610263ad02cf9cf1a5f9667e868f67edb88bed7c03074860c7b5728f1df60fc4

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tatib5/app/Views/pdf/RekapPelanggaranPDF.html
Size 4KB
Sample260808-ak5tyayxdx
SHA256 610263ad02cf9cf1a5f9667e868f67edb88bed7c03074860c7b5728f1df60fc4
MD5 b581ad374608b268d8e1b9eb63c2d988
SHA1 42adc7c935d0cec25cc9b80cf52516b2ab2c7f4c
SHA512 2025cd19fef7a9bae46494887241324405180769581b43031a63a0483349c51bbb87848cc7dad82c5b09722c3c9c5ea03394f7a3a7cf58fb9b6b1a5b0dc399b3
SSDEEP 48:tXtbBeiWPMsbDQlNYEcY76LLnPORnX1PX4I2mtT4tTSMjToWbp:rvcbDqz6LLmRnX1PobmtEtto0
TLSH
T1F1B1452714C3F20A5072A129DB924F6DEFC38C63A34759203D9FA6C7AF368128653B5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5164	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306219831656638"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{883F81B7-72CC-460F-A336-878B6FD02562}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4156 wrote to memory of 2796	4156	msedge.exe	89
PID 4156 wrote to memory of 5164	4156	msedge.exe	90
PID 4156 wrote to memory of 5828	4156	msedge.exe	91
PID 4156 wrote to memory of 5828	4156	msedge.exe	91
PID 4156 wrote to memory of 4876	4156	msedge.exe	92
PID 4156 wrote to memory of 5828	4156	msedge.exe	91
PID 4156 wrote to memory of 4876	4156	msedge.exe	92
PID 4156 wrote to memory of 248	4156	msedge.exe	94
PID 4156 wrote to memory of 252	4156	msedge.exe	95
PID 4156 wrote to memory of 248	4156	msedge.exe	94
PID 4156 wrote to memory of 248	4156	msedge.exe	94
PID 4156 wrote to memory of 252	4156	msedge.exe	95
PID 4156 wrote to memory of 252	4156	msedge.exe	95
PID 4156 wrote to memory of 6068	4156	msedge.exe	96
PID 4156 wrote to memory of 5980	4156	msedge.exe	97
PID 4156 wrote to memory of 6068	4156	msedge.exe	96
PID 4156 wrote to memory of 6068	4156	msedge.exe	96
PID 4156 wrote to memory of 5980	4156	msedge.exe	97
PID 4156 wrote to memory of 5980	4156	msedge.exe	97
PID 4156 wrote to memory of 4516	4156	msedge.exe	99
PID 4156 wrote to memory of 888	4156	msedge.exe	100
PID 4156 wrote to memory of 4516	4156	msedge.exe	99
PID 4156 wrote to memory of 888	4156	msedge.exe	100
PID 4156 wrote to memory of 1676	4156	msedge.exe	102
PID 4156 wrote to memory of 3388	4156	msedge.exe	106
PID 4156 wrote to memory of 3916	4156	msedge.exe	107
PID 4156 wrote to memory of 2812	4156	msedge.exe	108
PID 4156 wrote to memory of 5652	4156	msedge.exe	109
PID 4156 wrote to memory of 5652	4156	msedge.exe	109
PID 4156 wrote to memory of 4264	4156	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\tatib5\app\Views\pdf\RekapPelanggaranPDF.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff80678c188,0x7ff80678c194,0x7ff80678c1a0
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,3196890716884383424,16796823745455141633,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,6088858578127474106,3393605384513141349,262144 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2216,i,18052595483638701327,15268482140669437686,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:13
