6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4

Resubmissions

13/08/2026, 05:28

260813-f6e4as1wby

09/08/2026, 11:11

260809-nasnhsab853

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 11:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4.html
Size 67KB
Sample260809-nasnhsab85
SHA256 6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4
MD5 791e450f020f6858d312df484f43f8d4
SHA1 1c9f9dab1879fc5f0269d499ff8d7d405132cb36
SHA512 e59152d61cd4982a8c7df04888ecce99571b70f6b2035a063e1d67ed75630f0adf4fb66e687093eaec21993d808c20f0f75cb066a42bca38aff9ec48a961f8e0
SSDEEP 1536:WBbLAdxjmHKRqp6UF7n6fJXUXwpnlLHZW5:cbLAriHljYW8a
TLSH
T132638EAEC39237E9D72D174599D95C87332F1CCA242008448AEB4CCD9B2EDA75D792DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1240	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307475344362473"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{1597DFC0-E3FA-4426-AB44-BD1A83603CC0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4740 wrote to memory of 5108	4740	msedge.exe	85
PID 4740 wrote to memory of 1240	4740	msedge.exe	86
PID 4740 wrote to memory of 4140	4740	msedge.exe	87
PID 4740 wrote to memory of 4140	4740	msedge.exe	87
PID 4740 wrote to memory of 4140	4740	msedge.exe	87
PID 4740 wrote to memory of 3632	4740	msedge.exe	88
PID 4740 wrote to memory of 3632	4740	msedge.exe	88
PID 4740 wrote to memory of 3356	4740	msedge.exe	90
PID 4740 wrote to memory of 3356	4740	msedge.exe	90
PID 4740 wrote to memory of 3356	4740	msedge.exe	90
PID 4740 wrote to memory of 564	4740	msedge.exe	91
PID 4740 wrote to memory of 564	4740	msedge.exe	91
PID 4740 wrote to memory of 564	4740	msedge.exe	91
PID 4740 wrote to memory of 4460	4740	msedge.exe	92
PID 4740 wrote to memory of 5032	4740	msedge.exe	93
PID 4740 wrote to memory of 4460	4740	msedge.exe	92
PID 4740 wrote to memory of 4460	4740	msedge.exe	92
PID 4740 wrote to memory of 5032	4740	msedge.exe	93
PID 4740 wrote to memory of 5032	4740	msedge.exe	93
PID 4740 wrote to memory of 2328	4740	msedge.exe	97
PID 4740 wrote to memory of 776	4740	msedge.exe	98
PID 4740 wrote to memory of 2328	4740	msedge.exe	97
PID 4740 wrote to memory of 776	4740	msedge.exe	98
PID 4740 wrote to memory of 1940	4740	msedge.exe	102
PID 4740 wrote to memory of 3888	4740	msedge.exe	114
PID 4740 wrote to memory of 2628	4740	msedge.exe	115
PID 4740 wrote to memory of 2320	4740	msedge.exe	116
PID 4740 wrote to memory of 2916	4740	msedge.exe	117
PID 4740 wrote to memory of 2916	4740	msedge.exe	117
PID 4740 wrote to memory of 3076	4740	msedge.exe	119
PID 4740 wrote to memory of 3076	4740	msedge.exe	119
PID 4740 wrote to memory of 1108	4740	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc052fc188,0x7ffc052fc194,0x7ffc052fc1a0
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2108,i,17854565047223796007,9057937662188648358,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,15844404581519538811,16660861265689805504,262144 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,238121182738080089,12108886856272905820,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,11222165369616668898,15733824016338535503,2097152 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,15362054361494816408,902509349548449574,2097152 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,9122723823412211515,7242442661677614020,2097152 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,1486505471854129616,15873363613430366614,2097152 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,3167108365782831534,2024717975442647281,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4061949562356814650,16473646218603901030,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,7283881138857491103,15812507971487458034,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,7283881138857491103,15812507971487458034,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,7852011910912834378,13638779140240387004,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,17033492737798822789,12727328129652893365,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,1668056747257059808,5733926572058942765,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,9799380175766226790,14639476988107335221,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,7355784028674138227,13539065237923384788,524288 