0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/language/english/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4796	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360815096606"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{F73E3E76-A563-4D9B-B95A-A9D9B0F1D962}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1616	msedge.exe
1616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3388 wrote to memory of 4064	3388	msedge.exe	89
PID 3388 wrote to memory of 2096	3388	msedge.exe	90
PID 3388 wrote to memory of 4796	3388	msedge.exe	91
PID 3388 wrote to memory of 2096	3388	msedge.exe	90
PID 3388 wrote to memory of 2096	3388	msedge.exe	90
PID 3388 wrote to memory of 6084	3388	msedge.exe	92
PID 3388 wrote to memory of 6084	3388	msedge.exe	92
PID 3388 wrote to memory of 3804	3388	msedge.exe	94
PID 3388 wrote to memory of 3804	3388	msedge.exe	94
PID 3388 wrote to memory of 3804	3388	msedge.exe	94
PID 3388 wrote to memory of 120	3388	msedge.exe	95
PID 3388 wrote to memory of 120	3388	msedge.exe	95
PID 3388 wrote to memory of 120	3388	msedge.exe	95
PID 3388 wrote to memory of 5308	3388	msedge.exe	96
PID 3388 wrote to memory of 5308	3388	msedge.exe	96
PID 3388 wrote to memory of 5164	3388	msedge.exe	97
PID 3388 wrote to memory of 5308	3388	msedge.exe	96
PID 3388 wrote to memory of 5164	3388	msedge.exe	97
PID 3388 wrote to memory of 5164	3388	msedge.exe	97
PID 3388 wrote to memory of 5620	3388	msedge.exe	99
PID 3388 wrote to memory of 5620	3388	msedge.exe	99
PID 3388 wrote to memory of 4168	3388	msedge.exe	100
PID 3388 wrote to memory of 4168	3388	msedge.exe	100
PID 3388 wrote to memory of 2368	3388	msedge.exe	102
PID 3388 wrote to memory of 5340	3388	msedge.exe	106
PID 3388 wrote to memory of 1492	3388	msedge.exe	107
PID 3388 wrote to memory of 3500	3388	msedge.exe	108
PID 3388 wrote to memory of 720	3388	msedge.exe	109
PID 3388 wrote to memory of 720	3388	msedge.exe	109
PID 3388 wrote to memory of 1616	3388	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\language\english\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff96523c188,0x7ff96523c194,0x7ff96523c1a0
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,16982262095036711929,10666601949296851300,262144 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,8005267989556211587,5788556144575491231,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,1795477284030819736,1000790095639053776,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:13
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,2513617029799837069,15654367028668209334,2097152 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,4692011410371112803,17449347023658585834,2097152 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,5929474351745782364,3337118751735549945,2097152 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:9
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,4368943078031577587,9104307487019643483,2097152 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,15633307200068118849,3609353126408224289,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:14
