29e5e2228e53b28cfa5e0b53ca0a5e0819ce44349283e87c59f0ba02522f59f1

Analysis

max time kernel
149s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CheckNew.html
Size 1KB
Sample260813-wt91xadn3s
SHA256 29e5e2228e53b28cfa5e0b53ca0a5e0819ce44349283e87c59f0ba02522f59f1
MD5 bcd41a2ea5801f47dc03936723259e07
SHA1 f46acc833fde74b0a2e1293a4a57af0ceb63dda9
SHA512 2ef3fa2d245ab6d87df5a0a75fe56310c1b73798d1c4100dbac26cc074092c1d86f6c6cf820195409f5ed3e4d799468fbc528fdd0f75d2ceb1dfd86c53067914
TLSH
T18741326A9E94A0BEC2612CE88CFDA548B17A06502404E43CEDEC919455E0F5D582FEFC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2732	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311185409374540"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{99AFEF06-49C2-4892-BC5C-061CF70AB9E6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2984	msedge.exe
2984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1184 wrote to memory of 2268	1184	msedge.exe	89
PID 1184 wrote to memory of 4848	1184	msedge.exe	90
PID 1184 wrote to memory of 2732	1184	msedge.exe	92
PID 1184 wrote to memory of 4848	1184	msedge.exe	90
PID 1184 wrote to memory of 4848	1184	msedge.exe	90
PID 1184 wrote to memory of 4976	1184	msedge.exe	93
PID 1184 wrote to memory of 4976	1184	msedge.exe	93
PID 1184 wrote to memory of 4860	1184	msedge.exe	94
PID 1184 wrote to memory of 4860	1184	msedge.exe	94
PID 1184 wrote to memory of 1188	1184	msedge.exe	95
PID 1184 wrote to memory of 4860	1184	msedge.exe	94
PID 1184 wrote to memory of 1188	1184	msedge.exe	95
PID 1184 wrote to memory of 1188	1184	msedge.exe	95
PID 1184 wrote to memory of 3452	1184	msedge.exe	96
PID 1184 wrote to memory of 5392	1184	msedge.exe	97
PID 1184 wrote to memory of 3452	1184	msedge.exe	96
PID 1184 wrote to memory of 3452	1184	msedge.exe	96
PID 1184 wrote to memory of 5392	1184	msedge.exe	97
PID 1184 wrote to memory of 5392	1184	msedge.exe	97
PID 1184 wrote to memory of 1916	1184	msedge.exe	99
PID 1184 wrote to memory of 2404	1184	msedge.exe	100
PID 1184 wrote to memory of 1916	1184	msedge.exe	99
PID 1184 wrote to memory of 2404	1184	msedge.exe	100
PID 1184 wrote to memory of 1164	1184	msedge.exe	102
PID 1184 wrote to memory of 2220	1184	msedge.exe	106
PID 1184 wrote to memory of 2584	1184	msedge.exe	107
PID 1184 wrote to memory of 6036	1184	msedge.exe	108
PID 1184 wrote to memory of 2012	1184	msedge.exe	109
PID 1184 wrote to memory of 2012	1184	msedge.exe	109
PID 1184 wrote to memory of 2428	1184	msedge.exe	111
PID 1184 wrote to memory of 2428	1184	msedge.exe	111
PID 1184 wrote to memory of 2984	1184	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CheckNew.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb7cd9c188,0x7ffb7cd9c194,0x7ffb7cd9c1a0
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,5407535729131992604,12803130895207566906,262144 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:2
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,2398345000472279595,12800521012495232557,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,7628401089578421735,13903654217945280238,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:13
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3364,i,4709151062037784046,17531393422436537357,2097152 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3352,i,16582581505008549780,5944955726200405716,2097152 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,14747169490585238751,830959224850780891,2097152 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,6151969909099381616,9811021041951981370,2097152 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:9