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,5978001910085870926,804423751542949627,262144 --field-trial-handle=2068,i,17753408293300629887,4441834985221515355,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 57dbfd053f41c26bc1b44a26a59d2f68b6caee01fdababe37a4650bd490e8ef2
MD5 33d92f63382d0353183a1e3b71b67582
SHA1 5daecfc49465feda1529d3d5aa04ea9a801e73a4
SHA512 5fe9370d52e6bca126066b896b54e218fee598f9ae8f3356209ab0a6e221d527cd26d7d594139c2511c894a6ff0faf59ba28cdd1636939f3f34e5c02bff9acf3
TLSH
T19B517F3C1A110862EBC00533F0FB9A54717985DDFA13AE73C6B36D7A6B0A325C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c407.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c407.TMP
Size 2KB
SHA256 876642507b8311415c5e50cfe03d1bdce31d57f8a3f881d20c1afd4b2e129cea
MD5 f9c1032685804a7a2572bb49bb3bf44b
SHA1 62e5d9ca0b636371ef6ebed496e308ad33e575b8
SHA512 cf43441b2cb465bcd4eeb739e8bd4a9194308be552d1623c0c11efaa4302898e515bf2034fcff5408b2caf93c328abe20cf90ab51c4d9f12c7ab50bcef6e66dd
TLSH
T171516E3D1A510862EB900533F0FB8A54B17985DDFA13AE73C5B35D7A5B0A321C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 03c7cffe68400726b5cfe28cc1d9be1439e1649a709ae14ca800651578c5d6ea
MD5 d4a5b81cf9f0b79e142c3cd820165190
SHA1 97c9c9e2c6520c635a89aa83b4c913dfeabc7121
SHA512 037699d911239224e03288ef1fbacce36aef254fc0a6cfccf818212e9151e37d5af4d958d9445c5180150762477fff2d665edd1bc4c961652546ed469763702a
TLSH
T1A8117DF3C3D5856E890516F06A28AE2BCE2D0506822C7D19C5D4FF2BD7E3475D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 111cbe9c4f3068fc01d174952723cd1e1fe251f8814474d299d1bcb7a0638502
MD5 33df42c09f069f0bf8cc451ce8957203
SHA1 e58c6a38e6c04eb4b473f37f0656a2c33b267560
SHA512 7a5a792676cdbe7e8211142793a82c244eb9623997532c7b80c374c2117f1dac710b82dc8265ce89264ecb2e1b74b5a18943453a81f7776b61426744b1c4441f
SSDEEP 192:sxZeR4kn/fpsvNyJFIdpdIYHW6+WNGY9IKKYrBOtIgrJ:sxZexn/fpsFyQpHbGPmOx9
TLSH
T13A22B8126E38A9778CCBE219BB15BF13E6F95031A1951E58EAFC961C04E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2a4a6be8ed35a856b9241eb89975d20608124e4e5274b6fa3f892644f9867aee
MD5 3ba2a329a39b0cacdda4a263a3b6bf09
SHA1 912890ab7d9a3c47b140f085ca211c3750e38b11
SHA512 bb6e7787ec8679183505150f7cbbff8650445c384c42d1c20bc064b15bc7666c173d7ff6bf794822994660863f50e1ec7f238922df92b8b5fcccb85d43a3c4b6
SSDEEP 192:sxZeR4kn/fps+NyJFIdpdIYHW6+WNGY9IKKYrBOtIg5LJ:sxZexn/fpsOyQpHbGPmOxb
TLSH
T1DD22B8126E38A9778CCBE219BB15BF13E6F95031A1951E58EAFC961C04E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1300000b88e420ba30d5aa8817a26a27de29755f6904c80e0bffe55d024fd464
MD5 5367b5fdd8c909963f470f7d2b3c6cc1
SHA1 80a65851ca5ac04203efa73ce325259a610a1886
SHA512 e61a3b6bddfb49d885f1e26a709eb48d18cb786717634350bd5f76f1279b478f048184bc15b8f3ec460ec7aaf432f8ff5bb080df3937fe9bd1170ad4b7057a42
SSDEEP 192:sxZeR4kn/fps+NiJFIdpdIYHW6+WNGY9IPKsrBOtIg5pJ:sxZexn/fpsOiQpHbGaCOxd
TLSH
T12522C9126E28A9778CCBE219BB15BF13E6F55032A1911E58EAFCD61C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7853c51e40326aa3353580de6b0bfd0b7910439d34450cc3b5d504f4935e2f06
MD5 e49ac3b17fa00f87bde0401492119bb8
SHA1 e10e2fc7b73d6df35925f2c80b668ce330101352
SHA512 e2e37421cd862d7ff4a79338ac6cd4ff80063d1547765f14cf62d3b7fbf5ed641d68de3cf5ebeb4ebc9ebe534807e9131ab3535d1f41ffed49b640dcfe6fd775
SSDEEP 768:1zyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7mro1bqp:1zyvIZwWvu+Q+u1jamFLeR7d1s
TLSH
T137C2E92B240CCB7E5F801E9D9D5A6F9B3EA802CB67588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b833352c70a435db8899e8798e35c708f28a12c32cb5f7c9b747a5b4536457bc
MD5 1b517da2abee4977cfc821b6b71b749f
