0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lkputamajaya.net/application/views/errors/cli/index.html
Size 131B
Sample260808-eth4ratsbz
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3524	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306360811158365"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{C17C6C48-9705-429E-8BBF-792DFD686F80}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2392 wrote to memory of 5076	2392	msedge.exe	89
PID 2392 wrote to memory of 460	2392	msedge.exe	90
PID 2392 wrote to memory of 3524	2392	msedge.exe	91
PID 2392 wrote to memory of 460	2392	msedge.exe	90
PID 2392 wrote to memory of 460	2392	msedge.exe	90
PID 2392 wrote to memory of 2844	2392	msedge.exe	92
PID 2392 wrote to memory of 2844	2392	msedge.exe	92
PID 2392 wrote to memory of 5620	2392	msedge.exe	94
PID 2392 wrote to memory of 5620	2392	msedge.exe	94
PID 2392 wrote to memory of 5620	2392	msedge.exe	94
PID 2392 wrote to memory of 5028	2392	msedge.exe	95
PID 2392 wrote to memory of 5028	2392	msedge.exe	95
PID 2392 wrote to memory of 5028	2392	msedge.exe	95
PID 2392 wrote to memory of 2868	2392	msedge.exe	96
PID 2392 wrote to memory of 1252	2392	msedge.exe	97
PID 2392 wrote to memory of 2868	2392	msedge.exe	96
PID 2392 wrote to memory of 2868	2392	msedge.exe	96
PID 2392 wrote to memory of 1252	2392	msedge.exe	97
PID 2392 wrote to memory of 1252	2392	msedge.exe	97
PID 2392 wrote to memory of 3572	2392	msedge.exe	99
PID 2392 wrote to memory of 3572	2392	msedge.exe	99
PID 2392 wrote to memory of 704	2392	msedge.exe	100
PID 2392 wrote to memory of 704	2392	msedge.exe	100
PID 2392 wrote to memory of 600	2392	msedge.exe	102
PID 2392 wrote to memory of 3536	2392	msedge.exe	106
PID 2392 wrote to memory of 4332	2392	msedge.exe	107
PID 2392 wrote to memory of 5336	2392	msedge.exe	108
PID 2392 wrote to memory of 2524	2392	msedge.exe	109
PID 2392 wrote to memory of 2524	2392	msedge.exe	109
PID 2392 wrote to memory of 2608	2392	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lkputamajaya.net\application\views\errors\cli\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffecacfc188,0x7ffecacfc194,0x7ffecacfc1a0
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,13620166365767541591,7953442049793892031,262144 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,18372236104149533173,3675692682384297137,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,9883531617918185879,1714695647478567678,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:13
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,7693621764858817146,17659354206036625271,2097152 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,6094075268033646251,12473984091071999754,2097152 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,13484043631581406739,13957086955481886331,2097152 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,5341457308884753911,5033920781939394863,2097152 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:9
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,7015119604082735321,9734652848938434056,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,3756413137545553052,4490881227190748039,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,9186561636418781578,18090684498619710982,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,9186561636418781578,18090684498619710982,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,10103121389485226463,17762149663688548710,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,16275924298028092578,15005489444643097335,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,13517296265786123682,1128286740323433995,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,11477052074331339164,6460787128214431004,524288 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,3886501929700838522,5049690361827009422,262144 --field-trial-handle=2220,i,10107209731984601324,8848019076779184218,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e11c70830d4a1bc2a4549cd9c429b90eb75a0647645123570fbac4e7c335d789
