64b03ebaf74b72616046a94e230ea12d3283a93b0d05a03527a8a6609c1d7dfa

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tatib5/app/Views/RekapPelanggaran.html
Size 17KB
Sample260808-ak5tyayxdx
SHA256 64b03ebaf74b72616046a94e230ea12d3283a93b0d05a03527a8a6609c1d7dfa
MD5 de00cf18dc6af080cdf15c7f6109db59
SHA1 a129d80caa973734be5304fa993c2216d92371d2
SHA512 9b510d8d130ac9a6acb0530e0daf0c2b9ede84f3f028bed470779d0f6203308b9193b702a325e1db7c4b6f6aca5d69267b5904a22750fcd75c668d192a9eb743
SSDEEP 96:cwfiM1EL6/Qz3MY8d/iMpzJAYHhQ1/Ry+z8udW5P6nl2HIw5VIiHQzxlVt6oI:cwaM14IYS7rHhiy+zzlW
TLSH
T19782D92691C3B22B5033D1A59F625F5DEFD68023D70759243A9E27CBAFB2C028913A5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2616	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306219867750884"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{0F21FC0A-8754-43F7-A55A-9240E0A99574}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 6016 wrote to memory of 2320	6016	msedge.exe	89
PID 6016 wrote to memory of 1072	6016	msedge.exe	90
PID 6016 wrote to memory of 2616	6016	msedge.exe	91
PID 6016 wrote to memory of 1072	6016	msedge.exe	90
PID 6016 wrote to memory of 1072	6016	msedge.exe	90
PID 6016 wrote to memory of 796	6016	msedge.exe	92
PID 6016 wrote to memory of 796	6016	msedge.exe	92
PID 6016 wrote to memory of 3780	6016	msedge.exe	93
PID 6016 wrote to memory of 3780	6016	msedge.exe	93
PID 6016 wrote to memory of 3780	6016	msedge.exe	93
PID 6016 wrote to memory of 2812	6016	msedge.exe	94
PID 6016 wrote to memory of 2812	6016	msedge.exe	94
PID 6016 wrote to memory of 2812	6016	msedge.exe	94
PID 6016 wrote to memory of 2880	6016	msedge.exe	96
PID 6016 wrote to memory of 4604	6016	msedge.exe	97
PID 6016 wrote to memory of 2880	6016	msedge.exe	96
PID 6016 wrote to memory of 2880	6016	msedge.exe	96
PID 6016 wrote to memory of 4604	6016	msedge.exe	97
PID 6016 wrote to memory of 4604	6016	msedge.exe	97
PID 6016 wrote to memory of 5648	6016	msedge.exe	99
PID 6016 wrote to memory of 5648	6016	msedge.exe	99
PID 6016 wrote to memory of 2752	6016	msedge.exe	100
PID 6016 wrote to memory of 2752	6016	msedge.exe	100
PID 6016 wrote to memory of 2736	6016	msedge.exe	102
PID 6016 wrote to memory of 2368	6016	msedge.exe	106
PID 6016 wrote to memory of 2732	6016	msedge.exe	107
PID 6016 wrote to memory of 2160	6016	msedge.exe	108
PID 6016 wrote to memory of 4192	6016	msedge.exe	109
PID 6016 wrote to memory of 4192	6016	msedge.exe	109
PID 6016 wrote to memory of 5940	6016	msedge.exe	111
PID 6016 wrote to memory of 5940	6016	msedge.exe	111
PID 6016 wrote to memory of 3692	6016	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\tatib5\app\Views\RekapPelanggaran.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ff914b0c188,0x7ff914b0c194,0x7ff914b0c1a0
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,12211277491238424037,16227853525740142078,262144 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,6162677415865914112,13453058225912238113,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=1404 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,9811209195744538192,2856531662132046751,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:13
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3700,i,13514031527402061196,6299655793291550842,2097152 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3692,i,7837629747187514006,18162702095225781118,2097152 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4388,i,9218889048748156430,15855231805770386175,2097152 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,1273826070105033409,465936124829331668,2097152 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:9
