hxxps://newsystem-find-the-code[.]ch/

Resubmissions

29/07/2026, 16:28

260729-tyxj9sxelf8

29/07/2026, 16:23

260729-twa89abc893

29/07/2026, 16:23

260729-tvycdsbc863

29/07/2026, 16:21

260729-tt4g1sbm5z3

Analysis

max time kernel
149s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 16:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://newsystem-find-the-code.ch/
Sample260729-twa89abc89

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1132	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298158583037205"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{FE069607-B60C-4443-86BA-7FA52F990376}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5272	msedge.exe
5272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2480 wrote to memory of 5572	2480	msedge.exe	89
PID 2480 wrote to memory of 1132	2480	msedge.exe	90
PID 2480 wrote to memory of 4612	2480	msedge.exe	91
PID 2480 wrote to memory of 4612	2480	msedge.exe	91
PID 2480 wrote to memory of 4612	2480	msedge.exe	91
PID 2480 wrote to memory of 5740	2480	msedge.exe	92
PID 2480 wrote to memory of 5740	2480	msedge.exe	92
PID 2480 wrote to memory of 1572	2480	msedge.exe	93
PID 2480 wrote to memory of 4360	2480	msedge.exe	94
PID 2480 wrote to memory of 1572	2480	msedge.exe	93
PID 2480 wrote to memory of 1572	2480	msedge.exe	93
PID 2480 wrote to memory of 4360	2480	msedge.exe	94
PID 2480 wrote to memory of 4360	2480	msedge.exe	94
PID 2480 wrote to memory of 2992	2480	msedge.exe	96
PID 2480 wrote to memory of 5492	2480	msedge.exe	97
PID 2480 wrote to memory of 2992	2480	msedge.exe	96
PID 2480 wrote to memory of 2992	2480	msedge.exe	96
PID 2480 wrote to memory of 5492	2480	msedge.exe	97
PID 2480 wrote to memory of 5492	2480	msedge.exe	97
PID 2480 wrote to memory of 5608	2480	msedge.exe	99
PID 2480 wrote to memory of 3224	2480	msedge.exe	100
PID 2480 wrote to memory of 5608	2480	msedge.exe	99
PID 2480 wrote to memory of 3224	2480	msedge.exe	100
PID 2480 wrote to memory of 5972	2480	msedge.exe	102
PID 2480 wrote to memory of 2240	2480	msedge.exe	106
PID 2480 wrote to memory of 680	2480	msedge.exe	107
PID 2480 wrote to memory of 1264	2480	msedge.exe	108
PID 2480 wrote to memory of 2848	2480	msedge.exe	109
PID 2480 wrote to memory of 2848	2480	msedge.exe	109
PID 2480 wrote to memory of 5272	2480	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://newsystem-find-the-code.ch/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ffebfc2c188,0x7ffebfc2c194,0x7ffebfc2c1a0
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,16727485407074558950,11793892562302037687,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,14728948993115669100,6132241628500749725,262144 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:2
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,11411457545961408833,10163693117309156094,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:13
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,153002692815251699,122774874964009878,2097152 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,4975436673214348099,15918545806180124109,2097152 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,2062380908185285749,9138545139647332008,2097152 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:9
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,16721346409781545039,15282544415005533457,2097152 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,17983838233645091175,15825157249952985420,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,18125475551545332080,9760238087794241312,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,4286291283039294938,18188301177183483122,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,4286291283039294938,18188301177183483122,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,7600812652725997860,347184871317400493,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,10172429220506632039,2544727520776446522,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,17667907961593921420,5679841230789482047,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,183313725153727299,17927679482333656669,524288 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6080,i,9317346629775277563,6094947569221171129,262144 --field-trial-handle=2624,i,3625364455328756875,4980568505183179050,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

