0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/cache/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360722364944"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{FA91F0FB-41C8-4210-AB63-8DBD8C4F96EC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
920	msedge.exe
920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 60 wrote to memory of 4988	60	msedge.exe	83
PID 60 wrote to memory of 3740	60	msedge.exe	84
PID 60 wrote to memory of 3740	60	msedge.exe	84
PID 60 wrote to memory of 3740	60	msedge.exe	84
PID 60 wrote to memory of 3412	60	msedge.exe	85
PID 60 wrote to memory of 740	60	msedge.exe	86
PID 60 wrote to memory of 740	60	msedge.exe	86
PID 60 wrote to memory of 4812	60	msedge.exe	88
PID 60 wrote to memory of 4892	60	msedge.exe	89
PID 60 wrote to memory of 4812	60	msedge.exe	88
PID 60 wrote to memory of 4812	60	msedge.exe	88
PID 60 wrote to memory of 4892	60	msedge.exe	89
PID 60 wrote to memory of 4892	60	msedge.exe	89
PID 60 wrote to memory of 3840	60	msedge.exe	90
PID 60 wrote to memory of 3840	60	msedge.exe	90
PID 60 wrote to memory of 3840	60	msedge.exe	90
PID 60 wrote to memory of 648	60	msedge.exe	91
PID 60 wrote to memory of 648	60	msedge.exe	91
PID 60 wrote to memory of 648	60	msedge.exe	91
PID 60 wrote to memory of 3168	60	msedge.exe	95
PID 60 wrote to memory of 3168	60	msedge.exe	95
PID 60 wrote to memory of 2508	60	msedge.exe	96
PID 60 wrote to memory of 2508	60	msedge.exe	96
PID 60 wrote to memory of 1528	60	msedge.exe	98
PID 60 wrote to memory of 4672	60	msedge.exe	114
PID 60 wrote to memory of 3516	60	msedge.exe	115
PID 60 wrote to memory of 2400	60	msedge.exe	116
PID 60 wrote to memory of 4856	60	msedge.exe	118
PID 60 wrote to memory of 4856	60	msedge.exe	118
PID 60 wrote to memory of 920	60	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\cache\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffef4a8c188,0x7ffef4a8c194,0x7ffef4a8c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,13008240146929868041,9980699401550522979,262144 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,8992437957748376133,4454687511183782197,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,1441219889943870825,17077659145364030865,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,17336907169909767850,2705689189686649589,2097152 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,8945142882433248994,7646407807060066532,2097152 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,15122027085938914005,2735949057482993165,2097152 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,2305875991590430351,4587287992682984937,2097152 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:2
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9120049179991028036,15072030958337196942,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4900285699725693237,13992898603574080804,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,3140670420982874704,18305710353407465963,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,3140670420982874704,18305710353407465963,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,1890812224333007423,12920030451193276865,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,17378427238297048671,14711449107276039489,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,6589957485982225734,1254520737442171885,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,5259230794348499337,4348996776696643105,524288 