e9f78c0da3157f3f087da1ec78eb923f2a4734d8fdf3d721ff2e263f30330739

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 23:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e9f78c0da3157f3f087da1ec78eb923f2a4734d8fdf3d721ff2e263f30330739.html
Size 73KB
Sample260912-3b459sbf45
SHA256 e9f78c0da3157f3f087da1ec78eb923f2a4734d8fdf3d721ff2e263f30330739
MD5 9421b6750ad307a80d216c5ce8284a95
SHA1 8942af94496c19cebdfd3ae0d66eaf19b55c7097
SHA512 f4bf0ea43f723443463ddc08932ab4da5753a2c66e37b7a4e3163b94fce6e708f147338e17ad63494c470d2926fcd0e3117da373895c9394ab865722c989630c
SSDEEP 768:ecl0LKc59QCj5p6o6D6Z696p6u6JL6i6u6C6GHSphRzGsUb3wHNsWR656GOa+k+c:ecl0Gc59QCjJdtYGvbQofuo4
TLSH
T18273D283F51CD3DB56214F1BEA0CA01E15151AB1F141B8E0FAD0B25AB8BE8427E5EFD6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3376	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338303648721761"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{75B16EA1-842F-4442-A856-0E32EE5B03A6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1320 wrote to memory of 2504	1320	msedge.exe	88
PID 1320 wrote to memory of 3376	1320	msedge.exe	89
PID 1320 wrote to memory of 4700	1320	msedge.exe	90
PID 1320 wrote to memory of 4700	1320	msedge.exe	90
PID 1320 wrote to memory of 4700	1320	msedge.exe	90
PID 1320 wrote to memory of 4760	1320	msedge.exe	91
PID 1320 wrote to memory of 4760	1320	msedge.exe	91
PID 1320 wrote to memory of 3912	1320	msedge.exe	92
PID 1320 wrote to memory of 3912	1320	msedge.exe	92
PID 1320 wrote to memory of 4060	1320	msedge.exe	93
PID 1320 wrote to memory of 3912	1320	msedge.exe	92
PID 1320 wrote to memory of 4060	1320	msedge.exe	93
PID 1320 wrote to memory of 4060	1320	msedge.exe	93
PID 1320 wrote to memory of 3872	1320	msedge.exe	95
PID 1320 wrote to memory of 1292	1320	msedge.exe	96
PID 1320 wrote to memory of 3872	1320	msedge.exe	95
PID 1320 wrote to memory of 3872	1320	msedge.exe	95
PID 1320 wrote to memory of 1292	1320	msedge.exe	96
PID 1320 wrote to memory of 1292	1320	msedge.exe	96
PID 1320 wrote to memory of 3464	1320	msedge.exe	98
PID 1320 wrote to memory of 4912	1320	msedge.exe	99
PID 1320 wrote to memory of 3464	1320	msedge.exe	98
PID 1320 wrote to memory of 4912	1320	msedge.exe	99
PID 1320 wrote to memory of 3844	1320	msedge.exe	101
PID 1320 wrote to memory of 684	1320	msedge.exe	106
PID 1320 wrote to memory of 4592	1320	msedge.exe	107
PID 1320 wrote to memory of 1260	1320	msedge.exe	108
PID 1320 wrote to memory of 2744	1320	msedge.exe	109
PID 1320 wrote to memory of 2744	1320	msedge.exe	109
PID 1320 wrote to memory of 536	1320	msedge.exe	110
PID 1320 wrote to memory of 536	1320	msedge.exe	110
PID 1320 wrote to memory of 4848	1320	msedge.exe	111
PID 1320 wrote to memory of 4848	1320	msedge.exe	111
PID 1320 wrote to memory of 3096	1320	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e9f78c0da3157f3f087da1ec78eb923f2a4734d8fdf3d721ff2e263f30330739.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92c62c188,0x7ff92c62c194,0x7ff92c62c1a0
