0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/third_party/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360717516883"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{10AF2C8B-0997-4B82-91DB-24401CD3309B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4636 wrote to memory of 1216	4636	msedge.exe	86
PID 4636 wrote to memory of 1116	4636	msedge.exe	87
PID 4636 wrote to memory of 3624	4636	msedge.exe	88
PID 4636 wrote to memory of 3624	4636	msedge.exe	88
PID 4636 wrote to memory of 3624	4636	msedge.exe	88
PID 4636 wrote to memory of 3980	4636	msedge.exe	89
PID 4636 wrote to memory of 3980	4636	msedge.exe	89
PID 4636 wrote to memory of 4008	4636	msedge.exe	91
PID 4636 wrote to memory of 4328	4636	msedge.exe	92
PID 4636 wrote to memory of 4008	4636	msedge.exe	91
PID 4636 wrote to memory of 4008	4636	msedge.exe	91
PID 4636 wrote to memory of 4328	4636	msedge.exe	92
PID 4636 wrote to memory of 4328	4636	msedge.exe	92
PID 4636 wrote to memory of 1372	4636	msedge.exe	93
PID 4636 wrote to memory of 4372	4636	msedge.exe	94
PID 4636 wrote to memory of 1372	4636	msedge.exe	93
PID 4636 wrote to memory of 1372	4636	msedge.exe	93
PID 4636 wrote to memory of 4372	4636	msedge.exe	94
PID 4636 wrote to memory of 4372	4636	msedge.exe	94
PID 4636 wrote to memory of 3048	4636	msedge.exe	98
PID 4636 wrote to memory of 1784	4636	msedge.exe	99
PID 4636 wrote to memory of 3048	4636	msedge.exe	98
PID 4636 wrote to memory of 1784	4636	msedge.exe	99
PID 4636 wrote to memory of 5000	4636	msedge.exe	101
PID 4636 wrote to memory of 3508	4636	msedge.exe	107
PID 4636 wrote to memory of 828	4636	msedge.exe	108
PID 4636 wrote to memory of 2740	4636	msedge.exe	109
PID 4636 wrote to memory of 4276	4636	msedge.exe	113
PID 4636 wrote to memory of 4276	4636	msedge.exe	113
PID 4636 wrote to memory of 5000	4636	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\third_party\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe171dc188,0x7ffe171dc194,0x7ffe171dc1a0
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,10807870702019853833,7180237541301276106,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,16892281934817763458,16224508241856535626,262144 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,2730824858756253223,4338033730223917854,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10938510437357519815,11897797214755318784,2097152 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,17436319671720038885,11679608886869327600,2097152 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,13428131822219890276,5245034598486926254,2097152 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,917481684047443797,11746403912754893543,2097152 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,3089599293764569434,752752667922622850,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,12767958023144218164,5351416413353914099,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,6744413607055931684,3715590770471932652,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,6744413607055931684,3715590770471932652,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,11693582804334563574,17182739705268977280,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,8675769722125748669,1198374195759825832,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,8863991631780456645,6907716363195329435,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,15901514113140834656,11965546294328274738,524288 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5384,i,17361709691205629289,5673974895721137710,262144 --field-trial-handle=2284,i,3666107120559845009,6325517384436008540,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 19f5a5198c96359ef16d4ed1d30336388464dea9ae211e6627e4c5ccdadddafe