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,5411222702260030925,6205417714945688217,262144 --field-trial-handle=2052,i,10694339516882949077,14210225343187441106,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4903d280423bd30ae6eb14894a681a751b9d5753374eaacd03a0f12f9ceca328
MD5 4a2c0241c20486c8c311ec0ed2b6c894
SHA1 4e78edd27ba3dad68bf76d8166bbabce0c89a4de
SHA512 31ecff982dd5594640e976ac0a920fa0d97ba4f11b779f058db5e1bc5e7c59ef326e7ab5cdc2522a939d84ae51b0aa2fd82fb0a65a6e4e855291f8733d5978a5
TLSH
T1CE71F755334244B6EFD6013DCCE206C17AB1B299495B0E6A15709F7E37CC72F0C2048C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c4e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c4e1.TMP
Size 3KB
SHA256 472b4d69beaf225f2febac59beccdf1f14410bf0693c0257e68effb29b5e2785
MD5 2c57897c3bbc7c227a861d55fee47bd1
SHA1 f4d0d1fa0e0281f4ba71f5a6943f726e5e301e0d
SHA512 68ece174528ec55fa240225aaf79ccf8b1c61d6c33e074cb6c65cb779f72af13fe6ae9d623cb5f22a99a2c5162550c61bd7fe1c6b47b0913f3ebdbccfc2554e4
TLSH
T1F771C655334244B5EFD6013DCDE216C57AB1B199495B0E6A15B05B7E77DC72F0D2048C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 4251f24081d0f92f9bfd67dbcf4251c971357e761b46cdf8e77504342a9572b7
MD5 efe4f47d6e5bc4d1bd4322fb2a3c9cfd
SHA1 b24cf9068bf6e6ff9ddb9f545cd95ecfaa5717ad
SHA512 6437f551b187cacae7aed88450f20568fbf8cbcd04e7418c5480e6811096c31e051ffe27c17fa391efd75a16157d5a92ec7cbacd01dac18df5cdc864c3920617
TLSH
T1E31150F3C3D5956E890116F05A28AE2BCE2D0605821C7C15C9D4FF67D7E3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 95a565e22d782ee592edb2214e3ba9e21d2a75a7887fdeacf9e07d51d7ddd641
MD5 b50d756185a87da9ca0b7208afbc257b
SHA1 9609c820e232ca7ee6c12d832350910a91b00274
SHA512 df1fd4f8c876b0973f30d74c8f447e9ff1af55fe47552038bb9debbaa11c5ccd8b1afe5d84e6af1d1592ba72e5a61655f20b861870b82b379a7a9ac525127317
SSDEEP 192:sxZ6RWyM/jK1Ml8Mk9/fVsEsnIdpdKHW6+WNGY4wCUUIgrJ:sxZ6YM9/fVsEsoQHbGz9
TLSH
T1E142E9116A345977CCDBD20DFA55BF53D6F8147392900E48AAFCDA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 441fbc0e640118a2249b946c7f6764cc38be0c54ecc562fca8e776f6c65baf2b
MD5 fcf8650892733e66a9ee84a3f0b20156
SHA1 ab6dd2689da1ecb2454705cfca505464167c8559
SHA512 867b8e4358a4b4199df90cc67c995c54b7d1a4b0324513598861c2422b1ef2c480c14d9523201e38fe101f39ca5f1c16bc84f6f84da110605183b69df0656028
SSDEEP 192:sxZ6RWyM/jK1Ml8UQBk9/fVsjU7fnIdpHKHW6+WNGY4XjUUIg5FJ:sxZ6YqS9/fVsY7foqHbGzZ
TLSH
T15952E9116A345A77CCDBD20DFA51BF93D6F8547291900E48AAFCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0a9adb749d3c775244c5c25f699d28c77d33799c9016f424bd2eff921922b8d4
MD5 3b3a4b524d642751e97bc6f204e06155
SHA1 7fdab08876a20b8fd618e98fee9d97a06aa8948b
SHA512 9de83d1f1b72f8dc3948c1497d7bf99b68386f14c02dbde8fdbff16fd8824fdace530abb3315ab7012cc7926a4d28200775d1cdfaa6aaf791fbe178992182331
SSDEEP 768:nH8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdMro4kYCUnw:nH8iJPNWvx76ru1jahALocdXkCUw