SHA1 f811c58078d8c35cf73f9a34cefe82e6bdcab604
SHA512 87f2be1ae08fe2c3a087340d38151c40bd59a825451b9d0848051450cbd94dffbaec833370e3fe4cef28e699a53657871b48ca176801f08f516451a3935fdbc4
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDidxmKakSaW4Kj6a:mTL1vV
TLSH
T13D915155B0BA12813C7EEC4CA375956B8A4234E27419A43BBFB810A10FA7E151DFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 d6703597a91a7889142475cab92543c1fe493f0212e3533d71452ee46983d006
MD5 dba33d17acf2ba90105be21a91a4a271
SHA1 185aa993a34b1b8aab977649b18f2c28abdb1e12
SHA512 707260a504de065e915df92befae054505c3dacca10ecfa9aed85c48c956e2bb92df396b56b9de6d426116888435bed34ebabee41a32385d6e1e8c8128caf54b
TLSH
T1F221EBC0E3ED50D46E8BEA45D23D5407D0A13EEA150E5832B72D55F44F888140F3ED79
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596018.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596018.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 241811ddad2f5467622b878c5352a21f0a29ea2b1f621272847c9f53037d47bf
MD5 a4076fd0d3ef015a9711c3f4eacf160a
SHA1 4381174ed1d62d1910dfe2c2761aa4b981ca329d
SHA512 bec8f2e148601373f3eddccd8c34917520ffe9a9d91ad2d979a67d72079ef0a5cd25f68df816720ba8d13ca8ca6cb20cb0832eef0dc132d81243a41f63074e20
SSDEEP 384:5ZcIhsNvXQhzi8Mr2e+C9d6NXet0RD58yKfQVj:RhB9YBFj0RmyKfE
TLSH
T117928E329C382C7BAAE7A541F44636179FF89137E6C62F94D6DCAF0D01DE6A81306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ea5a576ab64f3eefde1a3c75d1e25f62155fb32c35ef76bb5fd11a5c4e37e3c5
MD5 25f06c2bb32b2c66ebee2295b6492462
SHA1 fb16d70e33410a692f0df9bbba47e4aaaad62682
SHA512 ec96fbbeb04cd441af628ed9db3a5fe92fa208d1b1ed68b1afd346b8e6410b89f7f38a3d7b743ec19e7fe95f11fd3d750c3a3fa92cf63ea8fd64b2ed073eeba0
SSDEEP 384:4iFiZcIkzsNR8TUNTUlIlmQhzi8Mr2e+C9d6NXea0RD58yKfQVj:DFQYMwg19YBFM0RmyKfE
TLSH
T1D5A27D338C64587FEAF6AA41F84A36178FF45177DAC66BA4E7C8AE0C019B5DC130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9d880927da2191d9f5e41d629667f08ba705cccc3b2b7bf3ef1e45aa75be7da3
MD5 3bb2a0c4a8fce960b4052275e39bca5f
SHA1 a939245e78524ade8cd1d73021bd06b0509df27c
SHA512 dba5f458aa9c6ca34b441c7d878006129e97104f9f3d6d9a23b7c47c9eb5d80b28931d070db174eb5b9d32e9c3a47403788e30ec5fc8eddea53c957081f26900
SSDEEP 192:JONWS6v+YLNQmiUy/1Zh+CGX+FdeNNmus7pU6:JONT6vz/wZh+C9d6NI9U6
TLSH
T17D02E835AD382C6B9BF2AE05F48737175FE41177E9962F91DAD82E1C01D764C2306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 78a712546aaadf5bb0b6f55f6669b21b536deed4fd020e3bbd03682001e6e88f
MD5 2d6506055309d1a52b978f1c14f44404
SHA1 4dc004073bf2e2b9ab1e8ca139f15f11d03f345c
SHA512 2cc6d7890c06f1387e54eb6c0af790f70e591961c4dbd397bcea04bb419bb84d8c4e141b7c940e9349ea7b3ba12de0406da31cbe8f78cd7c187b48690bc1bb3a
SSDEEP 384:aZcIhsNvmQhzi8Mr2e+C9d6NXet0RD58yKfQVj:YhC9YBFj0RmyKfE
TLSH
T12A928E329C382C7BAAE6A541F44636179FF89137E7C62F9496DCAF0D01DE6A81306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3fcb1f10a47794e6ffe26dbb9662a320441bb83ae42cc30ce061c10e83bad7d9
MD5 de580bf212c3e5ae2e2c74e0b1b96d58
SHA1 469b4587bd7ef3f886cc19f7c7e1698540957e3f
SHA512 a2215c78a7684550c4af67ca08eae03e7451f7e29853d4027cd0462ba0b5099a97bc6cf0a346ec047528df9564d140b682c2a7024ec786a5897e4e554ac6fcfe
SSDEEP 192:zON66v+YLGQmiUyY1ih+CGX+FdeNNkGQNtCHGqIU6:zON66vzmlih+C9d6NXea0U6
TLSH
T1BF122C35AC785C6B6FE2A541F48336175EA85137EA8A3F90E5DC3F1C01EF69C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f2cd179-4a82-4f17-80ef-d6580d082a46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f2cd179-4a82-4f17-80ef-d6580d082a46.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4010facbef3b3ab144340d306032b93df9b73f4cffc4dec39dd37fcf662bd4b3
MD5 36a9d0d3ee13d0700cf2d57ee3e7936c
SHA1 cdad36b5477825d189ccc901b35f13ee2e690660
SHA512 33b5e61a874bb7cd10b5b934bd32a47aa9d75e7cc73705d08cff45a9e7a715f8e89923245a99f50570a0dd51bb4d599979ae467d68eb5708fb6be543d0baf20d
TLSH
T14541FC5CB6E91108B3B76F5AABF6A46E447F7D362E0BD05E10110E4E0623B41C971B37
MD5 SHA1 SHA512 TLSH

Submit Download