3142a5411fcf503d31d1671e2a1e02abd88eff868eb521ed9cb8bd3110204e7e

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3142a5411fcf503d31d1671e2a1e02abd88eff868eb521ed9cb8bd3110204e7e.html
Size 1.2MB
Sample260913-j2brvsel2v
SHA256 3142a5411fcf503d31d1671e2a1e02abd88eff868eb521ed9cb8bd3110204e7e
MD5 10fadeaebfe3b545c4126b85ab651ab5
SHA1 d98fa16b802539e2f5d8b1d95528ca8a5d84466c
SHA512 9cda5f033b915836cbcdc97491b39a29b847cd1c368561352acd2979b0523e1d597701fc414a2275d3e2701ac1c03ca10c432eb1278f853098fa019d570cde36
SSDEEP 12288:DCeSXyMTNrjTEY0+kC6bhxs7jGdayXD9Wn:DCRyyjT3kC6bhxsca6D9Wn
TLSH
T1A045C6DB9230717FF833A8B596C8A949F3988CC1E5164AB5BC70A61387DBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2820	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337605736511501"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{2AFFE299-5DB9-4C7D-8F98-219759D2FE92}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5512 wrote to memory of 1760	5512	msedge.exe	87
PID 5512 wrote to memory of 2820	5512	msedge.exe	88
PID 5512 wrote to memory of 3140	5512	msedge.exe	89
PID 5512 wrote to memory of 3140	5512	msedge.exe	89
PID 5512 wrote to memory of 1200	5512	msedge.exe	92
PID 5512 wrote to memory of 5992	5512	msedge.exe	93
PID 5512 wrote to memory of 1200	5512	msedge.exe	92
PID 5512 wrote to memory of 1200	5512	msedge.exe	92
PID 5512 wrote to memory of 5992	5512	msedge.exe	93
PID 5512 wrote to memory of 5992	5512	msedge.exe	93
PID 5512 wrote to memory of 6116	5512	msedge.exe	91
PID 5512 wrote to memory of 6116	5512	msedge.exe	91
PID 5512 wrote to memory of 6116	5512	msedge.exe	91
PID 5512 wrote to memory of 5716	5512	msedge.exe	94
PID 5512 wrote to memory of 5716	5512	msedge.exe	94
PID 5512 wrote to memory of 5716	5512	msedge.exe	94
PID 5512 wrote to memory of 4080	5512	msedge.exe	95
PID 5512 wrote to memory of 4080	5512	msedge.exe	95
PID 5512 wrote to memory of 4080	5512	msedge.exe	95
PID 5512 wrote to memory of 5092	5512	msedge.exe	96
PID 5512 wrote to memory of 5092	5512	msedge.exe	96
PID 5512 wrote to memory of 5092	5512	msedge.exe	96
PID 5512 wrote to memory of 5872	5512	msedge.exe	98
PID 5512 wrote to memory of 5932	5512	msedge.exe	99
PID 5512 wrote to memory of 5872	5512	msedge.exe	98
PID 5512 wrote to memory of 5932	5512	msedge.exe	99
PID 5512 wrote to memory of 4668	5512	msedge.exe	101
PID 5512 wrote to memory of 2028	5512	msedge.exe	105
PID 5512 wrote to memory of 52	5512	msedge.exe	106
PID 5512 wrote to memory of 1864	5512	msedge.exe	107
PID 5512 wrote to memory of 2752	5512	msedge.exe	108
PID 5512 wrote to memory of 2752	5512	msedge.exe	108
PID 5512 wrote to memory of 2676	5512	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3142a5411fcf503d31d1671e2a1e02abd88eff868eb521ed9cb8bd3110204e7e.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2f4,0x7ff90987c188,0x7ff90987c194,0x7ff90987c1a0
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,7815712764847820199,1763101863473970442,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,1486797256240825000,943286420443869742,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:13
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17688823262115427427,10697742712665879966,262144 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:2
