8f7558a50758f92fe75703c0b891210214d1f884bba6c97c56f72b00ab727ec5

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mdpc - v0.1.3/contact-us.html
Size 24KB
Sample260810-pl2w1aydle
SHA256 8f7558a50758f92fe75703c0b891210214d1f884bba6c97c56f72b00ab727ec5
MD5 7438a56f5561850fb9d170f0d287e6f8
SHA1 16d329a796d9d19e20c72498d29fa0f7f31aee11
SHA512 c0a74b142c61c58e32c9db896ce6310eb0341306730c3678192ac06e24a5e55929844046ad24efdbd2690863f30cfd1537e8b2a9e4e0075c1c2bc253b71cba22
SSDEEP 384:XWdWOImwXd/x99ERgCAVxgZ3z89lp0QmM:QWOI7mTY9QQt
TLSH
T1B9B2C57098F4227645DB82D06A70EA357F85E10BCE8A264873FCC7A49F92ED6CE5714C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308384077293978"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{5E9EF78B-A07A-40A0-A6DB-5A3FA29F0176}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3196 wrote to memory of 4152	3196	msedge.exe	85
PID 3196 wrote to memory of 5060	3196	msedge.exe	86
PID 3196 wrote to memory of 3400	3196	msedge.exe	87
PID 3196 wrote to memory of 3400	3196	msedge.exe	87
PID 3196 wrote to memory of 5108	3196	msedge.exe	88
PID 3196 wrote to memory of 5108	3196	msedge.exe	88
PID 3196 wrote to memory of 5108	3196	msedge.exe	88
PID 3196 wrote to memory of 4168	3196	msedge.exe	90
PID 3196 wrote to memory of 2524	3196	msedge.exe	89
PID 3196 wrote to memory of 4168	3196	msedge.exe	90
PID 3196 wrote to memory of 4168	3196	msedge.exe	90
PID 3196 wrote to memory of 2524	3196	msedge.exe	89
PID 3196 wrote to memory of 2524	3196	msedge.exe	89
PID 3196 wrote to memory of 1256	3196	msedge.exe	92
PID 3196 wrote to memory of 4476	3196	msedge.exe	93
PID 3196 wrote to memory of 1256	3196	msedge.exe	92
PID 3196 wrote to memory of 1256	3196	msedge.exe	92
PID 3196 wrote to memory of 4476	3196	msedge.exe	93
PID 3196 wrote to memory of 4476	3196	msedge.exe	93
PID 3196 wrote to memory of 1172	3196	msedge.exe	97
PID 3196 wrote to memory of 4436	3196	msedge.exe	98
PID 3196 wrote to memory of 1172	3196	msedge.exe	97
PID 3196 wrote to memory of 4436	3196	msedge.exe	98
PID 3196 wrote to memory of 3460	3196	msedge.exe	100
PID 3196 wrote to memory of 716	3196	msedge.exe	108
PID 3196 wrote to memory of 4672	3196	msedge.exe	109
PID 3196 wrote to memory of 1040	3196	msedge.exe	110
PID 3196 wrote to memory of 720	3196	msedge.exe	113
PID 3196 wrote to memory of 720	3196	msedge.exe	113
PID 3196 wrote to memory of 3856	3196	msedge.exe	114
PID 3196 wrote to memory of 3856	3196	msedge.exe	114
PID 3196 wrote to memory of 4904	3196	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ mdpc - v0.1.3\contact-us.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaa793c188,0x7ffaa793c194,0x7ffaa793c1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,7454958749334747308,15845236850559240189,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,14455103997852920759,4086007504393185576,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:8
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,16263886043878807512,11386826784296878130,262144 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,11049616210311090068,6368660610087036315,2097152 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,7172867159776662915,11860561591197433057,2097152 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,9380636809650642033,8830947115817695280,2097152 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,14525794304962918808,15232454736581284278,2097152 