MD5 f74e020851ab377e81f1d36af42053f2
SHA1 6786b00df5ae7b32b6a2f71f026dd7d6d8c7bfdc
SHA512 ec986a17d1c4bdd5ef2975dd4ce726f8e3a1f79d43aac673a202b900273e6abf1eca0c4a19bdb68af4a9f66d50298364ea29196339f3cbed68e605c41b5255a2
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7I:fwUQC5VwBIiElEd2K57P7I
TLSH
T12FB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fdf163d6b3dc6b99240a3ea9c43226af9e93386ba3434906e9eec20274dda6a0
MD5 c9fbd9c55337fee9c287a4db704d7525
SHA1 71b8576b54ced3a48330c736bfc62a9b146d9855
SHA512 9fe5b06b496062545e2ca2a5d22a5d3cdb561561d9ef0a6914b15243881d0e5fea2a71d21bb32a44c02ffb37f24927f0bb0fee19dc567eb366750704a9c22f95
TLSH
T17A614E07A73839DEEB3485B128A1587F76F6C4670E076E125044EDBE5B46F14E7C8223
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598cf4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598cf4.TMP
Size 3KB
SHA256 d6962dff4254da7234053a5aff7015d9f10ec3f3e22d7ad3159471acb7442ec1
MD5 93b1902be563b169801ba61a16721066
SHA1 e57edfa59897e1e054b5109b69e45ad16b5af0d0
SHA512 8a36bf177564dd36990d518fa17b0288e2ac82c3e3c00262eda8c9e4813d59673fae2c4c6879895d364d8935427fc4b4ec04a73ef356d484b344b29fe6a2595a
TLSH
T1B7613E07AB3839DEEB3485B168A158BF76F6C4670D075E125044EDBE5B46F14E7C8223
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 341a8b5e9a731a70bf74c250dc40f4723c60186710669414961bb81035e4f9d5
MD5 5f9ae009581026547461f2fa7f1ec674
SHA1 0ed7cdeb427464dc9a9e00838cf2a75e7fe4ffa1
SHA512 203c740de2a6da7e48cd0bdc43eb650016f9acbd54b25cb040b82492d28d498bc9702dd7ecf24aef4b6f70d87a21d1b687040a79e34322f26cb300b625768665
TLSH
T11341BCF3C7E8967E8A0156F0AB146E1BCE1D0915432C3D6AC8E4AF2B97E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4fcbd17d47ab519419900b29b72f65e94b71263942fa77556182249aa2099fa8
MD5 60059ce02d099f5509e72d87ba5da314
SHA1 323239134f19f0eb66fc2d6fc63a9d545fdc73f0
SHA512 e30ab5d9d3967fb4fb4eaa9927970717704279bbd716419939bdf5dbc2b539557464a97954f8675f7a3fa4cc2ae09991375175703d3793b5a0067b162d73b291
SSDEEP 192:sxRrRTzbr/fws578bNRDzoA8p4l/g6+WNIYlBi+GPIgIJ:sxRrZr/fws578RyQ/5ITls
TLSH
T1FA32C7166D68A93B4CCBE21DFB157F53D6F95032A0942E48E7FC8A0C14E7ACD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6e4ac34162def69a00dbb0f13500a0438739fc5f057f037cf7b88663d17c634d
MD5 26b8412ebc022ed67d56904bda2e1af0
SHA1 fc361099908ef9635207fbbaa7fe36eabdd4e73d
SHA512 6eb4988c8e9136dd17457cd38b43b69721d62b02d0a82a57630b2f3a5b6fcfd6149929caeca8562700612dd57cd9ceb135e861cafad63bc433ff8ddbb449d170
SSDEEP 192:sxRERTzbr/fwsI78bNRDzoA8p4l/g6+WNIYlBi+GPIgD2J:sxREZr/fwsI78RyQ/5ITl+
TLSH
T14D32C7166E68A93B4CCBE21DFB557F53D6F95032A0941E48E7FC9A0C14E7ACD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 01f0e8b61cfb60c2c2b1c40c23260dad7a03e3639183ace95791d9c29391be3d
MD5 045fd4226256a1b31c1f483f6b1e44a3
SHA1 d520b51cd7f4e5c0adb63576c7571ce24c5bfd80
SHA512 e974000705bca685f5166c78c104ba5004a7fb9cd7ef8b9b3c00f4ab728d2bc3dafe84c6bd127f8168c20f888821dae149a01b0e971b187d1101096df3613a95
SSDEEP 192:sxRERTzbr/fwsI38bNRDzoA8p4l/g6+WNIYlqi+GPIgDMJ:sxREZr/fwsI38RyQ/5I2l8
TLSH
T14132C7166D68A93B8CCBE21DFB557F53E2F9503260941E48E7FC9A0C14E7ACD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e0ed022b282e2cac49c624d1d95bc61e3f11337a9194873054ebed415df4e99c