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,13518077500440486354,10630953821274352704,2097152 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,5899915998167533943,18882898731438556,2097152 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4420,i,11664073079663387983,10270158228763712957,2097152 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:9
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4408,i,1261109507289720267,14347503138468805007,2097152 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3696,i,8560862065088444913,7262213255787451919,2097152 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,16629903514645460038,9526461088900072834,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,12919343738905978701,7104502805893184878,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,16030978729981819391,2265297572207069275,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,16030978729981819391,2265297572207069275,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,3621058952172171474,15115099390249582479,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,14603141314853329912,17912341999747027976,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,3757188221562105397,10229873145471664149,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,5074673054749183451,646961813784467589,524288 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6640,i,5195098408136866345,7340839083393342966,262144 --field-trial-handle=2688,i,6690173094459681717,5423789595900766095,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1b1271747aae72b1abf426aac03ad6d1ef79a451d972a4798d767317ffbb6c17
MD5 33452410ae42ae4345ebc7d077d62d26
SHA1 2476016b3f775edf414d31cbe144234697a0473d
SHA512 fbcf50fca6a02b9442e979d7f658ae63c126627dfc27145a970a34da8e78d512b83fab78011db082317a75a342a296aa6970befe5358e7ee168c5eb82e162ddb
TLSH
T11B615DAC2BB18C71EB8C0034C5E1548736348BBE64C31ED21978EEBBC81BBE530B9844
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a65243887f9f0de8536b19a99a19ec53679f25f63c1fdc0992f3ef37f96ae81f
MD5 62d0172d8a444ab410e1028c91e262cf
SHA1 e0285cb5ff968dcb834d415923db64f5e3d4a169
SHA512 7fa9c66c901aa3f56ac8a80e3900b1d55cf5a6d536e47ea189702350ea34801847a9cccbcbb9437810609cd9050671dd194ec207a22c1aa843104bb12334f7b0
TLSH
T11551ADF7C3E8867E890156F0AB146E1BCE2D0919432C3C5689E4AF1BA7F24B1D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 961ab75270258e740cfebd7aa537fbfaaead6c7d0439d3498e44027805dffe77
MD5 a19b0dedfcf75bdea5eacb5b966b387b
SHA1 d7703c3e6b7c8764b0925ae252805b6faaddcb94
SHA512 6365a4d317625ce72318c6d4faae82f3baf19a7d281fdde5075a26cb525f5a342f54ff1982919b482087eb1b85c0230790181e48796b916f641fa1419438672e
SSDEEP 192:sxRLRebc/fqslYzoA8p4Z/g6+WNIYFXaG/IgDZJ:sxRLOc/fqslhg/5Iwf
TLSH
T14432B615AD68A97B9CCBE21DBB65BF13D2F9103261D51F48B6FC861C01E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 02abc59e303c0e03258fc60c8435fe29707920de24e1a0c1fe552b2fda246065
MD5 f159001c800d58215115a67fc2f889d0
SHA1 59fc36351af385eac02efad091c2149f610cb4d1
SHA512 358bf3df21dc3bb0a275225300b0ccc8c24833b11e6bb11e2fac452c238e492bedf43bfad6e9c380175d38df3dda399391413273dfc8cde85a2c01cb2b20f75b
SSDEEP 192:sxRIRebc/fqsiYzoA8p4Z/g6+WNIYFIaG/IgIJ:sxRIOc/fqsihg/5I9s
TLSH
T1B222A515AE68A97B8CCBE21DBB65BF13D2F91032A1D51E48F6FC861C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 83e620abafbca81e3f008799ad519a1be577191a6ff57f15788cf9f82b21c4c3
MD5 6dc0f1eb0950985a8a5e959d6becc606
SHA1 e2019c58e63cd2570fd398e2a5582124e27465ae
