8f7558a50758f92fe75703c0b891210214d1f884bba6c97c56f72b00ab727ec5

Analysis

max time kernel
149s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mdpc - v0.1.3/contact-us.html
Size 24KB
Sample260810-pl2w1aydle
SHA256 8f7558a50758f92fe75703c0b891210214d1f884bba6c97c56f72b00ab727ec5
MD5 7438a56f5561850fb9d170f0d287e6f8
SHA1 16d329a796d9d19e20c72498d29fa0f7f31aee11
SHA512 c0a74b142c61c58e32c9db896ce6310eb0341306730c3678192ac06e24a5e55929844046ad24efdbd2690863f30cfd1537e8b2a9e4e0075c1c2bc253b71cba22
SSDEEP 384:XWdWOImwXd/x99ERgCAVxgZ3z89lp0QmM:QWOI7mTY9QQt
TLSH
T1B9B2C57098F4227645DB82D06A70EA357F85E10BCE8A264873FCC7A49F92ED6CE5714C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4852	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308384002144462"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{6A283711-454D-4231-8435-0D549E41BDB4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3100	msedge.exe
3100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 4876	4840	msedge.exe	90
PID 4840 wrote to memory of 5764	4840	msedge.exe	91
PID 4840 wrote to memory of 4852	4840	msedge.exe	92
PID 4840 wrote to memory of 5764	4840	msedge.exe	91
PID 4840 wrote to memory of 5764	4840	msedge.exe	91
PID 4840 wrote to memory of 2392	4840	msedge.exe	94
PID 4840 wrote to memory of 5564	4840	msedge.exe	95
PID 4840 wrote to memory of 4528	4840	msedge.exe	97
PID 4840 wrote to memory of 2392	4840	msedge.exe	94
PID 4840 wrote to memory of 5564	4840	msedge.exe	95
PID 4840 wrote to memory of 5564	4840	msedge.exe	95
PID 4840 wrote to memory of 4528	4840	msedge.exe	97
PID 4840 wrote to memory of 4528	4840	msedge.exe	97
PID 4840 wrote to memory of 1932	4840	msedge.exe	96
PID 4840 wrote to memory of 2584	4840	msedge.exe	98
PID 4840 wrote to memory of 1932	4840	msedge.exe	96
PID 4840 wrote to memory of 1932	4840	msedge.exe	96
PID 4840 wrote to memory of 2584	4840	msedge.exe	98
PID 4840 wrote to memory of 2584	4840	msedge.exe	98
PID 4840 wrote to memory of 2892	4840	msedge.exe	100
PID 4840 wrote to memory of 2892	4840	msedge.exe	100
PID 4840 wrote to memory of 1896	4840	msedge.exe	101
PID 4840 wrote to memory of 1896	4840	msedge.exe	101
PID 4840 wrote to memory of 4412	4840	msedge.exe	103
PID 4840 wrote to memory of 4440	4840	msedge.exe	107
PID 4840 wrote to memory of 2344	4840	msedge.exe	108
PID 4840 wrote to memory of 4932	4840	msedge.exe	109
PID 4840 wrote to memory of 3784	4840	msedge.exe	110
PID 4840 wrote to memory of 3784	4840	msedge.exe	110
PID 4840 wrote to memory of 3204	4840	msedge.exe	111
PID 4840 wrote to memory of 3204	4840	msedge.exe	111
PID 4840 wrote to memory of 3100	4840	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ mdpc - v0.1.3\contact-us.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffe4df3c188,0x7ffe4df3c194,0x7ffe4df3c1a0
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,3706144252907186235,16839588811754853741,262144 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,1507203318453140205,16690301345962401757,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,1127030037543117505,2694076589967063370,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:13
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3352,i,181658728135015125,14675740743620182252,2097152 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3336,i,3472446075753361554,16024448886072752373,2097152 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4036,i,187341032543431754,10933888559364809026,2097152 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4056,i,7909628743546411955,17230312836351522008,2097152 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:9