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,11216159194928319906,5704349562215650837,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,18325819528458189048,18147859265624238582,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,9828898450834205016,18386618983325347373,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,9828898450834205016,18386618983325347373,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,10064439074474869991,7985082609173653053,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,12107739973384976861,7534337493804720672,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,6160118694722658703,4205097433366284979,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2788,i,7542697215809414039,8431852662204561975,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,11098687021795605176,3314567025090798983,524288 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5324,i,18425664656612287290,15288104245301247391,262144 --field-trial-handle=2332,i,13323340245366558425,15278890924102235137,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0f6e8797ec44866b70bb772777fccc9be92e480a6a74d7167030771d5c750125
MD5 139f17fb31df92791073000f1c84e70d
SHA1 e9e6e51d88d598a0b84044bc548b3e26e257f9e4
SHA512 30f90c4efbe6cb8610346955dea4171a79a315ef2747e4c055a5e807cc34af0e84a2234edf261f8a42231ace03a62a4fa6dc3295b65a412ffec3b262af4e0d9b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P71:fwUQC5VwBIiElEd2K57P71
TLSH
T10FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fd10373005c8069d6ba88cb686f276a52ece69c970f58675a3d23d4b9c003822
MD5 61116cff431763a91c87abbb26ab41d9
SHA1 828dafeb5da623476798acaf29f0ecad65be874a
SHA512 e26a8a31f8279cefb0dd30b593ce50e20d510881d723ba189cd82187084e267bf6e4414164708769f9365c1080f55f96cadeff73176470f332e25db2222629ca
TLSH
T17D71B33B02E22CD2E39043FC74EE1AF5747349CBFD8F5EAC02209A3036137128229568
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5846a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5846a9.TMP
Size 3KB
SHA256 994f4904594951dd0b070908be44c40c829f9b6c53fe46cf164f3f29af0ae110
MD5 10c3b6dd421b08ed03c177847813196d
SHA1 513d7313b474d28c91a7efde73ec43f3f8552943
SHA512 211802e259d0d3d08e9eaf7da7c683e5208c5bbab774682c990d2ba1d7fb6160b65c808240ee5b8df8dd8ac00a6f7a155eb6dcd9174f6075246d36b6b696136a
TLSH
T1C371D53B06E22CD2E39043FC74EE1AF4747349CBFD8F5EAD02208A3036137128229568
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7a414400f5ac37c3ec1e01bcf97f3cb6b65513d9d43c509fbe9c563a788587ff
MD5 bad22cb685b444514f14b833e5f88442
SHA1 7aafdf21f0ab53dd6d65a891c94cab618931b6e4
SHA512 e2e32cdfffee8fe8b8c654853ae979a1e4f02d9a722883b42d046c585ac0ec7007dd5157ced7af70a2cd5992c9af18659f6c0c33c55944396738bca91cd64685
TLSH
T1EB417CB6C7D487AE892116F05B24AE1ACD1D451A42283C66C9E4FF1FA3E2474E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 006885920d824ee85c17a70d6e6d2cb28bae3ddb916faa82e0af43cf4d5d5c4b
MD5 302051a886bfdb9e1acca48a91421bba
SHA1 8ab51d5d405568f58d996f6bcf98835e936d4222
SHA512 9f55c30fc2a7e8ca829b0550c3460372f3052fa6a1febff526680265cee8be7e64571d500a17d22ef7e0bfee75bfa93de78a9bfe39d818ba242c4a62c64a8c67
SSDEEP 192:sxZtR1yM/jK1Ml8Mkz/fcsVdc7IdpdoHW6+WNGYIk6iZIgrJ:sxZt7Mz/fcsLckeHbGA9
TLSH
T1E8420A156B34A97BCCCBD20DFA557F53D6F91472A2900E48A9FCDA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f7d5f5ea584b5e02d2e471e5a2f1cd235224800763258d87c35d14962f23136f
MD5 167966c0cb74608eeb1f4f00872fe531
SHA1 47b957fe10716fc85ef5795d1cd09a0a4e7bcb35
SHA512 976824f5f63dda968d85e30bc7c95c89a296390a22a8e6ccfcbfd920de157c530d2c28dde54a25b38ff6a78d41d563c0dd59a1d82845b50d512586aca5c86b91
SSDEEP 192:sxZtR1yM/jK1Ml8UQmkz/fcsXdw7IdpHoHW6+WNGYIeR/ZIg5KOJ:sxZt7qNz/fcstwkIHbGkp
TLSH
T1D852F915AA349977CCDBD20DF9457F93D2F9147292900E48A9FCDA1C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a2a0f4e411411e76d93c8af9a4346df14c2d390936aac26dfa35c575fdb6e2bb
MD5 b785a90608800c7013ba7a442551a57e
SHA1 ae3d2e0cba6fb587333a814cff315b49844ebbd0
SHA512 c9d6f9960f9ff6f2364da7539718cd955598a7c8737fe8a0ba441b80fdc8585cbed7828026450ffa824a0b1a02a2c4668a5eba5fb11cf3670f2db33743bda00c
