2d37b7d3c5f1699969abd2a7a222949ca344ebe77b25911e0cffeb38303a102b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jetafresh-original-design/uploads/index.html
Size 40B
Sample260925-g35efsbd78
SHA256 2d37b7d3c5f1699969abd2a7a222949ca344ebe77b25911e0cffeb38303a102b
MD5 8f5adb85cb6366682ecc064f005684f8
SHA1 c000b61d2b5d87cac875e1e56dc9154d329fd59b
SHA512 adb1989447633ea34c7f7d5ca89800af443286efb4547fdafb1ed054d636bb71aaf211d615d7f11704b799acfef6ad91148320af776d96286a35f11ab09a4d44
MD5 SHA1 SHA512

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347918720717271"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{F8B6F501-8B2A-47F4-8599-B8D06F9B1E3D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 4720	4796	msedge.exe	86
PID 4796 wrote to memory of 3812	4796	msedge.exe	87
PID 4796 wrote to memory of 3456	4796	msedge.exe	88
PID 4796 wrote to memory of 4648	4796	msedge.exe	89
PID 4796 wrote to memory of 3456	4796	msedge.exe	88
PID 4796 wrote to memory of 3456	4796	msedge.exe	88
PID 4796 wrote to memory of 4648	4796	msedge.exe	89
PID 4796 wrote to memory of 3808	4796	msedge.exe	90
PID 4796 wrote to memory of 3808	4796	msedge.exe	90
PID 4796 wrote to memory of 3808	4796	msedge.exe	90
PID 4796 wrote to memory of 3412	4796	msedge.exe	91
PID 4796 wrote to memory of 3412	4796	msedge.exe	91
PID 4796 wrote to memory of 3412	4796	msedge.exe	91
PID 4796 wrote to memory of 3128	4796	msedge.exe	93
PID 4796 wrote to memory of 3088	4796	msedge.exe	94
PID 4796 wrote to memory of 3128	4796	msedge.exe	93
PID 4796 wrote to memory of 3128	4796	msedge.exe	93
PID 4796 wrote to memory of 3088	4796	msedge.exe	94
PID 4796 wrote to memory of 3088	4796	msedge.exe	94
PID 4796 wrote to memory of 2092	4796	msedge.exe	102
PID 4796 wrote to memory of 2092	4796	msedge.exe	102
PID 4796 wrote to memory of 1152	4796	msedge.exe	103
PID 4796 wrote to memory of 1152	4796	msedge.exe	103
PID 4796 wrote to memory of 4276	4796	msedge.exe	107
PID 4796 wrote to memory of 736	4796	msedge.exe	112
PID 4796 wrote to memory of 4744	4796	msedge.exe	113
PID 4796 wrote to memory of 4120	4796	msedge.exe	114
PID 4796 wrote to memory of 536	4796	msedge.exe	116
PID 4796 wrote to memory of 536	4796	msedge.exe	116
PID 4796 wrote to memory of 2868	4796	msedge.exe	124
PID 4796 wrote to memory of 2868	4796	msedge.exe	124
PID 4796 wrote to memory of 2916	4796	msedge.exe	127
PID 4796 wrote to memory of 2916	4796	msedge.exe	127
PID 4796 wrote to memory of 3200	4796	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jetafresh-original-design\uploads\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff506ec188,0x7fff506ec194,0x7fff506ec1a0