MD5 116661b53e127925fa8633c323e488a8
SHA1 32cf8ee010e357eeb6ee524b0e13c67d5b5b3e7d
SHA512 06fa3e3b5dac79f05fcf5d332464d7c5e31c7f18be7d055e7263eb25a6205de687cf7e16a44b942b47f47ec3ad4ffe7b4cd4f7601bed1f9037a0d9a43d58fd80
TLSH
T1998170B8024302AEE37D92309ED20E3C747382E8F9235F5B11A0D8B1ED91793C236484
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589c6a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589c6a.TMP
Size 3KB
SHA256 85671a5b7347ecf3d86d1efd96a5e40f4419f9cef2599afadd307fc10b71af4f
MD5 38ef4a916a25549aaea62df3a342764b
SHA1 6537b0e0e06e48c3355c78ed6e3cf2d660eb7ff6
SHA512 ec194f36fa6bbc8d345fa09d4489b2c9d18e178df42e5265035e638c93a0011211877f4159b67bc15942dfca6674c57784977dc1b9e64665481596cb4858246d
TLSH
T120816EB8024312AEE77D52319EE21E3C747382E8F8235F6B51A4D8B1ED957A3C236484
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f4e0b6c86d2f858ee9c7046f3b0a098677edb87aa8c1b1b74cf0228f945c3a74
MD5 dda8f361bb0c6fcc12a36417da5f98e7
SHA1 1697d165227766ab17f177158ac415678479b9fc
SHA512 15537acb1458875d249ad50bf51d1da999f7f52610951edfa74ebfb781181b2fb05380b5d8f0e1791827fa1171bf35b8d360a91a665cf3e1d5cd79cca3ae21cb
TLSH
T1D6117AF3C3D585AE890116F05A24AE2BCE2D0606422C7C69C9D4FF2B93E3479E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1165512a78ff86d348a8081a39ba22c1a88699a207e8946f85d9f508a7fb3ace
MD5 f19a697c834dbbadc326a287eadb063a
SHA1 4cebaae256fd08db72f99f19477198559c19f559
SHA512 66ecbf6c1911018a14b6b8aa8cc346bcdc2e1d6f0f3de924cd1c391bf56459ab62c0c07edb874e6d375482f34c6b4b0aa80798eef670612d668f16b1d4ee35d7
SSDEEP 192:sxZlRDkM/f2s4JYIdpd/HW6+WNGYCkVDi8IgrJ:sxZluM/f2s4JpdHbGYf9
TLSH
T13922C8116E28A8778CCBD21DBB15BF53D6F95032A0941E58E7FC961C04E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f994bb6c546540c568fbe68e3545d64ba91baf4006c44cfac7d95c65689cc585
MD5 40befab374e43ac19f1261d17dae5974
SHA1 f7e8133244ac865b5629526ca1dce4ac39741389
SHA512 6480e05fa46ff8b3cae31acb0db44098e8cdd16f61400dfd50dc358fbb75ebe96481b33c191488f53fd95ce4256bf6a9dd1348829d41dc59c215dc66204ef21c
SSDEEP 192:sxZlRDkM/f2swJYIdpd/HW6+WNGYCkVDi8Ig5evJ:sxZluM/f2swJpdHbGYfEx
TLSH
T1E022C7116E28A9778CCBD21DBB15BF43D6F9503291941E58E7FC961C18E7ACD221B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f8411817fedb9164523465b626a71ab0c2e24f43d1961fd126815a3979027230
MD5 2cb2370abd167ca8a17c764effedf6d9
SHA1 f60e2539bf0670270fa15e20aa9328fadc2b75d4
SHA512 5873b5f35e6eac71d716140f4120a9fad9893c12971a62641007b1c48e80d4bbca004db6aca83252e365a252207efca2a9da96258fbb00ddf601dbac6af2ea32
SSDEEP 192:sxZlRDkM/f2swqYIdpd/HW6+WNGYCUFDi8Ig5eNJ:sxZluM/f2swqpdHbGefEX
TLSH
T12322D8116E28A9778CCBD21DBB157F43E6F9503290951E58E7FC961C15E7ACD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 91df309eaa89c591723bd8d66c975bae0326747ab46d42e9c6e80658d1b5b8ee
MD5 b998211dba20c9ab2182d34d5ee860f6
SHA1 1ecdafd19b871caed4ad7d9e28b91f293826442b
SHA512 94325d838e5d7c2d9f5a06b93f73f10a5c3c668703237e8949db2d0f7642b0a25e1863ae64a976b321abbf8136da483f3e5dac2857371286a6938f1b66c20ec1
SSDEEP 768:YUqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrfrosD:YUqbUj+WvSCs6u1jaaZLbWrMe
TLSH
T177C2D83B340CCA7E4FC01E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fc19a142dd6e6997c3b7a80ccd5320ac94c5cd91b31b3d73f7a8df0593ded8ae
MD5 dc4bc345eef360bcee164b1de61afebc
SHA1 07541bfc554417904d423c5760717a5641861181
