0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/language/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360779103305"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{E83BA8ED-A25C-4261-A724-CA2DE9037699}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4428 wrote to memory of 684	4428	msedge.exe	89
PID 4428 wrote to memory of 4308	4428	msedge.exe	90
PID 4428 wrote to memory of 1864	4428	msedge.exe	91
PID 4428 wrote to memory of 1864	4428	msedge.exe	91
PID 4428 wrote to memory of 1864	4428	msedge.exe	91
PID 4428 wrote to memory of 5700	4428	msedge.exe	92
PID 4428 wrote to memory of 5700	4428	msedge.exe	92
PID 4428 wrote to memory of 4800	4428	msedge.exe	95
PID 4428 wrote to memory of 3004	4428	msedge.exe	94
PID 4428 wrote to memory of 4800	4428	msedge.exe	95
PID 4428 wrote to memory of 4800	4428	msedge.exe	95
PID 4428 wrote to memory of 3004	4428	msedge.exe	94
PID 4428 wrote to memory of 3004	4428	msedge.exe	94
PID 4428 wrote to memory of 5600	4428	msedge.exe	96
PID 4428 wrote to memory of 2460	4428	msedge.exe	97
PID 4428 wrote to memory of 5600	4428	msedge.exe	96
PID 4428 wrote to memory of 5600	4428	msedge.exe	96
PID 4428 wrote to memory of 2460	4428	msedge.exe	97
PID 4428 wrote to memory of 2460	4428	msedge.exe	97
PID 4428 wrote to memory of 1448	4428	msedge.exe	99
PID 4428 wrote to memory of 5104	4428	msedge.exe	100
PID 4428 wrote to memory of 1448	4428	msedge.exe	99
PID 4428 wrote to memory of 5104	4428	msedge.exe	100
PID 4428 wrote to memory of 896	4428	msedge.exe	102
PID 4428 wrote to memory of 2940	4428	msedge.exe	106
PID 4428 wrote to memory of 6116	4428	msedge.exe	107
PID 4428 wrote to memory of 3360	4428	msedge.exe	108
PID 4428 wrote to memory of 3292	4428	msedge.exe	109
PID 4428 wrote to memory of 3292	4428	msedge.exe	109
PID 4428 wrote to memory of 4752	4428	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\language\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x28c,0x7ffc3dc6c188,0x7ffc3dc6c194,0x7ffc3dc6c1a0
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,11010496197990443810,9932859043089323353,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,12189556189526204591,7132710794604535074,262144 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,6726436773934883204,4986138833336785920,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:13
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,17820292822591970242,11575125181018671852,2097152 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,9514178941712316256,17334377369215041750,2097152 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4440,i,8907176067694609369,9911957907649699996,2097152 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4444,i,7762665930057838498,7941029700156113314,2097152 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:9
