896a6a66f47aaaebdaf3072bce5a3a866d180555db39f9f02cb34e90fc707044

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jetafresh-original-design/index.html
Size 246B
Sample260925-g35efsbd77
SHA256 896a6a66f47aaaebdaf3072bce5a3a866d180555db39f9f02cb34e90fc707044
MD5 91fdc1b705e4a73be9465ef91b952997
SHA1 f4bbd5cb517e88a727e6b2053370691901193e8e
SHA512 72afd78f33511edafb5ea7ee3857efed18bcaaa98edc97aa73395025533a8df1a3536f86ac848b1ce9d87bdc1ed0bc42ec76dd04672202df4cda4ce5b62ea8cb
TLSH
T192D0A7A390A0200FA6347B7899D237A95157790575487D10F6C025FDD4F9B04D74F29A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3916	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347917117554155"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F45DCB30-9CAD-463E-932B-6CF39C28B47F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
180	msedge.exe
180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4284 wrote to memory of 2424	4284	msedge.exe	87
PID 4284 wrote to memory of 2196	4284	msedge.exe	89
PID 4284 wrote to memory of 3916	4284	msedge.exe	90
PID 4284 wrote to memory of 2196	4284	msedge.exe	89
PID 4284 wrote to memory of 2196	4284	msedge.exe	89
PID 4284 wrote to memory of 512	4284	msedge.exe	91
PID 4284 wrote to memory of 512	4284	msedge.exe	91
PID 4284 wrote to memory of 4428	4284	msedge.exe	92
PID 4284 wrote to memory of 4448	4284	msedge.exe	93
PID 4284 wrote to memory of 4428	4284	msedge.exe	92
PID 4284 wrote to memory of 4428	4284	msedge.exe	92
PID 4284 wrote to memory of 4448	4284	msedge.exe	93
PID 4284 wrote to memory of 4448	4284	msedge.exe	93
PID 4284 wrote to memory of 3904	4284	msedge.exe	94
PID 4284 wrote to memory of 180	4284	msedge.exe	95
PID 4284 wrote to memory of 3904	4284	msedge.exe	94
PID 4284 wrote to memory of 3904	4284	msedge.exe	94
PID 4284 wrote to memory of 180	4284	msedge.exe	95
PID 4284 wrote to memory of 180	4284	msedge.exe	95
PID 4284 wrote to memory of 2632	4284	msedge.exe	101
PID 4284 wrote to memory of 3880	4284	msedge.exe	102
PID 4284 wrote to memory of 2632	4284	msedge.exe	101
PID 4284 wrote to memory of 3880	4284	msedge.exe	102
PID 4284 wrote to memory of 2088	4284	msedge.exe	104
PID 4284 wrote to memory of 560	4284	msedge.exe	113
PID 4284 wrote to memory of 2016	4284	msedge.exe	114
PID 4284 wrote to memory of 3456	4284	msedge.exe	115
PID 4284 wrote to memory of 2088	4284	msedge.exe	117
PID 4284 wrote to memory of 2088	4284	msedge.exe	117
PID 4284 wrote to memory of 4020	4284	msedge.exe	125
PID 4284 wrote to memory of 4020	4284	msedge.exe	125
PID 4284 wrote to memory of 180	4284	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jetafresh-original-design\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd505ac188,0x7ffd505ac194,0x7ffd505ac1a0
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,8617169463537600338,14824969920587556169,262144 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:2
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,15079553545086718356,3304386597183378939,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=276,i,16810459292829314513,13212601665865603815,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,12753330788714766707,379231281742649418,2097152 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,11927496951067233122,16339549060848340052,2097152 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,3306006894351667662,2511196544057658228,2097152 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,15502431663652883197,13786223022900778706,2097152 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16590451265742062562,16097132086966346372,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,15635630771167789289,12652394564069494898,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,13416540889453194965,16261796402979116740,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,13416540889453194965,16261796402979116740,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,15273579498413743569,1796509809751962474,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,12755585157849866817,5011892568212896731,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,6580977092271355016,3422215437604684307,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4016,i,12404859655202620894,17709377227740545377,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,8336377923647670379,11566764560819556832,524288 