MD5 668dbd82747e4981e0ceb8c816dc5e0d
SHA1 23447b074f12c3bd69b3b8522adc3a1995f7233e
SHA512 fa0a1122c665ae21f42097de6c2976ded2466c2225407b0b9e765356d7b1be7979d8c339c2f00d633606a1bf46abd8695a2bfd4536ea655dce459e747bb58b7d
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRR+roKMn:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0VM
TLSH
T154B2D93B600DCB7E8FC04A9DEC19AF977D9802C796589D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 88522a1ac3059eff1d956d6c77318a0518ab6bfce3500db023a2d257c7650457
MD5 23a5defe22733642bb38b99f9f22e60a
SHA1 b049dab20e1e4124b87ef15abd27d37f6a4357bd
SHA512 557938d466e2f4892f5e740a07b869dedfc19bd8ac4a6936136c9bba0d650f733d5c9bfed38432eec921100cdaf7a0212bb2ce33f5f456d62609124fd02f8405
SSDEEP 96:KRPY95PNtBWZWcghBK4ogPBcX/ehNCHVCbvlfjHWLQeg3HK4GgJHcNVIbugQK16G:CPY95PNtMZWdhrogPuX/ehNCHVCbvlfh
TLSH
T1BC913554317A86903D3E6A0C9578981E8682B4E33414E93FBBE945A21F67E074EFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cd050002c30768bc193de286d9410f2611c225e83fe08aea5173c8d022890c1e
MD5 fe41b2c1773ca7f928f59700e5c429f1
SHA1 467a036a9fafe6db5a8f0fd7a6573cd66cd3e644
SHA512 a31d8a020c1bcd547aa70f5c98f188f78a381161427063c8084ea3723592e04c59b46eedc0c4d4583bbccae3fa6e548e8223a1c64483dc996c66606053ee78a8
SSDEEP 768:zrv+4UNbdM3RQwubiJvfNPMNHXmTWTbc+Hvom0:zbsbS3SnQNseWn1Pom0
TLSH
T12A03CF71ECA99F339DF682C8B50B7A437EF811A384C81A98CDD97B4D118758E170B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 670a6f010ef92c08c67bf165ae2ec86bc8aa93a808edd834527904835968bf4f
MD5 c8c4c768be02690bcb55eb065806eb20
SHA1 0dfc290910fcdfcb85bccf1e51fee963fd4038f2
SHA512 b00a028689dfceb9e92f2774d9a05c7ec39fa822593c924a66cc4b6fed310ff09b492d795e32b05140beb41516591f7c3d1e007a44962664150dc87a707b104c
SSDEEP 768:vrv+4UNbdM3cQwebiJvfNPdNHXmTWTbc+Hvom0:vbsbS3BpQNzeWn1Pom0
TLSH
T1C003CF71ECA99E339DF682C8B50B7A437EF811A384C81A58C9DD7B4D118B58E171B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4ae164dadc3bb66c00d9af1db58eb8b6f7f4d3bb0f44bfeb19a488375206dfe0
MD5 4e7b033b66ba011ca54d6ea1935a9b42
SHA1 dc161a886e4e92a5c6a76142d7d77f41dc473ad4
SHA512 28be364c6bba9e5e1e37f4a117ee83b3f06be80719cf8c1c330755124871b307d72a8667f0457800cc9a2526fcd3723f93aabf8cda08ea71d438ee30631d9959
SSDEEP 768:lB3iQwebiJvfNPTNHXmTWTbc+Hv2ewBKZOTO:lB3HpQNteWn1P2evZuO
TLSH
T11EF2C0B19CA99E379DEAD688B60B7742ADF801B3D4C82A58DADD7B0D108354D071BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1616b3298ae43fc55b63558c3174772ede95ec84620029642a40471515d43fca
MD5 0712a4b87a120fe31ef3e38985a3c00f
SHA1 89a1628abe20bef25011091b4e8db8336efac776
SHA512 e370907f5d527f3ada50df625e274d1cb88163f270a9dddbec2cc7442dab516b835c7fdc018b9451ea265cac2ed943312117bdd549089ca6fa4305ce4b60d5ac
SSDEEP 768:cB39QwebiJvfNPRNHXmTWTbc+Hv2ewBKZOTO:cB3mpQNfeWn1P2evZuO
TLSH
T137F2CFB19CB99E339DEA9688B60B7746ADE801B3D4C82A58DADD7B0D108354D071BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bd36c75764355a6444bd3d8089ccb5dbb0f559b9ce02903eaa4aa9d918989413
MD5 7f04f41a2df8842a901895e5a99d0b22
SHA1 334bb561613dcb6403a275854658493e830e7b22
SHA512 89fc5c12ac4194728b163b0f75c34b6e444e700f60c7208f4c7868d79bbb667a2c74b79897a2f73d3ec62153bf93153f6ad75da1fa75851d48e82d5298da7556
SSDEEP 768:arv+4UNbdM38HPiJvVNHXmTWTbc+/ieVH1SvyZ:absb+3qkeWn1KEH1dZ
TLSH
T11003CF329CB98B37ADF68788758BB6573EF8117389C40A84C9D96B4D428744D130BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23c0995b-4084-41f4-941f-a657ccde1f3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\23c0995b-4084-41f4-941f-a657ccde1f3f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download