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,16170112622158198722,5689885101631919976,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,9476424434728783831,6389896793216629688,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,9669197258394528604,15618566021736425109,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,9669197258394528604,15618566021736425109,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,9148133537215674662,4910415212463740788,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,4422701833333572264,10201899451686110341,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,1782606344498183604,10722564004065851206,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:14
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,14678552241755213553,288262439245035153,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,9251695244916358649,2970150250653384845,524288 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6424,i,15637217306845614955,14279750041857847918,262144 --field-trial-handle=3096,i,16667494804405673341,3896442351800249087,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 79515ec2451e039ce91a8a7df6b9ce2af601a55a68419a82c473a016e9bca060
MD5 77facdee47b949f76235c69e326dced9
SHA1 6a52426896e257b16b2ec7f57cf312e2c359d6d6
SHA512 85ab3a4b08ee37293141babb14fae072c95f3ed811d08260f33a779b1e8155223627c2f97a911db2ba0949878f144c350f0c7bc431afc9cd2166ba69312887d4
TLSH
T1D041BC50472719C1DB3275B7D9D1CBB67EFE847D4607AF1D81A4A2B8AA02F349012632
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59da39.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59da39.TMP
Size 2KB
SHA256 4acb225202f464432a59573fda5a7edb308722d143cd387b9c9251b1dd342fc9
MD5 5c8a1d9a98cafe3e971982531bad1066
SHA1 6215ee9eaf28510e10f5334b2508cc93b47677cc
SHA512 d603488a1a65122f91707f59c38140260fe9ea1a08487d2afc14c2b5137ff7a39ba950eab88f47b5f39511bd95ceca049590fe6dc85c2ae25ed6329615142056
TLSH
T1B041CE51472719C1CB3375B7D9E1CBBA7EFE84BD4607AF1D81B4A2B8AA06F345012232
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d99e9d3-8afc-43bd-bee0-e31343b5dabc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d99e9d3-8afc-43bd-bee0-e31343b5dabc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 de7b7dea3e31c6533ecd460f7bf16bcbc7ad25d39a670c7232ccd7268f45d064
MD5 1a514101f29d6d259d69026ebef9e184
SHA1 98d21f8bb9bbe091b556ff1ffbc727fba5838b23
SHA512 6afb9e6936deea74a9496d508e962de9bf212ee704136712dfc55bfb626a89094eef99c033ca2a3400f5dd2caac9a4f8e71e9fd45ed6dbde1afeb5230e24036f
TLSH
T1F031A0F787B4857E8A1196F0AA14AE2FCE1D0515432C7C6A85E0AE27D3F3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 03f1026c2ad8f7aadf57b1de73aa214c7f12325cf42bbdf1fd0c6b147e413096
MD5 2c476ae8b710a5ead3bc3f010397f50b
SHA1 c4209b3e59a2d060a5784f43c57272c45dd0d31c
SHA512 c22951c4db23a6eda0177616b1e38f90fac12daa9aa1cf8c89c63b83997bb5ed83536fc911404dd05623099dd3ae5403e601acfdda3fc39ea93ef798a3826b4b
SSDEEP 192:sxRWRnba/fps863AtDzoA8p4y/g6+WNIYZFLKbaGXIgIJ:sxRW9a/fps86l//5ISUs
TLSH
T11432C7166968A93B4CC7E21DBB567F53E7FD5072A1D41E08EAFC861C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 99a03b4a23c6f9f814d465b8c9a42f041ff38a484db1e8061a08299f8cded026
MD5 142308b83d1690ba86705571833263ee
SHA1 7dcb73aef21f4fc6f4224d6d29787a095b33fb16
SHA512 2684c7e78de4ee7bd237008c7b8ba8b77b5b0772fe514e39506597cf58c113f002e4f8eba8ae984d985bc736eed4c139b1ff14d7d9aabd2edc24ae29613ea0d4
SSDEEP 192:sxRxRnba/fpsj63AtDzoA8p4y/g6+WNIYZFLKbaGXIgDNJ:sxRx9a/fpsj6l//5ISUb
TLSH
T1C232C7166928A93B4CC7E21DBB55BF53E7FD5072A1D41E08AAFC871C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6831616f6c35b82f10d31d2f9dd4f21516d0a9021dfbf2cdd6946d1681dbca8d
MD5 bba61e7d81415ffc1b894f766883a6df
SHA1 8be65a2ac1c43cd0e5d6006d0df0a41863ce4662
SHA512 787d9dfa27f0f2888aed58cf6ca193358e9c06ea509494db98a6b6525d103ea3994f7a8293f90eed04f8d6bf5378fe418035533c35a4332f5a3424f804a3bf58
SSDEEP 192:sxRxRnba/fpsjd3AtDzoA8p4y/g6+WNIYZFLW/aGXIgDjJ:sxRx9a/fpsjdl//5ISeJ
