03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 18:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8.html
Size 6KB
Sample260912-xf997asfnd
SHA256 03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8
MD5 57e0bc726440aebbd01f9a6ca65591da
SHA1 b778bca49c70d96e877977fcceb16e3846c91700
SHA512 0b6670435512b4b0c8c6422e373f606727f2135d29687617f64b08eadd4bdfc6abdc8ca6b0dbafddafd37a491b2289a79b6bb6545005dcfb02cfac9a5077ddc6
SSDEEP 192:zWLv15G5WDNlUeqmngZ1nZ69mEcE8XECgUdDhQoKDejCPJu:zWLJlUeBf80WhtKDejCxu
TLSH
T15DE1B55A9E4C853F4100059BF0A16A1CD89F447BD312D8A6FCFF416E3FD9EAA44375A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2156	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338257069752454"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{21C9896E-F921-4877-881E-7ABF9774B417}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 848 wrote to memory of 1012	848	msedge.exe	85
PID 848 wrote to memory of 2156	848	msedge.exe	86
PID 848 wrote to memory of 8	848	msedge.exe	87
PID 848 wrote to memory of 8	848	msedge.exe	87
PID 848 wrote to memory of 8	848	msedge.exe	87
PID 848 wrote to memory of 2068	848	msedge.exe	88
PID 848 wrote to memory of 2068	848	msedge.exe	88
PID 848 wrote to memory of 3712	848	msedge.exe	89
PID 848 wrote to memory of 3712	848	msedge.exe	89
PID 848 wrote to memory of 1732	848	msedge.exe	90
PID 848 wrote to memory of 3712	848	msedge.exe	89
PID 848 wrote to memory of 1732	848	msedge.exe	90
PID 848 wrote to memory of 1732	848	msedge.exe	90
PID 848 wrote to memory of 800	848	msedge.exe	92
PID 848 wrote to memory of 800	848	msedge.exe	92
PID 848 wrote to memory of 800	848	msedge.exe	92
PID 848 wrote to memory of 4476	848	msedge.exe	93
PID 848 wrote to memory of 4476	848	msedge.exe	93
PID 848 wrote to memory of 4476	848	msedge.exe	93
PID 848 wrote to memory of 1932	848	msedge.exe	98
PID 848 wrote to memory of 1932	848	msedge.exe	98
PID 848 wrote to memory of 2268	848	msedge.exe	99
PID 848 wrote to memory of 2268	848	msedge.exe	99
PID 848 wrote to memory of 436	848	msedge.exe	101
PID 848 wrote to memory of 3976	848	msedge.exe	110
PID 848 wrote to memory of 3540	848	msedge.exe	111
PID 848 wrote to memory of 3240	848	msedge.exe	112
PID 848 wrote to memory of 4452	848	msedge.exe	113
PID 848 wrote to memory of 4452	848	msedge.exe	113
PID 848 wrote to memory of 3268	848	msedge.exe	114
PID 848 wrote to memory of 3268	848	msedge.exe	114
PID 848 wrote to memory of 2448	848	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_03654a8f9b059964d8903fceb161f6515726a0b56b4a9906ec675fdaabaf1ee8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb7bc5c188,0x7ffb7bc5c194,0x7ffb7bc5c1a0
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,6868736948752394817,10960951000026099658,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,2107385263930869382,923457964717867139,262144 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,14762219288033194574,5933986662099670003,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,12521691207938609252,9260644267944929604,2097152 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,13324876889430254586,12403872685748204714,2097152 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,12330633729985056802,772070213811303166,2097152 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,15080898549231274410,13500858768276666966,2097152 