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,12041243086178346533,6172521849735485298,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,3703108363930162425,15120218968720677398,262144 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:2
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,17848640961308388313,4479838463587283831,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17917900663216998634,619993886512479446,2097152 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6570928564188503404,7681541535233663503,2097152 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,10273401618527719182,16909941370653756961,2097152 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,15755565086996121737,8050631609197303234,2097152 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,16370656746497415931,10641910720748548664,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,18157250443605991029,5289095734200376283,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,2449439898990827779,3953277976669362562,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,2449439898990827779,3953277976669362562,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,4393450844529182493,15985892340944425655,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,376655627765301118,1910735399463278846,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,18011835631990538263,2722884046103530728,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,12856997345858407187,4394845476211185390,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1013544596350050113,711437273786115030,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,10078667343227551418,5614786495230785646,524288 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6368,i,16006431284576784493,6304338599532826420,262144 --field-trial-handle=2812,i,12804192523802652435,4626015707218204010,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3096

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 91fcf98f1865baf8b1ad5a03fdb5d9c7d79c42e8b03b13bf79f6b68c4af8f7b1
MD5 db95bd6368a9acd8768444e2e3ce1296
SHA1 6007c1dc368c32c47482b6b3bda34ec1aad247fd
SHA512 74027a1e2a4ee69da104928989880e440810885c4946f4c7b9d0b371821464dbd9d11511e4614ff6b12552b86b15de1c4baecbd787d0db5f49fc5caf4c14c739
TLSH
T118E07DC819CCC22EE29066878178475C8280374FDBDCEA3F1744C8987003484FBD279C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 959383c301c1f5cfb56e9ffb6b47887863ec471b7e9525849ab2319f50646dbf
MD5 0963d8d4d2b6f86d976a7e4d0fd25ce1
SHA1 9bff0a81281286e274297a80d68493ea2593e9d2
SHA512 cd6271c10fba4f0b474551c8ae7b2bf0fef6efe4a7f10b8d106fefd7053cf59ea14bc50fe6507c447d02f9e8a7d45ffdac2b7aaab452e66b636ef6f550f14b15
TLSH
T1D36194E1508C8035F7BC64FB57DD814B3538D9867FE3FE1225E4E838882636A3398A44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59521e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59521e.TMP
Size 3KB
SHA256 75238dcf7310b434b65bb68820b06052bee149b3a6db6f499b45c1f6202d9d48
MD5 f6641841ec601ea75667e73fd851727c
SHA1 5c06d5fb068180cc9fa917027094b2daa76e543c