16b8573e-556b-4868-874c-da43dfac47fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16b8573e-556b-4868-874c-da43dfac47fb.tmp
Size 12KB
SHA256 a9f77c603a1ba8531212b08a86a575be10b3f6644b60ba57acdabb68688db011
MD5 59aa5d59ed76b812b25429036becdd5a
SHA1 5716a41189e11d5b4682dc72b2b7e11ced83fb34
SHA512 b6e4a0be6d01052aef4684f2e09f44edb2e40a1aff1dae564aa7f246ef5f7b40c4ea8363d2e40026e3c7e031a10ad776e930efe44c6dcc4c252a59e083d5cbad
SSDEEP 192:sxR8RrbL/fHs3QDde5lSszoD8p9EE7PD/g6+WNdEM9/YCOuOxFG0IgIJ:sxR8BL/fHs3Qc5lB9n7L/5d5/kxs
TLSH
T19842C7166B28A93B4CC7D21DBA55BF63E6F91032A2D45E48BBFC971C04E66DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d9a8a8216e0c42e6c541da1821766c95c10e642a88129c3eb0ae327fa09dcbd
MD5 2298c72ccf133847607deac134246f2a
SHA1 7c204f87aec4a3dcf13132125627c3898b601a33
SHA512 c1ee6a111bd1bf150814e857696ab598d6ef1138b9e70ce38d8f636ab1b41e0b2af56572596e51f59fca0a25833f884a12a4fa51ecf4fb5c573621f2a00f2ef3
TLSH
T11361597ED3EAE4CADB229DBB30E64994B2F09149620F3F4285651C768DCEF9880D8417
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5992ef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5992ef.TMP
Size 2KB
SHA256 3d1f3885ccf8dd00532c0323b427152cadd19931a4a3191d84ed5f71c4ae0186
MD5 220c4fccf12b83cef8743971e92d5052
SHA1 277857871e681948dd1eae938e30fa0ce3ff9df9
SHA512 4e5eea0c346b5d11402f6c5f24c51e2639ce7e0a38601e4cda0bdb86e2f57fb68c17073df226fe09bf88ba3a4430cd20d066b4232afb0b8dff971a3773bfcb91
TLSH
T1D7514FBC13E928CAD762EDF324F24AA8B2F0A65A210F3F41D9A81D78CEC5F1414D0057
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 4e51f4609647b8e6841d327b76a270f12d4bb1b2632c42d2b3bac803170563a8
MD5 737d37e23f12f84c786319553c44711e
SHA1 5ddf6c0c14ddb81d181508d2a1c2f460716cead7
SHA512 dd1a0fbaa0ff68f0ed846e327f089dfe73625be159a2e4d4f003629c72b9eb648cd7962b7e6a72af5c29a19c014b9353449d4b738157f5548c609bca65982e2d
SSDEEP 96:DBOiaCCiMiCi3a91WiNjhNzRiHiP/iOiptwvis:D0uCh50a91WiNjhNVOA/r0tS7
TLSH
T1CD91F0B7C3D48A3DC94256F0A7143F3BDE290A2553583D0689E4EF5FA3E24B1E25194E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3a5846b94f562f9884b1705a17f96d953b26fe198d1c9fbdc1de471d80fe0dab
MD5 45c563eb5bd06f0638bca0e79ecbb32b
SHA1 91628bcd16965d25078e1079e8ea37cdad167c96
SHA512 2c0e98202eacfca4264cbad2ff5534065e8a59047f76f3c7284ba379464b8c30d065ee217cc0a33b51c62b0bdf2093ad71bcdf28ffde75d2ebccec4598b35ada
SSDEEP 192:sxRDRrbL/fHsEmDde5lSszoD8p9EE7PD/g6+WNdEM9/YCMuOxFG0IgDIJ:sxRDBL/fHsEmc5lB9n7L/5d5/Oxw
TLSH
T1F242D7066A28993B8CC7E21DBA55BF63E6F95032A2D05E08B7FC971C00E76DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 25ccc75c556b1b13bcd40d99e87838aca080918f1cf4d6a00ef0e609136afed7
MD5 103d238f94f15df6395dde452748867f
SHA1 16fbc4d15801064e54a25df3ce8a402c30b318fc
SHA512 0f5623513fd4ff28936f716f251da31ca6fb8c3df8e8f6f365eb48b6d3bdc98c7f3e7e73a338675a7907c9c8c5d6c3e4dc0f996ae52be5a2cfc23f09b9ff192e
SSDEEP 192:sxRDRrbL/fHsEQDde5lSszoD8p9EE7PD/g6+WNdEM9/YCOuOxFG0IgDSJ:sxRDBL/fHsEQc5lB9n7L/5d5/kxC
TLSH
T1F542C5166B28993B8CC7D21DBA55BF63E6F91032A2D45E48BBFC971C04E66DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 95d3895983d3e931099f7c6a9fdad0d305ee1f7ab294ccb570938196ac6bfa44
MD5 84b2b12bf93cdeff18abee8ce62732a4
SHA1 3a88c274cf190664b58e15c03d4117b8340d7133
SHA512 994090589b9ce88b8e662e6d4d8f468821a5c3a9d11a6719653f3dc40b5cd1497ccbdc1ae88f0a0df281ebd8b8879eee3c2a65e71a361643133ee0ba4490713d
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRv8roZSf:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vt
TLSH
T164B2EA2B600DCB7F4F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f2a06f4e716fc11f8c7f7de7acd03cbe86a1b1de\6c32e768-16a6-44d4-9228-0d635aa76601\index-dir\the-real-index
Size 72B
SHA256 88091619d8af83b5e242d3b8904e6e459a908866acdde08e0599d572d3e41816
MD5 1bc76c702d1c78f59f77d2cd9720f505
