896a6a66f47aaaebdaf3072bce5a3a866d180555db39f9f02cb34e90fc707044

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jetafresh-original-design/index.html
Size 246B
Sample260925-g35efsbd76
SHA256 896a6a66f47aaaebdaf3072bce5a3a866d180555db39f9f02cb34e90fc707044
MD5 91fdc1b705e4a73be9465ef91b952997
SHA1 f4bbd5cb517e88a727e6b2053370691901193e8e
SHA512 72afd78f33511edafb5ea7ee3857efed18bcaaa98edc97aa73395025533a8df1a3536f86ac848b1ce9d87bdc1ed0bc42ec76dd04672202df4cda4ce5b62ea8cb
TLSH
T192D0A7A390A0200FA6347B7899D237A95157790575487D10F6C025FDD4F9B04D74F29A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347918921398875"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D5B4F29A-10F1-45A5-B8F5-DBFB01CED07C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4028 wrote to memory of 756	4028	msedge.exe	85
PID 4028 wrote to memory of 4652	4028	msedge.exe	86
PID 4028 wrote to memory of 2444	4028	msedge.exe	87
PID 4028 wrote to memory of 2444	4028	msedge.exe	87
PID 4028 wrote to memory of 2444	4028	msedge.exe	87
PID 4028 wrote to memory of 1220	4028	msedge.exe	89
PID 4028 wrote to memory of 1220	4028	msedge.exe	89
PID 4028 wrote to memory of 3860	4028	msedge.exe	90
PID 4028 wrote to memory of 3860	4028	msedge.exe	90
PID 4028 wrote to memory of 3860	4028	msedge.exe	90
PID 4028 wrote to memory of 4636	4028	msedge.exe	91
PID 4028 wrote to memory of 4636	4028	msedge.exe	91
PID 4028 wrote to memory of 4636	4028	msedge.exe	91
PID 4028 wrote to memory of 780	4028	msedge.exe	92
PID 4028 wrote to memory of 1996	4028	msedge.exe	93
PID 4028 wrote to memory of 780	4028	msedge.exe	92
PID 4028 wrote to memory of 780	4028	msedge.exe	92
PID 4028 wrote to memory of 1996	4028	msedge.exe	93
PID 4028 wrote to memory of 1996	4028	msedge.exe	93
PID 4028 wrote to memory of 1752	4028	msedge.exe	98
PID 4028 wrote to memory of 4840	4028	msedge.exe	99
PID 4028 wrote to memory of 1752	4028	msedge.exe	98
PID 4028 wrote to memory of 4840	4028	msedge.exe	99
PID 4028 wrote to memory of 2568	4028	msedge.exe	103
PID 4028 wrote to memory of 1972	4028	msedge.exe	114
PID 4028 wrote to memory of 4812	4028	msedge.exe	115
PID 4028 wrote to memory of 3692	4028	msedge.exe	116
PID 4028 wrote to memory of 1320	4028	msedge.exe	125
PID 4028 wrote to memory of 1320	4028	msedge.exe	125
PID 4028 wrote to memory of 3308	4028	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jetafresh-original-design\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff8cb8cc188,0x7ff8cb8cc194,0x7ff8cb8cc1a0
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,7772513277454192921,9053340023739996938,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,5920718922898018038,17110671351169057701,262144 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,7125070918086017897,5611546871382174626,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,7574653928011111999,13643977483944080673,2097152 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1268684461730325664,15524343221489246879,2097152 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,12369773150585936089,8400684349095855504,2097152 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,7578075180840495066,12817397186584290441,2097152 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,7138692700777257293,11652486079050288336,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13212713093464082089,9103122028573945711,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,253940256267224395,17483561365698740872,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,253940256267224395,17483561365698740872,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,11185493615089282928,15868755778835444305,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,3306475816895046837,5128261398917132739,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,11746568938038886834,4054387657105572255,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,17440694723332798082,1751268094784691496,524288 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,12687034576081234493,13670614683805084448,262144 --field-trial-handle=2364,i,14120708259053450687,7198383301698651972,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8f3493711e757f48ab57707b2480a1a2df2b87b551aee10a37594c94b0e71f3f