SHA512 3b8aa40e144faf1bc0b50e0cd4ef918538ccfd277e7987a8e8ba68c6916b4edcc2ca767880c1b45f126f3a091058b0371039cef6db84357af9c09ba1b925ec1e
TLSH
T1A56194E1508C8034F7BC64F757DD814B3538D9867FE3FE1225E8E839982636A3398A44
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bc1cff5aad499c3f7313cf9e83dde67f03db219a161a005bac90d620b5bc4d47
MD5 6026ad5810d9b8b40fa3d5201a78ed5a
SHA1 6bc6baed99f13321b732b3fda86bccefa22be48a
SHA512 b18919ec418d2a1cf6ca68d8f9932339f4ff83346f258deaf939f58b53657e0eefd1c291d768fbd9b4db4e3231571b105e8e3f53d63c6b83fbd77cf82402eb26
TLSH
T1E5418BB6C3D8877EC81156F09B246F26CD1E0A5683283C5689E8AF5F63E24B1D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 300b1ac2669ef6ed1c38c24f7d30794b2129d1b4ec3ccc9cb895066945bdfb19
MD5 7522332fdcdd3302bdc154f38ebfc792
SHA1 769dc77dedb5d30478c38ab0edf8111ede3bd605
SHA512 de99beae89a8aed4d667dc9e840797a20020e8882c79b8e636d8c541816418154e6c57284184aba3c292c86427c70f8228582a44f01b31726c2c06c0d82fd048
SSDEEP 192:sxZ6R/W4/fVsvOW5IdpdpHW6+WNGYaQP+VIgrJ:sxZ6w4/fVsvOWSfHbGIe9
TLSH
T19612D855AE28A97B8CCBD20DBB657F53D6F9543261D01E88EAFC961C04E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e0f656566628ac5f7b65b37362a5046b760e8984c1fc74df0a403d558799fd22
MD5 1ad504e15bad5b05a75e418fd70f9d96
SHA1 b9c38b5491c854c56576b1830c2764d79628f4ac
SHA512 2f34bd47b402c2226f51ef3ac41a90dabf8e4f82db4caf24b3284735bae3292f4aeadb3d1cbb34e432d29d88152ee5e55b2fd955feaf6173511523a2c21a4c58
SSDEEP 192:sxZ6R/W4/fVseOW5IdpdpHW6+WNGYaQP+VIg5uJ:sxZ6w4/fVseOWSfHbGIeI
TLSH
T13722D955AE28697B8CCBD20DBB657F43D6F9543261D01E88EAFC961C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 76a81200c0ea9aedeeafe52c0c0c7668f072141a6cb8c036a26b27937cc3e144
MD5 30b417bdafce0d2d19502579741c6ace
SHA1 b27710c62969a2e40defaf50c25b12b091db30d5
SHA512 e8a0306602376cf988193c1a45885ea7671a80903a2585b00a052dc1c04173a4a0216cbcc5976f2c686a6d6dc1ccebf4d569ef1ad3557705030df0b6b53d2a63
SSDEEP 192:sxZ1R/W4/fVs8Oo5IdpHpHW6+WNGYaOP+VIg5EJ:sxZ1w4/fVs8OoSJHbG6ey
TLSH
T19022F955AE28697B8CCBD20DBB65BF53E6F9503261901F48EAFC961C05E7BCE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5f5f4a6918f9a449310548bafbab74d37c2e0949923ec504d194d33fde27e68d
MD5 2b90767d2ca80cc36cae5c95601f01fb
SHA1 4a32759b3abb768ec20dc2424e4008c2a9a24c85
SHA512 31649b4391e4d40bcb1d0b9489179ea0a19a5eb5d0fce3ee5ae10335597c0d9a64519e5a05d28b5ac583b8e645474924657e29f8f3d321012e3943c669c32c7a
SSDEEP 192:sxZ1R/W4/fVs8Oo5IdpdpHW6+WNGYaFP+VIg5EJ:sxZ1w4/fVs8OoSfHbGZey
TLSH
T1BB22D855AE28A97B8CCBD20DBB657F43E6F9503261901F48EAFC961C05E7BCD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1752e8de2083699b3b5fd56a204fd48ebfd2132483e747c9b5126ae35f2144c6
MD5 4d4f564bbde31caaacad42b0b9b902b7
SHA1 d6b038c5e0e415134dc410d711af94edcfd10f49
SHA512 8c8f5addd0b10b41b0e1ac874e8aff0bc2d35a2bbfa0d0500681188e78754a1436a4d980ea2e8ce2a67316cdef3c23c8b6a0b47cc6bbd12716453c51a633164e
SSDEEP 768:QVyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3frodZep:QVyQRbrWvvlpZu1jaXKLf33MdZep
TLSH
