97c57dfbb84f6761c9631e5fde5bb329cd93748859a11000bf873155162c7805

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tugas_ppb.html
Size 361B
Sample260804-pg92tazerd
SHA256 97c57dfbb84f6761c9631e5fde5bb329cd93748859a11000bf873155162c7805
MD5 3cdd01309e200687ae0118a5bff08ff3
SHA1 c500e5d46e83b44aedf98519a3252cfcc619e7bb
SHA512 461a306f0b1220650139395ab5a653f4aa00ad491375193e7bbed0ed7de78b38bcd8711078bf443e4e619b9d667f05253c8c493ad727004772d5ced573539d3b
TLSH
T18AE0C0280442180501B8563488D0F1D1FC6312A305482611B888647B1FF8709CBC72D2
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3008	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303195691564557"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{330C76A6-41DB-479C-8451-6AC29DA142E1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 1480	2880	msedge.exe	88
PID 2880 wrote to memory of 5432	2880	msedge.exe	90
PID 2880 wrote to memory of 3008	2880	msedge.exe	91
PID 2880 wrote to memory of 5432	2880	msedge.exe	90
PID 2880 wrote to memory of 5432	2880	msedge.exe	90
PID 2880 wrote to memory of 5704	2880	msedge.exe	92
PID 2880 wrote to memory of 5704	2880	msedge.exe	92
PID 2880 wrote to memory of 2492	2880	msedge.exe	94
PID 2880 wrote to memory of 2492	2880	msedge.exe	94
PID 2880 wrote to memory of 2492	2880	msedge.exe	94
PID 2880 wrote to memory of 1976	2880	msedge.exe	95
PID 2880 wrote to memory of 1976	2880	msedge.exe	95
PID 2880 wrote to memory of 1976	2880	msedge.exe	95
PID 2880 wrote to memory of 1044	2880	msedge.exe	96
PID 2880 wrote to memory of 1044	2880	msedge.exe	96
PID 2880 wrote to memory of 1044	2880	msedge.exe	96
PID 2880 wrote to memory of 2652	2880	msedge.exe	97
PID 2880 wrote to memory of 2652	2880	msedge.exe	97
PID 2880 wrote to memory of 2652	2880	msedge.exe	97
PID 2880 wrote to memory of 4820	2880	msedge.exe	98
PID 2880 wrote to memory of 4820	2880	msedge.exe	98
PID 2880 wrote to memory of 4820	2880	msedge.exe	98
PID 2880 wrote to memory of 608	2880	msedge.exe	100
PID 2880 wrote to memory of 2304	2880	msedge.exe	101
PID 2880 wrote to memory of 608	2880	msedge.exe	100
PID 2880 wrote to memory of 2304	2880	msedge.exe	101
PID 2880 wrote to memory of 3740	2880	msedge.exe	103
PID 2880 wrote to memory of 4680	2880	msedge.exe	107
PID 2880 wrote to memory of 4744	2880	msedge.exe	108
PID 2880 wrote to memory of 5824	2880	msedge.exe	109
PID 2880 wrote to memory of 2876	2880	msedge.exe	110
PID 2880 wrote to memory of 2876	2880	msedge.exe	110
PID 2880 wrote to memory of 3828	2880	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\tugas_ppb.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff849dfc188,0x7ff849dfc194,0x7ff849dfc1a0
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,2040733015090083706,3343034475870020331,262144 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:2
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,16967614010451937624,10655861333046328903,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3204 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2216,i,5878706106574526078,268194243858237034,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,2599564671830909189,6598613445363847614,2097152 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,16691934286507650001,8267302099488962119,2097152 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,16506858841010794890,17886911013106476265,2097152 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,14257937494791834806,12203582033021952494,2097152 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:9