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5360,i,2414528084331672118,9138094323091839035,262144 --field-trial-handle=2844,i,1694381871453330968,9853857419770629276,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 db25f374267697622ffdcc8626fb34f1dd17fce480a48ddfb7be9740c7ea97ec
MD5 bfca1ebf2385c738b3a6286d4c0502d5
SHA1 116d1acb82c889f1e2bb6d933371c16757d3b184
SHA512 25d7bfecf1c7d11e4aeda20db894b5b7110ac7e784e461f829f440dde779930e5a63ae8b0cde71ef8f38f92654c347b4e8bafc1e5a76c288ca38db5e5ed3b964
TLSH
T174517170DE608098FF9841BA94D01DBB353677A024739F3B1DBCCAF848363D949C8042
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59099b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59099b.TMP
Size 2KB
SHA256 20ad2c48f16edfa30520d2a997da6f453a5161ac29607dc95761e2787364ce84
MD5 dbba999c97a9676c11eaa9b6d67cb0ef
SHA1 0fb1ba57c8b8492a6e6409400e3367d92aa5d81c
SHA512 077067188d82036f571dbd6b2d6a4a7654096d80298ac3d930a1f73005294bc5328fa744a728a0d6298e06214c9364630b8de4669fb2d5d95f17b9bbc6329ecf
TLSH
T163515070DE6080A8FF9941BA99D01DBB363677A024739F3B1DBCCAF859367D949C8046
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 eb2e66d17990083c17270031bd8cc1673f850bc14bccae42692eeac71019a50a
MD5 d8deede17a580b0a250e167a331f43a5
SHA1 89f4b7022590d274c45ee3af38e6bbdbdb4baba3
SHA512 138c9264fd31693baf9d558a587daabc33762e81dfda5603b36cac5b50da0bb7d5392866cf69773c2f7d372662ab9ff4f68b3bb68e47d93ec0e2d71aa506b5d3
TLSH
T1A0117AF7C3E5856E8D0516F06A24EE2BCE2D0606821C7C59C9D4EF6B93E3076E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c3d1a16880463273e0e5e8ad8d153ad41faeb024ae93cbe2a5cc74dec52f97f4
MD5 82913cfb85a076f665a0bdbb9566eed0
SHA1 22c559e6b522b40bcac58c0242b950250c881de8
SHA512 61c80a63688021ea6eab3c57e189cf06d78a4b0dc1f2146dcdfd9f4a3e9fb73eec63bf0a441ce7a5e4fa546f83727e9e299350cd7f07215746be11825144e754
SSDEEP 192:sxZ6RlW5/f+sZKIdpdJHW6+WNGY36a9vIgrJ:sxZ6u5/f+sZDbHbGXG9
TLSH
T1E412B6526E28A97B8CCBD20DBA25BF53E6F9503251D41E58EAFC861C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5b4fe951debc736c4d4ac26883f4fcb2bc7ddde951da77f7403abf2ab489848a
MD5 c8c498500bb62df5798f09d30dfa1c40
SHA1 ee0c7309026a5f77525d97048807e8c2bc984995
SHA512 4a0085b64a318fb4c73d105e703c3a2d9c40af1055aebad6c8235378bd61d83b39880481a155403d9519ea5ba82c4243022c86744ec933af5a45c1363435617a
SSDEEP 192:sxZ6RlW5/f+s6KIdpHJHW6+WNGY36xd9vIg53J:sxZ6u5/f+s6DpHbGXdb
TLSH
T11822C7566E286A7B8CCBE20DBA25BF53E6F9503250D11E58AAFCC61C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5c58d37268e07fa030f6482fe1d1b58500c674039faa3d7ea35be6db306e4c9e
MD5 68cc8f82c6598b5349190334cbc470f0
SHA1 da8fe364a0a1087caf6bf84fb0076ca423a20c78
SHA512 c7a8115468e4cb94f46e42e39c8715b9aef056b5891c47a5a62ee40042fb25a222cafb3897965bce4d04325ce6179ed9d8a1bb6ae8e1daa80c965b6f3a3dccc0
SSDEEP 192:sxZ6RlW5/f+sNKIdpdJHW6+WNGY36a9vIg5dJ:sxZ6u5/f+sNDbHbGXG1
TLSH
T1D022B6566E28AA7B8CCAD20DBA25BF53E6F9503251D11E48EAFC861C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cc3a2df535e494deccf3489f1e8975ccfb3fede76343a6c1a0f9eff0e4204cd8
MD5 f709377a8704061ac56c514ccc876d56
SHA1 167c83c967367334fcc04f9128ab46ef3648e752
SHA512 cfc402a71f5c12b170e8fc7933cd2505a620cd55299f59a663cbacfacac3a33694a392e295ba30fdde7dc22d1184a684346edc21dc2e42f6cfcf62f129d3cd1f
SSDEEP 192:sxZ6RlW5/f+s6KIdpdJHW6+WNGY36w9vIg53J:sxZ6u5/f+s6DbHbGXwb
TLSH
T1F622B6566E286A7B8CCBD20DBA25BF53E6F9503250D11E58A6FCC61C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 00a86f04fcd059a1a6eeaf29dc50d5ce9db9e55b7521800b0409a78bd77970be