T1E2C2E92F640CCB7E4FD01E9DDC6A6F976E9802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59ef38.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59ef38.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e86fab81bed996eb415562dd66e324d85a471a707cc2280e711c4d4c2bdd0ce7
MD5 ce07a943130125a0a1640c700ecbd167
SHA1 c2e97944c1be81c50cc5415228caf7c52eff651e
SHA512 f83adec83326e8de6da679740f53adec32db555ca7c6b46a55c0d0c373c328854bb092c64a562d2e5c92fe6fd7ce0efea7884164f0a3c0de6ad5d22461965f5c
SSDEEP 384:HiFiZcI8osNy8TUNTUlIlEi+KCQzIp5u8i3xKdtBkwc0a3go+:CFQLvwg7Dik3odtBkua3gl
TLSH
T145A26D734CA49C7BFDF69A41F54B3603CEB84067D698AB94E6DCAA1E01DB1D81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a4f139886c6935b697ebc8fb6f9782e139699063d04577d7af7e4a275e7d1c07
MD5 0f6ae7c2baab65b187a0d6448e980f69
SHA1 927880a573696e0ca4b890e368b3cfcd2cfe2339
SHA512 74cdd76b2ef9c14c93cf1254b4eee5beeea3c2fefdd0a6c708315bfae066f8493ba55f447e7de3f73c3ac05aa9b2836cc16f3e6f5373a49e3b88b508b395e298
SSDEEP 384:rZcImsNxUhi+KCrzIp5u8i3xK+tBkwc0a3go+:zmOWik3o+tBkua3gl
TLSH
T161828D765C746C76A9E2A141F58B3A03CEBC806BD7886F84D5DCB71E05DB6E81307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b32c7e587ceab61438c07a120018ccb4ad99034f80d24f11fe0fdc12ae383c89
MD5 4a0ac188b4280f3e62e09bbb937ef467
SHA1 8dc66ffe8c732326eb7a4a3cc5122e24aad14ec3
SHA512 9b4b278bd998d77a952690381cf0ae21f02c2e7d3ff33411547c2be0c6f612d3c995a501facb4bb5e3aa13a7b84c51bc81fbb69b75e53838fc570b89069fd6be
SSDEEP 384:eZcImsNxUEi+KCQzIp5u8i3xK+tBkwc0a3go+:cmLDik3o+tBkua3gl
TLSH
T179928DB65C746C76A9E2A141F5873A03CEBC806BD7886F84D5DCA71E05DB6E82307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9da1782d98ccbbd36ad848bc3fb717ef4bf6e00a87c29ec023d7c68eca534d21
MD5 22a9c841091a7941b33711e94f9d3090
SHA1 8127f7208e9853f001b781ace90eaf5bc348cb0a
SHA512 eaa9a66ab81c66d9548098bb2cd0901e18acfc9093fac9cc5aaed884af74644cc869dec8319e0d89fbbb354ee370447f869bd1233d6fde31da9f3c758159ad0a
SSDEEP 96:PqONkHOQsjpfwDISp5ih/cIPURHl8h4otop5IOmD4BfPGxvw45RxmJm78lFtxSYI:SONGh6iDCQmiUymMHq5u88P3ESqqnsU6
TLSH
T1F702F9396C787CBB9DE26D15B5873B139FA5113FE6942F84DAE81A2D01E729C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1b52c51982955b8969cacd5b9f2d82b51ba6a2d059399e645a97d070b05de54d
MD5 807b90b972c0e5ff7ac79f9e91ec460b
SHA1 dcb6127bddb40271135dfac5ef7916f3e02a5824
SHA512 9085fae5f40a0993786b2f5c9e95c41e1db2632018a4f6bb63bbcd697750158b350c9f3dbe8362dd9c4c783b4ab525f07f37273811e0cc2324381b8ee6926399
SSDEEP 192:SONr6iDyQmiUyLM4q5u88P3xiHnuZR/dxU6:SONr6f74q5u8i3xKStU6
TLSH
T110122B356878BC7B6DD2A960F48736139EA9412BEB887F84D5DC261C05EF6DC130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3de430bfd19758529b44ea4fc19b123af748ba29ec0bb02d21b83d4a7087cd6c
MD5 d0e7fecb4ce723fbe52d57aac78924d7
SHA1 d36c985c03de764fd64a0bce1e9ccbc3a3b2a158
SHA512 cd3f34aaafff35c04b153c502507df6a3a8763644e7b3c45bc61c36151684125626e0e4488d9c15cba2b67542cd36179639fbf5ace71e2d516d416dc97e0cbbc
TLSH
T19A413A58B6EA1148B3777E5AAFF6A46D487B7D732E0AD49D00110D4E0A22B40C8A2B37
MD5 SHA1 SHA512 TLSH

Submit Download