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3760,i,12779002772510900355,13539029163314462051,2097152 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,11028994348497602802,6907855116731097403,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,5124493349343163653,13543303153053775288,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,8899839445845158716,7262749425947286520,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,8899839445845158716,7262749425947286520,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5198401217695216043,98126940057763705,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,718012561635232334,12067614275973092563,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,6380777335788045175,5284121380455878423,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16778809413868556205,11496602911672751689,524288 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6436,i,16820021051758140621,13873513571834880044,262144 --field-trial-handle=2596,i,16425097502147547997,5281891940336107282,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 973769b03ec2ce0dc62e7ebc50d8c91ab34f00d697802aa262e39373bbb65634
MD5 54115e782ad0e91273612f0bc2394f7a
SHA1 430facee15f36c79fcd84e985e2d32d5e62cde44
SHA512 4df67eea7ce236127853f6925cad17075cb2841b11369f0f70013cd4433e9fe81b0581a3c030126732368056b28a92bb8d4aa1fe9fab974317d11978c01b1a3d
TLSH
T10751639A032E09F6D75EBCF550FE6684B3F8C864B1CB9E0140D11E370A42F36A1E0127
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596fe7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596fe7.TMP
Size 3KB
SHA256 690b4a1805c40ef653d93815ccd875f6806d493e21ed584c4565018515eb0418
MD5 513cf3c87b4b7525969ca73cf6f44946
SHA1 2181028c5bc04d66545a917793918e2c8b4d4c3d
SHA512 a033e3789a5659abc59e8ddff871283e03977340f6c1d6d302dd2ad4dbd3cb604140ac57b124e25fbad62fa541d86a048758bef46e72764f856304a17ddcc273
TLSH
T14E51528A032E09F6D75EBCF550FE6684B3FCC865B0CB9E0141911E370A42F36A0E0127
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9970707ba233397d45d17c292d2d8214e7d9f14742afbdd2fb6c925bb04bb8fd
MD5 3bea9955b2770cdd4a3cede4ecf91c65
SHA1 5b91a3ffcf7358bfc0737fe06963148e0c863c00
SHA512 43ff6d7d5190d1489b0b326ad49db1eedbf278c69a0d00ae7c7b9e30183d8a4896bc1cb0b5b20c404bb5380efe3aba5a4867786d3d41cb3d3d8be4f7ea5eaa9f
TLSH
T14C41ACF3C3E4967E890156F4AA186E2BCE1D0A15432C3D5AC9E4AF2BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 36b9ffeb407323d8e0f1c0de4e1d398c87b21904380087bd8eb52cc845dd1482
MD5 533466864371f9a4d39fb1f0c320898d
SHA1 83e8aac8fbc7dea4fe6fd902cde6519b0501f637
SHA512 7b88b5d48639dc65ec1b6c2c212f1b4a4a33e839a577e8380078412da5424effc780a39a1333192fef4f0310f0f47a1f06499cfa13383c410e718919d9065233
SSDEEP 192:sxRpRlbe/fnskyKCA94/FzoA8p4O/g6+WNIYD986SGGR/IgIJ:sxRpPe/fnskyZ8lL/5ISSvs
TLSH
T1BD32C7166A28A93B8CCBE21DBB55BF53D6F9603261D01E58F6FC971C04E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 474f21188dd0cc9b5f9f86add4b796fb66cb25d078719d89ec2a15c45d83b6a5
MD5 675bc5eb7e36a7814467e35cfeb7efd8
SHA1 cc8f4a389d7400b023447bd36b6ad5c9d3bc93e3
SHA512 ae052fd10bd01666adbc70b70c80e8adcae871bb8d88f778b0cb98a4747af56d2b8c8d419072fdab9ee0a8045059ed8de4e81d86ce69f76c1a37bde318a65dd1
SSDEEP 192:sxRmRlbe/fnszBKCA94/FzoA8p4O/g6+WNIYD9s6SGGR/IgDPJ:sxRmPe/fnszBZ8lL/5IYSv1
TLSH