MD5 683be684cc62df54107bc81dce6b8046
SHA1 3cd32fc7647f21d1d79cd6db3278ddc35842ff8d
SHA512 6055a4a760a0d2ac62bf8fc44fbca27e869ded2f735b8204887ac13245fc5db46a3b0afb0b64001306f9fbc8dfc6f995696db500c611464c6ef3eb36c09599f2
SSDEEP 768:VdKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/6roMl:VdKlm7QWvUYe0u1ja8/L/E/xMl
TLSH
T1C0C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 b1703baf424fb261b24dff48d04f93d40eef163c457908cf6310d748f27ea342
MD5 442b9a5a71767d14aa6f75fd8ae469ae
SHA1 9d57c6d8ead4d8bebac2d0aa95b97f716753876e
SHA512 79f07150e5ade2c18b28ca7e3a3a50e3b2c9e7bba58dc3ece299effffccef9eab7786dabc2cb6e6795f4096a67a9a15cb63b342646c80ee87678f86b080c06b8
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yLAPGKQ6uvbG9mISivK9+1Evx4/YF2er:K8Y4KBm++HiKocL/2KQwGicgKZ+uA
TLSH
T1CEC1DC4130BB024439BE298890A5975E52423173355CFABAFFBE00A64E6FE541DFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87861714-5e61-42c1-a146-9c88832f5dbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\87861714-5e61-42c1-a146-9c88832f5dbb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ebc4ff64f4ca22757e155045cefd162a10176d2228cc323f734c4cebc25b8970
MD5 dd64b00e33d1facdada8342477f8470d
SHA1 ae6707f4448e7a58c2798e1b3b2b7bd4ebf64b0d
SHA512 0c809a46a569052351b38fc6f3e00a1ac708d0f3f449ec920d723b980febcab17304323ac8951b34c75de28c713f4e1143a65b7b65f164775e006ddf57d97398
SSDEEP 384:UZcIhsNwhJDbuYKh//kXxYoBctgOIwZOyZ+oe:Sh7hC/c5cXshx
TLSH
T17E827D36A8789C762DF7D285F58737039F788467E6D46B80D9EDAB2D01DB0A80307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 33361c1b4bc5f0fa8e62021e8a6c2798d5604958cd399c95ee9b2c0f8a719110
MD5 392a3c9809f9db234e27b087600f2b44
SHA1 3834ecfe49b115c469ff03afab8b8902d0f0a2af
SHA512 c78a6b233dfaf9b114e3b5db50967abe04d8b7bee1de227491a7b0ca41467538d516467b4508eb8cb58eaa2743dda9e14c14668d5dfac804f79a5364a0d06b10
SSDEEP 384:RiFiZcISzsNw8TUNTUlIlmJDbuYKh//kXxYodctgOIwZOyZ+oe:4FQ6lwgshC/c1cXshx
TLSH
T185A27C3398A8C97B6DF79784F54A36039FB440A7C6D1AB90EADDAB1D01D70D80307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 870504987ac3d30f89de5d249e36b30423eefa510ab0d6184e376111b8658694
MD5 309e706047cae0cfe40352bd19e4242b
SHA1 60d0356a8e6346d8097957906746dda3be09f2e3
SHA512 d8b727f7da3c94dc2c1ee2f9f05490822c0d9b91eb5520393314318bd516d2a7ece55a30f99c1f7d025a6bf884cb32320a17d6b300cda95eec7a48d1cf45c947
SSDEEP 96:KqONkvQsjpfbUmjH5ih/cIPURHl8h4otop5kaDqBKP4v+Y1xf//ojdpxBY6ywMdA:BOND6JUm0QmiUyl6so//gyweBCg4U6
TLSH
T15A02C739BC68BC7B8EE3AE85B4877B239FA4107BA6911F44DAD82E1D01D755C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b7edc4ff1c728e9673cbfe8c6b4f5957b334c35a22e8d97c077b424eb961e71d
MD5 bff9301dd376113f527103b1e8e43535
SHA1 f4c80aca37f8aa59f0297e59a53d262718ccd043
SHA512 7d4c7b2d346101479d39003831326f80268c546e33653365abb81a8a75b5f8a091a5a49a007493087361c80d1f2764e549b6136bbbfdcd29b531f46be96e6a31
SSDEEP 384:WZcIhsNwmJDbuYKh//kXxYoBctgOIwZOyZ+oe:EhehC/c5cXshx
TLSH
T1D3827D36A8789C7628F7E285F58737039F788467A6D45F80D9EDAB2D01DB0A80307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 347bedfa10add70fb254f2e7913ebb95ead4917bc734e188329e795fc8b8807d
MD5 0c1df2f0b9ca19b24f31f1edceaa746b
SHA1 fe4f7c2b492267a135ac8362cf865c69403655f8
SHA512 c0a62ad197634d94e3da4d2ba96c470c3370d70d5249863dcb2ff6305878b0c7528598234435560d228a643c763f37c32d23a98c8da074a8ebe14521153e4660
SSDEEP 192:BONB6JUAQmiUyF6Wo//gywXFnPwo0Nxk/BU6:BONB6+AzWo//kXxYomcU6
TLSH
T139120935B868BC7B5EE3A591F48336139E644167EA856F80DADC2B1C02EF1AC5307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 133a8be07ecbe7eb3a89967a5b4ad0345d2f5ce8ac238b22ed527a88e624c02c
MD5 b9ef469849d18a156eeb1e096483157d
SHA1 9e9e6930891de8af129e95e8fc65bd74d04cfc3c
SHA512 ea745786e628cc7552f352fbe79ae6a64e8bceff5fcfa811d6752dfa2e28c6519a8b86dbd33b22ccd24f7edd3947352a3eaab6f9482955750e2645b11c869e47
TLSH
T10841FA5CAAF91148F3B37E1AABF7A86D447FB8772E4AD55E10110E4F0622A40C871777
MD5 SHA1 SHA512 TLSH

Submit Download