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,17071040416021083919,9356111863534903469,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,2823234867867582664,17591528349538685779,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,2823234867867582664,17591528349538685779,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,1726152882677198216,10997655952827047051,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,8959209800796362056,9772395314096568409,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,7195015039656466630,17597649788429746970,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,878204687651640423,1864988949298704727,524288 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4988,i,15730442039158333538,4744279631393872265,262144 --field-trial-handle=2248,i,1500849491186303957,13864494393537305712,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 987a8409b500944c2e91e6f0b356beba7853fbf9bc34127cdcac87e36a5d159b
MD5 711b7276ab4cac5c7d0662623628b4f1
SHA1 c0b08a2ce958cd6b3cf43b1b606bddac6f416c76
SHA512 53334798f71067d33c5ea1fc8c14893238cf2be2d4562c934fc37a0753148ec6d84178d601e10f62955b9a3059a4dc075f4e1a5620c5a7ef13184470d069a6e8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T188B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a38b9b2c84ac4fedaa29d1a4049c502b43bfab78c6ff055614bb1dfa737119de
MD5 32d14f19b61dbe7633cb523a8bc4b6ed
SHA1 e42f79873fd995dbf526d274d9b76bcaed53fcff
SHA512 135cadfd9bf6aa79a7bc3683725399225b748978348c2b7278204607c9dd6de206ddbe7255b5f57992465b52be44ec409915d590d7015497fde316c83f28b380
TLSH
T15741A71CA36A16E2D3F585B72AE1929433F1D43D810BAF6110409CFC8AE6F4830F683B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fd4080d3108e014d3f9417007a20c324633798ac7d93cebde71e95b3dfe1d444
MD5 2be25e6d601292cdff9b72e1203cf66b
SHA1 c2a931da89ada8ebd5891261b590f01e14e7d255
SHA512 f9f4732b8646a7b44f70e8d6efded5d9bad92e26deed7d8f63b3bdac89f77ab8933dcb08a713b33541a2a74f4f8fe121c774836dc6c692c6919f32306f07e1fc
TLSH
T14341DFF3C7E8897D890156F0AB146E2BCE1D0915432C3D6AC9E4AE2BA3E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d8c52d20b508fe967aeb229483a92e35e402a890d62f25ef0546013ff51b4b42
MD5 42b3c042b97126d5de899b8f136ca5a6
SHA1 3520b04808b3b0a99c3ee5226c3fd5409fe18d75
SHA512 f3aad06e6e497532de293547b70750e4619504dbda8904cd5644fac2d5dd939b8dcb11bbc1810f5250e5b6453250e08ea35885fd62c509fcead0c9e61543205f
SSDEEP 192:sxR2RTyM/jK1Ml8wbe/fose/Dde5lSQzoD8p4y/g6+WNIYCyjOEGYIgIJ:sxR2xle/fose/c5l5j/5Ip0s
TLSH
T11352EA156A24997BCCDBD20DFA517F93D6F81533A2901E44AAFC9A0C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5ab58c7ae4b70ec250803461c1270c991d78084b0c5820b4a91a7f7b2a41fa6f
MD5 71c27866ae4db75f9824a2d39ef04b17
SHA1 d4601b9481a8e81571b4802bc0b9fd7fffba954a
SHA512 7f46f3d72aa5d408381cd19f8998de51ea8b391caa83c0f8409da7be827fcb402edcd759c20520821eedf181a17f91f8f3b52867eec654805d6788a4dede2ae9
SSDEEP 192:sxR9RTyM/jK1Ml8wbe/fosG/Dde5lSQzoD8p4y/g6+WNIYCyjOEGYIgD/J:sxR9xle/fosG/c5l5j/5Ip01
TLSH
T19662FA159A24997BCCDBD20DFA517F93D6F81533A2901E08AAFC9A0C04E6BDD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3359733660dd5076da9ab7c22afa4264be5a7c1e8dcdecc45000fb199359b83c
MD5 c8bd79f43eb621c4f96db05e7ab0c234
SHA1 7d2ea564f1912bb42bbd9ad3de63ab682386d2c1
SHA512 963c8ef5c477e34d3c833a6fa6c9efca3e55c12b4b02900965d347fa806d72f8cec15c4364f40936877e3bed0828de0fcacabd375b11eb1035ffcd4b4cbcdaad
SSDEEP 192:sxR9RTyM/jK1Ml8UQUbe/fosGgDde5lSQzoD8pey/g6+WNIYCOjOEGYIgDhJ:sxR9xqSe/fosGgc5l5Z/5IR0v
TLSH
T11A62D915AA249977CCDBD20DBA517F93D2F85533A1901E08AAFC9A0C14E7BDD221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 25238cc9d567775f3f258a4899613bcf28dd939e371eb909c73999e1fa22a21e
MD5 31ae4a0eb1b581b9c8bfdcb4a7e3c766
SHA1 e10c2685bade7926768d0c0a0453f27dea1c916a