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,630782655544570375,18016857092666040040,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,5017186550233183259,2033369000192682016,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,18245905988045986789,11901371395183878868,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,18245905988045986789,11901371395183878868,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,4878631589229597752,156099562736665089,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:14
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,9509605557130520122,6398759727846771553,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,9323945175401654531,1769096197373337112,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,2296568214850014896,1998204346355202259,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,14924417076534129988,10381821173886855227,524288 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5540,i,9105710737290899977,6134940110754679101,262144 --field-trial-handle=2016,i,8415595297501417222,7516478072909323588,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e259f4ee3a63cd48f9f34b5b026d744f658dda1ede757116bbb5e2d72bbba361
MD5 1803dae33be304bff3d08119aa65c9bf
SHA1 a1cd7aec3c9dd968a69f2e2dc4f6cbeefe474e09
SHA512 d547bbce7b5d9d778319fa9479974d50088daf5a165613e620839dab01aaef017bcb24d8f9c3fdde54c6de3383bac9f33c62ea5f888552ba9d77d70c193de911
TLSH
T18E611B51D3EE09C2EB2ACDB2D8E29494B2F68C998C076A44715CAE7444FEF20D0D2F53
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e1ea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e1ea.TMP
Size 3KB
SHA256 a8200f638073dbbda2adab92deda0bb4632e3a0f182b642cba39aa4bed37679c
MD5 445069242bc37592cffe1c36e9ddfa16
SHA1 12f56bd7205a9e9f2a9cdf1557994f2e40f20131
SHA512 d356119bb095c82d614c37fb4383cda3d1eea19552fde382adb7d5da38f57d0e467c13429c1cc30c268e74d048f235ed8a9f0bfa65e1e142ae8b22e16db5d0ed
TLSH
T1D9610B51D3EE09C2EB2ACDB2D8E19494B2F68C998C076A44715C6E7448FEF20D0D2F53
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 26d1bbcbdd652827f088503b02722c0017f5cbd800a35df61fac997f47eadc32
MD5 6f13bc002b845965235af6443663f5ce
SHA1 888611e09e93c5179f44dc6c8296501edc93c168
SHA512 7cb87d8c3ca87e83e48e258adf4f483b93732b730f10e8b6d9deb9feb785e751887e35207e304d9f48f64936800e425c63cc88feec563751a1122ecbafb88a55
TLSH
T14A617CF7C3E9866D990156F0AB147E1ACD2D091A432C3C5AC9E4EF5FA3E2471D10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 edff3f9f3ec4014648d0c76ca9c4cfb59ac8892aebef5a24b379719e4c7e4c17
MD5 aee5ae532366508bc52f2459bbeb4c93
SHA1 255121f276044128df5c1a0cb3871a7adb8502dd
SHA512 3e43454db2b6f7ad46010b957b4706565a0734e3fadcef40f1ba73e07ddf27e9a6496fca7e713a6e0b17007db5c3bd77986cada568ea60abe56f9ff01159ff5a
SSDEEP 192:sxRQRabi/fJs3CHHm2Sm7a5gzoD8p4T/g6+WNIY3BL0+GeIgD2J:sxRQGi/fJs3CH2oC/5IAoIG
TLSH
T1A032D816AE68A93B8CCBD21DFB25BF53D6F95132A1D02E58F6FC861C04E66DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4c3e9672b86d1815b50c8309010602ccfdcc59cda39b90acfef2feabbed4fd98
MD5 f0b8bef84034f9912a405263b83d3533
SHA1 f75756214e312a934ceec1423637361debca4200
SHA512 75be9d49ce7e7778acd0a200a7de6db858719ae3d601bb303216204514d27c4111301b173006adc7f1d99ccc02a75d4e1eec8853171e5ac6acfaff0c344a4b6d
SSDEEP 192:sxRQRabi/fJs3CtHm2Sm7a5gzoD8p4T/g6+WNIY3uo0+GeIgDMJ:sxRQGi/fJs3Ct2oC/5IDLIU
TLSH
T19342D816AE68A93B8CCBE21DFB257F53E6F9503261D12E58E7FC861C04E66DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e571dda25e673c3e77def7e889fafdf4a30fc12beafb0e27a999dadb05af9011