SHA1 fe03f18a37bcc816ac7ec3a020a07435af582aa4
SHA512 96b0b33e6ffa16f2bdc0958a41f080d2f4348ef7d51fb9887de4406de168bbcb23c9535e1d25b386b65a0fc6768794de6ca95a458af07ebccfa4addc18572d91
TLSH
T1EBA00232C5508031ED0C73B5544E4190E324FCA05681473341D70156CCE15F08282010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599bd9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f2a06f4e716fc11f8c7f7de7acd03cbe86a1b1de\6c32e768-16a6-44d4-9228-0d635aa76601\index-dir\the-real-index~RFe599bd9.TMP
Size 48B
SHA256 eae29d2f9b7825c8179e95ce314e8429d38b4a857c9a683b2966ccac8a8fbb22
MD5 901598ec0ab0db52f6fda537951f5e64
SHA1 dfea4c00cc686c57fcbfef9e8b2caa6679ea2c9e
SHA512 54a2a5edf8bb39464f8de5bd9934b793f4180486e46e1475272b3aad38e084d693ba9dee23ee07cc14cb614bc160c4ffbb24a291e8964dba710be8c1268df38f
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f2a06f4e716fc11f8c7f7de7acd03cbe86a1b1de\index.txt
Size 223B
SHA256 b8abaf675d0b449719608ec8eba8fc580fa304b0ab494e396f98009b3e435727
MD5 e8c88679c033104ebcdaa8fdee7f54bd
SHA1 b2c4b2abb296c38924fdf282c351670650ebce63
SHA512 4fdf4ea619f762fd1cb9c6af4b62b2a310989ddce45fa0307f18b58874422da5ac797443089a0b16cbc43d1335875f44986d22f67c35f34c3a891181198e02fd
TLSH
T10ED0A76A7B9143016B51E4C211233609512E3CCAC6908F880E950632C1108A427B9F6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe599c07.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f2a06f4e716fc11f8c7f7de7acd03cbe86a1b1de\index.txt~RFe599c07.TMP
Size 229B
SHA256 5315df01610b592471200baca452f1faa1295a7b152d38336fe38bad53409994
MD5 5a7cff7d219facc2736653dcc39caaac
SHA1 55618e5ade56c4e635625bb3cb1ce3591fd6d502
SHA512 aa28e64aa2749a516ed04f2471e7bfdec3644d4a69ccbff37d2ca6bb330d90dfb2f35f8c5d262bd5e7bc12cbbee3d657b9160440f7769eaa207e9deefc69b988
TLSH
T17FD0A76A77A143016711E4C311223209512F3CCAC680CF880E962632D1309A427B9F6A
MD5 SHA1 SHA512 TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 10KB
SHA256 e93fc537a7af8ba887e934a64a8e59a842168da46c584da748c4630184c162b8
MD5 f3e2daa32c542566a9b5dc011ab27393
SHA1 cca9b68cf1a3ecf6171a68dcd434df989fcc5adf
SHA512 00ded5a4af4d4a7f6301388eb3dda37a534e721abbc72af3246437707c2bc504ce38cc473d082c57381775ab3ee2a805794134f00ea4dcccaa89bcecc2aec8a5
SSDEEP 192:SOYYXNZ3oUCgDOPufm+PaezClE9UnsQkZ9d7g6i6Ixob8:M4sUEPIaUClEmnsQy3iEb8
TLSH
T1C22249E9BB0C2003D3533B605679D421BF7EE9F26186D8C5F84E50A92FD0699C2719AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 7511014d2f8297ee3b3e1b574dc67d10aff400099eb99ff5f23fee6b91c141c4
MD5 91d62584f922e628f4f42839b662acc8
SHA1 39b87b79a6d3ab8feedcc18802f2d4d5a17eb3ed
SHA512 1459c7048288d13e8b3c3dd02161941002217053e82ff8cb14b5d0f466e80820adeab094e74623a674d93cfb10a48596293f79face05bcdf5df52a0bba37e96e
TLSH
T17DA0026E535F7401C8464EB52755114163D048F103810209859498D98D91D409246F21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597f67.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597f67.TMP
Size 48B
SHA256 59bb3da6b4d9307ac542b656e84306d3125086449c150599637d0dbae2d2d87e
MD5 65dd047f355e85924105ca8d82f70ea8
SHA1 e923f0879c414371dab82eb7a003cbd1447df3a8
SHA512 2764ba2abd59e40a8e5edde2e8594e585ab33dcfd62024704d1b1b90f7d6846d7f79d2b4d1e482f14b8dd9fd95a2a01de1c560dcf0b50a67d8594013e79053a2
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3bd4a946fcba31b424c2d3ecc435ce85a09a055126cd578d0b03c88419334fb4
MD5 51c6779bc61a708833b806aea7e695e8
SHA1 62d2dcf265d48c8d95b4acc8b19c2b7ea52c6b7d
SHA512 bd0128c930f3fa8bc9407c54b858e0c777d9280118b8f72bb6167bd2a26bd958fe5cbbfe58a6d786404454e206020e7af00529a7377ecad4347508b9ec01773e
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHPY95PNtBWMyIKXq2u/CKgEJ:CbEBVj5JAdSp9/EgTK7j6dJOHPY95PNl
TLSH
T19B91A450707B0641787E654CC27C986B83C3B0A6349DA57B7BA896660F27E035DFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