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,5902598783180667079,6609133606283852366,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,8136019229144385092,3716488606124589799,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,5225036500412665189,1125722403342378109,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,5225036500412665189,1125722403342378109,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,790937067256049341,4260681323712273737,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,13335569964255110392,3141337770168229467,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,6761518561299233405,13698305130870564894,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,322489205054688331,7146413571719475028,524288 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:14
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5688,i,2467007489966120741,14755598919648324926,262144 --field-trial-handle=2360,i,7018587350337527808,4667075279195592053,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f7b36ab2b29da9323c934b7ffafbe9e38919b35f6a53206eb3656b039dae387e
MD5 dd85bc2f09c4fbe5515bcaffc8d98f38
SHA1 ac1d02cd16d96a90fa0c7e6f0648af9138b7a851
SHA512 1c70688c88cde8eea5287d4957a21ba8159671e2a0cfddc1947a7fc2b22e5b9c4c3a58ba977482f553ea3b1c5762027d8f12a2c89a28acc2bb3fa434bf1cf1ea
TLSH
T12241FB59D32D3DCDC7A997B221E9615932F3CC59AD07AE0582009FB48E02F4760E3723
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592178.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592178.TMP
Size 2KB
SHA256 25d6aa3379ed04a1680f285375e869112d93a41f3435a902d398b7ace0782829
MD5 6ce9d5f3333380a733d4d85fdd9d4369
SHA1 b5212d083694eadaebadd30357de0b584152de20
SHA512 986240a334ffeb83fcb898d688a48902d7ba9a8153f390a990a838c608845e877670591f7a9c1b95319a8e42877f5deafb9773d077aa188b1b002d1ffb830a28
TLSH
T1E641E859D32D3DCDC7A99BB261E8625932F3CC59A907AE0582009FB48E06F0760E3323
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 df66c0c10053284bb5301ed665632a5900989cd883a54890cbef33b415a2512f
MD5 546eb31dd3a7f1b3618f9c8d821e5e56
SHA1 560e43298ad11a1ade1dab8aa1c4f8cc8d06ebca
SHA512 9068739af77ce5a5312eaafc4240c2c2fbc6104ca1522d360aff04ed293308332a8e1b6e47e3be9cf645a14321b7251a1c646a29977c05270062b949e066053e
TLSH
T1AC41BCF3C7E8967E890156F0AB146E1BCE1D0919432C3D6AC8E4AF2B97E34B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 058298cea097548448b431d89479041a788f027ae1e94e8be02d7c2ba2c551c3
MD5 071bc7da5bea8d0fabaa13cf23e0bc7b
SHA1 56b385c3927ac38a365182c1e86ea465b7b02527
SHA512 29856e09cb2c6fdb64df2dd690e64981d3ff579b9e20f8ac2f65173c7ceaaadf9de04035f8262f8a44b5dd41513887740741a7758b41b3aa78cd305da0aa6ced
SSDEEP 192:sxR5RNyM/jK1Ml8UQVbr/fysyIk8bNsHzoA8peI/g6+WNIYldiDGlIgDmJ:sxR5TqNr/fysyV8su//5IB4m
TLSH
T13562E815AA249977CCDBD20DFA427F93D6F81473A1941E44AAFCCA0C04E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 cc556c58279d6c98300ff536f64d02b5f8c4bf151a4d510b8683df8617375294
MD5 216646319dc337982d66c1bd93a3bfc1
SHA1 f1a1398c88bb66058db216e405306bee4726c257
SHA512 dec3aecda61427997befa1b5edc79aaeb5dc6219f5d840815dfd16e9dfa11f35c3583605ea08642042a675cebb059a8dd0b8c4fc0c93e2cc712aea72f1d8a519
SSDEEP 192:sxR5RNyM/jK1Ml8wbr/fysy9k8bNsHzoA8p4I/g6+WNIYlBiDGlIgD0J:sxR5Tlr/fysyW8su9/5IT48
TLSH
T11452EA15AA249D77CCDBD20DFA517F93D6F81473A2941E44AAFC9A0C04E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3d241f3e2c0446ceb7906d5b480a702199b26cb889ffff2c189df0a0429fe8fe
MD5 1871857c281ad100d3fef4452201ab60
SHA1 b45b218ccdbe69c839d0b1c1f0d257ea58fb6167