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1892,i,16328700848556623970,17049314978027792551,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16655617041354823770,7988457182239496542,262144 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2400,i,10481243029035191488,9666176083214182158,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,13142507199524852855,7453156805954984154,2097152 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,276936989840703510,8647225362073714394,2097152 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,7184722865155572439,4775888376968545839,2097152 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,1538983969244747489,3744542912471762986,2097152 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5092,i,96491730638805722,7960514842239957168,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5132,i,17089824680046048863,5643698894694970713,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5692,i,5176405727881946446,1563116915267824473,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5692,i,5176405727881946446,1563116915267824473,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4496,i,14969158232946664503,4371481015632884341,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4500,i,11290642188191830479,12790422820107574536,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4484,i,7518267638319336501,16438851842150386191,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5100,i,6366288134012425132,9668813581783101327,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5288,i,3059363796936518218,12666489183839262144,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=772,i,15563608490212796933,13497303560721055656,524288 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5144,i,10808346334825539252,3750620896177996028,262144 --field-trial-handle=2272,i,10308329249177821175,3932560837202415180,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 bb74292f4b83de7ebec2844d27d5b585dc68a77a4ede0e248e7a10f5a291332a
MD5 1654ff970c3071ffc5f6872885426aa3
SHA1 2cfd20cd09b9475ecdb2147af850f7abfc4990aa
SHA512 7c6e758a38ab286b886ac095bd67154ba74ac5445d16b7b17f4ce7a58429fd9c51501faab8aa6dc0cf8b76157920ec83a55780196b45da1ba423dfc755a0db25
TLSH
T1D5E020FD16C4C25D530864C745AD4F4CC195371AE2CCEB15271085C87101880A6C5951
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 de166cf17041005094e120ff5b93fe63673b15ad74e1c3e5e5efa3e24722e8ea
MD5 4ad05d5cf7cf8c432448d3f0aa216ce5
SHA1 6a8088e10c00c6434525fdc403fc8a7b16602b3d
SHA512 6d526f85e68a555b61785fcf3111a78b03d89729a875afe06bd8cd0891d4b8f4843c4913f5ea72605bbd32bf3e63c07b69fd1c057144ceb0aed1b543dcdb110f
TLSH
T157517284954DCBC0F3EA4CB145D9078BFF32318447A7BEA632A8DBB95456764C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590d83.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590d83.TMP
Size 2KB
SHA256 c531edd77837f56a3059e2b75f8528ca9f4d207f4882a163315a0adfcdd923bb
MD5 db97b8ff163e1bd640d65aa452abaa17
SHA1 a28d2fc477ca38600de00ef1698fc4dacfa7cdc7
SHA512 19821b07654f31249001e512c98a1bbb86c323763712fefc8762351babdce2cfb0e7b577ed8129fffdc1b0ab97233c4c7c703f1a17ae9056bad90a1e2cdc9566
TLSH
T134516585554DCBC0F3E64CB149D9478BFF32358447A77EA632A8DB795456754C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a05c1efe4d6981629cdf3d80118915bc26c189c90efd72e83e44b1c702b97b2d
MD5 bb9ec2059658c1bf0d6adcdc0ff78733
SHA1 615d7f727a1994de8a2388693baca282cbccc2e1
SHA512 897eeda7ff768b93ae991d0760181d7ee38ba5513ea393f4bc2d07f406aca6654cdb71377b495257dcbbeeb296bd201b478928a523445a057f499a1b890080c2