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,4401952538240430531,16380659727772690218,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,17748479299340682142,4184074586032300319,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,601788025220281096,2367721729041756587,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,601788025220281096,2367721729041756587,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,3889236444577111997,18192269902093110540,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,14350570551113189122,11182744401701983302,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,747045119418000119,5903627165942146549,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,18403156059308780277,11467550238046648504,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,15768710079341381727,11667285449922282972,524288 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,12161423591186352063,8477557304668215796,262144 --field-trial-handle=2276,i,17487978294775588872,8573213121739308552,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2448

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4b40d6b5c05dc6a6d828904713b0dfbd25e8b42018bf4307518c75b32edd305b
MD5 ddb271b5d0168e46dab0f1c68816083e
SHA1 786fd8954fb42dc2ec5acdd89023a8f68c3b8c51
SHA512 48d3fda15d8e81a6b421b88817585a98fbd5f64874f52c9157bc2d4fda1a3980a3e8a0e0ae9a533fb8becb5299c76cec89a2c03e5d01c03433615711bd229f9f
TLSH
T1885193C8BD8144AEF7A8087189D73D873E75818B59730D7624B8F8BE44CAB95FD1C050
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dc6e1e00d22b0db0e726989a332e6a115521a24147854fa203ba0d6f8a60390c
MD5 986e3e9c0e12701d107905917c63c293
SHA1 c472ae26ab367fa27336ba650584058de87de1e7
SHA512 95f7d8403435625eef25cb9477416bb3054f7152496c187d3d42eec4bee3eb817bfbbef1486165345d241099658092861660664856c110288ad4d624a9bd15a1
TLSH
T173219DF7C3D4966E890156F06B24AE27CD1D091642283C16D9E4AF1BA3E2475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 07d6f3ae44783de56d3257df0a41a9018cb0f309f8d21e264606ca782ac0dc1e
MD5 2c162d569d8acd0052c64a70f5ec1ed1
SHA1 c49392b2d387e7cd825efdc03b18ad0305db73d8
SHA512 23a39799a04791be5735fc8108296592e6b3f77e5ca10214c0cbaf4e01b1d3ea1079e1f14416add630256a8f5b7dd8e61d488347d02bd0a3e32421c466a6bbd8
SSDEEP 192:sxZGRyPWB/f9sC+FIdpdNHW6+WNGYRPRwLIgrJ:sxZGEeB/f9sj2nHbGmI9
TLSH
T14F12B8126E38A47B8CCBD20DBA25BF53DAF9503291D41E58EAFC861C05E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 12686d88a37effa1645923f7456f2296794cc5e02879f057f16d0e1ea74b7e6e
MD5 6c427243b9f88cf33dc76493a3b6a98c
SHA1 41eae9f1b61f646ac58fd2a8333756dc8b1b5f25
SHA512 4531334adad23c9198aa014343dc716074490a955b60c4dddbecc19f37dbd02e24f397b7b429f90605b02e6f511568a646f26c4500bf2c8bc8e3de02df63cb40
SSDEEP 192:sxZGRyPWB/f9sJ49IdpdNHW6+WNGYRP3wLIg5bJ:sxZGEeB/f9sa+nHbGmmX
TLSH
T18822B9566E38A97B8CCBE20DBA15BF53EAF9503251951E48AAFC861C05E76CD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fe043ced3cba5ac91eb9be2dffb7a71855b42edf1a943b8594e54061a686c63a
MD5 3f883cd84a79a8020175f848e6ccb79c
SHA1 5b334928ca6320d438dc0476a3bffe0796abb1c7
SHA512 a00978a9801e35f0fe86b1dcaefaff16c59d13bce60f68bd20b522112ec473d7203a54f1612c768b8c1212873ce25b9fbacec807fbdd1df3ac7303159d82dcce
SSDEEP 192:sxZGRyPWB/f9sJ+FIdpdNHW6+WNGYRPRwLIg5hJ:sxZGEeB/f9s42nHbGmIx
TLSH
T19C22B7526E38A57B8CCBD21DBA25BF53EAF9503291D41E48AAFC861C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a8c752cf69cd5db9003c7226c48f96e9b3fc32cbe5f8b7c0a56db9bacbc313e4
MD5 d695452e4c5b1006863a2d571a12d365
SHA1 18064b5232a2da50da5cc5197790df09f340702b
SHA512 7a46b5113e90bfbebca163f169ed99df6a7b1d7d8bb3f7b9e7071c265202aecb2fcdb050614ff6eb6f7114cf0f0a24fd6dcabce0db562d5f2fdaea2bcab062ed
SSDEEP 192:sxZGRyPWB/f9sJ49IdpHNHW6+WNGYRPZwLIg5bJ:sxZGEeB/f9sa+tHbGmQX
TLSH
T15822CB566E38A97B8CCBE20DBA15BF53EAF9503251911E48EAFCCA1C05E76DD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7098cacbf0d4f8b056ba1d18b7e6503b4c9b9396a99dec3f33a11aadddccb543
MD5 48f4e16f5bcc6bc40fdeda28c8984112
SHA1 624250693ea25378d9516e918c8860faa04824af
SHA512 2aa44b7f2c0a3f40b7748cbd43891130e45cf61bc417cf628131cef8a25486716087f36b14188a3dc8a6f633e1eb42f963acc13b054e41bcfcd0a856509f57dd
