4a86fddb4bfaf2189b61fab6cc45c07657547c9cb01485f845c388061483f025

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Batalkan_transaksl/banklain1.html
Size 22KB
Sample260807-phacksvfjc
SHA256 4a86fddb4bfaf2189b61fab6cc45c07657547c9cb01485f845c388061483f025
MD5 4bf90aab6477d6163e55f0020ee11251
SHA1 4b558f59923947c8c319201e020ba5b6ec8bf9fa
SHA512 93d3fde1be23c875737c9082ff4f46d2997a4246d3b6cf2ec17a46f04a2990782f02e3235210b8ee0492c439386f8bffee7c7794a2e1245f2369346032eb5589
SSDEEP 384:pHFq/Z3MwopoWoqagsJ3Brh3v+sFFaGFbIW0e5T2e5TfaHgMpwVVbdAmiriGi1in:cCGLTgsJFhf+WFhFbKduaHgMpwPby3Og
TLSH
T1EFA2FB6153F01925B02B42A85AF66B487B3854B3A70ACD7DB6EC20A1CF4AFE1C5537CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4680	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305787755639672"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{2F8317C5-1C8D-4A06-A433-DB09A4FDD935}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 8 wrote to memory of 4928	8	msedge.exe	84
PID 8 wrote to memory of 4680	8	msedge.exe	86
PID 8 wrote to memory of 3576	8	msedge.exe	87
PID 8 wrote to memory of 3576	8	msedge.exe	87
PID 8 wrote to memory of 760	8	msedge.exe	88
PID 8 wrote to memory of 3576	8	msedge.exe	87
PID 8 wrote to memory of 760	8	msedge.exe	88
PID 8 wrote to memory of 3240	8	msedge.exe	89
PID 8 wrote to memory of 3180	8	msedge.exe	90
PID 8 wrote to memory of 3240	8	msedge.exe	89
PID 8 wrote to memory of 3240	8	msedge.exe	89
PID 8 wrote to memory of 3180	8	msedge.exe	90
PID 8 wrote to memory of 3180	8	msedge.exe	90
PID 8 wrote to memory of 4508	8	msedge.exe	91
PID 8 wrote to memory of 4508	8	msedge.exe	91
PID 8 wrote to memory of 3716	8	msedge.exe	92
PID 8 wrote to memory of 4508	8	msedge.exe	91
PID 8 wrote to memory of 3716	8	msedge.exe	92
PID 8 wrote to memory of 3716	8	msedge.exe	92
PID 8 wrote to memory of 2508	8	msedge.exe	96
PID 8 wrote to memory of 2508	8	msedge.exe	96
PID 8 wrote to memory of 2044	8	msedge.exe	97
PID 8 wrote to memory of 2044	8	msedge.exe	97
PID 8 wrote to memory of 4456	8	msedge.exe	99
PID 8 wrote to memory of 1760	8	msedge.exe	116
PID 8 wrote to memory of 1168	8	msedge.exe	117
PID 8 wrote to memory of 3124	8	msedge.exe	118
PID 8 wrote to memory of 884	8	msedge.exe	122
PID 8 wrote to memory of 884	8	msedge.exe	122
PID 8 wrote to memory of 2116	8	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Batalkan_transaksl\banklain1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdf809c188,0x7ffdf809c194,0x7ffdf809c1a0
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,2372140165651221309,14975390498716190445,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,65721596493895142,10459458500743697808,262144 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:2