SHA512 a4a2de1ce3261be51fddadbe2e23e69924bf3635c4e311eccc85b6266542b396620f6dae27d350a50e8071a2fa6a31014a8e053e45659b7fa7bca5429d48bc96
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqqOrov8:j/8vrQWgQ+fB+u1ja3VqFU
TLSH
T105C2EC2B640CC77E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c24a1034525a60c3ba1372de4e51706bb89bef46ac5ccb898a73e886595ef745
MD5 8c4442744fe95799c49a5b7bf1781898
SHA1 db80bba10d2737baaa45de5077fac7d26e65c5e4
SHA512 c67e9ba334fd52a95bfaec6dc1548e3da585499d6accd1d0d19e86cd19f76575f087eec2b948e2979ffdf529fb757e39cc4d2ea58ccad6ded3bf4d10837621c3
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHQCQHQuQCQ0QUQEQCWQMQZQxgQyQCK4QnL:CbEBVj5JAdSp9/EgTK7j6dJOHQCQHQus
TLSH
T18F912545307A0250387DAA0D84798C2E96C278733615F92B7FE846571F6AE43ADFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 24e2a65f119073af708240fe76baa213a22bc882fe59568f64c7d21c7fe4df76
MD5 7f71d43c44c44a5e29f0fed2d70eb8c5
SHA1 b277704d75d02804d34fc4dd3fe6ee0968f65116
SHA512 1e4c1c83cf442cb94dea649f1d87a45a29c6925130f05e260545eb898075517c12a91e370d9b83ebaace0a7294e0c082eb588909350fda04a4b248d2895580d4
SSDEEP 768:Jrv+4UNbdo3K5b+DIpip8+p3bd66j+4BRv86aLIWooGG:Jbsb+3EcG88+p3Z6n4ymo5
TLSH
T15A03BE32F8A89D739CF6C604B24776837FB8515392C00EE4E9DD6B4D519B0AE230B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 811a88de54324b2c2f01775b0ee3b2839c9efca6b1376aeff4fcc2c49ad40432
MD5 14ea2f41d78f5f9825c0cc5709b3ed76
SHA1 58308e430a4929278593a7de151bd24eaf15f941
SHA512 b44c2aa8fd06dd5e0877095d5fd71cf2da840876a6245b88e670a6d0b87fa8b07ece2dbeb46b060351223aad8cf18794bcdfe55eb5e09fe72b4808fc1fbe0e8b
SSDEEP 768:/T3C5b+DIpip8+p3bd66j+4BRv86aLIWo2ewBKZOEl:/T38cG88+p3Z6n4ym2evZtl
TLSH
T1B7F2BE71EC699D738CE6D608B24733436EF45163E6C01EA8E9DD7B1D109719D270B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 27d9eee4adf7dbad0ea86384b9d29f1f9ae40731001f2785c3e8c9c7ca8a850a
MD5 cf97e4d8cdb803f575aed61c5da3ff50
SHA1 c8cf006e15005eb9ccdfd7447ebd3b23684893ee
SHA512 9ace857d6d4777b2a253b51adf8c5fd65a678fb69dc91d6514e586982a8b6ab8c32a11c4e65bccc6263e240fb6602cc984786f9e8728a629176a6163774ef438
SSDEEP 768:hT3/5b+DIpip8+p3bd66j+4BRv86aLIWo2ewBKZOEl:hT39cG88+p3Z6n4ym2evZtl
TLSH
T11EF2BF71EC699D738CE6D608B24733436EF45163E6C01EA8E9DD7B1D209719D270B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ecfa086dcb1a066200918bb0c5944efd0ff0a1dbdd5e4c3785a82e55a5e11408
MD5 54cb3515a90079332777589d8f901a5e
SHA1 286098c4b5f4e085a5ae92e2b3feb1b8be5c5042
SHA512 2544feb3443b6fffd18c6a15c23b6c6206ade25b6a7c41b1f0084c938bda149862cd64e021655612aadb88e213746a164a03032c70acde8d59f6c419d621ad84
SSDEEP 768:/23/5b+DIRp8+p3bd66j+4BRv86aLIWo2ewBKZOEl:/239cU8+p3Z6n4ym2evZtl
TLSH
T10BF2BFB1EC699D738CE6D608B24733436EF45163E6C01EA8E9DD7B1D209619D270B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1d1bad3dae14e37dde2a4559c6dfd1612591c32f47858fdb132db288b5ee2ecf
MD5 6b93a18c3bb5175cf4e794269813c56e
SHA1 a3eb47090db3a09961a21182505fabc50be59279
SHA512 da376052decf556db0d69c7160779cb4f6378b56d4129c151be32ad4bb203ff1da1c88aee6d1169e5dd5fef3c782f2bedfe262431cb05e056b45aa90eb115e54
SSDEEP 768:Irv+4UNbdD3xcb+NNp8+p3bd66j+4BRv86aLIiU2bwCl1:Ibsbp3yML8+p3Z6n4ya0ww
TLSH
T13603CF33E99899739CF6C644B2467B433FF851A396C10EC4D4DD2B4E015A19E630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5ad3e8a-6db1-4180-be41-5fe1593415c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e5ad3e8a-6db1-4180-be41-5fe1593415c2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download