TLSH
T18242B5166928A93B5CC7E20DBB567F53E7FD5072A1D41E08ABFC8A1C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e0f546df0d9dd9d9b2ed4461188dc8a4ee0239d7aedd83b40548028a04e6fef4
MD5 2cb5854d751471098f841dfd152263c2
SHA1 a5f813c447d37d9a3063624a4f4c33268d7c31f7
SHA512 ce347d8cdc522ff960d04326d462d158876b952aa91ddab4385c25b5ff25a0548290843d81e20f173d233fb224ae62c8d3cd3ed7e3ecaa8c2b722eec33372a96
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRG9rocmQ:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VN
TLSH
T13CB2BA3B640DCB7E5F800AADAC196FD77DA802C796988D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 6c7607d94976bc5f363cb0c93a653f117ae68a5087a740a2ec98a32d4ea5a1b3
MD5 87231e08a1584fc565b9f7a1aee331ec
SHA1 2217757ef755d0a9613cd6be5b0ef2557c9be6e0
SHA512 012a2b2563c461706207b96e75246c44c278f10646fe3e7c97e3510a8cbdd16c22957f4b6150dfd851053f86e1ae0caa7ce183e0fe2e93fcff2ddcf93fa01264
SSDEEP 768:Vrv+4UNbdr34N+LeSFOUJHX4fouOToPvB2thtA9VAg1eVH1Sl1:Vbsb939snnwthttYEH1i
TLSH
T1F913BF72A8A88933DDE6D394710B76577FF4815399C40F8499DD5B4D0B8BADE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 12b39f4983a4a1b26d4f04235e901283bd13434a6e2b978b624028d41971b628
MD5 93a71f025d16e22ff95debace32f4a18
SHA1 5c2a5e9e34d08576656a42ae08954e28e604ea81
SHA512 4feb1b016c265f1210b9dfa0be847f7005a9877d9490f97ec3baa4b01c19024a9807d13058956c00538f8d8681665e2e4a30cdb10c792c80f0260e35493498b4
SSDEEP 768:Trv+4UNbdr3MN+LeSFOUJoX4fouOToPvB2thtA9VAg1eVH1Sl1:Tbsb93gsnnwthttYEH1i
TLSH
T1FD13BE72A8A88933DDE6D398710B76577FF4815399C40F8499DE5B4D0A8BADE030FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b4f7f5fc0b86411f6df0b9f281a608191fa3d5722ce3261eb7973a95add16017
MD5 748b466912b00cb20cc6b662b14cbebb
SHA1 b076f0a3aae1967289b34d20f7c949ee9d9c6d2f
SHA512 cc72a6fdf2e18a8aacac6f4899b25d898979044bfc8572e0a82d8e22768714f6fd4d04a8708073381738801d4a2f432f3e28dd2da38e2e43512025a5d86fdb77
SSDEEP 768:oFQ/3OwgbN+LeSFOUJkX4fouOToPvB2thtA9VAg1Pi9PgyQ:L/3OsnnwthttYPdyQ
TLSH
T11603BF7298E88967EDF9DBD4B20A3312AFF481A3D9D05F846BDD9A0D06875DD030BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 900ccdd33dad077874cb7b31022b3c7462844f01c1bb5f281ec2007b35fb9e76
MD5 c33dd84d3272a68ff6518b4f8ee5c50e
SHA1 b4669df6822b0271279aa271a222bcd38280ff44
SHA512 92ba47a13a740c8e3122d66558575025da5beceb4c0c53564139d03bd71edf7acf180d8feeda2c88afbc12c0566ada0feab82c9f5841257c6422d5ee0aa1d3d9
SSDEEP 768:Jc3cN+LeSFOUJoX4fouOToPvB2thtA9VAg1Pi9PgyQ:Jc3QsnnwthttYPdyQ
TLSH
T1AFF2CF71A8E89D63DCE5D7D4720A37427FF48263E5C41F846ADD970E0A87A9D070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8f07b4841e986ec479c033eba33a74a09c7fe70a4292afc16c11c07edded6fd6
MD5 75d1eb0bbf2e4dc5ba49e531cc88842b
SHA1 b78f60cf72790a85303af02cfde26203cf4bcb0b
SHA512 d0e8e77165d8e0abf801eb9c35b8f26d39d6c0205700cc8d22e412b45bda779866bc3067639558bb045c244576a8ea12950bb1ee387ab88e74048d2530f71125
SSDEEP 768:grv+4UNbdH3lI+LeSFOU5X4fouOToPvB2thtA9VAwJeVH1SlX:gbsbh39snnwthttAEH1Y
TLSH
T14B03CF32A8A88A33DDE6D398714B75473FF491539A900FC499DE1B4D079B9DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6c695282701d676ccc0406b02a2beb18a32105f8af9b7e874b0e524df65f6a3f
MD5 8647ea6a94eebc5ce91e8845ca2def42
SHA1 64389caa7166f8a290337e903f2a9b7953050b1d
SHA512 c327cb406e332eb534e1a7b04f78d9203cf95d53aaac2e990669bf7c2f4e721c329131fdc848bb4126e922e44e2909f0cc067a4a8f115425634e3ae66d7c5172
SSDEEP 768:1rv+4UNbdH3tn+LeSFOUJUX4fouOToPvB2thtA9VAB1eVH1SlX:1bsbh3Hsnnwthtt3EH1Y
TLSH
T11D03BF32A4A88933DDE6D398710BB6476FF4915396C40FC49DDE1B4E069BADE070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be50d3aa-edc6-4b7d-a4f6-8cc2b21372b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\be50d3aa-edc6-4b7d-a4f6-8cc2b21372b7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download