SHA512 03dc681f4857167ee9736296740cf8caca1f7f81b446901d9d74df2683615597c177235daeb4803957373018b9f40bca53bbdc6304da8ba326e18d7571e604eb
SSDEEP 192:sxReRNyM/jK1Ml8wbr/fysR9k8bNsHzoA8p4I/g6+WNIYlBiDGlIgIJ:sxReTlr/fysRW8su9/5IT4s
TLSH
T18F52E9156A24AD77CCDBD20DFA517F93D6F81533A2941E44AAFC8A0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f4c11993937bf7a3b9ec5896833b3a5b8186a36e970fbbda7f228449ad0366b9
MD5 8142e208a70a06f86eafc52d6a89b72e
SHA1 b494bc0e83707216e7c2940acb6e9046f38ff807
SHA512 f043f45bacce7a94c336af07f86292d2669b23d7e7646c7511bf0569eeeffbb07c3523b4def72556e8bacd7c859f5cbac7ff0d808f16d975f6db36f6a4ce2505
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13fNroPc8n:dhRACxWgg+fAJu1jaulfm08n
TLSH
T139C2FC3F540CCB7E4F844A9DEC29AED76DD802CB96988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 76019eee0a694dec0db6737548753836ae38e140bd13a47cf3d73e1786e6145e
MD5 4b973859bdfc826db44a8f5ff3ca7235
SHA1 a171bca8ce2517baea93fb6fae8cfc8c1392f8f0
SHA512 1fadc515bf8978ab503a395157a4c7deecde92223eab0ccdb3b61c4d34b1df100240d11267a514ed26a157aaff26a9ca6f5930956d1c523242474d7482c79754
SSDEEP 96:KRZ2HDxTnjWXkU1gkeCGEWCPvgsEK4hgmEcEkveEZqcAKN62vWAKfKy:CZ2HDxTnyXkU1gkeCG7CPYs4hgmrEkvY
TLSH
T1A391026430BB82407C3F660CC4E5985B92D174A37429A97BBBB901661FABE424DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 758b0c2b12d93777594349144d3b5f3b97d96b02f792920f3068452bc8c195b5
MD5 ebec51168dbbc9f65fd6b131f4de7d8a
SHA1 9cf3f294ae13d3d4a93da6935045a772f5a80410
SHA512 db7e2b51d5f81a652b3b870839284bb62a34dd697a41f6574f8e502af5895f1b239fa6099cc34e31464fdab729434e62b56b9919262cecb18bd80814e2089185
SSDEEP 768:eD3B7CsiJytnNHXmTWTbc+Hfw2ewBKZOX0H:eD3BB1txeWn1Y2evZ0Y
TLSH
T1EEF2C0709C6ADD378DED96887A0B7B46AEE81173D8D81958CADDBB0D108364D071BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0153c8f0ebf18e64600c639014a586b80c60faa86db0bb9e8e65fedc902eded3
MD5 8715be6eceff1cc253ba25bc7f6d2e60
SHA1 433b381a53b4e7fae323f1a184a3f4adb93fe70f
SHA512 80c445ed9d1f6db2f4ecc230f89f947c3cd98b8a7bfed4e1b1e40c3a7df8de43525284fd20b739965a6149d229cea66094b07660e4364225836180d4994e4712
SSDEEP 768:sZ3B7CsiJytlNHXmTWTbc+Hfw2ewBKZOX0H:sZ3BB1tzeWn1Y2evZ0Y
TLSH
T1DAF2C0B09C6ADD378DED96887A0B7B46AEE81163D8D81D58CADDBB0D108364D071BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4aadbe9ef1ff87a8acf4923f234b5c083034dedbb5d36a525508aa3d3a69cf2e
MD5 a577cf97e5dc234aa20e59ae0c3baade
SHA1 914795b0b1b364c0f5b35f8dda4f50c3afd14749
SHA512 f5f5549e948065670361ce5e90b95adc9f58d6bdbea8f2817c59826c32d0bc83bc8e47635ba79073f32add7874471db71d9920bb3d058bd2aa453310a81f1457
SSDEEP 768:aD347/siJytnNHXmTWTbc+Hfw2ewBKZOX0H:aD3441txeWn1Y2evZ0Y
TLSH
T18AF2C0709C6ADD378DED96887A0B7B46AEE81173D8D81998CADDBB0D108364D071BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5bc476c3af42c0e4721aa72d6a6f73fa2373bd1c4650d9dbaf0b46a9a8e3afb8
MD5 3e9d37a25cfa3fc9cb11c680637837a3
SHA1 b321c3b9927d924f2d6c42bd33cff2aff3610d8b
SHA512 99f6337325fd045b0259b5b7eba0a2e128ade3dd8b127388065bea3183f089cc9e4c191dde04f428c6166aae1ad4adeab5e2528307125f7fc7ab4aee0ef89a1f
SSDEEP 768:arv+4UNbdM3sbFiJyQNHXmTWTbc+/ieVH1SvyZ:absb+3c1QeWn1qEH1dZ
TLSH
T1CE03CF319CB98E37ADFA8688714BBA577EB8116389C40A84C9D96F4D428748D170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download