SHA512 2be9b0198dd0d767a14d9ebb1673e19189b44e6b2605ae874edf480fd951776348b632ffafae439ec5a2e62c32e9eb59aed38b938efc33138dab039cc9a0fd04
SSDEEP 96:KlkdQ0uS+gyKHzssgK01s2gA8s3WEtGZiKCoR5uKCkCT:2kdQ0uS+DKHQsI1s2r8s3WEtVX1T
TLSH
T17F91429130BF4605387E390CA6A5853A8E4571A73825A5BFB7B800F12E67E121DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593771.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593771.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7513e1961fc5eb4445914f92b9d69a0eadc1addc5adf1eee673b678a5bd12279
MD5 b9f33222032117dcab320b0d32782b0b
SHA1 cc2bb62d163d290e723c051849d521c3996bda16
SHA512 d92fc61afcd43da2e1f14123538f7adad87e5427d4968ab353761d452c1e5c6ce51730697cf34968892b9d7b6d7b831d48c50717e35ae0ff80bb8f7819e99b54
SSDEEP 384:gZcIhsN6mmQb5IJ32NEa+mOByuv++Jx2nTKwBODNZOCe0d:ehzeIoeabOAqxJx2newBKZO30d
TLSH
T151928D766D3C5C769EE6A505F94B32078EFCA063E6C92F98D6DDAF0C00D6658130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3f27627be331d971bb16d035bdd34a36b3af3b76c83b14b4f6132cc2baadd86
MD5 f43c82a3d18989e6efbc23f318f49a87
SHA1 b8747e2874b9fd6ee257f228e2686dec3d69f6cc
SHA512 6e63c59c351f84c1bc31c5427ab4556af7a90c864ab5991025ee9387170446d1d933c377bec276754dbf960e877be0c578e54667511089f1a3639f6b06b7bf92
SSDEEP 192:vONx6Db6QmiUyUFHBa+jqOmWtm7Rg/IU6:vONx6ufHBa+mOBHQU6
TLSH
T1F502E93969786CB79EB26E49F48B37275FD4207BD9962F84DAD81F0C00D764C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 eded5eb7aee8daa157a45703124b707b7739fc84d6c4ff983bebedfc19bfef95
MD5 fbbf1078c5e309a0fbd7754486ce1ab7
SHA1 15f20f9b5c126315c59e5a421b7e9e8be6286607
SHA512 005d0cfd0abe247ac4d8ec8e4a66f1e7a7de2c6dee3395d1ad560cca37422ff8b9bb8d7e726db38dc64cf1535d9c88a952b2dfcd04eee43bc068f66429c5ccee
SSDEEP 384:giFiZcIJqzsNC8TUNTUlIlTmQb5IJ32NEa+mOByuv++cx2nTKwBODNZOCe0d:7FQUnwgkeIoeabOAqxcx2newBKZO30d
TLSH
T1CBA27C735D2C8C7BAEE69A44F94B32138EF850A3D5D5AAA4E7DCAF0C10D658C130BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5427238446fe6c74a24d88d5e726da342db47eaed6817d2e395ff04548d58091
MD5 81f56a084cc8d97c91d85ddf3950ed61
SHA1 8044bdde6d333a316ca4668736fe7af18d8ddc78
SHA512 cd963bbde86620f53f76685ab22697039510212838bbdf76c8d7e984bd4a360b7f019c48caf2ec5c54b4840241cd539db972905991f26e2c87dd9693530b2eed
SSDEEP 384:wZcIhsN6TmQb5IJ32NEa+mOByuv++Jx2nTKwBODNZOCe0d:OhceIoeabOAqxJx2newBKZO30d
TLSH
T11F928D716D3C5C769EE6A505F94B32078EFCA063E6C92F98D6DDAF0C00D6658130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 17ed2036c3888012a688fddfa5b87172633ce09ce240a180d171b1b0f908a64f
MD5 c449cf3c16541f732c94bd92c54af167
SHA1 758b57d28644a4ca0318943dc48cb753a177a699
SHA512 75a85f8337dcfc7dfc2093ae4b5a64a7457c52d58e88f1d8a1c03c746be1c3d74daebd8f7c635de00692845a3881b103344e94b943cf62ebd9ef0a8b26ce38e3
SSDEEP 192:EONr6DbTQmiUyLFPBa+jqOmWtmtuv++9NzUqj2U6:EONr6NaPBa+mOByuv++Tx2U6
TLSH
T103122B36683C9C775DE26584F48B37139EA9512BDA8A7F91D6DC2F0C00DF65C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

631a9918-1a05-42da-adf2-4f5c149ad1fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\631a9918-1a05-42da-adf2-4f5c149ad1fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8e6206eb42612a2c382a78589804dbd603c9c38cb26d584ae94aa3bd1e2f39a1
MD5 4d22af5df29a0f5086c9e27600fee2a2
SHA1 6859439c750a5696ee726c923000c2f5371d7f79
SHA512 6934585c75b31e50a643e06377678d976b989acf07990706ada90e0353433109fe4967be786034f555a9f5f6bca4cc51621f7b8decfe605f7a918c825e9f6fbc
TLSH
T111412B9CA6FA1148B3B37E1A9BF6A86D487B7C772F07D49E00510E8E4662B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download