0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/models/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3288	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360719817333"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{D8EC5C48-257C-407C-B91A-1A17FF56BB56}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 2300	2388	msedge.exe	84
PID 2388 wrote to memory of 3288	2388	msedge.exe	85
PID 2388 wrote to memory of 4756	2388	msedge.exe	87
PID 2388 wrote to memory of 4756	2388	msedge.exe	87
PID 2388 wrote to memory of 4840	2388	msedge.exe	86
PID 2388 wrote to memory of 4840	2388	msedge.exe	86
PID 2388 wrote to memory of 4840	2388	msedge.exe	86
PID 2388 wrote to memory of 4568	2388	msedge.exe	90
PID 2388 wrote to memory of 4932	2388	msedge.exe	89
PID 2388 wrote to memory of 4568	2388	msedge.exe	90
PID 2388 wrote to memory of 4568	2388	msedge.exe	90
PID 2388 wrote to memory of 4932	2388	msedge.exe	89
PID 2388 wrote to memory of 4932	2388	msedge.exe	89
PID 2388 wrote to memory of 844	2388	msedge.exe	91
PID 2388 wrote to memory of 844	2388	msedge.exe	91
PID 2388 wrote to memory of 844	2388	msedge.exe	91
PID 2388 wrote to memory of 2780	2388	msedge.exe	92
PID 2388 wrote to memory of 2780	2388	msedge.exe	92
PID 2388 wrote to memory of 2780	2388	msedge.exe	92
PID 2388 wrote to memory of 3640	2388	msedge.exe	96
PID 2388 wrote to memory of 4468	2388	msedge.exe	97
PID 2388 wrote to memory of 3640	2388	msedge.exe	96
PID 2388 wrote to memory of 4468	2388	msedge.exe	97
PID 2388 wrote to memory of 1936	2388	msedge.exe	100
PID 2388 wrote to memory of 4768	2388	msedge.exe	103
PID 2388 wrote to memory of 1608	2388	msedge.exe	104
PID 2388 wrote to memory of 1696	2388	msedge.exe	105
PID 2388 wrote to memory of 4060	2388	msedge.exe	106
PID 2388 wrote to memory of 4060	2388	msedge.exe	106
PID 2388 wrote to memory of 2972	2388	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\models\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff9b415c188,0x7ff9b415c194,0x7ff9b415c1a0
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,10591663419380637479,7666054825639888644,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,11462525994162380887,10711344942271256351,262144 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,6267950423530036629,16207328244104501205,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,2839747793830174487,230806341794867127,2097152 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,9831788763404586103,10208409300724471368,2097152 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,12350703591516631812,4227925250057536063,2097152 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,429711628065248593,15407170557868483437,2097152 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,1177769097928519439,3890366721929331204,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,9136481384349991523,7594863221354682853,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10199313043278862981,7056182640267659494,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10199313043278862981,7056182640267659494,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4128,i,11805497503591530993,9895346725798605480,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,7811757857836347163,12376251748603111194,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,14033738559102745182,13066633064204457537,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,299318337620269935,10262508086857868076,524288 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5788,i,9440812211648691966,6322604426321068170,262144 --field-trial-handle=2212,i,7373548987181665206,15377656161226673482,262144 --variations-seed-version --mojo-platform-channel-handle=1964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f39f8c15d1ebcea893279b12e604f2205d7a897969654b21d7c8fe8c9afdbf65