MD5 6d7b41033e79388fa21cf5d952f8c9bd
SHA1 7eb909477d5212ca3b0f7984d9bf36eac8853bdc
SHA512 22fdb50d11bfcd7d4310b708decdc7bb6cb532fa91bcf91e6c7f0fa612b289d080b3a9f8c5767f47972fccc1d59bbc26612292222eb09d23d7b9831c00a18e63
TLSH
T100512D82CFDF50A9F7B59175C7D813BB76382983568F3E5301A0F97994067C151B7054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eb84.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58eb84.TMP
Size 3KB
SHA256 9956bc38ba9bbec6873b830cee6aff49ca7a0d4a5d9e6fe49fc11bfdddcd4960
MD5 afbec5409d6b06c1501bbdb133363390
SHA1 9a6edd14bb8c4ede06661f92935b3e7891e575b6
SHA512 8c73f1057f361ccff92a3d0f139e3ce0b93a7f39dd7938411a7ad08d19255bd76d6d46dc420b39c37b28afb8642aea1bc9aeffa17e32b5a756f71be2c4786507
TLSH
T18F512D82CFCF50A9F7B59071C7D813BB763829835A8F3E530190F97994067C151B7054
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 5a7d1956fd91b3cde588af719d0f702f1bd9ec60b245c0677526a71362042763
MD5 88bb63bb24107a8c29ce329080b52c18
SHA1 ef03eec61eccfd9cd5d90ad8a789a73987c263b7
SHA512 eb01eb03e0b32817ae397d37d85654f29a86bc0f283a560217861f5a3493b08cff38f112f7aabf6928c6413291e0a13c7ba86d27a6591884c15c5af62007b66b
TLSH
T14B0190F7C3E4956E8A0052F05A149E17CE2D0546831C7C5AC5D4EF2B93F34B5E40145F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c2b9920c4221e12e7a6260e249fc904435cdfde00ff3d6be455b11058e72497d
MD5 b4ae41e6e1a377dc8e67331f49c66c5e
SHA1 f2ba5c7d36007c93dc44a8f292b679267fa45642
SHA512 c84793fcd6d52db75e2c0c63567b5f8f75bd6317fd0408f83ef7dd4c894bc556100515ee10f5ee2d85ce841a37870e8ffe8e3e32e77341de3dd99fa9d084f72c
SSDEEP 192:sxZ1RKWL/f4sqwIdpdcHW6+WNGYRPRhrIgrJ:sxZ1LL/f4sqRGHbGmH9
TLSH
T1A012A6166E38A57B8CCBD20DBA25BF53D6F95032A1951E88EAFC861C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 47f9ad8ed6732804e76139cee4e25546be551c6c4df3010342a5f4f9aa5bfc8b
MD5 21799d371e3b420037f628b0676a72d3
SHA1 0c63d5ddb86274ddedf0b99344df9cbbc647db1c
SHA512 9b77f898eb74fe4842d00ab088e050e71e9a312b830c4865469569d477176c7c31c096358e09505ffc62a57606c3e2bb2aa6c6ffe6bac3921db0ad2457971a94
SSDEEP 192:sxZ1RKWL/f4sowIdpHcHW6+WNGYRP2hrIg5zJ:sxZ1LL/f4soR8HbGmG7
TLSH
T16222B8566E38A97B8CC7E20DBA15BF53E6F95032A1911E88EAFC861C05E77CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6542b0b648f5d01a3428b9560f6d3a1206f78f9e4b915ad971c202e21e4563d3
MD5 cb744d0ddda3760ebce721c33d6a088d
SHA1 7262a5f391c6d309199a6dca47ec87145e083ea6
SHA512 8d6cda8710a989c654861f350c96730e48d2344ea18ed9e669641295a638b9ee4ed22f6786b0704a14b5ccee865fb035c34b8bf070c75f57c446ba1c0a700030
SSDEEP 192:sxZ1RKWL/f4sowIdpdcHW6+WNGYRPdhrIg5zJ:sxZ1LL/f4soRGHbGmD7
TLSH
T1DF22B8566E28A97B8CC7E209BA15BF53E6F95032A1911E88E6FC861C05E77CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b653a9c669995a5be45004de9b0bdf34fdadb535b30fcc9e929c67bd8451a2ed
MD5 c842d6302504f9656a88ba6ce3b3a2c0
SHA1 a53644c35392b381f79e2c738a09535ba04cd3d3
SHA512 54c18ccc9596171630ec116127b3de5f3b6f6298468e2c7791568e690fa4318464d46173e139a62ca4cecb415631676987c6c3eed5711f655f3096510dcffd63
SSDEEP 192:sxZ1RKWL/f4sOwIdpdcHW6+WNGYRPRhrIg5JJ:sxZ1LL/f4sORGHbGmHV
TLSH
T19A22A7166E38A57B8CCBD20DBA65BF53E6F95032A1911E88EAFC861C05E77CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 02e89d02796bbb9be69063279d7a48342ff9380da118f504ac40551a789fa263
MD5 c7e65fd1f606499d021bbd9cc60f4682
SHA1 7e7c894f59470353d3decc932a4fd2b44fadb523