TLSH
T1B31197B7C3E595AE890116F05A24AE2BDE2D0616831C3C1A89E4EF2B83E3465E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9177d185f292b264720c55a08edf297e9260de2e5a2b978fbba9eea47d2c179b
MD5 797a2d2ccad89249064c89214af83b22
SHA1 24f56f79678e5929a82e655cc7fb22df1c6f7ade
SHA512 f0a75e829a8feb01d5b5031216710335ebe5faf171c6770b62069785334b2c176c51b398fdfdc89e80ff80c32b39acd7620aaee865e824cbb84f70b723cf0e35
SSDEEP 192:sxZoRBWj/fKsDKIdpdcHW6+WNGYYBaowIgrJ:sxZoGj/fKsDDKHbGfe9
TLSH
T19912A6126E38A57B8CC7E209BB15BF13E6F95032A1D01E58AAFCC61C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 eb282610db06fc5b155ee114b736306adbedc6ca77405c25d41a39ed1b9f2dc1
MD5 72695d34b4341b528b45c27a0a72420d
SHA1 33e487017996291bc7039ed332984df2b6bcffc5
SHA512 ddd76c587c32133e98fb27e6fd47fab3df5437d5167d78df506f73adfb9c8d6ff8036e760d2015071b3d0ecdcc68f712d30617b7e979f7fa838f94e5aaee6196
SSDEEP 192:sxZoRBWj/fKsOKIdpHcHW6+WNGYYB/owIg5HJ:sxZoGj/fKsOD8HbGfVn
TLSH
T17122A6166E38697B8CC7E209BB55BF53E6F95032A5D11E48AAFCC61C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 de473723dd132db21dff832a2589724efd60a625320749405f08c86fb86078ff
MD5 52a7de2af9487a69a53d35252b23f416
SHA1 2ababa5f234457ba6c1949a298502ec6cd9a7af0
SHA512 bdea7b6928e7e43575b256c52e3988e5552c703ba32b035eac9734ecf69d5085acc6f51990aa60df4d9459c96822ac7fe420c0daba45384960ea398c44bef88f
SSDEEP 192:sxZoRBWj/fKsOKIdpdcHW6+WNGYYB6owIg5HJ:sxZoGj/fKsODKHbGf+n
TLSH
T10C22A6166E38A97B8CC7E209BB55BF53E6F95032A1D11E58AAFCC61C05E76CD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 04010367f961b513020f9f2a35cde6072df62eda7bae4d1a6bbc51056f3d8b7a
MD5 6b34c6087f460cf3da4ae03b23cfcdd1
SHA1 cf639cdd912b4c12e1141dc8959f9f5721401af1
SHA512 9a8fb0a1599dfd5f130ac451507930399f0566129b55fd569808f8b01d10a9792d1d1f5d8b6b3712390187a09f63a7032b454951dbc0a314afee63914d0d6729
SSDEEP 192:sxZoRBWj/fKsqKIdpdcHW6+WNGYYBaowIg5tJ:sxZoGj/fKsqDKHbGfeB
TLSH
T13822A6166E38A57B8CC7D209BB55BF53E6F95032A1D11E98AAFC861C05E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 de60557b02cfc40a0dfa5708a2a7e31d64a0828985808cb8396fdace7a1c9af7
MD5 75c2e2506a23ac5a026411e08a4e551a
SHA1 fc9863fe6978678e026ea899bcfb45cdaacda8e6
SHA512 b3950637340393269344d73dacd61247331937a9ee7da098a3f1256859fd003b7ea4dc1e572454018d86f34afce9b46ab5edd61cb232b556ac14d789c1b2a625
SSDEEP 768:OjyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXlropoGjq:OjyYR7jWv3NpBu1ja/CL8OXeOZ
TLSH
T1A2C2E92F640DCB7E4FC01E9DDC5AAF972E9802C7A6548D4047FA994C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9265944643e510c3eae3809be2a9dda71fb6b80bde7376402dc5011f3ec6b6f6
MD5 ec19e03eba61cc6e479ea3b557e9136d
SHA1 bf8e8ee3adeee6f52197209c762fb5770327a0f7
SHA512 309a2ef685e2eb96e49c832756b14e6006f4d6c548b3788d42bd4451d1e271561f04c62e5eb7d97b77a4fd3ad9d4e14facc9ffd4109bc28c8acc6ec6847d014f
SSDEEP 96:KhrANJD1l1GBqIEh1KMEET1IeyMKHqeO/KKYU/S:GrANJD1lkBqFhHEETSDDxD
TLSH
T11A91248031BB060838BE2D8981A3975E52417273B05CEABBFFBD40515D6AE481DFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a83c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a83c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8eb41fd3e05b813207b7821deb0bf6f7a597eb6b4e2f47d0c399bdcfbb942c63