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,17282946856023809948,16202080598555729000,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,8084707021050673413,887541438811461165,2097152 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,6579494249308721611,1696015738648163703,2097152 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,11035393061913831322,15531230839296364979,2097152 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,8875963796947155815,14735169337246039237,2097152 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14261802320527797164,15965803936039239179,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,157288172850827418,5123310996545639162,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16726568282421829057,12051224717587130956,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16726568282421829057,12051224717587130956,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,6755931526951539101,10389762558346050151,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,14509591096429648435,6118041612162398501,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,16227650137201387731,14757590445475335899,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,3748604042580014149,6533557372238815137,524288 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5764,i,2803566703691294695,8659119565604310064,262144 --field-trial-handle=2872,i,6766999426562236563,7818529727238728663,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0857bd06e978ff89c361e63d73c381ba16c1e1a3b7303a0b1cd3fc4bf2273ad6
MD5 092e01b66f237725eef9766230b34de7
SHA1 5a7b1f2c564b0aa28203ee3ba577c11391e4d0ed
SHA512 de65c6e3e4619e924ae717f240b07d8f3ac36782bab4633d6138ed9614a806805e4fd97be326415c8ac550b33af9022c7c29578c42e50b2c3734aa291115df76
TLSH
T197515EB854826423E7251031A1DA2F7E38B6BFDAFE5BCD7740908D32490FBE18369478
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ffc7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ffc7.TMP
Size 2KB
SHA256 c59bf567513168f4423d51b570a5ba0d50b918497e6902918d03d5d62237257f
MD5 a230b2c7605de88ae4907c0479d82b17
SHA1 7dc1f7107a3dca38b44dd27fa4c3a6ebcc44c5cd
SHA512 1521849b2f7c2d136b877e382ca50c7003043c97bed01085a9469df1721fef794c770c50a6364a715b19c147693aee0bf341d8162b4d7d877b1fdb3b5c0d78b2
TLSH
T1525161B854826423E7251031A1DA2F7E3876BFD9FE4BCD7740908D36450F7D18369474
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bfc14083b3bbcef84a0c5a93507b7273e4618baec9e1e3bde11d465ce7c65a6b
MD5 20636b535ea5dde0e6485e9830fbd88f
SHA1 f4c5f193c0e5f897395c88c551a65e69cc86fe9d
SHA512 7fa169dd2b52a15d383400b4f0dd18c5fad32f0b6e01f5480e57afe628acc99d5d6e449afead471bc592f677b09a1c8ad97c666f23ec6dd83689b3823eda3bd4
TLSH
T1FF5166B6C6D8477E891212F09B257E2ADD1D155B42283C2A8DF5BF4F63F24B0D20169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fe162bb95c48a2e735360c630afc2f5677c3e7df3b65cc49477ad017d318b813
MD5 0febed780dbef0d93a60d20176c48404
SHA1 76f3291b28c7262bc752d345600b209cb7416989
SHA512 736d894f995d7e0909d8b38548c8cf9870bc605e267e62bb4a76b0d1698f05e8633ed3f53cc970ddada1f7e6364cf068b790eb74250ff605239de3399a667965
SSDEEP 192:sxZI/yM/jK1Ml8MkU/fuspCDYu+IdpdcHW6+WNGY9IKhNXIgrJ:sxZI5MU/fusIsguHbG89
TLSH
T1F142F8056A38A97BCCDFD209FA457F53D6F9447292900E54A9FCDA1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 facd370183e41270fe3807988d8bbba41b55803bf1368cca25bc157dd0134943
MD5 81b5bf5c6c480c596e7d1581d78cc479
SHA1 b3d174606bfef0d88b5aab0a761a60e602597b25
SHA512 94769bf69bd5712ee272859adeafc40ccaa9dc8847ee7cff2369237dbae749c6d9de56e500bbe47db45f54fb20497374f52e7ac03942f9c417f9ddbc2c1528d5