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,11821766427047051974,13440609580915614168,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,17476188975100025822,1087785655756777817,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,4762003917131291059,14765917396447426946,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,4762003917131291059,14765917396447426946,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,11135358999575943167,2351349687061030367,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4032,i,3435561125569926390,5516621495596250991,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:14
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,6816886252542781112,6779282116857173274,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2744,i,1342045706695900229,11474803883887710667,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:14
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,11219796217126275419,5758790529663193003,524288 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5672,i,15422201459133862981,11042746164342754074,262144 --field-trial-handle=2488,i,10573072486968025732,16714523745982847199,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 411f6184986328ac25a7c9b110375c6d234107a24b120c4549b7177beddaf54c
MD5 c4daceb1b6314204a111c9607ce691e7
SHA1 e19adb26e96f3ba3a85a422f31c22233fcbe313b
SHA512 9b2c19ed949480ccf00d3f831c52f35684dfe9b4d26d04060a2a15dd44c4dcc8363e4c63ef801edbce2a49ec149eaf422f0215303fd7f9bfc4bbc9cff7561d18
TLSH
T1FB512C1DA33614D6E3240772BDD394883FF5CC9A08075E1BA0419EB868C2F17AED2AD3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59dd56.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59dd56.TMP
Size 2KB
SHA256 5020a48d8e95943624e710b8266003edf22d19fb80cf046055babbb5877e8918
MD5 742c9ec35b8c6c28aa78e917312b6a49
SHA1 9d172b4b435759621d7794f1d8f47ff4999b1dbe
SHA512 e819e71a370148b208db8baffc6ec909be5d482bafb40bc4dec4037f450a1b7853a475e2004b3e4b781cc6cafc4634a800ec265740d659d2b5791b3301b90f38
TLSH
T185512D1DA37614D6E3244772BDD394883FF5CC9A08075E1BA4419EB868C2F17AED2AD3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 717923f75ddad492748d8700340adba657afae750f08d7a41fd6be6b9e6201fb
MD5 03a394cb86b78dde80d0159c195eab90
SHA1 60ac68d757b89f2f95afda427ecabc7e3f964b49
SHA512 aff99eb39b7d672e4a2a8398859b4088607316e3b6cbc360cfcfa6ef82b817610ccc446945591bc42752300c98f46af3f56bb23bbd169d2196188f02b926658b
TLSH
T1B2519BF786E486AE891156F09B24AE1BCE5D051A422C3C66C9F4EF1F63F34B1D1016AF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4f52e1f1c565f3eda23120f8f619e0adcfeb0d1c9d788fe1ca57de6fe2f060f5
MD5 df9ad8b7a206ff0f2955c9a270c64125
SHA1 a126fe11e772d49443d3c0b63374a8927e288042
SHA512 37c9efd4072d6d04bd99ec920990bbcd0016a256dac7d2571873679582d65d071ec40ce5ab4c424864da1ef217d1dbf15d583d71be81be39e4bfe41115b8fd55
SSDEEP 192:sxRWgRGbr/fcsl3hhJ5yprQ5FzoA8p4t/g6+WNIYn8xV5mGTIgDvJ:sxRWgGr/fcslzJAT8/5ITdhd
TLSH
T1AD42B7196A68AD7B5CCBE21DBB55BF53D2F9503261D02F58A6FC9A0C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f63a97d27f162032fb6184b4ad83e2d9e938e0df5a64f29258186a54080a3408
MD5 239bad4782ee163d6a78af2d19a94b8c
SHA1 be698471ac8c09c7bb41992f3300b9d2ebcbce81
SHA512 97899a92871bb5f2d6f551ef5adc59e4d5dc4ac5e2203ccde5c474645a06d6a5709eef492a488b7644953aef2bddf5200a4c813da6e63518d1d4f1c42d25a528
SSDEEP 192:sxRWHRGbr/fcs/3hhJXyprQ5FzoA8p4t/g6+WNIYn8UV5mGTIgIJ:sxRWHGr/fcs/zJCT8/5ITYhs
TLSH
T10432A6156A68AC7B4CCBD21DBB55BF93D2F9603261D42E58B6FC9A0C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 87e9fba48f288d3fc94b4ee2daae7dc99f581e6084430c1c9ee7ea5ebd896a19
MD5 dd03b4c9680f80d12b29c5873d7eae51
SHA1 0906c0b4aa9551bb4385857759e98c05c57b72c4
SHA512 2cab5ccdb99fd33154a7f8e417654ecfdc0c19cacd2875150b8ca3f577ee285cc124ee79ec9232ba260b72a2a3b7c689f8e090e482f0e0dc1872c079f904bd3f
SSDEEP 192:sxRWgRGbr/fcsl3hhJXyprQ5FzoA8p4t/g6+WNIYn8UV5mGTIgDJJ:sxRWgGr/fcslzJCT8/5ITYhv
TLSH