MD5 f8ec956ddfde55a0587a0d3637095bd6
SHA1 91ef2acccdd851c90aafe951c0df1df088cbae94
SHA512 8e183435fa8254f1f5c9216da1ae7b7229f2898b1290cba6e2e21e5b412b9d97d01336acc9fb04eee4dd64422d6ef8c68773cc3e2529fe9cd00f767e4fb6f05f
TLSH
T12561E63009E14B95E32133B083D2A5B0F4641ED8F913EE862390B87D0620B6FCF156E7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d0e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d0e7.TMP
Size 3KB
SHA256 26545647d9326f5799ca30dd12909add5e5ab534c547bb94b8f8e7e1ce47cf8e
MD5 52f8df60650436b215f3981a03881eff
SHA1 3a077059482a35591432f6accc89e82088d00d8c
SHA512 3485bf04f012c2743b2ac4e0cefbb521a7d7d44311555368ebeaac20b74ce8c44430a6837d02cc538e33154cb598be2a9e743d5ddae64d79ff6c20d77c9e9975
TLSH
T11961D73409E14B95E31133B083D2A5B0F4641ED8F917EE862390B87D4624B6FCF156E7
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 43a951715466764c7a66199b23fef0dddd2dda8ac276459144c51207cb9c51ad
MD5 a6370f11c1971035a7a011b808b77f28
SHA1 792dea498139f647bb5676942b41e4259e580005
SHA512 bee1fb8f3d580fc0edf904771c2ab57f86dd78b1e64c1598ede22b2869bb98c21524307a5f25e2a243e15dfbe6e182b0ac76ea5c7781efc9e3407b680905a000
TLSH
T1E2117AF3C3D5996E890516F05A28AE2BCE2D0606421C7D2AC9D4FF2B93E3479E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fff5745d9ce37a084717a094a544988e08e8f702a0fa4feab093767be6731330
MD5 d693e3d69087d2bc1c7d5f34ae259e91
SHA1 ce8a98090c8ebdee63b29bf29ca925a9ed1792a5
SHA512 513d69fb2d3db180be49610d3d25ae572a0b2a372ee6f5a7ee4701664a86bba200ed4f475256a71bcaefa95dc07777480bc62a87d8296a4ddae938e23e248d4e
SSDEEP 192:sxZzRvk+/fAsYV1EIdpd9HW6+WNGYCkfr0b7gIgrJ:sxZza+/fAsYzdLHbGs99
TLSH
T1E222B7126E28A87B8CCBD219BB15BF53E6F95032A1D51E58E6FC961C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b5ca0e4edad0bfbf5098543e18d9d990f3730ccbc3a21983df009c2ba073dc19
MD5 92c41fb995fd606ccb8d3fe1cd130f2b
SHA1 7ccdbd53416eec6fdffec4f1cf4596ba73433ea1
SHA512 2927e5409754785e6adeae286d6f063ac7f573f1ed59c92c1c044417c8e322006d488099e9dd43462265b559b8c8b14ff0b3207b040c848cc2e9b9adb63f6a9b
SSDEEP 192:sxZzRvk+/fAsUVGEIdpd9HW6+WNGYCKzr0b7gIg5iJ:sxZza+/fAsUkdLHbGo90
TLSH
T16422C7116E28A8778CCBE21DBB15BF43E6F9503290951E58E7FC961C15E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c41ecde9eacc1209935914383843fe58b493e39f3dd6c33c4bdd7aff3cb609dd
MD5 f376df543542da5224684748d9142c22
SHA1 fe8aa3d90bb81cad06c4b7d788a69c26c7a2e054
SHA512 6d83713d019147e868aef6cdd339a1d96362c76b3cb0539234ff2aff94fb22601e0be08b0063833a2d08b17c88e864161b7acaa7549934f366a1dba6a5d2a385
SSDEEP 192:sxZzRvk+/fAsUV1EIdpd9HW6+WNGYCkfr0b7gIg5wJ:sxZza+/fAsUzdLHbGs92
TLSH
T11E22D7126E28A87B8CCBD219BB15BF43E6F9103291D41E58E6FC961C08E7ADD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 adb39ecde5bd25a953a9fb3e5f5c8825cbc3a77a63cc7c46c1e08127f7334e5b
MD5 219fe184b0bc2905ea18bce81896ef70
SHA1 14158128b4e46dddcf7c911c1f5c8b14afe94afa
SHA512 193ab52d3a88bc84b184fb5900b614549e0f060a3ae28bd5225b2d7cf5186d7881917b149c9f0dc7e8013082634b057474eabaea9a6c7e2d2fb323e32da93b79
SSDEEP 768:zJqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrsro2:zJqbUj+WvSCs6u1jaaZLbWr32
TLSH
T19CC2E93B340CCA7E4FC01A9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 304229a74f40934ff27beb7686eceb3942f084e18c0c19e100b86d5d59bed49d