SSDEEP 192:sxZM/yM/jK1Ml8UQQkU/fusGCDxj+IdpHcHW6+WNGY9IwcVXIg5NJ:sxZM7qjU/fus19T8HbGRp
TLSH
T1C752E815AA389977CCDBD209FA457F53E6F9447292900E44A9FCDA1C04E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 73140c49d3b690cbcb98c9a7b7e8ff45d389ef85058f4f3d567a634357a5a1a1
MD5 ee281fc946ae190d69ddf71cb90b7bcd
SHA1 a255ca0804aedad5ce5e69c4db25ea2b5140c0db
SHA512 0b6d68c41d12df35a9c0d2a104963ff469e74c288c978ebc92619236ca3039f31c86afe8ec3edb28d303490741d804c0b4f5345252d3e8051bae180827537e0d
SSDEEP 192:sxZM/yM/jK1Ml8MkU/fusGCDYj+IdpdcHW6+WNGY9IKhNXIg5vJ:sxZM5MU/fus1sTuHbG83
TLSH
T12752F8056A38A97BCCCFD209FA457F53D6F9447292900E54A9FCDA1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4321ff11bd0028a3314c2ce48d6007a4fca6594572c7ca52d25b16db73c5e2f2
MD5 adcf31129d592e010d0dfc3809b0f405
SHA1 043b68c34a4ce3fa1eb65acc528aaf7101522351
SHA512 8f09d878705f052deacbbc28b831032e42b236ca9388aab9575b57421848587e064313a4b3155a49cba7811e9be2e5b7c6726df5c7cc724f4f06161533ad9503
SSDEEP 192:sxZM/yM/jK1Ml8MkU/fusGCDxj+IdpdcHW6+WNGY9ISXNXIg5NJ:sxZM7MU/fus19TuHbGEp
TLSH
T1CE52F9156A34697BCCDFD209FA457F53E6F9447292900E44A9FCDA1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b91b998886a4d8460a978fce7e373b506142f08030afde9735f52c7e282b5892
MD5 89c7f8e5b965fbc83140db20b64eb73e
SHA1 f0221927b9ccb0744c2fb9d2fab21dec7364a6a8
SHA512 8029ea70d085864a7e6d161c4fbeca5961de4582c9e7440d7ddf1eb4800d8827120074a0aa49632a0539186fdd6384c22a11dd21fbffd095c82dbe529734e82e
SSDEEP 768:CTcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNdro+g6f:CTcv21wWvu+Z+u1jaeFLeRNW+v
TLSH
T160D20B2B280CCB7E4F841E9CED2A6F866DD801CB57988D5447FA484C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 523ba54480295f9f854045f8a3c10abc153245d532c54408f297aa2cfdc0950c
MD5 c122b8da5c52114d082eee632e2484df
SHA1 69cb83cdc8b4e9845ee1a6db4fe7f33c936f4b8c
SHA512 d8a59c30c72923ba85f892ad2d7bfd58a2c3ecf7f9b900d1a8e41c8edf5fef9aa38c3805745f025cd9637ead5541669b8ad0a574a9f2bdf0ba951f440210843b
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKAIKZSGON2KWwCnr+JFTBBdI9UQqtdKCcl:mT3LVxnr+JFTBBi9UBtXcqzs7z7ca
TLSH
T115C11302703F0242397D7918A3668536AF4272673818A8BF7BB910A15F27E221DFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62ee725b-dcd7-4495-b15d-b0e75f84c798.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\62ee725b-dcd7-4495-b15d-b0e75f84c798.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 cd27bf978d7773b850095d4edb0245758e4ea45c5a941d48aebd54df25746ca0
MD5 abc9b2478e99324c3212c8e91fb0960f
SHA1 8b0627efadfbd1925690245f5ef7cba003cea6d2
SHA512 471eb0ab80dd056b335b11245a2e607af5b5f084e00aa4eb76c90d1b3dded88a4d2de407a330e147c6e2016707b7e8b3b0f75e5f510173a6d881946584b26522
SSDEEP 192:ugLsNCpQwwN4Ww+YLe4/QmiU1Iwrn4e+CG6+FdetRLXx++JJi5q0U8:BsNCpSCpziErr4e+CQdi++WlU8
TLSH
T140321A319C385C6B9EE7A154F44736139FF4412B9AC63F90D5DC5F0C01DB69C230A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b42c2d490bbf08a90c38f57abaed93a509d9849e3cf200047fa85b529da13a1b
MD5 2676af51dcc77b49e18dda4755219d1c
SHA1 7c570c69055ca5acaa07344c0219a30867cef03a
SHA512 6b4c9c3b3eb98455f2a9ab7d0c2bf5aabf0934d083c65e0581039250e6e6c518892af34d8862ec9cab9dfe01ecaa46a590cc6013492c64d0358f86c50d7ee940