MD5 7c16bd6c08cc17b6181a08f13ca83dc4
SHA1 e9dd0612620309dab3b30fd9c81516de2c9d1977
SHA512 bef604a1e47c7d56d1264a74b5da68e9eef8a60ee8fea981ea09437463d714413a91fd59714de5ef2e5757b005a347f543262c43da04d6b50477b3d34b4a5bdb
SSDEEP 192:sxRvRabi/fJsCCHHm2Sm7a5gzoD8p4T/g6+WNIY3BL0+GeIgIJ:sxRvGi/fJsCCH2oC/5IAoIs
TLSH
T17532C816AE28A93B8CCBD21DFA25BF53D6F95132A1D12E58F6FC861C04E66DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 64a6bcc324e21b8f6b106d32fadb580a2ae712be884bc62c5099703f98933270
MD5 7b8bc7623528796f56c9fc364db28cfb
SHA1 0c3b6c81a7659ca357316dbfd008f58627e6fce0
SHA512 6ab55fb102fd55409d7172d7a28f0d4c3e083f14b81724da404cc46dc9a3fc832f71e1b1f928ccbbb5fe22dc921b9cb01ddc96858a16e5cbdb995ed3c619ad60
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RT7roOLo:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0VJ
TLSH
T16FB2DA2B600DCB7E9F804A9DAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 275d329acb220ec1ef974d235027df3c005211706bb39c184fd361227e0226b1
MD5 cfc7061d10e5028f7a3814fdb023bb58
SHA1 7db5663ecfb01b825118079c02998dc4f8c53cab
SHA512 a818f9b5a15144197e57d2e2bb6f13c1db380d6a5617392dcbe1696faeb65acaee9c540bc85bdbc45eea7e7ef3c497e3f833f078b84fb44e08d136d0e5da1a9b
SSDEEP 768:frv+4UNbdA3Bzjt0Dc+wfZOcf6Mff6wwmRKvShCQRxoDI:fbsbW3BzjtGwfffjf/RKvSNok
TLSH
T16B03BF71E8749D338DE68248B24A7B53BEB46173C8C85B54D9DD4B0C02936AE2B1FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c1b17630a04b0fed00c5d98446da99f306f4fea366953cb910fe693590fb665a
MD5 662ab3ae1b244ffad2483284a685adb1
SHA1 b9e0b67d42b078639f405543b4c8b03ca5aed26f
SHA512 e15e3b689514c42dd51b6b5fc53aad5c868bead91e4a727e24a71bef72feaaa9282fc1347185e86ee2fccca47e908cf2673466aef2f38d746262d64dafb00646
SSDEEP 768:wrv+4UNbdA36zjsqDc+wfZOcf6Mff6wwmEKvShCQRx2ewBKZOt30D:wbsbW36zjscwfffjf/EKvSN2evZCY
TLSH
T1A413C071E9389D738DE29248714B7753BEB86173C4C85B58CADD5B0C029229E271FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f9ae23cc64433701fa355251deb0222cd79e6fd7ccddc5752eee694313cbd7ee
MD5 c61720ebc27bda09029760ab7e92463f
SHA1 1ca259f0bcd3f59c854ce8699a284aa57735a873
SHA512 13c77a14a788f9ff99139f197d42ae059ea40c370e24a0dc841e69c68c62039997cad82e32351d519e1bb1e825437cb6bdec6edfdf49bd570264e5048005f2f1
SSDEEP 768:Trv+4UNbdA3BzjsqDc+wfZOcf6Mff6wwmEKvShCQRx2ewBKZOt30D:TbsbW3Bzjscwfffjf/EKvSN2evZCY
TLSH
T1E313CF71E9389D738DE29248710B7B53BEB86173C8C85B58CADD5B4C029229E271FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 5f1199982061b95ac8e0d494484961a53cea1d7160883268eb95d50dde04eb38
MD5 908f745abe87e7f51e6f3af301c93bf1
SHA1 c5632f0f4ec280dc4c864b3fabb7c70325afea34
SHA512 11e1683c5ba84e090f71126aace37ebc51edf70b0b8c58cdcb64199f16cc8de9b7a41b76da8ac2717befc591050dfec0f2cb573b7dc33c1b5b2768c28250eb47
SSDEEP 768:oF0rv+4UNbdI3Wwg1zjsqDc+wfZOcf6Mff6wwmjOvShCQRx2ewBKZOt30D:Vbsb+38zjscwfffjf/jOvSN2evZCY
TLSH
T17F13BF72D968D9738EF69648B60A7753BEF411B3C8C89A64DBCD5A0C01931DE270FC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c80663cbaa39575b45f010efe6981b09535f855be44c86354106d0de207f76c8
MD5 803fd12b81a86dd5772f336596dfb17f
SHA1 ee4093bba95f60126da9baf603e16882587985b9
SHA512 4137b5dff340173bf3f0671962623f8e9b2b0b6195e278e4a5e99f47daa026af5ddf7a22f6a7ea5ea4556f132e4b1ab92d2e08436ebb3b79316b36f340a1e98a
SSDEEP 768:Rrv+4UNbd43hNkc+wfZOcf6MgvShCQtr2bwWV:RbsbO3hUwfffkvSn0wO
TLSH
T14703CF36E86899339DE792487646BB63BEB86173C8C54744DACD4B0D028369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a45b66d-fee8-45d0-95df-63bc1b643e3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3a45b66d-fee8-45d0-95df-63bc1b643e3d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download