MD5 6b46d01ca3125663e2aba18812e0f197
SHA1 a953596406089696d5d02765f915fcdd3aea6bea
SHA512 f6a2a6d38cd4beee385d54a0546791fa84ab94fb318f6abd03a79bef24dbed88dadb4fb82e9b2cb321acfcda9e90c33252057d29b9fed78db96a0557f46e3594
TLSH
T155214C5171AF82026C7EA50CCB94C457864134A338BE643BF778805529E6E815EFACCD
MD5 SHA1 SHA512 TLSH

Submit Download

bc55b1b0-c3c4-45b5-9203-0cf7f6d202cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bc55b1b0-c3c4-45b5-9203-0cf7f6d202cb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 08c412d416d5946587566f9c1c0463b02e5d10124337c82f28d5c1528acd3799
MD5 17ff6a4781607d72540bedcf5e2e7379
SHA1 7efd039cda3488c1b8559a2c2ead23d93b11cddd
SHA512 fe5a326cf5121f32450c53ac0201002749c664be80c3ccf020d4bc96328d33ba4ddf375955c7bed5334793183f0946518aea5e340239afd0c5c0c028d99f5cbb
SSDEEP 384:V2ZcIhsNg7qcckbJEa+fd4aq9nTKwBODNZOCQKDr:mhaQCa6vq9newBKZO3M
TLSH
T16A927C715C385C775DE6B548F84731138EF89173E6C92A68E7EDAF1C00EA698131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d8c61efaba57d29b4bc5f9878d1a7fab9c55b0aba389d59d70d3a4c30fa96574
MD5 0fa908607119b6ae27b07c92f3968ffc
SHA1 c1bba191cea45996e43d3059ff0e122ad640522c
SHA512 fc7bfddad776284a6b294e2b7af26cc95197b45820ad10cb1faf2edd952fbef518f9ee503554b42152dd43779287c3db1d751099a671094c5b89c5d4cb287a0a
SSDEEP 192:vONL6Db6QmiUyqaHBa+j4+FdCXmR2RgTiU6:vONL6uKHBa+fdFeU6
TLSH
T19A02E735687C6CBB9AE26E49F88737275FD4207BDA962B94D6D84F0C00D765C230783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b29cc1dc85383ddddf9d517bf87b72086a2a47cb8391b63021525c42b4ebbe25
MD5 53d172ff220dfc6f967cfece6cbea292
SHA1 5ee5e87c4a9aaf01bd4bce6b60061a37287d4687
SHA512 c28db1a61f968dc616ce7dd88fa9add0c94be9050b7badf7967cbe75691fd18e8bb78ef8e9fbb30d41fa4174b980ff0d05a3528a205060f2ded8d766fcba1391
SSDEEP 384:L2ZcIhsNgKqcckbJEa+fd4aq9nTKwBODNZOCQKDr:ghXQCa6vq9newBKZO3M
TLSH
T15C927C715C385C765DE6B548F84731138EF89073E6C92E68E7EDAF1C00EAA98131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 45b6ddf0308ff8122e2dffb4ff830b2325bfd939d44b9181dc815781eb7be1b4
MD5 84e27f1a68447dc8327eafea75c24208
SHA1 acec3c11bdc81082595db83e4e44be70439cdbc3
SHA512 ac2d578d7a30bf558cc6fa8720afa2555c99654f12c74b6bebf24cc91786c9050533bc2f787eec50a5faa9a8e2683ceaad5b627da089269a529c8780fff55170
SSDEEP 384:j4iFiZcIEzsNg8TUNTUlIlKqcckbJEa+fd4aX9nTKwBODNZOCQKDr:/FQ4twg9QCa6vX9newBKZO3M
TLSH
T14DA27D725C68897BADEAAA44F84B31138EF850B3D9C56A64E7DD9F0C10E75D8130BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 03c5ee27bc077d9c36c22d99d85178a223df452ed4b6c4b4fa37ad558da2b565
MD5 cf3dd03622106ea915234e254d31606e
SHA1 8c0e5f46d137d6071f3ffdaf7acc4678a03997c1
SHA512 84c60e1f2f15aeef32da47f1fe7cfff07645c538dd625e39661dd94e7cb0dcdc74b2c66ec0061959d53591e27eb202d58e6397207cc46f3500214b46218299d7
SSDEEP 192:WONh6DbtQmiUyAarBa+j4+FdCXmRy/FagNzzqCU6:WONh6TirBa+fd4aA9U6
TLSH
T1DE120A3668686C7B5DE26544F88736135FD45167DA8A7F90D7DC5F0C00EFA6C230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d964c907-44ab-402b-9d4a-07d0a817c40f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d964c907-44ab-402b-9d4a-07d0a817c40f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e06a40a7207f426198f7ff95b26af97f44578e5ece18d3f343c8dad5be2f5592
MD5 27554443217854c1a6e3f9ebca74731f
SHA1 847650c0fa1dfeef441eaa80e9674860fc151153
SHA512 090cff7fa65b78d1bc36e9a26898ed3cfd05007d6669e18139346c9649bdf548b1d9d060fe84f7561f0777393820370fd1df6e72fc0dbe8d113b37cfac6ecd6a
TLSH
T134410558B6FA1108B3726E5AAFF6A86D447BBC772E07909E10110E4E0676B408961737
MD5 SHA1 SHA512 TLSH

Submit Download