SHA512 09512bb7b5fd0f2d78530f2435a0b017c296dcdd79f093540b49c2171b8965c816091853191fc128d81e5df38511ac6f08c4a34d2911bfd918aff01cb2e70cf2
SSDEEP 192:sxRLRebc/fqssYzoA8p4Z/g6+WNIYFIaG/IgDHJ:sxRLOc/fqsshg/5I9l
TLSH
T1CD32B615AE68A97B8CCBE21DBB65BF13D2F91032A1D51F48B6FC861C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 77def9466af73bcc8bd5b9aad0c6278996d410daba3dcc6df10cf315f6ca4a43
MD5 a521c6065239e638a544704179ba64b2
SHA1 e10ab565893e59e5f2da664903fe2e0ab9e96533
SHA512 3ef7207d17afd2b84fffb518bc74f578f035b1d980271b7e5d36b36711c7d10f3fd547c3723459b251d2f5628839646e484d35c95c4679755d7847fc0f4dcc04
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRn3ro+P+:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0V3
TLSH
T173B2D92F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 215c118dad33d168b3860f946446f9c1c38703fa6a717668b7f3921a711001e3
MD5 098b2d2d1c734a4a49abdf2ccd131e2b
SHA1 9afc7991d400f8beb613f4ed44c0d703f0cec8ee
SHA512 12dc898539cc9323f6f3311499ffc19b386e6c40ce6c242076d1b50fb9db003f509bbdc2b6135f7ab4b59a615e5d8edb480612b15d874c8dee40c827266917c7
SSDEEP 24:Ko+5248IxKyhY1KSbU1yXKF6hEZIvKVhi1aSAbf6VKgwIdKeh81WSv8dyXomZzSU:KwvIxKEYcDyh2IvKTis/HIdKI8Abylz
TLSH
T11E91B510723A0601387E250DA2B6976FE64231A33074F62B7BED1195DEBAE054EFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 1f48748d36f84d224dfcd9e6fb56dca97466703c12f30f51bb05018acc293f01
MD5 2b04e8c199e1df871bc30580dafdd3a9
SHA1 6ab0975129be9f97aa08b5559198ff8fd792e536
SHA512 1e8ced92185efe2217d78edeb305c12917e784d0825166079d99d1ee9869c8d9660eeb8a2f225996478960f41306ff346207ddc9ab3b92c6f811f3902973b27e
SSDEEP 768:i/UxvxjgC+h3k3f9c3IFdyEMbxyJugQVTJ7vvmeX8MggxWp:nZj3+h3WeqyEmxyJJq17vqMg+Wp
TLSH
T10413C0356C656C3389B7D281761AB387EFF445A354C92AA889DD5F0D068B3EC5307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0ab38b1e8183b7ea652fd5a0bbb115e2c07ccfa8c27eb19e065e533e1d769073
MD5 c9bc6a561725c42372fe0b3e04905475
SHA1 28aaf78630c79034471e866c559ab127cd54f2bc
SHA512 16e541fe7a0060d0bdceb2d45e71b12ebf51634c1ba27d84b072ac00a753677a4dcfa174ee0d0c6f100e55096f9f92eceed8a7f2a8d153d2c9787765c671b8f7
SSDEEP 768:i03O3f9c3IFdyEMbxyJugQVTJ7vvmeX8Mggx6Z:i03YeqyEmxyJJq17vqMg+6Z
TLSH
T16FF2BF70ACA19CB398B7D285B656B647AFF442A394C91B84C4DD5F0E029B6FD1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 55e9b1a5cf5d4d52e3d28731f8931c179b51f52ec078e2fee10dab706ce89b49
MD5 01d8d679c19513de01a379ad62e3655c
SHA1 7bc843f9dc36f46869e33b80a8bcabf3986ad30a
SHA512 27794f3fb16ecd2b75f398e087e5ebfce172be84558ebca38b9cd75d81521591723c3cc69f57b56162c290471fbcb57e3dee209289e13d8c3198c854959291d0
SSDEEP 768:iz3B3f9c3IFSyEMbxyJugQVTJ7vvmeX8Mggx6Z:iz3XeDyEmxyJJq17vqMg+6Z
TLSH
T172F2BE706CA19CB398B7D286B656F747AEF442A394C91B84C4DD5F0E029B6ED1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 886835bbbd0e19477d977821cb4ff7c9bc59b7397a44bd850e9e9f7db879af1f
MD5 d9cbcafa64fb691b4307854d49af17f1
SHA1 1bca9a6a95eef78f8479387e06adb7ae85ec09e8
SHA512 a028869d5a3178a23b2e110bfe9ed12a16cffc8c2112ebf7262c72085aa724ead27c89d36ea0c65cfdc14aae3f4fded7cfed6dcbaabd8799cc437ea262bef5f5
SSDEEP 768:p/UxvxjgC+k3uhf9c3hyEMbxyJugQVTJ7vvmevbSHtBk:cZj3+k3uehyEmxyJJq17v1Sbk
TLSH
T1A003CF35ACA55C3388F793843659F787EFF506A394C62BA485DD6F0E128B2AC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5a7f30c-0af8-4589-ae08-657c18feb824.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c5a7f30c-0af8-4589-ae08-657c18feb824.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download