SSDEEP 768:lpK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Iros+U6:lpK9uzYWvcQWsu1ja0HL7Q3zs+U6
TLSH
T142C2093F640DCB7E4FC01A9DDC5A6F972E9802D796688D4047FE984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c9205290d206e3fe9400b06cbbedc33eda54288feb59e0bd030ed59fa665674c
MD5 e908a5eedb74390274612ac10b4101ec
SHA1 c432fd6a09f87ee1a7edf37800ec7ae99440f36e
SHA512 57b2d95c5c3bcbe7a73fc590eb529d18193c1ed0ec7e6143c87991c8712b1cc81e9f771bca1dff86c89aef917c19b1a070fc11632b3bab9cdd5796b6c88800cd
SSDEEP 96:K0m79EZtr/jkz/qP5lkKhB5DkVNtKrN5WXyKMYKKQQKRyoKFwU6A:NH9hfZKFwU6A
TLSH
T1DEA1D29530BB020178BD654981B5872A514235B3305CF7BAFFBD40A69EAAE484DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa9259ea-4294-41e2-8761-a50f2c054993.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fa9259ea-4294-41e2-8761-a50f2c054993.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 5e3371728f9eeea14be2658a11d00a714d50ec39411559dcc056d4f56e89e9f4
MD5 1bd27297d9f542d7ef955f2a25a4950c
SHA1 eeef9f9bc1dff38faa6b6669b139f6781860f29a
SHA512 a6972879b5d5a441ddbd98762376680babd7d4e424345a59d45689961f57ff5d5246f5e99c65d10c0b469ffcf39ec2597a41fb6e2f249a091c5b986e59b961b1
SSDEEP 384:yiFiZcID6sNE8TUNTUlIlsw6glfWOjTV+cO+nFCjl+2l567O6R2FeoUeos:5FQmVwgntnhOsIjlln67TR4L
TLSH
T199A26C735C789C7BADFA9A45F94A3207DEF840A7C585AA90E2DCAF1D01CB59C130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0781b01d5607749d723f02d7d095307278e036a7c97f7328378f7971122bdcd2
MD5 3f92978ecfd416261d55689b393d36cb
SHA1 9f98d215963bb84df2fa81cbef9205cb0c9fb675
SHA512 724a2edd852c58aa4c133a3aff493bca2f39af4370226da0ba908111c7cb1addffb86eab16e4e04b4d980490c2660382d4b69d48871bc60d4e112c6436e9d2af
SSDEEP 192:SONJ6ygpQmiUySVtOCTVghcO+njzP2sU6:SONJ6lH1tOCTV+cO+n3bU6
TLSH
T13F02E735BC787CB78EB2AE45F58A27179FA8116BE9512F80D9E81E1D01D766C2307C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4b182ccf5df0ffab850882bcb6e573d18b5ef48c3b5cfd2aebc5eb2a50aff5af
MD5 8a6b7a1a13261685e5556a18d81b7ee9
SHA1 5456d85c6919fe7a4dedb475c0038f062c125282
SHA512 83edf9bbef941b5e89f6cfc34950a8a5f0cb90faad1bea39fa91e27a7381959125841bb0997fbf99a8e5a4389aa313bbfb97d8ac76fc6132c28a244be1557304
SSDEEP 384:5ZcIgsNMxw6g/fWOjTV+cO+nFCjl+2lE67O6R2FeoUeos:RgitnhOsIjllq67TR4L
TLSH
T1B5827D726C785C775DE6D145E88A36179EFC91A7D6C92B80E0DCAF1D01CAAAC230BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3274a5e4891e3ca97adf224b8d69c5bd8837faaf1697656f29ccf26b2b15fb83
MD5 4bb124b71e890445288269614dea8961
SHA1 6eef21b45bff70d40c111527b3cd6cb22c13869f
SHA512 59c71de080ce446926720059c53ce60f9ba8bba11a0c8c062680fd15e9db91ad2984000b1248e494824a66af6eace547caa341fe9d19abd52c14dd3c23a4da13
SSDEEP 192:SON16y/QmiUy9VCOCTVghcO+nFCjl+2lQ3UM/TU6:SON16WwCOCTV+cO+nFCjl+2ll6U6
TLSH
T15B120936BC786C775DE2A545F48B32179EA85167DA466F80D5DC2F0C01DFAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 428a4f5147d0745b3cca2f8bb05d27d3aba55aff41345537bca69b834f71ecda
MD5 1df76d72920ddc1083e537f9e723711c
SHA1 86ec52348cbb107e81c8d5be56b6d863abbc1b81
SHA512 a35ce323b12530d7ca4fa8253afcbd885dc28cdfd08004badf60f511d2c786f8538b9d970322a65641723c8ff65afada3e27fc7e86d28610204cdb4fa3198f8e
SSDEEP 384:JZcIgsNMsw6glfWOjTV+cO+nFCjl+2lE67O6R2FeoUeos:BgxtnhOsIjllq67TR4L
TLSH
T1F5827D726C785C775DE6E145F48A36179EF890A7D6C92B90D0ECAF1D01CAAAC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f6ce62987be5c7d74a8e1038f724c51d1a4a03fc0742a6aa1ef4cbd63920db07
MD5 b1b14e61289428be98654ecbcbaf82b1
SHA1 4d4e4f9a3bf837a978c920dfa7ade3d7466f268a
SHA512 4d6c4cc81dc54f874f5a3e8d267fad4faa336ce08296a77e3302c0e632cc8a6978bb76334f0ddd951a74e61cc5ac113b92edbe965483408ad2f72a9d8e0e7bd3
TLSH
T168413958AAFD1148B3B76E5AAFF6686E447F79772F06D45E00110E4F0A26A40C8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download