQIfK9+8C1szf1DjRq/6MIF3RKcY0VRQNB7y3jyyaYrUIiWD:KgHmK0UqSQgK9+++QK3KSg
TLSH
T1BC91111231BB0240397E6A0984759B3E424275B33115EA2F7BFD50EA9E6BF481DFC9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e006.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e006.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 894983ffb3336b44497b1c39473ec09539fccee93f5256a4e6cfb30b87c63f15
MD5 112801ed300ecc80dc53afaae456ae4d
SHA1 502bab7c15831361a55e5c7e778eb836e427bb3f
SHA512 48c8ca6fa9785a213ddd8b5154fee814536ef9c7e5ec4038a91219a96de63d9278a9da2e4a15c4cf461aaded75beda824c81190f048d2f602761ef22e999fc9a
SSDEEP 384:BZcIbsNrnDKpuaNO9iX5FC/8TXX1i+2qe7O6R2FeonLov:JbHj6auMclqe7TREM
TLSH
T112828D72A8785C3A59F2E155B44736039FF9806BE7CC1F80D5ECAB2E01DA5A9131AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 117ee70915333b2ee2a83c84abf45ecd30313c1fab08fed8bb85edbbaacef980
MD5 4b85043a4a9d5d8e73432f881ca1bc9c
SHA1 4e77cde3171966e2b998400acbab2da4ef0ed328
SHA512 ac66ad759677c32e9d7fe457dea3faee81561153f73752c2df672697a424a83f9fdc7c9fa599738f0938569978df85c99deb9d41374536f58d4f9e10eac902c3
SSDEEP 384:DniFiZcIulsN18TUNTUlIl+DKpuaNO9iX5FC/8TXX1i+2Se7O6R2FeonLov:DiFQokwgbj6auMclSe7TREM
TLSH
T16EA26D7358A8983F99F6EA55F54A3203DFF940A7D789AB80E6DC5B2E01DB198130BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 838eec5927e5d562b734370c1907cfa882d51d0b956a411a16a632871dc9d9a3
MD5 a1caed69664809d0ac732879e6e7b608
SHA1 d0144dba93193637c325db1f4add8a11f6b7eced
SHA512 09c0dd8562507c2dec0ea4968ba028afabc37aade30fb600f9c143642329131cf7d39e260e746d4ec051c927c9497bf7bafd537448c1eb09b0342b32b7e1b20b
SSDEEP 192:LONv6AmwprQmiUy/B6siX5FC3jzor9mylJiSMU6:LONv6ipdC6siX5FC/8Ti3U6
TLSH
T18802EA35EC786C7F8AF2AE45B18737139FA9116BEB942F84CAE8172D01D725C1306932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b2ef97a3c998c23305f7a23543d22bf45a1a7dd55920917ca2c02495f6f12f10
MD5 8f1a3b9f287c5b679b296e5178cfcf0a
SHA1 304d791ce1d7ccd854695f6f292e68a681062f9b
SHA512 de4acc3bd985fafb87bc830cf3feebf58a14a8848f8034e64d5bdb1ffe4011cc122632a093ee1413fe26d3de524d965a552cf19c7c7363aa2bb0c20f814eee2e
SSDEEP 384:jZcIbsNr+DKpuaNO9iX5FC/8TXX1i+2qe7O6R2FeonLov:7b+j6auMclqe7TREM
TLSH
T111828D76A8785C3A59F6E155B44636039FF9806BA7CC1F80D5ECAB2E01DB598130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 ae1317fa42981dd03492090716c7740402041df53ae8830fc5ecf3abd51fd4a3
MD5 4f337cfb0c368f8a03a48a76f8a3d724
SHA1 2c9cc2a7d883c790e6beffbd0706bd271f6eb86b
SHA512 51fc2e4f9d607407da01b581cd65d00d9c114663d2209cc55c8bba2db7fb441227033f3f990563a31eb492b259c839541d9f5cbb523781b9b75adb9980e14171
SSDEEP 384:ysNrwDKpuKNO9iX5FC/8TXX1i+2qe7O6R2Feonh:ySz6auMclqe7TRy
TLSH
T128625C36B8786C3B4AE3E555B04B3613EFF9415B9B891F84D5EC6B2D05CB198630A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3437802d409905479bbd0958dda2f00c00c3d50ae6ebe33575a68b529c8e66d
MD5 a1080532a1137cab06ca38d74c6f8d06
SHA1 499e1181e8677cb146b255d03e70f429134681a4
SHA512 c28e0295a1c34b07f60d3ba0067931dcb2e3c90e2f9721fa9409e6991dd0b8a04df954442c1709ac279434abdfb0b24a4eb9a56cc2644bb7f9ef672b92b34a8c
SSDEEP 192:LONW6AmwpcQmiUyVBqsiX5FC3jzor9myXXXFi+2klRj/SU6:LONW6ipsWqsiX5FC/8TXX1i+2ueU6
TLSH
T1BC121C36B8786C3F4DE2B595B04735139FA9421BEB887F94D9EC1B2C01DB59C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16771d68-0da9-4bc7-8db5-3dd9b4c097c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\16771d68-0da9-4bc7-8db5-3dd9b4c097c0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4f34c139a87d85a7cc45d689ecd522253f5e9b531189a112c5e7b6ec699c2bd4
MD5 efc08a9ed2d50867d9f9d0339aeb3739
SHA1 e1bdb4639ee13c73beeaebf7ada509c18851e4cf
SHA512 5768dc35ee2522003a7886e2b20264c9b8a513f3d5acd8e35965bdf12d4f29bc01eaf06ec0ebd35df2b683d22d41ef2a850a6bd2a540602a6cad9f786e6e9f29
TLSH
T1C5411C58BAE91108B3B72F56ABF7A86E487FBD772E07D15D00110D8E0667A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download