SSDEEP 768:B5sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9gro4+s:B5sqxXlWvJD6Tu1ja54LAs9r4b
TLSH
T1B8D21B3B694CC77E4F840E6DEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 aa225d52dac39c7cd2fe9c638e31505f2dc2541f0830722aa7c470a3432fb49b
MD5 37e5137c130fdc105d3df6e75b1730db
SHA1 cfe5a375ce4dffda2c58f50143fb8b917ccd40e4
SHA512 66253f2d8c20d3930b854566080e2521d989d523498f2ecf97b178e25829541bbc283ee18da5a155e572d5b81e86bde37128db5ca44018c8d53ab34c3d2fc33f
SSDEEP 96:KYbaKYIKOBOKyw6aEAKdieH6KYUOWb+KoEY:ExthXc5hh
TLSH
T171E10826737B034238BE290CA2EA96378E4133633818A56F3B7840E54D67E615DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0d4304af78b6014ce80a96e61e2b021bf9c61736df04040bed0d835283658ee5
MD5 aac05fb5a5632d513f09f8d67b78856a
SHA1 7659fa1ce0a5377b7e63c177d0cbd810411c59bf
SHA512 db5b705f7a5fd537b44733ba6d0f577d8c1246872039bf0b01e281581b2a16629427759b2e2ecaedfde96c4340878707dd3a030a688330631dd820ab825fddde
SSDEEP 384:+ZcIhsNeesX8fbFmMKVRNwOqp9Ui+O6HlytEDq1XvWO:8h9X8s5HwOS9Ui+Ooy6DqtWO
TLSH
T184929E3159345D775AFBA505F88B3A174EFC9427ABC82FD492EDAF1C01DA1A8130BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 60559aeb798b6d0be0a08e47707ff440bdb108c298c90caa53c0ef5d059e8a93
MD5 7103d37a979abb819033842a18cdefe8
SHA1 0904f7b55338429feac96668ad83d8b3c2a3db83
SHA512 a0a984530c934af89e7b3ed4d75c3ba1163671464bc1cbbd91b2d4b3082dc0acdd6f58d0d56f1523492511fec030282366b9232f60c5d08fde4cc265de7d1f44
SSDEEP 384:4qZcIpzsNebsX8fbFmMKVRNwOqp9Ui3O6HlytEDq1XvWO:bJGX8s5HwOS9Ui3Ooy6DqtWO
TLSH
T127929D3199345D775AFBA505F58B3A134EFC5427AAC82FD492EDAF1C01DA1AC130BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 25ac48ae0d2c5858d0b02d11251d1182716037a4e20fc70f5a8ff8590900dfb7
MD5 7feddc536b73ce96d0814203d9ac9ce9
SHA1 56f2f79a7df4c91e4d37ed6e2dd84bb6dadfa95e
SHA512 87d056bdbbaeca695d1e5192dbd05053a1f0b647527a2979492827337c135ae5c9f81ed66f595759fc3465fe69d4ca2ee4adf10dac7a5f29d1fcf079054ba9a8
SSDEEP 192:tONA6JkRtQmiUyWNW7W+RNwOm9OmGh3zFRMU6:tONA6UrYW+RNwOq6kU6
TLSH
T1E1020B357C382C7B8EF2AE09F58B27175FA4202BE9952F80DAD81B1C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3081055239c0c5ef86f8096aab20fa926119ec63cadabcb1e0f6c506b9ad4bfe
MD5 604dcf57aa4365f31d35b63ef9522130
SHA1 df66cb17a436dba98214967936847239233f37df
SHA512 048553e6ad659be26c43ec9f4a7ad7ab514edcbfb814dc5d5638f58931cf18e3854e4d1444ce7f574873b455504034d96e1fa5dcc171f569a3c6700f338df9ca
SSDEEP 384:/ZcIhsNebsX8fbFmMKVRNwOqp9Ui+O6HlytEDq1XvWO:XhGX8s5HwOS9Ui+Ooy6DqtWO
TLSH
T107929D3159345D775AFBA005F88B3A134EFC9427ABC82FD492EDAF1C01DA1A8130BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf3f399e168ac2e97d2266231b1b8858245b74b47681229bd354e9988b59601d
MD5 ccf7c052b60eddc66b0063337649423e
SHA1 e4fe29dee478f06e4f021800c3d78b3800242229
SHA512 608d6c028d8b5f08bc04315f488738a47a72f9bf51b33cf8fd4e6de3d4c04295e407bb757af666e82a0f2c20478b89696a6e38d7c1852cefa16b5199492876dd
SSDEEP 192:TONP6JkRhQmiUyWcW7MW+RNwOm9Om3l9UigVczdqVhU6:TONP6U/JMW+RNwOqp9UiHOU6
TLSH
T176122B3569385C7B4EE2A945F48736175EA95127EE892F80D1DC2F1C01DFA9C230BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90fa43d5-b4cc-4f0e-ad56-102ba8ef75c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\90fa43d5-b4cc-4f0e-ad56-102ba8ef75c4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b7eebee8c4de762555fb63b8a9032bef94055eabaac2866c234059468bb9c1f3
MD5 1264db52bee887fd56e91c65a029267b
SHA1 d3eec682060097b2be27a64bef22fb28547e0944
SHA512 c1923b7bcf46c9bf272c3056eb945fba53e98df3bef886d5509c5113aaef1b61a81724ff7ed817ed0e591902b0685a6e96056aa68217bb46981cd42223cabb46
TLSH
T19B41E759A6E91148B3B36F5AABF6A86D447EBD772F06D05D10010D4E0B66B40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download