MD5 ff421f648411d69559d086bec472620b
SHA1 3658c3fb961c480b06c7c366a0e5e1416fe31e67
SHA512 44433c9ec26c08d6b5c7c71003ab13d5e3dfe074ae2947f947d7e82c57d3623ea9d83018cf93390af8ddd7444586024c8304394902967320a642a5f32d5918b4
SSDEEP 384:3ZcIhsNUuki1vnQX5+DtCM8l/+Xv8rhhotgOIwZOy8Lnoj:/hh4gkDY/u0rhhoXs7T8
TLSH
T128827E329CBC9C776DF7A585B48636039FB86427E2885B80D6FC5B1D01EA6D8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 4e67fe9816913c7928c4445ddd1c2f59e8a1ba518eacc20c535719d118772238
MD5 fcbbb516734de7923bf5c2617aa5508f
SHA1 b58400ca6ac96b1db86655b12a791641c16f54ea
SHA512 3e519a43a909ce2cd1cb8132f1ce464ef9cd68c1a3647e883bead6595ea670d79cee5fb6abdad52a1e3063feed1cf333113bac7390edf4205bd137c9a7a87909
SSDEEP 384:OiFiZcI9zsNc8TUNTUlIlNki1vnQX5+DtCM8l/+Xv8rVhotgOIwZOy8Lnoj:lFQFlwg04gkDY/u0rVhoXs7T8
TLSH
T164A26E339CA8DC7BADFB9A85F58932038FB55067D585AB90E7EC5B1D00DA2D8130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7397ebc4ac8635ace28783ea683ea83a326cd63a854c0221e7fa3e9e7a4988df
MD5 cf979f2a99cf75234d75dcb8af8e04f7
SHA1 6cfbf37fca6b091c08a6d6c9d48034e12bb63e77
SHA512 4e4c9173c04dc7317f535fc7a7c2df3b9859842b14d437baeeeafa10bf39535e5e133f36ab0d8761ec96c571800fd18b84c444e4bd37a6b1e08e9cf527ccb8e1
SSDEEP 192:EONq6nnHGQmiUy6qQYcX5hQDP1C8jzorqo/qMcPp4U6:EONq6nCYQNX5+DtCM8l/SOU6
TLSH
T1F202DA35ACB87CBB8EF76E46B48636139F94212BE5942B80DAF85E1C10D765C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ec923f52bdbf21b1fdca1a5739caf68a4f404d429778d70923c7a1aa30381a19
MD5 0292a29442815cfa17e27eb69ba4aca9
SHA1 a001fb1331c55777ac8ca459e7e0859b2a40924a
SHA512 bee29b8f535dbfe7f97e9cd3f9d9932c04d17e89cad03240194349afc0285f24321eb099508a6f5cff0a1a3a708960b74e59d51afc22d3dfd207c4804b055205
SSDEEP 384:OZcIhsNUNki1vnQX5+DtCM8l/+Xv8rhhotgOIwZOy8Lnoj:shG4gkDY/u0rhhoXs7T8
TLSH
T164827D329CBCAC776DF7A585B58632039FB86427E2C85B80D6FC5B1D00EA698130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 96a60bcbb0519869ffc7bb36c247cd7c914923ef84406fe70e83469531e5bf08
MD5 6729338d9094f1de8ecce880f7d4b4e5
SHA1 c1450f8ec8f26e921916223f26802bf3f4373d34
SHA512 c6a8bba1950ec7e560a98ce26028f58f9fa70f65610b860a0697251c9b7e4278311f3fe33fa2a8e22cefa309218156fceaab3195936e2ff89a4ecad3638b4d43
SSDEEP 192:EONl6nnHQQmiUyqqVYcX5hQDP1C8jzorqo/+XEcFfErJg3n/5oU6:EONl6nwuVNX5+DtCM8l/+Xv8rOhoU6
TLSH
T108120C35A8A8BC675EE36595B48731139EA52127EA487BC0D6FC1B1C01EF6AC130AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d59891b0-c9eb-4c6c-80d5-6bc286bd7faa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d59891b0-c9eb-4c6c-80d5-6bc286bd7faa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ce4c0cfb92bd17273a8719c2a5c13cd6b89f49cde861855c7bd465338d1d5808
MD5 376d0e86ff64f74468f450a51ba4a58f
SHA1 f5576c14417f8a61d437935f60a27ef0a97e09d1
SHA512 8bc28f4999e7cb9a3ed5dd88027bd11d43dc69184e7a4abd476425275deb752c6f22c2b0fbc8c4727801507e0de72aa148ac5d4be2979fec2dbf03400d4b5d46
TLSH
T1F7411858B6F91109B3B76F66ABF6686D487BB8733E06D4AE00110D4F0676A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download