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,15271438804640207816,15530232394010473532,2097152 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,13848485229347925019,330223283167326616,2097152 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,5975170546065047564,17845093522766366940,2097152 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,17940890112993774880,1524664526752058175,2097152 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,6061790200792291874,15588137470708417997,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,15892764241990432572,9732812289355220541,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,15046760815412512012,16798219826030948280,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,15046760815412512012,16798219826030948280,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,6864929171920695556,17433428250081883842,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,11717067183278934318,16414865655909226839,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,5368695897593652242,7713603818975972133,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3236,i,15292376530254323133,5519778276759912980,524288 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3960,i,8080897038187019791,3266708086047346160,262144 --field-trial-handle=2608,i,13296390942483145900,11721492379910505552,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 778b6aa7b61ed684f3ae99299128dd3b720fe2215927592e3392cf5c8cccba6e
MD5 bf321c16e5217072991c31118c435d37
SHA1 c5832e39f6010ac4269c9a3ab0def00d8df65355
SHA512 683e9baa7d47970e9d20e32cb85ae77d6eca99f422cc400d0c335e16876aeed7a82ee0e8b2563a60eb852b7872694735451f2783e0ebd6a34eb6cf5ccaaf11fe
TLSH
T1AA51F85463E718F1E72D517250F0559832F486798E07BB81D05F6F3CCAA2F7491E82A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c450.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c450.TMP
Size 2KB
SHA256 16a196e0ffd2f73a885b9747531a3803aa575f2eef47c1b8e357271768af82dd
MD5 24ea057322b41ee9094a3311a200141c
SHA1 8ba28aa178075b5f1605060a307ba87ad47d6066
SHA512 e15cfb6e5dceeaa4aaa98ac72845ee86164a0510b5369645e06781e83c6e03fad9c25ad2d72a0d570b64db13181751bb2cd1126de77bcce1e877d1f1fb8a7c48
TLSH
T12751F81463E718F1E72DA17254F0559832F486798D07BB81D05F6F3CCAA2F3491E82A7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3ffeb2ff7c5a728c003e9370a02223da6878a95151f09924887e7555a0da3b98
MD5 903de4c0d048656ced347611472fd686
SHA1 a66129644ac2e9fedd091e780807e6f43cfb3946
SHA512 5539955153e4ce9744cf882009d063d686eeb61d0b35e6ec1a7ffa7dc240560b5840b438d1f3addcd2500ac775339781f603a37eb4d45d60a47eca7fac04dc22
TLSH
T10241AEF3C3E4956E890156F0AB146E1BCE2D0915832C3D56C9E4AE5BA3E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 68f1f638ca7df9a93e386bd0ef848cc306286db6783d3f80a7164c70ed4e4313
MD5 80eae098566f4aec5825419dfd73e561
SHA1 7901efb079ce8a2e16e21da4e3b4840e7d7c573d
SHA512 f4303528cac1fc654717c8418fb7a914fbf61d0a79a9724345842e8ea3968e590ca76e981b699f1e86b25eb86510b1341000554a02775e34ceb0ca299c6b8b71
SSDEEP 192:sxR8RVbY/fas79KCA94/tzoA8p4l/g6+WNIYD9oY6SCGa0rIgDxqJ:sxR8DY/fas79Z8X4/5ITFSM0lm
TLSH
T10142B616AD68AD3B9CC7E21DBB25BF53D2F9503261D02E18A7FC961C14E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ee7b30ad064dfbb909d059cfe6dc198e53e79f7a44e214a66e3db392c64876a6
MD5 146e5e03928b92ee97561da9cb6d55ae
SHA1 6fc94326345a38091473aaef9b9d12a2b4536c95
SHA512 89ff32fa1d02a7fe184f4806c555b32d126449098adf368350e15376e83fec13dcf6fb03e9c6b34999be34306cffc7d8ca39a883392fae1002537a807ca38d26
SSDEEP 192:sxRvRVbY/fas5rKCA94/tzoA8p4l/g6+WNIYD986SCGa0rIgIJ:sxRvDY/fas5rZ8X4/5ISSM0s
TLSH
T1F532C716AD68A93B8CC7E21DBB25BF53D2F95033A1D02E18A7FC961C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 abe8b699d72c8d9d580f7382628a24db803e43e0c6ddcf075eacb8e666bc5b08
MD5 85cd17dd735b36ebf20137c6004deb10
SHA1 2e5f10dba9eebfcd8c7a12124d268b9f3931ea54
SHA512 82a985a832b9e124225e7b75f7ceefc824eabc6e01bf17a4f21efa159c6edd90a060894ea5bb2e70a893322bc5c0427145ed8b3fc38a02ec05812cb0f048bf2e