SSDEEP 384:DCBiFiZcIZzsNN8TUNTUlIlBSCpziErr4e+CQdi++mlf5UrzX0Vu:DvFQZiwgvpNrL4ExmlSkg
TLSH
T14DA27C724C68983BAAEA9A44F84B32038FF48177D6C676D4E6DDAE1C019B1DC1307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4a30b8b73c5ecfe6dadf77096883ddfdd5420be1321cb3b93086e7b6c523a0d8
MD5 c85cfe382268d49518f434b62b76c758
SHA1 e81d3fe0d16e6df8e645897708423d90a156807d
SHA512 50d1e319bc32c7db61afee8abde95c46914abba4352f62a0dce7dd23f1aebe9e8307593815c54a68de1ca07f20730709ed498716bca8d340be9cc3cc80969d0a
SSDEEP 384:zCBqZcIZzsNCBSCpziErr4e+CQdi++Nlf5UrzX0Vu:zvZbpNrL4ExNlSkg
TLSH
T17D925C715C786C3BAAE6E544F48732134FF8912792C63BD8D5EDAB1C01DB59C230792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8e5d3247b808104087afb32017f5dbd8749244c360784e52485944820654b420
MD5 54e2f557491311e2ee04358829500848
SHA1 9b70b8b4319cc0866bf02ac5c375ad9d019eb65a
SHA512 847586b136950f2ccebc06e972d4dc622a33bb04263b1acfd8f7a3dff704ef07a7b44b8df397ad807d48b3a18171a3567052d69cabad731d855f03c0b2592031
SSDEEP 384:NZcIhsNCBSCpziErr4e+CQdi++Wlf5UrzX0Vu:VhbpNrL4ExWlSkg
TLSH
T101926C715C385C3AAAEBE544F48732135FF89127E2C637D4D5EDAB2C01DA698230792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 e8402004a283cb1e2ae6224885b5c380f04665c276e700e41eb79e81e7df3b6c
MD5 966c202cadfa4ec37bf057758f8881ea
SHA1 a444a8ae0c1529b127f86a39755ddff2a82e6edf
SHA512 b1153ab392a639a9b7ac4b37af742082e2412faac74714f333251443cb12c0018c643a55d0f3487f8cc266d82f0305c605f2333faae8ae24bddec029a3bac453
SSDEEP 384:BsNCiSCpziErr4e+CQdi++Wlf5UrzX0VH:BgpNrL4ExWlSkZ
TLSH
T13A724A356C385C3AAAE7A544F44733139FF8816B96863BD4D6DD6F2C02DB29C230791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4d8913599ff9f1ab41956ec103a332593745d40694e7874008322dc56fd8e436
MD5 955f5c9a738e853dd7d691f18be255cf
SHA1 bdb548fcbcc6f87c808e925e8ca47c3f5dc99b4c
SHA512 98bd962402eeee5d965fab4356d1aba218db7ba68474d7d8c3fe82bf8e1ab640fb6fb7393efb2fa88adc8890a496960b48098a5a1010c86f3d954fc75db19e6e
SSDEEP 192:JONB6v+YLNQmiUyEJZh+CG6+FdetRLusOLTU6:JONB6vz/7Zh+CQdM4U6
TLSH
T18002DA3568782C6B9AF6AE05F4873A235FE4103BEA962F91DAD81F1C01D765C2306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2142bc8965d50607afac25b20886e81b5c80c78781ef7ec3033018db374f12fb
MD5 de7ecf7268c09ad43c6f9b1b50c18f67
SHA1 69345aa5700988fb83588b853a29462a1fd89432
SHA512 1c9cf3f9e1460fb10816781f787e7be0bf9368495a5e7321fa88261086395b606238e47e8fc29ee5dc346d44a80f7eec5072558aa0d93d775ea73c9bc404c5e6
SSDEEP 192:8ON76v+YLtQmiUyOJUh+CG6+FdetRLXx++QCH5q0U6:8ON76vzHTUh+CQdi++xlU6
TLSH
T1C8120A35A8781C6B5EE2A554F48736135EE89127DAC73F90E5DC2F1C02DF69C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0359e932-1c7e-4efe-a1b6-cb2db38bc18b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0359e932-1c7e-4efe-a1b6-cb2db38bc18b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dba0dcb74ed7e85a1aa4d2ac1f56e0cdd3e6b0c4a567f42f888143e9905456e3
MD5 2a8071cfdf5c7c8b0a93513a8277524b
SHA1 cdf5678a458832ff410917dde4034be70e4f620b
SHA512 bf99bf277c8ff0cf8e8a3714cccec90ef180ff1f63fd3de74337d4025a7fcc4e20ea292dd5b4a6098292bd5b150a50fd24b18a6154c20137baf40ea588361a74
TLSH
T10E41159CB6F91148B3B7AE5AABF6686D847F79372F06D49D10110E4F0A22F00DA61737
MD5 SHA1 SHA512 TLSH

Submit Download