T19832C7166A28A93B8CCBE21DBB55BF53D2F9603261D01E58B7FC971C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6b4889baa341b928c13175f31b0e71b5bf9d2e7e6a67f80d8aff99ba42a952ca
MD5 b71e4c0e7de50e0388d58f8d08968f45
SHA1 b6606c29a56a4890e486572c031dcc96723a8877
SHA512 289a0f7b551ac929f61472158a72ccafd828f2255f97a00f668e7086dea82d228a1bde8c00561092145fd095d7e51afa46915e4fbdccb34331af8dd3b7419d0e
SSDEEP 192:sxRmRlbe/fnszyKCA94/FzoA8p4O/g6+WNIYD986SGGR/IgDpJ:sxRmPe/fnszyZ8lL/5ISSv3
TLSH
T1F232D7166A28A93B8CCBE21DBB55BF53D2F9603261D01E58B7FC971C04E66DE221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 118a7d8601c69667a6cbe3c41a9064e038b9e2ca8747e17ee74e99e5f4c51c87
MD5 624c7144a0141d2a155e5407591902bf
SHA1 700279dc9d072f2514a1dc65889e3081d473a2c2
SHA512 6a61fb5c5150ee0c17d1578a79a7c9713adb36ec83fdb731dba5068fd3ca7c95ecb9d1067085dcd727bd9cf35981111c8bbbe02206b493050bbd228c7cbe2353
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRczropDf:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VA
TLSH
T121B2EB2F200CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

efe1a53c-d7a5-47ee-b78a-337738565614.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\efe1a53c-d7a5-47ee-b78a-337738565614.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8c7ba81482f9e53e715efc6e5447f31222899d635254f50951364d9b705b14d8
MD5 4bedacc550d466e23debfe81fcc7c9ce
SHA1 f90ef93177de6e995959505af39bc93d2666a82a
SHA512 611c90af34d84638f1155767d12079db1ac85f5e99ef4c4761860eb855c13f1f48eabc3c33360ae2c930656d5ef5aeb240bb429e778fca8488150969cd3e215e
SSDEEP 384:XZcIz38N9vPQLYi9xJWZlf8hyEG6TFCYby2rEoajo4cdR8eHhVODjYPNDUM+KeRU:fz3giei0jMrEnjN3Gac1F+ojKgqmUHk
TLSH
T189F2BE7458649EB78CEBE3C1B5873B43AEF15213C6D40BA096DD7A0D05C3AAC630B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ce8039638f89c2d4703ac59752a591d1cee79d882e543b2e6d9c4c0aa29e6ddc
MD5 b2f14cb93d928bfbe0be70fbf7adbec2
SHA1 dc1131c2c698db85a6a390147df6e600d7e1f7ea
SHA512 ec7a105f5e1c935c0a50d25668ec138958f357577c2d8ac8afb008ef916ea58528b107cd45324011a76571754933d22a72ffb639acf603732f1b91175d1738f0
SSDEEP 768:gFQL3wwgBiei0jSrEnjN3Gac1F+ojKgqmUHk:TL3q9jSQnjMaZfgRUHk
TLSH
T1DD03AE725D94CABB9CFBEBC5B9863702AEF15263C5D05AB0A6CD790C11935EC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c718919c7c251dc69a5543c04318dbe22fabb9ce5380db88c236dfdda7b0b59a
MD5 2b570df7e4fb9fb5ad49e085acac079c
SHA1 091883a957b6d49bd410892d62e95579a6d8757d
SHA512 5b99df6f9e89d88bd34aa988e7252979d1173a7aba50497ca64aa1b46203cc34a8cd84e02b88b29278bdfff0975514a20a51fa267d294c2d3b84fd08a40f09e0
SSDEEP 384:SZcIz38N93nPQLYiAxJWZlf8hyEG6TFCYby2rEoajo4cdR8eHhVODjYPNDUM+Kea:gz32nvei0jMrEnjN3Gac1F+ojKgqmUHk
TLSH
T129F2BE7458649EB78CEBE3C175873B43AEF15213D6D40BA096DD7A0D06D36AC630B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0d0fd76186524827921ef82ef0f3984f402a6e7e6b33d88a16c24fa5588e7de4
MD5 378718fd3fb33c0ca2538de18a236ffb
SHA1 f8a7180e403da5dfaeb1f69e97077c9c05815a44
SHA512 f75861e48ce8821728a84777a972c39b601194b39ca29642c7d14dd9d84297b776c5f7af7c1cdb9d055dcc68ae45b17cf7958ec020cd2cc507912cb25e83508b
SSDEEP 768:rrv+4UNbdS3wmi0JrEnjN3Gac1ZleVH1SCz:rbsbg3nJQnjMa+EH1V
TLSH
T1DF03CF3269B88A739CEBE38571877A037EF4525386940BE4C9CD6B0D06D75EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52487df3-77b3-4d35-ba84-c47afcdbae5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\52487df3-77b3-4d35-ba84-c47afcdbae5f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download