SSDEEP 192:sxR8RVbY/fas7rKCA94/tzoA8p4l/g6+WNIYD986SCGa0rIgDxYJ:sxR8DY/fas7rZ8X4/5ISSM0l8
TLSH
T1E332C716AD68A93B8CCBD21DBB65BF53D2F95033A1D02E18A7FC961C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9f36e1a0de2e5364eb420fc2b2de927be2e90d5f8fc4ea3245f381946080bfcf
MD5 5dfc920b54f5469cb14fae9ea9d0ce0d
SHA1 61b9a7584da04ebc58813b339775a1387368af7a
SHA512 697278a5d06425e1c680b31fb22fa75d444a6c401056eebf36b7011204be497929ba0bfc015674f8b34e1c8e7f4044e2b945db9e26147e2935edfc7c6bda1e9f
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcbropDO:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0Vx
TLSH
T194B2EA2F600CCB7F5F800AADAD196FD76D9802C79B588D5047FE990C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

0f77d046-9cea-4fdb-a991-bd5e226a954b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0f77d046-9cea-4fdb-a991-bd5e226a954b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c5102713e7b63d4da934beaef0fe8ba2da6f2626b7878e0fe4641fe3a3651200
MD5 9b3463b3c9844779a0bca8d72fd7aadc
SHA1 7911dd3d1368f97c9b3bfb28c58351c152f7b740
SHA512 27c2d423a8344632448ea5fa9fa4a1e034a9cdcad19c7ea664fcfbef48427908354b9fd70051dc32a86df0140aad3907f96077219927d9a5f97201061016ac2b
SSDEEP 768:Yrv+4UNbd53xOb0i0Ka0M6rEnjN3Gac1FC2ewBKZO530/:Ybsbr3xOmF07QnjMaZ2evZmY
TLSH
T1F513BF31A9689DB38DE6A285B0077603AFB4169385D40BB4DACD7B4C169B5EC230BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce01f17e5d2b63253247092609e14d21fe39bfde395f487b6606cd6400a121fe
MD5 6fb758ffc8367d6aed8c0a5638906afa
SHA1 4765782eb947a6e3aaa13d3a93c3f19993125c1c
SHA512 029aff76239fdc3f608e13839eead70fb57d9ae6e4b6a34a4483c6e2ba1f5901537207b220dc250719096d407053ebe03c64e1281c40879f4471915342ea9cf9
SSDEEP 768:jG3c2F0i0Ka+M6rEnjN3Gac1FC2ewBKZO530O:jG3c28F+7QnjMaZ2evZmx
TLSH
T188F2BE70ADA89DB38CEAE385B5077603AEF44753D1D40AB49ADDBB0C15975AC230BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 59778c8f92151c0100f4085154d6d8bf11d2a268cf8e718075d23302425256c6
MD5 16611c1dd1a4f54fab1357bc019ca714
SHA1 8e6c7412710ee8a37ee1cd675d08c4449c42cd4a
SHA512 99cf95edc8f72a495c3b7ebe109f08a72b0e10e1663df52210d5a8df560fb15e3582622d64f23bc84590a283f98a9621ce40a8cfc4b9a79871032ff5b13242b9
SSDEEP 768:0G3l2F0i0Ka+M6rEnjN3Gac1FC2ewBKZO530O:0G3l28F+7QnjMaZ2evZmx
TLSH
T1B6F2BE70ADA89DB78CEAE385B5077603AEF44763D1D40BA49ACDBB0C15975AC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 65c60178b9c6b009dd4a65ec21c11c379819e9aab04ce3489ff75d752e9b6441
MD5 a477584292d9b2354dbf6d7d48937658
SHA1 92e1cead134369cbc2efd0a6b18c92d3ec6de693
SHA512 e1b29ec0df3893c696bb5582ca300f2da033dfedebb2a3db48dc2512b7640b802e369dfe17cabc78269aab7c271f3cecbbd0ccb62d7d583c7f839103887ab2ee
SSDEEP 768:TFQx3awgV2F0i0KafMmrEnjN3Gac1FC2ewBKZO530O:2x3a28Ff7QnjMaZ2evZmx
TLSH
T18003AE729D98C9BB8DEADB85B54672039EF447A3C4D45AB4E7CDBA0C21971DC130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fcb4c6f95c8d53baae8e40227a99165aee1e9616d1d228a46224a6b8ddeea571
MD5 2ed37aad4317d16d965dba28874203d9
SHA1 d0510564663cd6c62543204654b2cfb2edad1f71
SHA512 a00b61e3db56ce88f6edf5d5aa5c3918e566a6bfe03ab79c20cd7aada9a76e047e854bcbd70085b5eeb39e1192e1a860356b8dccd2bf8a349a9acb0edc33d273
SSDEEP 768:rrv+4UNbdS38mi0KUrEnjN3Gac1Z7eVH1SCz:rbsbg3b/QnjMawEH1V
TLSH
T16A03CF3269A89EB38CE7E38571477A037FB4125385940BE0C6DD7B0D169B5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48c25f5f-7df5-4005-8207-513afc3bb997.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\48c25f5f-7df5-4005-8207-513afc3bb997.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download