SHA512 875adadcb9e0b82f39f6f3db81e6f362404cdcf8adc8daf3965461e4602929a449f69c4dcd844b0d71d2d7257156e75226717042a791959d5a4dc845936bdf4c
SSDEEP 768:aUK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3ZroV+OA:aUK9uzYWvcQWsu1ja0HL7Q3SV+OA
TLSH
T124C2093F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bcf76bea47558b337503a4092ac81768283d77edb65306b88ce635c43080284b
MD5 b85d94c2b1c5ddc46cf3f7bb86cbb965
SHA1 a8ae6f52be8f567ab0e86a2bd93eb2782b5c3015
SHA512 2926aa64b4bf3a9cd4872272e091ed9a80eb5592535d3c37cbd6af6882b39216a7eaa41b9f5997594ed3b46188a2c1fffc94277bd22d599a9b444967351140dc
SSDEEP 48:K0mImLuvL1ttOb9wVISrOK9715OxjeY4JbPyLcLq2EGqTba5iISuTK9K1oTxMDYT:K0mZ84KRiy+byKIwau1yKOA9
TLSH
T158A1F00571BB162478BD394C80B49B5E968231B33518F62BBFBC04A58E6BE484DFE4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59865d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59865d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4d270db720c493cec215ff5ec3aa1a9ee3a8745604582b896aef1d11312b1c2f
MD5 3ad5e9953358a7d7ec6861015e7841c7
SHA1 d91600ad00f4b22b2ccf26b158e2dce99018f16e
SHA512 c57f2ab33d642f5bac46ecd6bc22ee230bd61c6c2aaffa12c9730d56ce1e66b874ff87ea0ab037987f69a5c8fe41993857190219fbfb715d2cd58034be9ed715
SSDEEP 384:MZcIhsNt2wDWQdNR0uOjTVSSdTHV3FtgOIwZOy7Wo7:ahkdwnHNNFXs/g
TLSH
T17E827C325C782D7B6DE7A241F58B61038FB88077E6C56BD495FC8B1D01EA7A81317C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 aedd00325a76363b7b3dbc759d11f44986fdcb619f413a421392ec0c3bc8c379
MD5 c836c279980c672dd92304a6082b8c83
SHA1 084d44c9071154fb6701378c87671d51d7bdfaf8
SHA512 0b8a9f38c780be096fdb4f07ad99ff442eefcdaee6372001f892b4a5951e6f1143794a2891118d0eb95261f8a322b743d4a9da32d1ef46357975d955c34ec937
SSDEEP 384:LiFiZcIXzsN38TUNTUlIlDwDWQdNR0uOjTVSSdTHVNFtgOIwZOy7Wo7:mFQDuwgedwnHNXFXs/g
TLSH
T1EFA25C324CA89D7BADEBA645F58A31038FB840B7D9C5AB94E2EC4B1D01D76E81307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 94c106fa065914752cb19264f4c9454752a6fb2535dc4d3dbe0edb06a690c70b
MD5 ad01882f47a0ac4fade81c8b5c2c3939
SHA1 a157005176fb7c9fc394dc42049452eb2d1fb678
SHA512 8cc4ac697d8f48a83615c4734b881948f9f07401666d44c6d8f368ba8a72497428ce6f3165ee1305e6d5ab756369f870d8980e99f7eda0708dd320896f0e63c1
SSDEEP 192:SONK6ygpQmiUyzYtOCTVght+FdVaotzPavGU6:SONK6lHNtOCTVSSdThIGU6
TLSH
T15C02C734AC683CBB8EF3AE45F48B26139F98117BDA962B94D5E84A1C01D775C2343836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 01a13b5d7bc81c3f7ca06ebc3275763a3e07a234bb61fe30d0f47097f98f8ef5
MD5 0889cc6ed9d5ed7565a071ea2e2ceea3
SHA1 80da997b966c5d6428071d5d71ece1575ba04edf
SHA512 ea4cf719a530eb6e35d69f6b2abbeb6be3ae95b2bb4c402494a994dcf74d7311d8850d8f11e1cb8c00fea01ab56ea14f8914229ecafe37d85628f9a0b5a37ec1
SSDEEP 192:SONw6yUQmiUy4YfOCTVght+FdVaoHhpNg3Ud/LU6:SONw6T4fOCTVSSdTHV1FU6
TLSH
T1B2120835AC686C6B5E93A541F48735038F988277DA8A3B94E5EC5B0C01EB7BC2317826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5cb14a5d3e64e013a426cd3096e82d7adabdf507e5348d4768b2092e7e7a1e31
MD5 0685067e938730d3dc02c9bf0b512c9a
SHA1 e2de54dd1b8dcc10b1bf313e115d2927f324fee8
SHA512 1ae642615fc96738b1e099d3c1a68e5be859575536bedf248cafd94ed121f1f69038b59c85521b5a393fb3d014436288c6676f366a06485c03a7fbf5d31ada51
SSDEEP 384:IZcIhsNtDwDWQdNR0uOjTVSSdTHV3FtgOIwZOy7Wo7:2h/dwnHNNFXs/g
TLSH
T131827C315C782D7B6DEBA241F58B62038FB88077E6C56BD495FC8B1D01EA7A81317C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 463ea8b62b34d64451fd3ea5ff3155e6d294918fe2121a7f62d27cb86f11ce60
MD5 b672ec51b3548f1d3c7dcd9db831a68a
SHA1 ffe79a63d70429683f6a7da961e58db89809098b
SHA512 32fe929146aab04042e420c5828392cea00f05f62404913739cb7cb22f9e38f447920bc0e4c3f532b0a78b2f683e879e17ee8e698ce6bb722593236a99a685c3
TLSH
T10341E959AAEA1108B3B76F56ABF6686E447FBC372F17D45E10110E4E0A63B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download