94a4d17c-7346-4db2-b129-f0ee5d808a68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\94a4d17c-7346-4db2-b129-f0ee5d808a68.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce4867d5a66c195aa924317a8c48862fd0db59641be253989931f568c1948697
MD5 d8a5bf908c43c3d44042a39ec0ccb04a
SHA1 58f7efe94259dcad513e097877ccc68922e130eb
SHA512 205751909aeff74e461bc73120d24a36fbc6a80a95b495c4be76e1a006eb3ec0ac91866b8eb35d8b4d3076ac0614f64c2c261b9e685ad65b6f71a41bdcf04e9f
SSDEEP 768:663Kuk5wcp8+p3bd66j+4BRv86aLIWxjPFNWy3/t:663KQ68+p3Z6n4y/Dh3V
TLSH
T161F2AE73E8A48D7B4CE2C744B2467B036FF48163D6C41ED8A9DD6B0E409616D670B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 0db8e15a85846ee7d91ee9e333a519b2d34a691c4ec66c2bfd1992c40967ef8a
MD5 bb7da7a6df7492bfc6706be37c80cbfd
SHA1 54a4e0b625484017a805586a2d9ec499681923e6
SHA512 0a57846c630d8787e580948aa2b53a75fb45b2d471af755eb995224e354cfa58455d2300178832dd5001a80f37bd531dad48028c01f6a7869a495cfaab54f5e5
SSDEEP 768:9FQ53vwg1qk5Ep8+p3bd66j+4BRv86aLIWxjPFNWy3/t:M53Pe8+p3Z6n4y/Dh3V
TLSH
T174134AF398D7893BC8AE8747A37D2E025EBCC153B5845994B7C8660DCC561BFD30A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d39399a5628ba6345aaa94e89287eaf9204a3ebbbc725e8183e9c36035a30a82
MD5 4c13cfc559d7529e550a594762b19b2c
SHA1 172de311f34d9b253b1369a06b2a75c34104b0ce
SHA512 a57b35b3f8c9dfb5204d5844e854d0c5a33127b1cb188241b37cf91007082aa86ed0c20b9bd9e29683eea74e600dac66a8563a9eb9316c2e52362309f3b2c2e8
SSDEEP 768:y63luk5wcp8+p3bd66j+4BRv86aLIWxjPFNWy3/t:y63lQ68+p3Z6n4y/Dh3V
TLSH
T125F2AE73E8A48D7B4CE6D744B2467B036FF48163D6C41ED8A9DD6B0E009A16D670B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3777279575e0202cd7b5807cd3e11438ed97042b5b058dbf9879592c6e1c0a21
MD5 6dc1bfdf35c93c426d99642e6f36a7ed
SHA1 90d9ccdee5eb3cece9814bd563f7bb931307afce
SHA512 3f83ab3796b6a723657a4774701586a43ce149a7f7549a76444efc03d02dfe452f10b1225a9d681fb71fa6d675276e9a066dc0c248918c32403441104462a9cf
SSDEEP 768:Irv+4UNbdD32cVNp8+p3bd66j+4BRv86aLIih2bwCl1:Ibsbp37L8+p3Z6n4yP0ww
TLSH
T10F03BE73E9A899339CF6C644B2467B437FF851A396C10AC4D4DD2B4E419A1AE630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d09a6b898f83724c991780063b612e21d7eaf0d0eff6b4688fb14085b8dc3b51
MD5 ddbd990d7f690c63e376c7154b89466f
SHA1 d38651ade735410a720010ab9af4c2819afcacec
SHA512 411691991bf8dbe88af2efeaa12b3e640fc5fa4eefdf92c0002195ea20c1af25a33d596a5c6f2f5102f4e6009ced942e62b9845d25d8b6664c35939456874e2b
SSDEEP 768:mrv+4UNbdZ3KUk5wup8+p3bd66j+4BRv86aLIWxS5F:mbsbv3KOo8+p3Z6n4y/U
TLSH
T11E03AE73F8A8D9338CF2C684B1867A437FF8515396C10AD4E8DC6B5D459B1AE230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cdee4671-5732-414f-9616-799c396e6425.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cdee4671-5732-414f-9616-799c396e6425.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download