T14542A6196A68AD7B4CCBD21DBB55BF93D2F9503261D02F58A6FC9A0C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 42206338fd053b693d139f28054a0e51b24f6038bf0cacb927fb2e1e88072df6
MD5 e1a167574ebb8c6bfccf928f04a34817
SHA1 d9aca85ed0a158ebd72fae94ef7c3d6dadc40024
SHA512 a498b94b14f20409a9af88901a41485a815cd38bee7b9771909cefcd4426a3377e0df65b1e141e0fcc06f7ce6863a60979d1b292cd396e8f64bb7afff5c47c9d
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPlrohMj:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VK
TLSH
T1CBB2EC3B604DCB7E5F800AADEC19AFDB6D5802C79A988D4447FE990C03C77EA91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 755ff4e533d81ff834f64daeb4d5ff711cd54bbf033d26ecdbdd8f459e81b9ee
MD5 86f4b207494e5db2403449f0f7714521
SHA1 5f76adbe276a2792045e92b136c5d7b8b4b4ffd7
SHA512 5110c5b4a14019b29ef41f66977cac4399c32dd7d1bc8c71fbd5e79247af9bbac3739781b0a23d21f7c5031025605a2a23bbf4250066630270acdd7039f5fd92
SSDEEP 96:KRoZs4q26gWeDzgggK41gCgcwgziItHU1gkeCGEWCPvgsEK4hgmEcEkve/2sK3KU:CoZs4q26neDsgU1gC/wgziItHU1gkeCM
TLSH
T192911985747B02483C7E661C84A8996BE5C17473705CB8EB7BD841624F6BE029FFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 386f856d79dff4f73b1f75cb28faa593731df390839bf8edb915e2165716d94a
MD5 64ec621146cbec7fad50ffc483b21cdb
SHA1 1e8166035ed956b715d7fdb8f3464f1162dc6140
SHA512 47fd0628dc2f1a0e242265e2dca9cfa6823cc169c48974d6ea6533ccaf879eee8762966c2675793df45df085117b735c7165f5d254488627ef111ee3b55ff7dc
SSDEEP 384:0ZcIy38NkWd8VDaMuhJDZNfNoXOVSUURXvFAiXSFXETRzcoXfK86sfxEZxxsIj43:yy3wBtDZIO0Z/xNzc4ReyIsP5hy6Dq6
TLSH
T154F2BF31E8749967ACEAA341F50A3252BEF5811782D82FD896DD6F1C09476EE031F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dc8d184b63bb270c27a8250c61eeb9f56c944e6965952d7490ab8c0555f6dfb3
MD5 0dbadcf0edbbd1ab9476dc44ebfad200
SHA1 d461ce841943c620cab9fef5ad439762a55ebbe0
SHA512 cd1967d2b0c4bb8858e89780d83666338cb1d60d1dc66e94f678b5e9263f66ac093cbacbcb4b62d36764fff1d064afa14d850c2eaf816cf0dea7a8b33b1866da
SSDEEP 384:HZcIy38NkLd8VnQMuhJDZNfNoXOVSUURXvFAiXSFXETRzcoXfK86sfxEZxxsIj43:vy3TttDZIO0Z/xNzc4ReyIsP5hy6Dq6
TLSH
T11BF2BF31E8749977ACEAA341F50A3252BEF5821782D86FD896DD6F1C09472EE031F817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 96a6a9fe9a51d91e112f0d3545738769c7b5d6760f74658e93bc89b18238fff8
MD5 968eb7b177a845c39d538527cc53c055
SHA1 4e52e06c2f1d78d21e3878de9431e63a299c8dd8
SHA512 8ee34cfe7cb32fb8abf0d35536dd93e676d84ca4fc9f8b78089fbea2f036cd18839bef5f029d19542de3a49dc224c0c62b8130c517c9f98d50d5202855075f32
SSDEEP 768:Prv+4UNbds3mTDZIO0Z/BNzc4ReyIs25eVH1S5D:PbsbS3jtc44bsaEH1Y
TLSH
T10803BE32E8789977ACE66781B14B71533EF8921B82841BD4C9DD6F0C4A4B1EE131F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 93d10a144da9d3cb8b57a08da08934052d6e169a87c187b154ea6fb07eca5aaa
MD5 2a0f919620551f3967a91d2ce880a18c
SHA1 a179cb6f62f5872f2d67c78c2219c5c875172f48
SHA512 52dc70813a51d051da26717e14e9bbbfdedc62d1cf501195a24c92d179bf42d600637c677df3f3ae8f540f69ab7e2531bce531d9928ac598ed4891e126dca688
SSDEEP 384:HZcIIk38NkWd8VDaMuhJDZNfNoXOVSUURXvFAiXSFNETRzcoXfK86sfxEZxxsIjM:v93wBtDZIO0Z/hNzc4ReyIsP5hy6Dq6
TLSH
T162F2BF31E8749973ACEAA341F50A3252BDF5811782D82FD896DD6F1C09876EE031F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2306189b3b075c7682921540d78a69d14d2c42de29c0f9141a77321b86f7b78e
MD5 56d63c03f88c783a8cbfd645f88e61be
SHA1 530f2f2e92e1ef651f66f98f19ed5a311a8041c3
SHA512 e32026516d48d530be7db08cb18a1ac78b76da45a44b58ffaaaad6945e23f2faba36c6b97a39ed8a2c25eb7525ab8e41f06995b20f1199d88c9f0db93490a2c6
SSDEEP 768:6rv+4UNbds3lkDZIO0ZaNzc4ReyIsXNeVH1S5D:6bsbS3ytc44bsdEH1Y
TLSH
T1DB03CE32E8789937ACE66785B14B76533EF8912782C81BD4C9DE2F0C4A4B1DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70eefbed-e4ef-4bf5-af0e-662972861c43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70eefbed-e4ef-4bf5-af0e-662972861c43.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download