TLSH
T1EFD20A3B680CCB7E4F845E9CEC266F966DD801CB5B984D5447FA880C03CB6EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dfd40fa8069f1354d77c4e31711ea272441e5188906d8a32c07bf847db962cfe
MD5 8e8a731d8e148fce07518f9b507fdeef
SHA1 c8a15f447eb30562fef95be7a4ad4d55482ab709
SHA512 8bb9aa7a1d9acf0c4fce801ec91c9d662c9cfa8a8895bb1cf1cf2b3586de4d246a31865ca1dad983dedd57c0d6133b25a15cc50a308850fda78094fa6bdeef38
SSDEEP 384:/ZcIhsN4n/oC5TRkM8YyEXWRDnTKwBODNZOCQKDX:XhfoMKMyDnewBKZO3A
TLSH
T14C927D715C386C3B8EE2E505F44732139EF88167F6C82F98DAED672C04DA698131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 94c4e2b20f28ef843be2678f1d30a283c1f0ce745c670c7487a32ce23d3e570c
MD5 4c769c3384c9c91f9e93b714187ef398
SHA1 6eadd788e877fcbbc6a90157f616d07c436f8a2e
SHA512 4e9831b208b4b76443e538f65521880cf8368d77085b74b79b2c449cdfc498eccc76a8232a83244b0752893fa03b7d8da68ac91f6e2035f2580d7125ad7c5782
SSDEEP 384:zZcIhsN4O/oC5TRkM8YyEXWRDnTKwBODNZOCQKDX:rhSoMKMyDnewBKZO3A
TLSH
T10F927D715C386C3B8DE2E505F54732139EF88167F6C82FA8DAED672C04DA698131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a0d6c4a6152985f66bd4bfdeec93276e87921931a3132b4ed8ec132f457ee6fd
MD5 642372a818671b03a51a7f2bfb187866
SHA1 9f4b4e3b66e5880d833c30bbb6545017bb7d5190
SHA512 86bd3ee67218fa2cc21ba3472b4e1aae13a182d2f9db0af011c5c5cd6021810a828121c1fa1ef5349f9681bca7aa4409be169c4944f5aa3d3e93a8f4b03a5029
SSDEEP 192:gONS6kDfQmiUyIsZ903tjzorYbracQiezU6:gONS6ghKZ9M8YyKgU6
TLSH
T16C02E83568782C7B8EF3AE09B48B37275FE5112BEA952F84DAE81B1C00C764C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 279f7c3bebc351fea82a6937c099e52ed20dc8b077755f87a1c9033ef120c1c4
MD5 c701401c3e327f8b9073f3a5bbc7bcc7
SHA1 ee12c1d151bb0500cbdf5ae2d22f5c3772633d56
SHA512 9fba75c684c20d3239ec7cf832858d6afefc2d3e011bfe88b4b9b4cc54942ac3552da239a0f1f1780a41b13e9b438b27b6fa5bffc55c2a0a4c76b864dd1f0aa0
SSDEEP 192:qONZ6kyQmiUy/sg2903tjzorYbraEXH6F/cRHqkU6:qONZ6/Tj9M8YyEXWADU6
TLSH
T101123C3168786C7B4DE3A955B48B36239EA5412BEBC93F90DAEC271C04DF65C131A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3113d5a9f8d04e52a2e3567c67be673675cf607f568128bde47a01b2f70638ca
MD5 774600979c1f81369866052f74fc3b8f
SHA1 6cedcff0cdd8dd4c7a7929cf650a7cf3283a6955
SHA512 e8166597b1b7516854eef45a12c765c7dcf7a0492f714add09fac7b15b1c0096c7bf88d7c05200e3f380263a874a80b7925e4d96adcc2cfd4d5f4c6edca4e6bb
SSDEEP 384:LZcIkzsN4O/oC5TRkM8YyEXWWDnTKwBODNZOCQKDX:TYSoMKMrDnewBKZO3A
TLSH
T198927D755C386C3B8DE2E505F54732139EF89127E6C82F98DBED671C04DA698131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c9cc383-ee85-4e4b-9a3c-bc54a26148a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1c9cc383-ee85-4e4b-9a3c-bc54a26148a3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 123548b0933c253a48cd73956fff2a17f4275fa12fa14d3e211b31692f72f93f
MD5 d3b0da5a43d0946b29ce7cc0e26d75b1
SHA1 f3f5c8d2c41538890d94c197546f90b81ff52e3a
SHA512 5ceba4fe5307ef50311f46be39661e7301ab02bdb529d01c584ef206cb4a102edd856d3ea99333152d13fadb023c29e22f9ac29565bdd0eb42c41003547005b8
TLSH
T126412D58B7FA1108B3B76F5A9BF6A86E087E79772E06D45D00010E4F4663A00C9B2B33
MD5 SHA1 SHA512 TLSH

Submit Download